This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139362e302f32342d3234203d3e20393834.roa File: 3231372e3231362e3139362e302f32342d3234203d3e20393834.roa (raw, json) Hash identifier: SWtZ0xXlQLxR/xGXTtVzu9iGYjf8UWYxxrCHVdClY+c= Subject key identifier: DF:EC:3F:30:C7:F0:95:2B:C5:DD:B1:62:54:26:55:76:07:AF:52:7F Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 104AED2B951CDC0C8C5F64AD00FF0932124943B5 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139362e302f32342d3234203d3e20393834.roa Signing time: Fri 23 Jan 2026 12:40:34 +0000 ROA not before: Fri 23 Jan 2026 12:35:34 +0000 ROA not after: Fri 22 Jan 2027 12:40:34 +0000 asID: 984 IP address blocks: 217.216.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:4a:ed:2b:95:1c:dc:0c:8c:5f:64:ad:00:ff:09:32:12:49:43:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 23 12:35:34 2026 GMT Not After : Jan 22 12:40:34 2027 GMT Subject: CN=DFEC3F30C7F0952BC5DDB1625426557607AF527F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:91:94:00:f5:27:9a:73:5e:99:eb:de:67:6c: 61:eb:12:b9:c2:b0:cc:33:c4:2b:1a:98:2c:b1:0e: bb:42:ab:81:89:69:67:9b:6b:11:83:c4:57:70:43: ec:7a:84:a3:48:bf:71:a9:57:08:b9:0a:79:16:6d: f8:a4:bc:72:97:f7:d8:ba:6c:ee:52:c3:fb:7d:b7: bf:db:a0:8d:c6:93:be:c6:e0:5f:e9:2e:f2:2f:dc: a7:87:6e:79:61:7d:cf:7d:f4:71:2e:5a:96:f4:23: 28:ce:e3:40:13:18:fb:2a:1c:5a:68:3a:41:50:73: b5:8d:15:42:2d:c4:36:08:43:c3:7e:d1:ab:8b:65: c7:25:e1:96:bf:09:a9:42:cc:f2:0f:d3:fe:e1:6d: 3d:38:15:d8:45:ec:4f:e1:e0:e7:bc:25:b8:9f:5d: ef:c5:b8:12:8f:e7:54:fd:98:67:19:ed:17:1c:68: 4f:24:d4:e6:3d:49:d0:74:57:99:6e:b6:16:20:c7: 01:63:84:c0:a9:ed:7d:ad:a5:c8:f9:60:b1:b7:e6: fe:45:0d:4e:9a:c5:c8:99:ed:90:2c:9d:db:a3:18: 98:bf:43:3e:61:34:84:09:19:6d:3d:ff:65:45:e1: a8:4e:d6:e0:40:1e:98:04:c0:f7:06:2f:91:e9:6f: 8c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EC:3F:30:C7:F0:95:2B:C5:DD:B1:62:54:26:55:76:07:AF:52:7F X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139362e302f32342d3234203d3e20393834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.196.0/24 Signature Algorithm: sha256WithRSAEncryption 03:f2:a7:17:fe:c6:ff:a9:96:5d:67:b4:4f:87:9c:47:0a:36: 36:84:b9:67:5f:5b:c1:c3:53:88:96:c6:49:4e:34:b3:43:02: 80:df:9c:af:2c:5c:7a:6e:dc:8c:68:d9:c7:d6:a8:e6:55:27: a2:1f:a5:2d:3d:2e:f4:8d:91:9d:63:3f:be:60:e1:d1:c5:dd: 94:cd:39:09:30:95:a3:4f:86:22:30:7d:22:51:69:85:93:7f: 10:f6:01:e2:b7:e6:cf:62:d7:d5:94:b8:74:8f:8a:1c:1f:f9: d1:57:c6:56:ba:d4:70:61:3e:32:eb:87:86:cc:3a:42:fb:fc: a6:e8:ab:6d:18:33:f4:d2:27:d2:17:8f:c1:50:aa:b9:05:bb: 79:87:d7:53:95:fa:17:a5:e3:36:29:15:24:7c:3f:7f:e6:7d: 50:fc:5b:8e:3c:98:f5:be:55:ab:90:e7:88:26:a2:19:1c:47: c5:35:4d:a4:93:b5:32:e2:2f:0f:81:58:9c:6d:1f:d9:38:85: 6f:07:9d:68:84:be:8b:2d:bb:07:9a:af:c8:11:e5:56:83:b0: a9:cc:b1:18:09:b3:1b:3d:a9:03:78:8a:50:8f:12:04:10:16: 9a:8d:ea:d8:6f:ce:56:3f:e6:6f:b9:71:e7:46:42:a5:e2:35: 56:ae:0e:88 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUEErtK5Uc3AyMX2StAP8JMhJJQ7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMjMxMjM1MzRaFw0yNzAxMjIxMjQwMzRaMDMxMTAvBgNV BAMTKERGRUMzRjMwQzdGMDk1MkJDNUREQjE2MjU0MjY1NTc2MDdBRjUyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWkZQA9Seac16Z695nbGHrErnC sMwzxCsamCyxDrtCq4GJaWebaxGDxFdwQ+x6hKNIv3GpVwi5CnkWbfikvHKX99i6 bO5Sw/t9t7/boI3Gk77G4F/pLvIv3KeHbnlhfc999HEuWpb0IyjO40ATGPsqHFpo OkFQc7WNFUItxDYIQ8N+0auLZccl4Za/CalCzPIP0/7hbT04FdhF7E/h4Oe8Jbif Xe/FuBKP51T9mGcZ7RccaE8k1OY9SdB0V5luthYgxwFjhMCp7X2tpcj5YLG35v5F DU6axciZ7ZAsndujGJi/Qz5hNIQJGW09/2VF4ahO1uBAHpgEwPcGL5Hpb4wpAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU3+w/MMfwlSvF3bFiVCZVdgevUn8wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx MzkzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzgzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANnY xDANBgkqhkiG9w0BAQsFAAOCAQEAA/KnF/7G/6mWXWe0T4ecRwo2NoS5Z19bwcNT iJbGSU40s0MCgN+cryxcem7cjGjZx9ao5lUnoh+lLT0u9I2RnWM/vmDh0cXdlM05 CTCVo0+GIjB9IlFphZN/EPYB4rfmz2LX1ZS4dI+KHB/50VfGVrrUcGE+MuuHhsw6 Qvv8puirbRgz9NIn0hePwVCquQW7eYfXU5X6F6XjNikVJHw/f+Z9UPxbjjyY9b5V q5DniCaiGRxHxTVNpJO1MuIvD4FYnG0f2TiFbwedaIS+iy27B5qvyBHlVoOwqcyx GAmzGz2pA3iKUI8SBBAWmo3q2G/OVj/mb7lx50ZCpeI1Vq4OiA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:16 2026 by rpki-client