This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139372e302f32342d3234203d3e20323134303235.roa File: 3231372e3231362e3139372e302f32342d3234203d3e20323134303235.roa (raw, json) Hash identifier: XSwymRdMmHsA1+agLWc0bT5D+d4/6qjOvg0goMkT8kI= Subject key identifier: E2:2B:9E:24:C4:2D:18:88:0A:CB:9A:C6:FB:A3:8D:AF:EE:A6:46:65 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 28825BB418B449A932829D29DC004AE671FFA8C5 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139372e302f32342d3234203d3e20323134303235.roa Signing time: Sat 24 Jan 2026 12:36:20 +0000 ROA not before: Sat 24 Jan 2026 12:31:20 +0000 ROA not after: Sat 23 Jan 2027 12:36:20 +0000 asID: 214025 IP address blocks: 217.216.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:82:5b:b4:18:b4:49:a9:32:82:9d:29:dc:00:4a:e6:71:ff:a8:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 24 12:31:20 2026 GMT Not After : Jan 23 12:36:20 2027 GMT Subject: CN=E22B9E24C42D18880ACB9AC6FBA38DAFEEA64665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ee:2f:80:71:96:c6:3b:b7:7c:d3:4a:27:92: 81:26:92:bc:94:f6:ff:da:e1:04:9c:2f:df:0e:50: 99:50:d7:a8:42:af:8c:dd:cc:70:c6:86:f6:6f:bd: 95:b1:ee:18:8a:d8:e9:4a:e9:07:5f:a1:be:f0:52: 34:06:6a:27:13:98:5d:1f:22:45:45:26:b2:6a:95: 81:a6:a9:e8:1f:bc:69:98:2c:b6:3f:15:61:c7:96: 9b:0d:1a:8d:a1:39:bb:1f:c5:bd:92:cd:af:43:5b: 3d:bc:d6:be:78:a6:be:12:4b:e8:31:95:f0:4c:3b: ba:49:ac:d7:03:d9:d0:a2:a0:a6:1a:03:c9:bb:65: 61:36:1d:61:2c:d8:3a:91:dd:dc:5c:4b:de:85:e7: f9:70:4a:22:0f:35:34:f7:3a:5b:93:f9:96:61:b9: 5c:d9:a7:68:f0:2f:db:68:8a:39:b2:d8:7e:80:69: 63:88:a2:40:ba:90:08:35:6b:e2:81:6e:de:fd:3b: 38:a0:da:cd:88:51:e3:6d:8f:9c:5e:9d:5f:12:b1: 08:7a:a7:0b:80:bd:6f:fb:f1:de:24:52:b2:a4:d0: 46:b7:a0:39:66:2b:0f:c5:43:f0:6c:a8:ed:01:38: 92:27:33:8e:2f:46:3b:5b:99:9d:bb:53:a4:fb:0d: 31:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2B:9E:24:C4:2D:18:88:0A:CB:9A:C6:FB:A3:8D:AF:EE:A6:46:65 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139372e302f32342d3234203d3e20323134303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.197.0/24 Signature Algorithm: sha256WithRSAEncryption 36:a0:ad:95:d9:04:c3:81:18:02:17:aa:96:4e:55:de:f8:d3: a0:4d:35:e3:3d:5c:36:15:8b:42:2f:c8:89:d0:f4:bb:cb:d6: 87:2d:52:59:05:3a:a9:1e:48:2b:ba:bf:05:70:31:48:87:79: f8:81:0a:75:c3:e4:b9:59:b9:1b:89:f0:55:38:7b:f4:f4:2e: dc:d1:a5:cb:22:5b:36:d7:42:6e:35:51:f1:ea:40:43:00:ef: aa:fd:c2:0a:7f:04:71:2d:e0:15:d9:9a:3e:1c:74:6b:6b:22: ec:4e:f9:25:61:7b:6c:f9:51:e5:1a:16:a9:23:6b:e5:9a:91: 68:ac:bc:74:74:0b:0b:e4:7f:f4:78:6a:00:19:5f:19:20:57: e1:a6:8c:a3:cf:e3:d7:0f:ca:a8:09:d8:48:3c:78:fd:9c:f6: fb:55:17:6b:e4:26:5c:e2:1d:cf:12:53:c4:0a:e8:0b:0e:78: 94:2f:27:05:b7:42:19:13:36:78:83:15:8c:53:8c:05:69:89: cb:28:3a:1a:83:3b:40:a7:0f:75:11:5d:ce:23:bd:cf:96:8d: 8b:83:16:4c:44:f1:3a:f6:9b:47:a1:77:bc:01:9d:11:8f:a3: ed:58:52:47:7a:e0:62:6f:aa:9e:23:b0:aa:2f:2d:f4:4c:47: 00:7e:42:79 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUKIJbtBi0Sakygp0p3ABK5nH/qMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMjQxMjMxMjBaFw0yNzAxMjMxMjM2MjBaMDMxMTAvBgNV BAMTKEUyMkI5RTI0QzQyRDE4ODgwQUNCOUFDNkZCQTM4REFGRUVBNjQ2NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw7i+AcZbGO7d800onkoEmkryU 9v/a4QScL98OUJlQ16hCr4zdzHDGhvZvvZWx7hiK2OlK6Qdfob7wUjQGaicTmF0f IkVFJrJqlYGmqegfvGmYLLY/FWHHlpsNGo2hObsfxb2Sza9DWz281r54pr4SS+gx lfBMO7pJrNcD2dCioKYaA8m7ZWE2HWEs2DqR3dxcS96F5/lwSiIPNTT3OluT+ZZh uVzZp2jwL9toijmy2H6AaWOIokC6kAg1a+KBbt79Ozig2s2IUeNtj5xenV8SsQh6 pwuAvW/78d4kUrKk0Ea3oDlmKw/FQ/BsqO0BOJInM44vRjtbmZ27U6T7DTEFAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQU4iueJMQtGIgKy5rG+6ONr+6mRmUwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx MzkzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDMwMzIzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANnYxTANBgkqhkiG9w0BAQsFAAOCAQEANqCtldkEw4EYAheqlk5V3vjToE01 4z1cNhWLQi/IidD0u8vWhy1SWQU6qR5IK7q/BXAxSId5+IEKdcPkuVm5G4nwVTh7 9PQu3NGlyyJbNtdCbjVR8epAQwDvqv3CCn8EcS3gFdmaPhx0a2si7E75JWF7bPlR 5RoWqSNr5ZqRaKy8dHQLC+R/9HhqABlfGSBX4aaMo8/j1w/KqAnYSDx4/Zz2+1UX a+QmXOIdzxJTxAroCw54lC8nBbdCGRM2eIMVjFOMBWmJyyg6GoM7QKcPdRFdziO9 z5aNi4MWTETxOvabR6F3vAGdEY+j7VhSR3rgYm+qniOwqi8t9ExHAH5CeQ== -----END CERTIFICATE-----Generated at Sun Jan 25 08:52:12 2026 by rpki-client