This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139372e302f32342d3234203d3e203633313939.roa File: 3231372e3231362e3139372e302f32342d3234203d3e203633313939.roa (raw, json) Hash identifier: qf3AHedPadAGabXpmPU6A7ndpzlHofrvHXrTrjd/ldg= Subject key identifier: 50:80:0A:BF:9B:43:5D:DE:52:3A:B6:23:1C:5A:2B:44:C6:6B:52:AC Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 17A175FE83F1F32C3FC8C92A0B691D91EEBB77D8 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139372e302f32342d3234203d3e203633313939.roa Signing time: Sat 24 Jan 2026 12:36:06 +0000 ROA not before: Sat 24 Jan 2026 12:31:06 +0000 ROA not after: Sat 23 Jan 2027 12:36:06 +0000 asID: 63199 IP address blocks: 217.216.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a1:75:fe:83:f1:f3:2c:3f:c8:c9:2a:0b:69:1d:91:ee:bb:77:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 24 12:31:06 2026 GMT Not After : Jan 23 12:36:06 2027 GMT Subject: CN=50800ABF9B435DDE523AB6231C5A2B44C66B52AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:15:2f:fa:8a:95:70:81:64:b2:5a:5d:31:8c: ad:8f:93:f5:fe:91:2b:53:9e:eb:d7:2b:eb:54:8b: 05:81:6f:2d:bc:90:71:fc:88:48:e0:7d:83:d9:4a: d5:c9:75:e0:ce:25:97:a6:d9:5b:3b:26:d8:45:e2: d4:31:e5:53:a0:f4:8a:ee:d5:9e:db:41:8f:7b:fd: 13:5b:45:db:4a:d9:17:9f:15:93:03:e1:1d:eb:b1: 49:2c:90:31:27:8d:ca:28:ac:3b:5e:b0:cd:f9:c1: 84:50:b8:6a:d6:fa:1a:ed:db:d7:65:10:ee:46:23: 6d:f7:9e:52:3d:c5:b2:ac:42:db:17:b6:61:02:7c: b0:6a:e8:5e:fb:39:cf:66:71:fd:bd:82:01:5c:62: 38:ea:69:4c:23:b9:db:38:ab:5e:7d:26:fc:14:78: 83:77:46:84:42:e2:50:f7:3e:f1:7d:ed:33:71:d6: 41:bd:56:8a:05:4c:41:14:08:a8:10:4b:9a:86:2d: 7c:e0:e5:82:86:0e:e8:77:87:7f:00:a9:3d:d5:68: e4:19:89:56:10:85:74:9f:18:1d:9b:d0:a2:99:3e: ec:01:a8:46:e9:5b:55:4f:db:1d:b2:76:d7:5f:3d: da:e3:69:ae:25:72:ec:eb:02:57:13:f3:b1:14:4f: 30:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:80:0A:BF:9B:43:5D:DE:52:3A:B6:23:1C:5A:2B:44:C6:6B:52:AC X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139372e302f32342d3234203d3e203633313939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.197.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:93:1c:25:fe:e4:6d:f4:26:4d:8a:8e:b8:b0:cb:31:5f:01: ba:d0:11:1f:a6:12:76:e1:1b:f2:72:67:10:39:3b:24:26:07: 4d:f7:f1:84:b4:24:65:48:aa:a3:c5:82:76:0f:9b:a1:2f:76: 45:13:b0:4e:c6:d5:fc:78:e3:c4:f6:c5:a3:cb:fc:f3:6b:56: 3d:c2:a1:c4:69:a6:e5:b1:00:73:55:f6:ec:3c:f4:68:91:91: 44:ac:13:cc:42:3c:96:9f:83:ff:ec:af:0f:54:aa:af:d1:77: 10:2a:f8:c1:13:99:8f:fe:8b:72:5d:99:f2:23:32:67:ff:2b: d8:76:6e:ed:34:7a:a0:5f:ba:18:8f:af:9c:c6:b0:5b:05:32: eb:ac:f9:29:6f:d0:ec:60:3b:07:31:c1:b7:9b:79:e3:f9:59: be:d6:18:4d:71:e1:92:d7:6e:28:b7:c6:11:07:0b:18:50:24: f3:4d:9e:c7:e6:0b:47:9e:80:03:fb:ef:5a:fc:f2:42:ca:fd: 31:7a:45:c2:82:a1:82:a1:07:68:42:8c:f9:47:66:a7:93:d1: 65:f1:d8:ea:ea:57:71:0e:35:15:ba:60:de:52:16:14:f5:e6: f1:1d:c9:15:8e:de:89:3e:e4:81:c3:d7:56:8a:ad:98:02:2b: 1b:91:79:9f -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUF6F1/oPx8yw/yMkqC2kdke67d9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMjQxMjMxMDZaFw0yNzAxMjMxMjM2MDZaMDMxMTAvBgNV BAMTKDUwODAwQUJGOUI0MzVEREU1MjNBQjYyMzFDNUEyQjQ0QzY2QjUyQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpFS/6ipVwgWSyWl0xjK2Pk/X+ kStTnuvXK+tUiwWBby28kHH8iEjgfYPZStXJdeDOJZem2Vs7JthF4tQx5VOg9Iru 1Z7bQY97/RNbRdtK2RefFZMD4R3rsUkskDEnjcoorDtesM35wYRQuGrW+hrt29dl EO5GI233nlI9xbKsQtsXtmECfLBq6F77Oc9mcf29ggFcYjjqaUwjuds4q159JvwU eIN3RoRC4lD3PvF97TNx1kG9VooFTEEUCKgQS5qGLXzg5YKGDuh3h38AqT3VaOQZ iVYQhXSfGB2b0KKZPuwBqEbpW1VP2x2ydtdfPdrjaa4lcuzrAlcT87EUTzCPAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUUIAKv5tDXd5SOrYjHForRMZrUqwwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx MzkzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzMzMTM5Mzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADZ2MUwDQYJKoZIhvcNAQELBQADggEBAAuTHCX+5G30Jk2KjriwyzFfAbrQER+m EnbhG/JyZxA5OyQmB0338YS0JGVIqqPFgnYPm6EvdkUTsE7G1fx448T2xaPL/PNr Vj3CocRppuWxAHNV9uw89GiRkUSsE8xCPJafg//srw9Uqq/RdxAq+METmY/+i3Jd mfIjMmf/K9h2bu00eqBfuhiPr5zGsFsFMuus+Slv0OxgOwcxwbebeeP5Wb7WGE1x 4ZLXbii3xhEHCxhQJPNNnsfmC0eegAP771r88kLK/TF6RcKCoYKhB2hCjPlHZqeT 0WXx2OrqV3EONRW6YN5SFhT15vEdyRWO3ok+5IHD11aKrZgCKxuReZ8= -----END CERTIFICATE-----Generated at Sun Jan 25 14:39:53 2026 by rpki-client