This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139382e302f32342d3234203d3e203235313938.roa File: 3231372e3231362e3139382e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: dgrDbf0gYWuNDHzUml7kLJyIsTLRyWhP6gPfob24E+I= Subject key identifier: E8:BE:B5:5E:87:CF:1E:2B:A4:28:DD:A7:56:FF:5D:F2:08:C7:5A:C3 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 13F3C18BB51E0E5FBCF6DDE110D5D7A83E1254A7 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139382e302f32342d3234203d3e203235313938.roa Signing time: Sat 24 Jan 2026 12:37:59 +0000 ROA not before: Sat 24 Jan 2026 12:32:59 +0000 ROA not after: Sat 23 Jan 2027 12:37:59 +0000 asID: 25198 IP address blocks: 217.216.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f3:c1:8b:b5:1e:0e:5f:bc:f6:dd:e1:10:d5:d7:a8:3e:12:54:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 24 12:32:59 2026 GMT Not After : Jan 23 12:37:59 2027 GMT Subject: CN=E8BEB55E87CF1E2BA428DDA756FF5DF208C75AC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:54:fd:5e:de:8e:15:24:f5:a6:8e:2f:37:11: 38:81:68:18:67:f8:da:c7:62:dc:28:a7:18:55:68: 86:61:14:4f:98:97:ba:fb:88:35:54:8e:53:7c:a2: 75:73:6f:66:bd:94:97:3f:ae:cd:c6:54:18:e8:2d: 5a:d0:15:90:e8:28:56:44:7b:79:dc:96:0b:ec:d7: bb:7f:c9:42:d1:f2:72:04:83:39:23:5e:22:da:8b: 29:b0:7c:80:e3:fc:1b:78:d3:0e:57:d2:c2:f8:0a: 79:01:55:02:98:9e:34:28:85:5d:c5:0e:95:1e:d3: d2:36:9c:97:26:0f:2f:f7:45:7c:48:67:fa:53:80: bd:6c:69:2e:58:70:1d:bb:e4:dc:1b:2e:e0:82:75: 3a:41:b9:72:af:8d:1e:21:c6:6f:f2:5d:6d:97:b4: 0f:b7:89:79:c3:02:d7:89:82:3f:d4:83:89:66:52: 72:d5:96:ce:2d:a3:3b:80:b0:43:f0:9c:19:40:8e: d1:d8:bc:e9:f5:03:f4:f7:7a:d9:70:ab:e1:15:6e: 27:e9:4c:87:f2:95:1f:5c:04:9c:41:ee:6d:dd:76: 3f:ee:9a:4a:aa:f9:39:cc:64:73:c5:31:11:e9:d8: dc:67:7a:be:5d:56:1a:be:ec:b3:93:5f:8e:f9:97: f6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BE:B5:5E:87:CF:1E:2B:A4:28:DD:A7:56:FF:5D:F2:08:C7:5A:C3 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139382e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.198.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:60:86:67:e4:b7:92:10:11:ef:c7:fd:82:00:cc:cd:66:c7: d8:81:95:92:f1:e9:4f:52:18:6e:03:5a:5b:d4:22:7b:30:a1: ca:88:a3:93:4d:ea:16:2f:4a:e8:65:c1:36:27:c6:b9:80:95: 3d:56:38:6f:74:82:12:bd:76:16:95:d8:93:35:1b:4a:16:6d: 21:7a:b3:1e:1d:36:4b:13:b2:37:bd:29:b6:e8:76:48:33:79: 93:f7:b3:57:ea:c8:79:ae:fe:94:01:7f:15:91:1c:67:08:6e: 3e:48:72:f7:34:93:e2:39:cb:85:8b:6a:44:f3:01:10:c6:2d: 35:9f:ce:cf:e9:04:2e:7d:15:a3:f7:10:41:31:78:d2:60:bf: 4d:da:ba:e9:24:54:6b:9c:32:90:09:ad:94:6a:a4:ff:55:99: cd:c1:8d:6d:fa:0e:3e:aa:cd:f1:b1:1e:02:87:8a:0d:1b:08: fa:6b:f2:c0:ad:b1:a1:42:90:47:e1:e5:6a:64:e7:44:4c:29: 4a:a8:e7:d3:54:7c:82:27:27:7f:5d:a1:1e:0b:db:1c:6d:be: 41:a0:32:bd:29:bb:b1:21:86:a5:75:f2:a3:29:7b:31:17:7f: 45:15:b0:ca:02:be:26:44:ba:6d:d0:69:99:f4:c5:ce:3a:9f: e2:74:c8:fb -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUE/PBi7UeDl+89t3hENXXqD4SVKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMjQxMjMyNTlaFw0yNzAxMjMxMjM3NTlaMDMxMTAvBgNV BAMTKEU4QkVCNTVFODdDRjFFMkJBNDI4RERBNzU2RkY1REYyMDhDNzVBQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVP1e3o4VJPWmji83ETiBaBhn +NrHYtwopxhVaIZhFE+Yl7r7iDVUjlN8onVzb2a9lJc/rs3GVBjoLVrQFZDoKFZE e3nclgvs17t/yULR8nIEgzkjXiLaiymwfIDj/Bt40w5X0sL4CnkBVQKYnjQohV3F DpUe09I2nJcmDy/3RXxIZ/pTgL1saS5YcB275NwbLuCCdTpBuXKvjR4hxm/yXW2X tA+3iXnDAteJgj/Ug4lmUnLVls4tozuAsEPwnBlAjtHYvOn1A/T3etlwq+EVbifp TIfylR9cBJxB7m3ddj/umkqq+TnMZHPFMRHp2Nxner5dVhq+7LOTX475l/bdAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU6L61XofPHiukKN2nVv9d8gjHWsMwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx MzkzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzUzMTM5Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADZ2MYwDQYJKoZIhvcNAQELBQADggEBAEtghmfkt5IQEe/H/YIAzM1mx9iBlZLx 6U9SGG4DWlvUInswocqIo5NN6hYvSuhlwTYnxrmAlT1WOG90ghK9dhaV2JM1G0oW bSF6sx4dNksTsje9KbbodkgzeZP3s1fqyHmu/pQBfxWRHGcIbj5Icvc0k+I5y4WL akTzARDGLTWfzs/pBC59FaP3EEExeNJgv03auukkVGucMpAJrZRqpP9Vmc3BjW36 Dj6qzfGxHgKHig0bCPpr8sCtsaFCkEfh5Wpk50RMKUqo59NUfIInJ39doR4L2xxt vkGgMr0pu7EhhqV18qMpezEXf0UVsMoCviZEum3QaZn0xc46n+J0yPs= -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:53 2026 by rpki-client