This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230302e302f32342d3234203d3e203235313938.roa File: 3231372e3231362e3230302e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: IfLs+N0pbRnl8lmK23HXSpeN19ZRi6gGOzGWlKHBXH4= Subject key identifier: 3D:79:59:87:6C:3F:B5:85:F6:55:7D:8F:D0:3B:5F:76:77:8A:E8:CF Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 671DA1F382CA214ECCF735119CF300F252F4F44A Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230302e302f32342d3234203d3e203235313938.roa Signing time: Sat 24 Jan 2026 12:38:09 +0000 ROA not before: Sat 24 Jan 2026 12:33:09 +0000 ROA not after: Sat 23 Jan 2027 12:38:09 +0000 asID: 25198 IP address blocks: 217.216.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:1d:a1:f3:82:ca:21:4e:cc:f7:35:11:9c:f3:00:f2:52:f4:f4:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 24 12:33:09 2026 GMT Not After : Jan 23 12:38:09 2027 GMT Subject: CN=3D7959876C3FB585F6557D8FD03B5F76778AE8CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6d:7d:a8:a1:bf:15:38:e0:98:c3:06:42:cb: 81:35:d5:42:59:bd:f6:d0:c1:a6:db:f2:b4:9c:74: ae:28:84:0d:bc:f3:97:ae:e2:2a:1f:f8:71:64:44: 0f:25:76:27:b9:d1:82:1a:61:77:1a:9b:af:98:02: 4e:98:3f:0a:86:41:7e:2e:a9:8e:59:c8:e6:6b:a4: e6:dc:b7:e9:fb:b8:c6:46:07:a9:9a:c6:56:60:38: b9:c4:fe:32:6d:18:db:56:95:ac:9f:05:ea:69:14: 66:ae:d1:93:47:05:c0:02:52:1c:15:58:28:7d:a2: 14:23:6a:1f:69:b6:cb:e7:85:b4:46:80:a0:51:04: 4c:be:93:6f:83:87:10:a4:35:6e:0a:3f:b0:41:12: 65:9e:e8:54:53:92:e6:d3:fc:dc:9e:06:7e:55:a9: d5:35:a6:0d:16:6e:a9:c3:ed:b6:a5:ff:1b:7f:c3: e7:97:97:e0:88:39:48:41:a6:47:c0:df:e7:87:41: 0a:e4:ff:fc:d6:fe:d7:a1:99:dc:d3:c0:b6:04:83: d3:80:60:e8:09:8e:40:7d:d9:10:20:73:b7:9c:a4: 24:ad:e4:e8:d9:b2:c3:37:c5:ff:07:df:ca:26:57: c9:19:c4:2a:13:53:77:33:0b:a3:21:c6:6d:4b:52: cc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:79:59:87:6C:3F:B5:85:F6:55:7D:8F:D0:3B:5F:76:77:8A:E8:CF X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230302e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.200.0/24 Signature Algorithm: sha256WithRSAEncryption 29:42:7c:f8:17:58:f0:c1:3a:05:07:a6:e6:01:0b:28:7e:58: 91:69:85:a4:ea:ef:41:6f:55:d8:82:4d:ef:d5:02:e7:5a:89: 14:27:55:3d:fb:44:c8:61:ff:45:3d:86:70:c4:58:59:8a:e0: 68:43:9f:4d:07:62:1f:96:f3:f2:6f:fe:06:2c:68:d2:1a:55: 80:42:6f:e2:da:cf:df:98:26:78:0a:81:86:ae:27:9c:1f:37: ee:00:28:b9:95:82:ce:03:1f:ca:3a:5d:40:81:3a:a1:06:9f: 03:64:e7:03:5c:c7:70:39:42:c2:0d:25:9d:78:c3:72:b0:37: 1b:9b:00:73:0e:aa:bc:a2:79:72:db:b6:af:37:98:b7:da:ab: f9:47:e1:01:b7:9d:19:b0:da:2d:d0:71:57:04:ce:b1:eb:eb: c3:5f:f1:34:04:d9:a4:07:54:58:60:4a:1b:e4:69:ef:70:df: 6a:57:19:e0:9b:80:df:63:4a:4d:5c:cd:32:5c:1f:a8:61:e5: ff:c5:a2:a9:55:c5:f7:d6:7f:5d:9d:64:40:01:e7:a5:1f:55: d0:94:52:a0:a5:20:3e:12:ea:97:79:4a:d5:46:e9:1e:f3:49: 8f:17:77:bb:fb:00:de:0b:11:63:77:89:e1:c6:b7:f8:23:bf: 34:d8:03:4d -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUZx2h84LKIU7M9zURnPMA8lL09EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMjQxMjMzMDlaFw0yNzAxMjMxMjM4MDlaMDMxMTAvBgNV BAMTKDNENzk1OTg3NkMzRkI1ODVGNjU1N0Q4RkQwM0I1Rjc2Nzc4QUU4Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXbX2oob8VOOCYwwZCy4E11UJZ vfbQwabb8rScdK4ohA2885eu4iof+HFkRA8ldie50YIaYXcam6+YAk6YPwqGQX4u qY5ZyOZrpObct+n7uMZGB6maxlZgOLnE/jJtGNtWlayfBeppFGau0ZNHBcACUhwV WCh9ohQjah9ptsvnhbRGgKBRBEy+k2+DhxCkNW4KP7BBEmWe6FRTkubT/NyeBn5V qdU1pg0WbqnD7bal/xt/w+eXl+CIOUhBpkfA3+eHQQrk//zW/tehmdzTwLYEg9OA YOgJjkB92RAgc7ecpCSt5OjZssM3xf8H38omV8kZxCoTU3czC6Mhxm1LUsydAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUPXlZh2w/tYX2VX2P0DtfdneK6M8wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMy MzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzUzMTM5Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADZ2MgwDQYJKoZIhvcNAQELBQADggEBAClCfPgXWPDBOgUHpuYBCyh+WJFphaTq 70FvVdiCTe/VAudaiRQnVT37RMhh/0U9hnDEWFmK4GhDn00HYh+W8/Jv/gYsaNIa VYBCb+Laz9+YJngKgYauJ5wfN+4AKLmVgs4DH8o6XUCBOqEGnwNk5wNcx3A5QsIN JZ14w3KwNxubAHMOqryieXLbtq83mLfaq/lH4QG3nRmw2i3QcVcEzrHr68Nf8TQE 2aQHVFhgShvkae9w32pXGeCbgN9jSk1czTJcH6hh5f/FoqlVxffWf12dZEAB56Uf VdCUUqClID4S6pd5StVG6R7zSY8Xd7v7AN4LEWN3ieHGt/gjvzTYA00= -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:03 2026 by rpki-client