This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230342e302f32342d3234203d3e203633313939.roa File: 3231372e3231362e3230342e302f32342d3234203d3e203633313939.roa (raw, json) Hash identifier: PdI1G0Mh2nDjyCUEXlLlAEHYT0cAdb7N+iW4wloAbvI= Subject key identifier: 46:64:90:04:DC:86:36:2A:C4:04:97:F7:13:C2:5E:B6:1B:F3:19:76 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 38A3A57E7B79D9EEA1F150F88049223C14C05147 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230342e302f32342d3234203d3e203633313939.roa Signing time: Sat 24 Jan 2026 12:36:35 +0000 ROA not before: Sat 24 Jan 2026 12:31:35 +0000 ROA not after: Sat 23 Jan 2027 12:36:35 +0000 asID: 63199 IP address blocks: 217.216.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a3:a5:7e:7b:79:d9:ee:a1:f1:50:f8:80:49:22:3c:14:c0:51:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 24 12:31:35 2026 GMT Not After : Jan 23 12:36:35 2027 GMT Subject: CN=46649004DC86362AC40497F713C25EB61BF31976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c3:22:cd:4d:ed:1e:58:34:82:b1:96:f4:22: b0:97:9b:95:45:23:bf:48:da:71:a0:34:47:99:ab: 65:8c:ca:b3:92:bd:d5:9d:f3:5a:46:77:4f:68:38: 09:63:0f:ed:e7:67:8a:ef:00:1b:f6:d6:13:44:37: 2c:83:67:ae:3d:ba:10:7b:17:5c:9f:1e:09:6e:dc: 76:31:2b:67:f3:b6:52:26:38:e3:42:05:2d:b5:3e: a3:2e:f4:b5:df:38:24:73:f8:a4:77:99:54:ac:0b: 89:54:d1:72:9f:39:2c:4f:ce:50:1e:1a:94:ee:58: e0:46:e0:9b:67:8b:8b:1e:3f:9b:56:bd:7c:53:3d: 45:c9:6d:4b:9d:ff:2d:98:53:33:00:f8:b3:9a:27: 20:32:b1:31:52:9b:da:02:91:a7:fc:22:23:c8:3a: df:41:44:7a:8d:2a:a7:14:2d:ca:33:a4:df:0d:80: ad:46:f3:51:da:64:f1:e3:95:5b:b3:91:31:1a:02: 6c:22:78:f9:6a:9f:8a:ea:e0:f4:76:02:a7:1b:be: 57:a3:a2:b4:c7:ca:d8:f9:30:ed:c6:18:ff:b0:08: d4:28:6b:d0:61:df:b5:bb:90:12:58:1a:e5:2f:05: 8e:bc:ad:a4:b1:2d:36:be:a9:30:77:fa:3a:fe:f5: e5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:64:90:04:DC:86:36:2A:C4:04:97:F7:13:C2:5E:B6:1B:F3:19:76 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230342e302f32342d3234203d3e203633313939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.204.0/24 Signature Algorithm: sha256WithRSAEncryption 80:1d:f3:ef:07:c2:bb:4f:36:cc:16:20:05:9b:22:c5:4c:9f: 72:53:50:6f:96:a7:2d:df:10:3e:62:95:91:6e:13:47:16:e8: 47:54:18:4a:15:14:6e:4f:57:08:6d:a8:76:2d:ca:d8:64:92: a8:4c:3c:46:cb:b6:9e:56:a9:5c:c6:76:67:2f:e5:1e:af:49: ee:1f:7c:75:c9:a0:8b:0b:d1:e5:ff:e3:13:38:0c:da:cd:cd: 1b:d3:4b:cc:3a:8d:a8:19:6c:c8:c9:c9:b8:8b:94:56:50:c9: 26:de:42:90:2c:cb:c8:30:9f:13:c2:7f:d7:01:35:5f:a1:1e: 6e:32:b6:44:f8:a0:09:85:50:4c:44:0f:ff:6d:95:74:72:8b: 5d:76:73:3b:7d:99:8b:9f:b7:31:b5:63:a4:6a:1d:15:04:1d: 8e:9d:6f:da:27:67:4e:5e:f7:08:72:28:ac:4b:6d:5f:60:da: 9b:cb:ed:e9:c6:4e:5e:b5:c5:3c:dc:18:ca:fc:19:b7:5c:53: 7b:f5:0c:c5:30:a3:9c:fd:29:14:04:87:d4:15:08:00:ca:38: 1d:70:8e:f0:65:f6:b8:69:0f:3e:ae:36:35:6e:2f:16:a1:b3: 84:66:af:8b:32:a8:ae:bf:3f:b6:18:78:1a:d1:39:f4:19:8a: ef:dc:44:15 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUOKOlfnt52e6h8VD4gEkiPBTAUUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMjQxMjMxMzVaFw0yNzAxMjMxMjM2MzVaMDMxMTAvBgNV BAMTKDQ2NjQ5MDA0REM4NjM2MkFDNDA0OTdGNzEzQzI1RUI2MUJGMzE5NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtwyLNTe0eWDSCsZb0IrCXm5VF I79I2nGgNEeZq2WMyrOSvdWd81pGd09oOAljD+3nZ4rvABv21hNENyyDZ649uhB7 F1yfHglu3HYxK2fztlImOONCBS21PqMu9LXfOCRz+KR3mVSsC4lU0XKfOSxPzlAe GpTuWOBG4Jtni4seP5tWvXxTPUXJbUud/y2YUzMA+LOaJyAysTFSm9oCkaf8IiPI Ot9BRHqNKqcULcozpN8NgK1G81HaZPHjlVuzkTEaAmwiePlqn4rq4PR2Aqcbvlej orTHytj5MO3GGP+wCNQoa9Bh37W7kBJYGuUvBY68raSxLTa+qTB3+jr+9eWvAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQURmSQBNyGNirEBJf3E8JethvzGXYwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMy MzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzMzMTM5Mzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADZ2MwwDQYJKoZIhvcNAQELBQADggEBAIAd8+8HwrtPNswWIAWbIsVMn3JTUG+W py3fED5ilZFuE0cW6EdUGEoVFG5PVwhtqHYtythkkqhMPEbLtp5WqVzGdmcv5R6v Se4ffHXJoIsL0eX/4xM4DNrNzRvTS8w6jagZbMjJybiLlFZQySbeQpAsy8gwnxPC f9cBNV+hHm4ytkT4oAmFUExED/9tlXRyi112czt9mYuftzG1Y6RqHRUEHY6db9on Z05e9whyKKxLbV9g2pvL7enGTl61xTzcGMr8GbdcU3v1DMUwo5z9KRQEh9QVCADK OB1wjvBl9rhpDz6uNjVuLxahs4Rmr4syqK6/P7YYeBrROfQZiu/cRBU= -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:13 2026 by rpki-client