This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230372e302f32342d3234203d3e203633313939.roa File: 3231372e3231362e3230372e302f32342d3234203d3e203633313939.roa (raw, json) Hash identifier: 0KOE8QwlzBKYfe0Pby2RGZrRDAQd+/Xl/8Yx9v3HHSE= Subject key identifier: 56:BD:4E:0E:19:EF:FF:15:C8:D3:75:BA:49:A6:A6:11:08:7A:EE:C8 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 67D53BD8D6A6009C2C3D065BF65F42CF4F44DC6D Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230372e302f32342d3234203d3e203633313939.roa Signing time: Sat 24 Jan 2026 12:37:49 +0000 ROA not before: Sat 24 Jan 2026 12:32:49 +0000 ROA not after: Sat 23 Jan 2027 12:37:49 +0000 asID: 63199 IP address blocks: 217.216.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d5:3b:d8:d6:a6:00:9c:2c:3d:06:5b:f6:5f:42:cf:4f:44:dc:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 24 12:32:49 2026 GMT Not After : Jan 23 12:37:49 2027 GMT Subject: CN=56BD4E0E19EFFF15C8D375BA49A6A611087AEEC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:79:b6:f2:cd:cb:35:2e:46:48:50:d5:09:7e: 20:86:dc:4c:f6:f6:0b:d1:24:0a:89:6e:ca:9d:80: 86:92:c1:68:72:c0:79:fe:ac:1b:10:35:b9:77:49: 10:aa:2c:d2:be:fe:1a:74:4c:ee:3a:69:8b:be:66: 1d:7f:47:32:72:76:73:cf:f0:eb:92:6e:4a:0c:d5: b3:67:e8:fc:d3:41:68:de:fb:0a:8c:49:cf:8e:85: 6d:0f:8b:26:b3:73:3d:aa:6c:8f:3a:16:c5:04:12: 36:fa:13:9f:d4:a2:36:bc:ea:9a:10:10:02:04:ff: 1e:84:aa:d1:86:12:9c:48:91:c3:7e:20:f0:04:d0: e5:1c:10:9d:c5:73:c1:bc:14:46:09:a6:eb:e8:3e: 31:95:02:17:14:6d:72:a5:56:ed:70:73:ac:0f:98: cb:4e:9b:88:de:c6:27:05:cf:c1:01:e0:bb:c6:46: 79:57:fb:58:cc:ac:96:a2:c7:f7:79:5f:01:af:f8: 09:08:ce:3d:70:d1:96:58:99:64:03:c7:9b:fd:da: ac:d4:1c:b2:5e:a5:a2:d8:e6:dc:7f:32:42:4a:f7: b0:30:94:96:b0:15:d9:94:38:46:68:7e:b7:e2:78: a5:53:5a:eb:b2:80:0e:de:e2:8f:ea:26:08:71:c6: e7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BD:4E:0E:19:EF:FF:15:C8:D3:75:BA:49:A6:A6:11:08:7A:EE:C8 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230372e302f32342d3234203d3e203633313939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.207.0/24 Signature Algorithm: sha256WithRSAEncryption 24:fe:7a:f9:13:75:95:2b:4f:49:db:16:ec:d0:e6:1e:f6:d5: 6e:72:93:66:bb:33:fd:a7:ea:23:a9:24:d2:a9:e4:01:ea:d6: c9:d8:6a:94:84:c3:e4:b6:79:b8:6c:82:5b:e2:9d:ff:ff:d6: 6a:71:bc:d2:0b:98:1f:4c:03:e8:a9:da:83:89:b8:8b:89:a6: 68:8c:a5:29:15:0b:77:78:29:df:e6:39:17:34:c4:89:28:94: 23:af:d9:45:df:0d:50:75:b4:ae:4b:f9:f1:f9:56:60:2a:f4: b1:bf:91:fc:14:bf:8d:b4:b5:ca:f0:8c:af:c9:60:c8:3d:9d: b7:6e:c6:f3:19:1d:9a:03:34:84:e0:2c:ff:2c:4a:22:f0:6b: ef:c2:e0:fe:da:ba:5a:19:b3:ee:bc:28:94:25:83:72:f2:65: d4:9e:33:31:e0:5d:e4:8b:f4:97:b7:4c:32:cb:b4:d0:d3:01: 8b:7b:51:88:0c:39:0c:a4:de:a1:52:8b:7d:fc:d9:4e:a3:9e: f1:12:cd:81:48:14:36:7a:3e:bf:0c:da:f7:70:e8:27:d7:8f: 96:cb:25:87:cd:24:ea:39:9f:a0:a8:a5:3d:b9:20:e9:bb:09: f4:41:f5:b0:2f:0c:72:b4:ba:af:b4:12:39:63:f4:e7:aa:2d: 98:ae:85:55 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUZ9U72NamAJwsPQZb9l9Cz09E3G0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMjQxMjMyNDlaFw0yNzAxMjMxMjM3NDlaMDMxMTAvBgNV BAMTKDU2QkQ0RTBFMTlFRkZGMTVDOEQzNzVCQTQ5QTZBNjExMDg3QUVFQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSebbyzcs1LkZIUNUJfiCG3Ez2 9gvRJAqJbsqdgIaSwWhywHn+rBsQNbl3SRCqLNK+/hp0TO46aYu+Zh1/RzJydnPP 8OuSbkoM1bNn6PzTQWje+wqMSc+OhW0Piyazcz2qbI86FsUEEjb6E5/Uoja86poQ EAIE/x6EqtGGEpxIkcN+IPAE0OUcEJ3Fc8G8FEYJpuvoPjGVAhcUbXKlVu1wc6wP mMtOm4jexicFz8EB4LvGRnlX+1jMrJaix/d5XwGv+AkIzj1w0ZZYmWQDx5v92qzU HLJepaLY5tx/MkJK97AwlJawFdmUOEZofrfieKVTWuuygA7e4o/qJghxxucZAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUVr1ODhnv/xXI03W6SaamEQh67sgwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMy MzAzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzMzMTM5Mzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADZ2M8wDQYJKoZIhvcNAQELBQADggEBACT+evkTdZUrT0nbFuzQ5h721W5yk2a7 M/2n6iOpJNKp5AHq1snYapSEw+S2ebhsglvinf//1mpxvNILmB9MA+ip2oOJuIuJ pmiMpSkVC3d4Kd/mORc0xIkolCOv2UXfDVB1tK5L+fH5VmAq9LG/kfwUv420tcrw jK/JYMg9nbduxvMZHZoDNITgLP8sSiLwa+/C4P7auloZs+68KJQlg3LyZdSeMzHg XeSL9Je3TDLLtNDTAYt7UYgMOQyk3qFSi3382U6jnvESzYFIFDZ6Pr8M2vdw6CfX j5bLJYfNJOo5n6CopT25IOm7CfRB9bAvDHK0uq+0Ejlj9OeqLZiuhVU= -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:43 2026 by rpki-client