This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234322e302f32342d3234203d3e2039333034.roa File: 3231372e3231372e3234322e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: BdyZpPo5nLgN7sLoabuqYirMOCG12m0UpYK9X5b4gDM= Subject key identifier: 54:7A:4C:FC:93:89:40:0B:17:EB:60:7F:5B:E3:DE:93:EB:83:99:20 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 0C2C844A6F761860A77C61DCBD7DF7F2735164BD Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234322e302f32342d3234203d3e2039333034.roa Signing time: Thu 22 Jan 2026 11:20:18 +0000 ROA not before: Thu 22 Jan 2026 11:15:18 +0000 ROA not after: Thu 21 Jan 2027 11:20:18 +0000 asID: 9304 IP address blocks: 217.217.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:2c:84:4a:6f:76:18:60:a7:7c:61:dc:bd:7d:f7:f2:73:51:64:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 22 11:15:18 2026 GMT Not After : Jan 21 11:20:18 2027 GMT Subject: CN=547A4CFC9389400B17EB607F5BE3DE93EB839920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:bf:7e:51:5e:c4:ac:a8:66:d3:a9:29:53:43: 33:bb:25:88:4b:c9:77:79:f1:6c:55:22:14:e5:80: f3:f6:6c:84:ec:4a:79:35:e3:d5:43:57:d8:ff:cb: 71:dc:d4:25:9a:7c:61:90:94:7e:12:9c:c3:33:96: 19:eb:9f:c8:a2:7e:5a:94:b1:d6:c3:59:e9:48:77: 40:51:0f:9f:90:c2:4a:7d:93:ea:05:09:66:f7:88: 09:73:ab:86:50:72:c1:b9:29:55:77:46:5c:09:e6: 07:4f:53:5c:de:b9:ce:34:95:0f:58:2c:5d:04:ef: 4d:1b:93:a4:24:f2:be:43:eb:da:83:65:52:90:b8: c7:70:35:70:30:c8:4c:78:8e:a4:79:6b:49:33:f3: 46:6b:34:84:74:dc:f3:eb:3d:02:a7:43:e0:0c:81: cf:5b:d7:1f:6b:ab:3d:8b:39:48:fc:3e:b8:e6:52: 35:c3:5e:59:af:f1:5d:a3:e1:1a:e9:47:c0:16:9d: 82:b2:8d:ca:4b:63:e6:9d:f7:82:ea:da:1d:de:1c: 2c:63:2a:57:af:a2:cd:6d:17:67:0f:6f:5e:a1:a9: ec:f8:0d:57:93:ce:bf:d2:7c:2e:87:8f:5a:c4:81: 03:ca:7d:1d:6f:3f:e3:7d:4f:f2:56:c0:dc:50:d5: fa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7A:4C:FC:93:89:40:0B:17:EB:60:7F:5B:E3:DE:93:EB:83:99:20 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234322e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.217.242.0/24 Signature Algorithm: sha256WithRSAEncryption 57:ae:ef:80:09:41:b0:c1:79:7f:fd:9f:ed:01:a5:ec:dc:33: bf:1f:30:e6:2a:66:a5:84:6a:c0:00:4e:43:b3:06:a8:7a:cb: a3:02:76:7d:fd:17:96:8c:e9:23:ba:62:7a:19:4b:f6:65:cf: 39:49:67:1d:0c:0e:06:3c:83:df:17:6a:fc:bc:c6:87:f1:5f: b5:11:de:3f:4c:0b:b6:d9:e9:9e:b0:dc:32:1f:d7:70:05:b3: 58:6b:43:d4:54:58:d3:25:54:a5:ee:66:d2:e5:f9:ca:9f:ab: 3a:69:87:3e:66:47:ac:99:9f:a6:f8:a4:1b:f1:9c:d7:21:68: 99:b9:47:2c:c0:fc:4b:bd:3d:68:41:1f:30:f0:e8:83:0d:28: 8c:47:9b:04:ef:53:de:62:79:18:7a:03:48:24:c0:88:da:2a: 7e:c4:2a:24:ea:0b:89:75:b5:1b:52:3f:2d:fb:a6:80:b9:86: 13:de:48:80:b1:29:75:29:91:35:4b:88:55:d7:ee:3f:93:ed: 14:0e:fc:fa:9b:fb:1b:89:9c:54:a6:9f:a9:a9:73:93:10:87: cf:23:3c:0b:f5:a4:a5:1d:4e:9e:cb:28:30:c0:a3:66:40:f1: 55:d0:26:96:7e:cc:7d:65:55:8e:ce:47:97:8a:a1:81:1e:16: 6c:5a:91:ee -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUDCyESm92GGCnfGHcvX338nNRZL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMjIxMTE1MThaFw0yNzAxMjExMTIwMThaMDMxMTAvBgNV BAMTKDU0N0E0Q0ZDOTM4OTQwMEIxN0VCNjA3RjVCRTNERTkzRUI4Mzk5MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuv35RXsSsqGbTqSlTQzO7JYhL yXd58WxVIhTlgPP2bITsSnk149VDV9j/y3Hc1CWafGGQlH4SnMMzlhnrn8iiflqU sdbDWelId0BRD5+Qwkp9k+oFCWb3iAlzq4ZQcsG5KVV3RlwJ5gdPU1zeuc40lQ9Y LF0E700bk6Qk8r5D69qDZVKQuMdwNXAwyEx4jqR5a0kz80ZrNIR03PPrPQKnQ+AM gc9b1x9rqz2LOUj8PrjmUjXDXlmv8V2j4RrpR8AWnYKyjcpLY+ad94Lq2h3eHCxj Klevos1tF2cPb16hqez4DVeTzr/SfC6Hj1rEgQPKfR1vP+N9T/JWwNxQ1fqrAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUVHpM/JOJQAsX62B/W+Pek+uDmSAwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy MzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 2dnyMA0GCSqGSIb3DQEBCwUAA4IBAQBXru+ACUGwwXl//Z/tAaXs3DO/HzDmKmal hGrAAE5DswaoesujAnZ9/ReWjOkjumJ6GUv2Zc85SWcdDA4GPIPfF2r8vMaH8V+1 Ed4/TAu22emesNwyH9dwBbNYa0PUVFjTJVSl7mbS5fnKn6s6aYc+ZkesmZ+m+KQb 8ZzXIWiZuUcswPxLvT1oQR8w8OiDDSiMR5sE71PeYnkYegNIJMCI2ip+xCok6guJ dbUbUj8t+6aAuYYT3kiAsSl1KZE1S4hV1+4/k+0UDvz6m/sbiZxUpp+pqXOTEIfP IzwL9aSlHU6eyygwwKNmQPFV0CaWfsx9ZVWOzkeXiqGBHhZsWpHu -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:21 2026 by rpki-client