This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e32382e302f32342d3234203d3e20323031333431.roa File: 33312e3232302e32382e302f32342d3234203d3e20323031333431.roa (raw, json) Hash identifier: IYk/B+vzEmtAXNsEkM4w4ZcxfjPvvLcJiaJex/+faaQ= Subject key identifier: 59:B9:B7:8F:06:FD:2A:A5:C6:EE:2E:23:67:40:0E:70:9D:7E:60:FF Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 6AFA6989B5870F6838A87B6D5EB218B8B93AD65A Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e32382e302f32342d3234203d3e20323031333431.roa Signing time: Mon 29 Dec 2025 09:50:46 +0000 ROA not before: Mon 29 Dec 2025 09:45:46 +0000 ROA not after: Mon 28 Dec 2026 09:50:46 +0000 asID: 201341 IP address blocks: 31.220.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:fa:69:89:b5:87:0f:68:38:a8:7b:6d:5e:b2:18:b8:b9:3a:d6:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:46 2025 GMT Not After : Dec 28 09:50:46 2026 GMT Subject: CN=59B9B78F06FD2AA5C6EE2E2367400E709D7E60FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:eb:8a:91:7c:25:de:3d:9b:9a:c7:40:7f:6e: 04:99:60:b9:5e:fd:27:fc:4d:4b:4c:52:7e:95:aa: 56:c9:9c:25:92:62:38:3e:2a:e2:a7:00:07:cf:57: ac:2c:48:df:48:6c:e7:c5:1c:de:93:1a:23:b0:95: fc:5b:d3:27:35:f9:10:dc:eb:37:c0:ae:dd:09:b5: 1a:a9:0b:5a:35:48:a4:a0:d3:b9:e2:6d:10:7e:e8: ba:f1:16:64:7c:51:89:3f:0c:f8:bc:48:5c:0b:63: 03:f8:28:67:6d:0c:12:4e:ba:ec:05:88:2e:42:c4: 0b:38:5f:8d:8f:78:23:c7:06:9b:13:08:2c:1d:3a: f6:4b:93:d1:b6:e7:4f:d1:ae:ae:98:69:12:14:bc: 81:e4:c2:fe:54:ba:d2:4d:5b:bd:5a:f4:49:43:3d: 87:2d:e5:f1:d8:e6:c5:8c:da:c9:2c:f3:71:78:e8: cc:0b:0a:ab:6e:95:52:89:93:80:58:07:93:dd:cb: e6:58:8c:0d:2e:48:cd:ee:ef:9e:07:63:02:2a:33: 68:34:f0:4e:5f:75:12:b2:0b:19:06:cc:20:a5:63: 80:45:4a:40:a4:3b:e5:3d:cc:54:bd:f1:c9:8a:09: 9b:aa:e5:7e:b0:b3:86:75:5c:72:15:bd:e3:73:9f: a3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B9:B7:8F:06:FD:2A:A5:C6:EE:2E:23:67:40:0E:70:9D:7E:60:FF X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e32382e302f32342d3234203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.28.0/24 Signature Algorithm: sha256WithRSAEncryption 00:ff:6f:01:e1:68:0f:d6:d9:c0:d6:18:e6:c8:5b:3a:fe:46: 48:56:9f:20:3d:f8:b2:02:5d:64:36:4d:fd:56:6e:fd:06:bf: 65:54:6b:f4:8e:45:f1:6e:48:71:70:f0:94:61:8a:b7:dd:2d: 92:fb:a3:5a:30:ba:b6:d0:d2:41:10:f9:d5:06:a1:4e:08:f4: a3:76:af:b8:db:6d:27:f5:e1:5b:17:94:ea:8d:ad:08:bf:e2: 77:91:dc:b2:c4:62:e2:53:53:69:77:bf:a5:c8:d9:4f:68:ae: a9:70:bf:3b:67:ec:36:37:5c:1e:6b:47:7c:42:ac:37:9c:32: 32:df:e9:e2:ca:44:56:07:bf:47:49:40:c8:e3:71:d5:8f:19: a3:68:5f:84:63:88:25:47:df:50:b3:69:74:e6:27:db:ce:2e: 36:ce:ea:ba:4f:31:86:b6:3d:6d:c2:93:21:96:d2:5b:02:1d: 24:bc:32:a5:a3:9f:71:a0:78:6f:e3:82:1e:31:91:bc:1b:f2: 34:37:4c:76:34:4b:91:22:a9:7f:a6:bb:ae:8f:c3:29:35:c6: c9:82:08:de:cc:c6:bc:52:5c:51:9e:b4:84:51:02:a2:ae:f4: bf:0e:dd:d1:ca:58:1f:f2:3e:81:88:19:e3:09:73:cc:2c:10: 6f:9e:20:5d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUavppibWHD2g4qHttXrIYuLk61lowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDZaFw0yNjEyMjgwOTUwNDZaMDMxMTAvBgNV BAMTKDU5QjlCNzhGMDZGRDJBQTVDNkVFMkUyMzY3NDAwRTcwOUQ3RTYwRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp64qRfCXePZuax0B/bgSZYLle /Sf8TUtMUn6VqlbJnCWSYjg+KuKnAAfPV6wsSN9IbOfFHN6TGiOwlfxb0yc1+RDc 6zfArt0JtRqpC1o1SKSg07nibRB+6LrxFmR8UYk/DPi8SFwLYwP4KGdtDBJOuuwF iC5CxAs4X42PeCPHBpsTCCwdOvZLk9G250/Rrq6YaRIUvIHkwv5UutJNW71a9ElD PYct5fHY5sWM2sks83F46MwLCqtulVKJk4BYB5Pdy+ZYjA0uSM3u754HYwIqM2g0 8E5fdRKyCxkGzCClY4BFSkCkO+U9zFS98cmKCZuq5X6ws4Z1XHIVveNzn6PBAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUWbm3jwb9KqXG7i4jZ0AOcJ1+YP8wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzMTJlMzIzMjMwMmUzMjM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMxMzMzNDMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA H9wcMA0GCSqGSIb3DQEBCwUAA4IBAQAA/28B4WgP1tnA1hjmyFs6/kZIVp8gPfiy Al1kNk39Vm79Br9lVGv0jkXxbkhxcPCUYYq33S2S+6NaMLq20NJBEPnVBqFOCPSj dq+4220n9eFbF5Tqja0Iv+J3kdyyxGLiU1Npd7+lyNlPaK6pcL87Z+w2N1wea0d8 Qqw3nDIy3+niykRWB79HSUDI43HVjxmjaF+EY4glR99Qs2l05ifbzi42zuq6TzGG tj1twpMhltJbAh0kvDKlo59xoHhv44IeMZG8G/I0N0x2NEuRIql/pruuj8MpNcbJ ggjezMa8UlxRnrSEUQKirvS/Dt3Rylgf8j6BiBnjCXPMLBBvniBd -----END CERTIFICATE-----Generated at Sun Jan 25 12:15:52 2026 by rpki-client