This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34362e302f32332d3233203d3e20323031333431.roa File: 33312e3232302e34362e302f32332d3233203d3e20323031333431.roa (raw, json) Hash identifier: Yx/0qqFRxbPlssLCTjvBlW0OBJ/vkoISIscl1JY9xeY= Subject key identifier: 4C:C6:F9:87:97:FD:06:BD:9D:24:3A:B1:13:B6:EA:B2:80:FF:C8:71 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 1FC49AC82BDA38EA6B916862A163911EF7007354 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34362e302f32332d3233203d3e20323031333431.roa Signing time: Mon 29 Dec 2025 09:50:55 +0000 ROA not before: Mon 29 Dec 2025 09:45:55 +0000 ROA not after: Mon 28 Dec 2026 09:50:55 +0000 asID: 201341 IP address blocks: 31.220.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c4:9a:c8:2b:da:38:ea:6b:91:68:62:a1:63:91:1e:f7:00:73:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:55 2025 GMT Not After : Dec 28 09:50:55 2026 GMT Subject: CN=4CC6F98797FD06BD9D243AB113B6EAB280FFC871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:23:4d:98:3a:bb:52:46:c0:7b:ec:e1:8f:36: b4:49:4c:ba:61:15:1f:91:bb:85:15:be:72:ff:20: e8:1d:55:37:55:6f:74:a8:a9:49:90:05:81:96:dd: 2c:73:f4:35:76:86:e3:1e:1f:7f:9b:27:8e:1c:d2: 30:44:aa:71:c6:97:61:bc:d5:2f:17:4a:ab:eb:3a: df:c0:ed:79:ba:e8:37:9f:49:48:cf:df:25:26:d3: 67:5e:57:7d:dd:61:37:5a:1c:ef:88:7b:a7:8e:90: ef:22:36:28:44:98:12:39:d7:16:94:71:dd:6c:4d: 7e:b9:eb:87:93:d1:fe:94:df:68:88:a0:a4:3c:65: 56:dd:23:22:f0:09:40:b1:60:a5:93:bb:ca:ad:3e: 91:0e:f0:c9:2c:e5:a0:60:99:7a:e1:f0:59:90:69: b4:9a:b2:10:82:28:ac:ef:fd:7a:92:4d:fa:d1:d7: 48:ec:0a:ba:90:ce:90:9d:ef:11:b9:a4:78:f8:18: fa:d7:ba:38:31:6e:5e:d3:1b:63:d6:31:f2:4c:69: b5:da:ee:b6:7e:07:98:76:79:f7:f0:12:fc:6f:b6: 97:c5:8e:b3:22:22:04:f3:1b:80:6d:6f:57:32:67: 1d:c1:45:e6:2c:d6:ea:1b:f9:5b:dd:c0:41:d4:04: 97:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C6:F9:87:97:FD:06:BD:9D:24:3A:B1:13:B6:EA:B2:80:FF:C8:71 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34362e302f32332d3233203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.46.0/23 Signature Algorithm: sha256WithRSAEncryption 45:dd:5e:e6:bb:47:3d:a4:5e:5c:6e:99:b2:de:98:3f:20:f8: a7:06:89:0d:aa:a6:7b:b0:3c:a5:70:56:7d:82:e1:22:c2:04: ba:e6:35:52:e8:53:7b:a6:a1:5c:93:f9:c3:d1:b4:0a:36:6f: fb:6f:ae:9b:52:84:22:e2:bf:a5:04:47:a8:bd:03:2f:89:57: dc:f7:7b:f2:53:58:9d:0f:ac:50:96:d1:23:f4:0b:37:f7:a9: d2:59:54:40:2b:4a:09:4c:40:ee:36:79:49:89:9d:18:bd:69: 38:12:c8:1f:18:29:0b:58:58:2b:6c:35:bb:31:f4:67:aa:e4: 75:e7:fc:9c:69:f9:b8:a2:5b:90:70:5a:80:9e:52:3b:96:d2: 58:4e:4a:70:7d:8b:2b:5c:47:1e:5c:e5:09:5e:09:1b:d5:59: e7:e0:44:d7:f0:be:bc:64:dc:86:d9:6b:76:37:31:2e:72:f8: ce:2d:e5:ca:7a:d8:11:02:fd:e9:01:e7:9d:d3:ea:e3:92:7f: 66:3c:97:6e:eb:1e:f6:5d:e5:dd:7f:c4:bf:c1:be:69:aa:f0: 2d:e7:df:bd:98:ad:3e:89:c0:c2:15:ec:49:1d:ae:ee:8b:fe: 01:29:c2:b1:f3:08:01:79:cc:2e:1c:22:f4:f3:06:fe:56:d9: 2f:80:fc:02 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUH8SayCvaOOprkWhioWORHvcAc1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTVaFw0yNjEyMjgwOTUwNTVaMDMxMTAvBgNV BAMTKDRDQzZGOTg3OTdGRDA2QkQ5RDI0M0FCMTEzQjZFQUIyODBGRkM4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCI02YOrtSRsB77OGPNrRJTLph FR+Ru4UVvnL/IOgdVTdVb3SoqUmQBYGW3Sxz9DV2huMeH3+bJ44c0jBEqnHGl2G8 1S8XSqvrOt/A7Xm66DefSUjP3yUm02deV33dYTdaHO+Ie6eOkO8iNihEmBI51xaU cd1sTX6564eT0f6U32iIoKQ8ZVbdIyLwCUCxYKWTu8qtPpEO8Mks5aBgmXrh8FmQ abSashCCKKzv/XqSTfrR10jsCrqQzpCd7xG5pHj4GPrXujgxbl7TG2PWMfJMabXa 7rZ+B5h2effwEvxvtpfFjrMiIgTzG4Btb1cyZx3BReYs1uob+VvdwEHUBJfdAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUTMb5h5f9Br2dJDqxE7bqsoD/yHEwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzMTJlMzIzMjMwMmUzNDM2 MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzMDMxMzMzNDMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB H9wuMA0GCSqGSIb3DQEBCwUAA4IBAQBF3V7mu0c9pF5cbpmy3pg/IPinBokNqqZ7 sDylcFZ9guEiwgS65jVS6FN7pqFck/nD0bQKNm/7b66bUoQi4r+lBEeovQMviVfc 93vyU1idD6xQltEj9As396nSWVRAK0oJTEDuNnlJiZ0YvWk4EsgfGCkLWFgrbDW7 MfRnquR15/ycafm4oluQcFqAnlI7ltJYTkpwfYsrXEceXOUJXgkb1Vnn4ETX8L68 ZNyG2Wt2NzEucvjOLeXKetgRAv3pAeed0+rjkn9mPJdu6x72XeXdf8S/wb5pqvAt 59+9mK0+icDCFexJHa7ui/4BKcKx8wgBecwuHCL08wb+VtkvgPwC -----END CERTIFICATE-----Generated at Sun Jan 25 07:20:00 2026 by rpki-client