This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3232372e302f32342d3332203d3e20313431393935.roa File: 3130392e3132332e3232372e302f32342d3332203d3e20313431393935.roa (raw, json) Hash identifier: 4MB51GX4K6WkCTGxw/AloHmXZLc+bax70MiZS+i7naY= Subject key identifier: 6C:3A:41:AF:9B:AF:AF:8E:0D:95:EE:99:4C:86:AF:E0:69:EE:01:65 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 27BF23B69FB5C8D3EA9D5C8386D9EA531025D1B6 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3232372e302f32342d3332203d3e20313431393935.roa Signing time: Mon 29 Dec 2025 09:50:52 +0000 ROA not before: Mon 29 Dec 2025 09:45:52 +0000 ROA not after: Mon 28 Dec 2026 09:50:52 +0000 asID: 141995 IP address blocks: 109.123.227.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:bf:23:b6:9f:b5:c8:d3:ea:9d:5c:83:86:d9:ea:53:10:25:d1:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:52 2025 GMT Not After : Dec 28 09:50:52 2026 GMT Subject: CN=6C3A41AF9BAFAF8E0D95EE994C86AFE069EE0165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b1:2f:93:f5:64:58:f4:61:ee:d7:b3:c3:03: 5d:bf:c5:4e:02:2e:dd:fd:45:51:0c:eb:f3:b3:bc: 08:b5:c8:d4:67:2b:67:18:74:34:39:2b:9c:e9:5a: fa:15:97:87:f7:27:b0:08:27:93:48:02:f9:bb:75: df:f5:cf:20:58:91:49:b1:3e:25:64:1d:93:c1:6d: f7:0d:e8:3a:8c:44:ce:68:bf:98:fb:82:b8:8b:35: 29:8d:20:8f:7c:fa:3d:d3:a7:e4:e9:d8:53:cf:6a: 1a:fc:bb:d2:05:5d:bb:89:c6:df:23:b7:4f:a6:ca: 15:cb:8d:0c:02:74:7c:2b:f9:c5:47:cb:d2:fe:77: 6c:3e:ab:d5:4c:29:21:b0:9f:54:ef:3e:5d:16:1b: 20:ca:ae:5a:fb:ef:19:eb:8f:5f:87:dc:0b:67:5b: da:21:c6:a2:f0:d0:4e:3e:f1:94:cf:c0:d9:ac:ed: 9c:c0:9e:ab:d0:6a:1a:a4:83:bd:82:00:ce:51:6e: c5:27:40:78:87:88:1d:d8:bc:d3:68:4a:99:9e:7e: 00:01:2a:a2:bd:a9:10:6f:05:ff:ac:75:db:a9:cb: e5:18:33:b0:b9:cd:a2:14:b6:9a:24:66:95:d2:bc: 61:75:5f:ca:e4:68:0d:4b:b6:17:5c:16:da:97:35: da:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:3A:41:AF:9B:AF:AF:8E:0D:95:EE:99:4C:86:AF:E0:69:EE:01:65 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3232372e302f32342d3332203d3e20313431393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.123.227.0/24 Signature Algorithm: sha256WithRSAEncryption 88:1c:30:06:7e:79:6f:eb:c4:c5:d9:16:1f:1a:45:25:63:3d: 38:be:82:6d:fb:66:d2:d5:6d:29:40:90:da:f7:dd:c9:58:9a: 40:a7:48:72:10:96:5b:92:c1:9b:ca:54:49:fc:fa:88:62:fc: 7a:44:67:b0:ba:b6:c6:a6:ca:7f:d8:20:82:ea:fa:23:2c:4f: 54:7b:60:56:dd:8a:7a:73:f1:31:e2:47:33:d8:f9:5d:7b:2e: 0f:85:87:70:c6:b2:07:4c:33:1a:31:a0:66:d3:f5:83:28:78: 8a:e6:31:c1:69:8e:1e:f9:cc:e8:d0:b9:a2:1c:f4:3a:c2:f4: 9f:ba:96:b3:fa:a3:63:75:8b:9c:53:2e:c3:8c:5f:74:12:f8: 15:f4:af:a9:b9:93:68:5f:50:82:12:ee:6f:96:bf:e1:42:ce: f1:89:16:88:a3:60:13:8c:52:66:83:b1:e4:84:14:f9:52:7e: a6:7f:eb:ee:a4:d4:49:61:9f:ec:a6:7c:bb:c6:c5:a9:40:86: 90:a2:91:60:b8:7a:b9:31:7d:f5:e4:13:4b:0b:4b:ad:aa:80: fe:63:0a:2a:a4:cd:da:22:c4:16:90:d7:f1:af:e3:ed:f9:fd: 26:b1:fe:b9:9d:cf:a9:6b:44:b7:ed:ef:14:99:95:20:eb:c6: 83:7d:68:14 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUJ78jtp+1yNPqnVyDhtnqUxAl0bYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTJaFw0yNjEyMjgwOTUwNTJaMDMxMTAvBgNV BAMTKDZDM0E0MUFGOUJBRkFGOEUwRDk1RUU5OTRDODZBRkUwNjlFRTAxNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZsS+T9WRY9GHu17PDA12/xU4C Lt39RVEM6/OzvAi1yNRnK2cYdDQ5K5zpWvoVl4f3J7AIJ5NIAvm7dd/1zyBYkUmx PiVkHZPBbfcN6DqMRM5ov5j7griLNSmNII98+j3Tp+Tp2FPPahr8u9IFXbuJxt8j t0+myhXLjQwCdHwr+cVHy9L+d2w+q9VMKSGwn1TvPl0WGyDKrlr77xnrj1+H3Atn W9ohxqLw0E4+8ZTPwNms7ZzAnqvQahqkg72CAM5RbsUnQHiHiB3YvNNoSpmefgAB KqK9qRBvBf+sddupy+UYM7C5zaIUtpokZpXSvGF1X8rkaA1LthdcFtqXNdrNAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUbDpBr5uvr44Nle6ZTIav4GnuAWUwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzMDM5MmUzMTMyMzMyZTMy MzIzNzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzQzMTM5MzkzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAG174zANBgkqhkiG9w0BAQsFAAOCAQEAiBwwBn55b+vExdkWHxpFJWM9OL6C bftm0tVtKUCQ2vfdyViaQKdIchCWW5LBm8pUSfz6iGL8ekRnsLq2xqbKf9gggur6 IyxPVHtgVt2KenPxMeJHM9j5XXsuD4WHcMayB0wzGjGgZtP1gyh4iuYxwWmOHvnM 6NC5ohz0OsL0n7qWs/qjY3WLnFMuw4xfdBL4FfSvqbmTaF9QghLub5a/4ULO8YkW iKNgE4xSZoOx5IQU+VJ+pn/r7qTUSWGf7KZ8u8bFqUCGkKKRYLh6uTF99eQTSwtL raqA/mMKKqTN2iLEFpDX8a/j7fn9JrH+uZ3PqWtEt+3vFJmVIOvGg31oFA== -----END CERTIFICATE-----Generated at Mon Jan 19 14:28:03 2026 by rpki-client