This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3233322e302f32312d3332203d3e20313431393935.roa File: 3130392e3132332e3233322e302f32312d3332203d3e20313431393935.roa (raw, json) Hash identifier: XUlvHM10HGQSGU4gROCnCPEfNkyFdP8aQvnYKRhmiuk= Subject key identifier: 78:B9:0D:07:5B:10:31:54:31:EC:11:8F:4F:BB:21:B2:04:82:36:52 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 4B0888C043232326ED5C38C3543520368EA7C2AE Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3233322e302f32312d3332203d3e20313431393935.roa Signing time: Mon 29 Dec 2025 09:51:01 +0000 ROA not before: Mon 29 Dec 2025 09:46:01 +0000 ROA not after: Mon 28 Dec 2026 09:51:01 +0000 asID: 141995 IP address blocks: 109.123.232.0/21 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:08:88:c0:43:23:23:26:ed:5c:38:c3:54:35:20:36:8e:a7:c2:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:46:01 2025 GMT Not After : Dec 28 09:51:01 2026 GMT Subject: CN=78B90D075B10315431EC118F4FBB21B204823652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:12:55:05:82:79:f0:35:19:ba:85:8e:ea: cd:b1:de:96:4f:d4:a7:96:f1:70:e6:36:c3:10:ba: 0e:33:e2:40:2b:e6:1d:30:d4:df:e9:da:b0:30:d2: 8e:34:11:be:82:72:08:e0:4d:96:3f:8a:dc:d5:8d: 20:ce:b3:af:30:03:68:65:dd:7f:b4:6a:af:72:08: 0c:ef:e0:6d:ba:aa:08:0f:23:d8:f4:c4:4f:77:f7: 1e:43:04:5c:ed:d5:8d:4c:3d:bd:62:9e:4d:de:ef: 31:30:62:b0:5f:ac:48:4e:07:7f:58:04:d4:86:3a: 32:79:a0:0c:1b:d2:43:84:cc:17:c5:3d:03:c8:ea: 43:47:a6:6b:8b:04:35:b3:95:79:9e:a6:e4:a8:2f: 96:bd:ea:02:a1:48:29:f3:df:91:ba:03:4c:52:ec: da:a0:26:8e:81:31:95:71:6d:62:bb:44:b8:b6:37: 7e:b7:f3:4e:e5:fe:d2:ae:41:f8:aa:83:34:b5:aa: 1e:5e:dd:83:00:43:a4:af:62:4c:c2:4c:00:7a:5c: 18:c9:56:1d:39:4e:33:9d:e0:a5:45:ca:58:34:2b: 53:a4:13:c3:89:29:b7:99:e3:4d:ba:f8:8a:0e:64: 82:07:89:d9:c7:cc:81:74:05:e4:ff:35:e0:d5:19: a1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B9:0D:07:5B:10:31:54:31:EC:11:8F:4F:BB:21:B2:04:82:36:52 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3233322e302f32312d3332203d3e20313431393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.123.232.0/21 Signature Algorithm: sha256WithRSAEncryption 21:35:ca:58:8a:5f:10:cf:e8:d2:7d:33:41:21:b8:62:ab:f2: 72:f5:e4:c4:90:57:9b:61:da:f7:1b:28:b5:8f:45:87:5d:b0: 98:78:9e:98:cc:7f:1d:59:3a:f4:3d:9f:8b:41:35:ca:82:39: ab:49:92:4b:d2:c2:57:b3:ee:92:7f:84:72:6b:89:e1:e9:43: 6d:9a:23:22:e2:b4:cd:e1:3f:76:c4:d2:df:7f:2b:f3:dc:18: 0f:62:fb:b1:c0:4c:64:23:9e:02:9b:af:3f:60:ec:df:cb:a0: 6f:5f:a4:a9:54:97:33:a1:ad:98:f2:4c:d7:71:59:3e:d8:69: b6:ec:28:b2:ed:68:74:c2:db:57:bb:c3:d5:c9:7a:c0:e6:2c: b2:f2:4a:96:98:bc:08:13:60:c4:a1:a5:77:d8:58:58:aa:b2: b8:ed:54:42:6f:f1:32:d6:c8:73:07:7e:14:50:ad:b7:b1:38: 24:5d:fb:0c:3b:f9:cd:bd:a1:a4:de:29:eb:61:0f:e6:f7:32: ea:e6:a0:9c:92:21:9c:6d:a1:11:41:75:83:01:9b:a0:0c:dc: d1:55:9b:37:19:8b:8f:7c:a3:04:35:8f:49:ad:42:23:72:ba: 39:1b:ab:d1:51:70:49:22:99:a3:95:57:7f:cb:01:51:f7:17: ab:f5:82:15 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUSwiIwEMjIybtXDjDVDUgNo6nwq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ2MDFaFw0yNjEyMjgwOTUxMDFaMDMxMTAvBgNV BAMTKDc4QjkwRDA3NUIxMDMxNTQzMUVDMTE4RjRGQkIyMUIyMDQ4MjM2NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2XhJVBYJ58DUZuoWO6s2x3pZP 1KeW8XDmNsMQug4z4kAr5h0w1N/p2rAw0o40Eb6CcgjgTZY/itzVjSDOs68wA2hl 3X+0aq9yCAzv4G26qggPI9j0xE939x5DBFzt1Y1MPb1ink3e7zEwYrBfrEhOB39Y BNSGOjJ5oAwb0kOEzBfFPQPI6kNHpmuLBDWzlXmepuSoL5a96gKhSCnz35G6A0xS 7NqgJo6BMZVxbWK7RLi2N363807l/tKuQfiqgzS1qh5e3YMAQ6SvYkzCTAB6XBjJ Vh05TjOd4KVFylg0K1OkE8OJKbeZ4026+IoOZIIHidnHzIF0BeT/NeDVGaFpAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUeLkNB1sQMVQx7BGPT7shsgSCNlIwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzMDM5MmUzMTMyMzMyZTMy MzMzMjJlMzAyZjMyMzEyZDMzMzIyMDNkM2UyMDMxMzQzMTM5MzkzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA2176DANBgkqhkiG9w0BAQsFAAOCAQEAITXKWIpfEM/o0n0zQSG4YqvycvXk xJBXm2Ha9xsotY9Fh12wmHiemMx/HVk69D2fi0E1yoI5q0mSS9LCV7Pukn+EcmuJ 4elDbZojIuK0zeE/dsTS338r89wYD2L7scBMZCOeApuvP2Ds38ugb1+kqVSXM6Gt mPJM13FZPthptuwosu1odMLbV7vD1cl6wOYssvJKlpi8CBNgxKGld9hYWKqyuO1U Qm/xMtbIcwd+FFCtt7E4JF37DDv5zb2hpN4p62EP5vcy6uagnJIhnG2hEUF1gwGb oAzc0VWbNxmLj3yjBDWPSa1CI3K6ORur0VFwSSKZo5VXf8sBUfcXq/WCFQ== -----END CERTIFICATE-----Generated at Mon Jan 19 14:28:05 2026 by rpki-client