This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3234302e302f32302d3332203d3e203531313637.roa File: 3130392e3132332e3234302e302f32302d3332203d3e203531313637.roa (raw, json) Hash identifier: vus2eGkGk6nlN4taEiFWn9aNSTX49E1ku0x562546p4= Subject key identifier: 6D:E3:63:CC:EF:35:E5:0B:A4:D0:86:C8:5B:56:31:28:85:AD:5E:C0 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 7F01289E5D1DCBFD2A4751DC261958679C45537D Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3234302e302f32302d3332203d3e203531313637.roa Signing time: Mon 29 Dec 2025 09:51:02 +0000 ROA not before: Mon 29 Dec 2025 09:46:02 +0000 ROA not after: Mon 28 Dec 2026 09:51:02 +0000 asID: 51167 IP address blocks: 109.123.240.0/20 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:01:28:9e:5d:1d:cb:fd:2a:47:51:dc:26:19:58:67:9c:45:53:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:46:02 2025 GMT Not After : Dec 28 09:51:02 2026 GMT Subject: CN=6DE363CCEF35E50BA4D086C85B56312885AD5EC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0c:40:d6:53:56:34:3b:20:4a:a9:ae:78:8c: b3:4d:68:d9:2d:f4:e0:ba:0b:84:d3:0f:ea:14:21: a5:44:60:4d:3c:ef:43:e0:d9:ce:5c:d6:75:42:1a: d5:9b:c3:98:47:ec:9f:90:8d:37:e6:62:94:12:35: d7:b8:aa:37:4d:a1:e1:59:d0:97:77:0e:d9:0d:c7: 4c:31:3e:5b:e0:e0:aa:08:98:e4:45:bb:89:0e:8e: cd:c6:15:79:67:3a:4e:ee:fa:9d:13:ea:54:e5:e0: df:03:ff:72:68:00:e8:47:c9:15:fb:dc:99:7f:45: 7d:37:ca:7a:27:f9:29:fb:23:1c:75:b4:f4:b9:f2: 57:80:06:86:51:03:ae:b8:4e:87:9b:3b:5b:70:d3: 1e:23:15:d8:bb:32:06:1f:13:18:83:ea:72:60:93: ba:95:69:e7:b4:62:a9:44:92:0a:96:03:36:44:29: 46:75:c2:c6:0f:93:d5:24:8a:05:b9:42:28:0d:d0: 32:fd:48:6f:80:fb:c5:ae:49:81:c6:70:c3:90:1d: d2:10:5f:10:5e:68:36:cb:b3:2d:cc:ac:d9:9e:09: 2c:48:77:cf:81:fa:a4:4c:ab:60:e9:e0:eb:47:18: 54:5e:0b:9c:ea:a7:59:61:48:aa:3f:b2:87:cc:3a: 07:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E3:63:CC:EF:35:E5:0B:A4:D0:86:C8:5B:56:31:28:85:AD:5E:C0 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3234302e302f32302d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.123.240.0/20 Signature Algorithm: sha256WithRSAEncryption 85:ad:4f:c9:77:39:6d:ba:f5:c3:df:99:d9:ce:6b:e0:4f:cf: ed:4d:b1:77:15:3f:a0:a2:25:45:aa:80:81:96:aa:3f:83:9c: d5:b1:72:63:52:7b:51:56:23:77:79:29:71:3a:63:0d:3b:0c: ec:93:7f:10:fb:5a:23:40:cd:ed:b9:ec:04:4b:2c:45:8b:6f: 67:a5:e5:4b:76:ac:3a:30:1a:40:cb:b9:1c:d9:d4:f6:a5:95: 34:73:0f:72:da:87:f3:92:f0:eb:18:1f:88:c7:69:d1:9e:b1: 92:82:ad:65:a1:f2:bb:46:6a:fa:a0:ed:6d:ba:bb:7f:64:9e: ea:1a:f0:d3:d6:ff:9f:52:74:8b:2b:e8:de:2e:ff:1c:cd:f0: 12:d1:e0:74:f2:0b:06:d7:93:26:d9:5a:b3:22:c9:45:3e:10: d0:2d:f2:a6:f3:18:d3:ed:46:7e:11:a5:ef:d3:af:9b:69:7f: a9:e6:e7:6e:07:70:03:5a:d2:1d:bb:e8:e5:73:81:1f:d8:aa: 21:b2:d7:37:cc:db:c3:89:e1:cb:9a:27:77:19:1f:77:ae:b5: 8c:3f:7c:f6:e7:c1:58:99:ea:60:73:b2:15:58:95:8f:55:fb: 82:f3:f3:3a:b7:80:72:ce:10:e9:0e:7a:69:b0:53:fd:64:7a: e8:e6:31:2f -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUfwEonl0dy/0qR1HcJhlYZ5xFU30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ2MDJaFw0yNjEyMjgwOTUxMDJaMDMxMTAvBgNV BAMTKDZERTM2M0NDRUYzNUU1MEJBNEQwODZDODVCNTYzMTI4ODVBRDVFQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDDEDWU1Y0OyBKqa54jLNNaNkt 9OC6C4TTD+oUIaVEYE0870Pg2c5c1nVCGtWbw5hH7J+QjTfmYpQSNde4qjdNoeFZ 0Jd3DtkNx0wxPlvg4KoImORFu4kOjs3GFXlnOk7u+p0T6lTl4N8D/3JoAOhHyRX7 3Jl/RX03ynon+Sn7Ixx1tPS58leABoZRA664ToebO1tw0x4jFdi7MgYfExiD6nJg k7qVaee0YqlEkgqWAzZEKUZ1wsYPk9UkigW5QigN0DL9SG+A+8WuSYHGcMOQHdIQ XxBeaDbLsy3MrNmeCSxId8+B+qRMq2Dp4OtHGFReC5zqp1lhSKo/sofMOgdDAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUbeNjzO815Quk0IbIW1YxKIWtXsAwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzMDM5MmUzMTMyMzMyZTMy MzQzMDJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BARte/AwDQYJKoZIhvcNAQELBQADggEBAIWtT8l3OW269cPfmdnOa+BPz+1NsXcV P6CiJUWqgIGWqj+DnNWxcmNSe1FWI3d5KXE6Yw07DOyTfxD7WiNAze257ARLLEWL b2el5Ut2rDowGkDLuRzZ1PallTRzD3Lah/OS8OsYH4jHadGesZKCrWWh8rtGavqg 7W26u39knuoa8NPW/59SdIsr6N4u/xzN8BLR4HTyCwbXkybZWrMiyUU+ENAt8qbz GNPtRn4Rpe/Tr5tpf6nm524HcANa0h276OVzgR/YqiGy1zfM28OJ4cuaJ3cZH3eu tYw/fPbnwViZ6mBzshVYlY9V+4Lz8zq3gHLOEOkOemmwU/1keujmMS8= -----END CERTIFICATE-----Generated at Mon Jan 19 14:26:12 2026 by rpki-client