This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3133382e3139392e38302e302f32302d3234203d3e20323034313730.roa File: 3133382e3139392e38302e302f32302d3234203d3e20323034313730.roa (raw, json) Hash identifier: IFy+2apkq+drnrPHTZZO9tyXilAAllndarSzokBxSFU= Subject key identifier: 43:A1:5A:94:9F:A4:21:96:A1:38:A1:2C:2A:74:B7:6E:4C:5E:2D:54 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 2C4C2F3BDBCB7C0E10D8D7A211E67F6EEF34973E Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3133382e3139392e38302e302f32302d3234203d3e20323034313730.roa Signing time: Mon 29 Dec 2025 09:51:00 +0000 ROA not before: Mon 29 Dec 2025 09:46:00 +0000 ROA not after: Mon 28 Dec 2026 09:51:00 +0000 asID: 204170 IP address blocks: 138.199.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:4c:2f:3b:db:cb:7c:0e:10:d8:d7:a2:11:e6:7f:6e:ef:34:97:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:46:00 2025 GMT Not After : Dec 28 09:51:00 2026 GMT Subject: CN=43A15A949FA42196A138A12C2A74B76E4C5E2D54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:36:d1:ab:ff:02:bd:16:da:dd:af:e0:e3:f3: a5:28:22:f4:84:6c:27:6a:57:5e:50:30:5d:02:58: f8:ab:d0:6b:e6:3f:cc:bc:ed:69:90:5d:be:23:51: ae:cc:97:da:f8:1a:dc:d0:2e:35:37:0c:25:04:73: b7:4f:d7:b0:df:bf:b1:ef:33:9c:ad:3a:c7:cb:bb: 4b:1d:a1:a8:ae:dc:a8:79:a5:9f:3a:8c:ee:17:37: fa:03:c8:90:09:bd:1a:d7:d4:e4:42:41:07:71:d6: e7:bb:c4:b6:91:46:c8:64:e3:72:d1:13:ac:69:96: 8e:a4:03:d7:8e:a1:d1:3c:b6:77:52:1a:4e:f3:53: af:1c:11:d4:f2:1a:65:95:86:aa:91:6c:50:7d:1c: 47:3e:0b:ce:71:2e:a9:62:f6:f7:44:f2:51:61:ce: 3d:fc:22:6d:3b:e5:a2:de:91:1c:1c:60:5c:1a:04: 5f:58:d8:9e:ca:dd:0d:80:8c:e0:b1:62:00:13:5d: eb:5f:7e:54:96:01:6b:cd:d8:a1:ef:0e:ee:99:1f: f1:de:49:2c:45:d4:a1:c1:19:e3:c8:94:c5:b9:03: a1:63:d6:5a:7e:69:05:50:4f:60:50:9f:01:50:a7: e9:89:f8:48:4c:0c:50:84:5c:48:d8:38:73:ab:33: 13:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A1:5A:94:9F:A4:21:96:A1:38:A1:2C:2A:74:B7:6E:4C:5E:2D:54 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3133382e3139392e38302e302f32302d3234203d3e20323034313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.199.80.0/20 Signature Algorithm: sha256WithRSAEncryption 0c:7c:99:2e:d1:d1:15:a3:a5:7b:d7:60:05:53:b6:61:b4:4d: 13:44:2f:bc:48:60:33:0d:f3:bb:76:82:f7:bd:95:b1:71:4d: 75:5d:9c:4f:ea:49:9e:73:ab:e1:d6:1b:de:be:2b:da:25:66: f2:17:e4:91:d8:94:11:12:81:7b:c5:6a:75:b3:78:c2:d8:5e: e6:85:17:c3:f1:4b:99:e4:29:1c:e2:83:85:10:db:f4:59:c1: 99:89:da:73:52:96:86:f5:5a:be:3f:45:9a:44:df:f7:07:2a: 73:e4:5c:06:10:36:06:2b:88:bb:51:22:75:3a:ac:27:a8:f2: ad:98:c6:23:bc:19:82:f4:4c:55:23:4e:d4:42:4d:b1:e0:1c: bf:3f:8d:4f:14:30:12:93:f5:99:62:18:c0:89:5d:0b:0d:e7: c0:55:71:35:d8:e0:2c:ff:b0:49:ff:68:b3:62:45:0b:85:f3: 5c:24:61:f0:d7:33:b4:7b:9e:dc:ca:db:81:cd:7a:d8:3e:eb: 9c:02:da:e8:a3:b2:34:41:a5:d4:3c:26:f5:05:f5:95:4a:5c: 04:01:b7:7d:52:e6:90:38:87:b3:7f:62:59:d4:95:79:da:49: 8d:4a:f3:91:76:ea:f3:33:f4:dc:93:61:ae:4c:54:ab:3c:db: c7:33:fd:73 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIULEwvO9vLfA4Q2NeiEeZ/bu80lz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ2MDBaFw0yNjEyMjgwOTUxMDBaMDMxMTAvBgNV BAMTKDQzQTE1QTk0OUZBNDIxOTZBMTM4QTEyQzJBNzRCNzZFNEM1RTJENTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNNtGr/wK9Ftrdr+Dj86UoIvSE bCdqV15QMF0CWPir0GvmP8y87WmQXb4jUa7Ml9r4GtzQLjU3DCUEc7dP17Dfv7Hv M5ytOsfLu0sdoaiu3Kh5pZ86jO4XN/oDyJAJvRrX1ORCQQdx1ue7xLaRRshk43LR E6xplo6kA9eOodE8tndSGk7zU68cEdTyGmWVhqqRbFB9HEc+C85xLqli9vdE8lFh zj38Im075aLekRwcYFwaBF9Y2J7K3Q2AjOCxYgATXetfflSWAWvN2KHvDu6ZH/He SSxF1KHBGePIlMW5A6Fj1lp+aQVQT2BQnwFQp+mJ+EhMDFCEXEjYOHOrMxMBAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUQ6FalJ+kIZahOKEsKnS3bkxeLVQwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzMzM4MmUzMTM5MzkyZTM4 MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjMwMzQzMTM3MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BASKx1AwDQYJKoZIhvcNAQELBQADggEBAAx8mS7R0RWjpXvXYAVTtmG0TRNEL7xI YDMN87t2gve9lbFxTXVdnE/qSZ5zq+HWG96+K9olZvIX5JHYlBESgXvFanWzeMLY XuaFF8PxS5nkKRzig4UQ2/RZwZmJ2nNSlob1Wr4/RZpE3/cHKnPkXAYQNgYriLtR InU6rCeo8q2YxiO8GYL0TFUjTtRCTbHgHL8/jU8UMBKT9ZliGMCJXQsN58BVcTXY 4Cz/sEn/aLNiRQuF81wkYfDXM7R7ntzK24HNetg+65wC2uijsjRBpdQ8JvUF9ZVK XAQBt31S5pA4h7N/YlnUlXnaSY1K85F26vMz9NyTYa5MVKs828cz/XM= -----END CERTIFICATE-----Generated at Mon Jan 19 14:25:57 2026 by rpki-client