This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31342e3134362e302f32332d3234203d3e203437353833.roa File: 3134352e31342e3134362e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: f8tzVEReJBIztkuoe8tVjh+sdzSS9pXybwfUQJ2rBaU= Subject key identifier: CD:61:13:24:0E:00:63:49:30:04:E6:91:C1:78:B6:E8:BB:53:7D:D6 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 6AC919B0AB6C1A8A5F2D698A85172FE58B2AFCBC Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31342e3134362e302f32332d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:52 +0000 ROA not before: Mon 29 Dec 2025 09:45:52 +0000 ROA not after: Mon 28 Dec 2026 09:50:52 +0000 asID: 47583 IP address blocks: 145.14.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c9:19:b0:ab:6c:1a:8a:5f:2d:69:8a:85:17:2f:e5:8b:2a:fc:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:52 2025 GMT Not After : Dec 28 09:50:52 2026 GMT Subject: CN=CD6113240E0063493004E691C178B6E8BB537DD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:04:36:ad:6d:61:39:2f:ba:1c:b3:e0:3c:a3: 8e:d5:64:2f:d8:e5:76:01:b5:0f:1a:d5:f2:94:02: c5:69:9d:3d:1e:5e:04:61:ba:ef:28:79:6c:37:5e: d2:2a:5e:7c:20:e8:f4:2e:c7:07:3d:65:7f:e0:ab: 8c:c5:f1:fe:f5:9c:77:ba:36:0f:2b:b7:fb:81:d3: d3:46:b6:93:0a:b4:99:61:90:0c:af:ec:63:59:6a: 1f:f5:33:3b:43:ec:ec:df:e5:cb:dc:03:58:a4:7a: 1a:24:22:f7:a2:60:d2:db:70:b3:4d:c1:e4:34:d3: 81:8b:a2:35:0a:3b:31:1d:a2:28:35:16:e5:33:0f: f8:73:a4:62:f2:2d:a0:1e:f5:50:32:96:95:15:ee: a1:61:5b:ef:f0:a8:f3:29:9a:fe:ad:05:1f:8f:4f: 5d:49:88:2f:f0:41:be:bb:57:90:c0:60:d2:c1:a9: 4d:9b:cd:d3:21:1e:cf:27:ec:cd:18:47:0d:33:ce: b8:82:46:d1:19:0c:4a:cb:a5:1f:14:c7:f0:b0:a0: 72:f3:b9:0d:7c:9a:e1:7c:46:86:2a:63:e5:dd:00: c2:27:50:66:f2:42:f8:68:0e:15:33:01:33:7f:4c: 6f:46:ed:ca:7c:64:18:d7:82:a9:c0:6e:b0:66:e2: 71:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:61:13:24:0E:00:63:49:30:04:E6:91:C1:78:B6:E8:BB:53:7D:D6 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31342e3134362e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.14.146.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:bf:64:c1:16:cf:34:cc:64:be:86:5e:f1:f5:4a:a1:c1:34: dc:64:0c:7f:cf:e0:79:7d:88:99:89:64:b8:c2:44:3a:a3:d1: da:dc:96:ee:cc:bb:bb:da:bd:0d:c7:dd:96:89:6b:ee:62:a1: 9a:cc:52:43:9f:a4:38:74:a4:eb:f5:da:ea:81:5a:4b:12:8c: a7:c1:11:1c:64:6e:67:6b:f6:2f:a5:6e:39:c4:0f:b7:72:d6: 7e:f3:cd:a8:bc:67:69:b8:cc:c4:3c:c1:d3:e0:76:fb:99:ae: 42:45:78:87:e4:0c:43:e5:3b:f1:34:75:07:cc:f9:68:25:d0: 10:0d:c9:1c:17:83:a0:8b:84:62:df:3f:70:46:b4:c6:1b:65: 06:41:66:f8:48:f4:0f:93:8b:9a:0e:95:e8:ff:88:af:32:b3: f3:1f:8d:14:d0:1a:30:98:0e:53:2e:92:ed:f6:84:dc:47:81: 26:f0:77:b9:78:26:0a:ed:11:b5:bf:3e:37:42:68:5c:7b:1f: 43:85:2b:cf:f1:7d:44:f0:fa:6d:0c:b0:e0:81:db:23:14:ab: 4e:1f:2e:31:02:2a:e3:b9:e7:a7:0f:d9:42:93:f0:ae:f2:ad: 3c:79:7c:81:e6:05:d8:95:ab:08:89:1b:c0:89:f8:65:4e:9f: c8:44:cf:4a -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUaskZsKtsGopfLWmKhRcv5Ysq/LwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTJaFw0yNjEyMjgwOTUwNTJaMDMxMTAvBgNV BAMTKENENjExMzI0MEUwMDYzNDkzMDA0RTY5MUMxNzhCNkU4QkI1MzdERDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjBDatbWE5L7ocs+A8o47VZC/Y 5XYBtQ8a1fKUAsVpnT0eXgRhuu8oeWw3XtIqXnwg6PQuxwc9ZX/gq4zF8f71nHe6 Ng8rt/uB09NGtpMKtJlhkAyv7GNZah/1MztD7Ozf5cvcA1ikehokIveiYNLbcLNN weQ004GLojUKOzEdoig1FuUzD/hzpGLyLaAe9VAylpUV7qFhW+/wqPMpmv6tBR+P T11JiC/wQb67V5DAYNLBqU2bzdMhHs8n7M0YRw0zzriCRtEZDErLpR8Ux/CwoHLz uQ18muF8RoYqY+XdAMInUGbyQvhoDhUzATN/TG9G7cp8ZBjXgqnAbrBm4nHhAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUzWETJA4AY0kwBOaRwXi26LtTfdYwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzMTM0MmUzMTM0 MzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB kQ6SMA0GCSqGSIb3DQEBCwUAA4IBAQB+v2TBFs80zGS+hl7x9UqhwTTcZAx/z+B5 fYiZiWS4wkQ6o9Ha3JbuzLu72r0Nx92WiWvuYqGazFJDn6Q4dKTr9drqgVpLEoyn wREcZG5na/YvpW45xA+3ctZ+882ovGdpuMzEPMHT4Hb7ma5CRXiH5AxD5TvxNHUH zPloJdAQDckcF4Ogi4Ri3z9wRrTGG2UGQWb4SPQPk4uaDpXo/4ivMrPzH40U0Bow mA5TLpLt9oTcR4Em8He5eCYK7RG1vz43Qmhcex9DhSvP8X1E8PptDLDggdsjFKtO Hy4xAirjueenD9lCk/Cu8q08eXyB5gXYlasIiRvAifhlTp/IRM9K -----END CERTIFICATE-----Generated at Mon Jan 19 14:23:12 2026 by rpki-client