This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133342e302f32342d3234203d3e2039333034.roa File: 3134352e37392e3133342e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: 3VlwwAzFlMTl6WFIhL3veTpciO28qNdPoUSZ4+2L3U0= Subject key identifier: 63:78:7F:58:49:3A:49:33:C1:D3:3E:D0:F4:03:07:93:5E:E9:35:7E Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 2521C19BF6A551331CF8DF1699FFF1CCF075E63D Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133342e302f32342d3234203d3e2039333034.roa Signing time: Sat 10 Jan 2026 12:31:31 +0000 ROA not before: Sat 10 Jan 2026 12:26:31 +0000 ROA not after: Sat 09 Jan 2027 12:31:31 +0000 asID: 9304 IP address blocks: 145.79.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:21:c1:9b:f6:a5:51:33:1c:f8:df:16:99:ff:f1:cc:f0:75:e6:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 10 12:26:31 2026 GMT Not After : Jan 9 12:31:31 2027 GMT Subject: CN=63787F58493A4933C1D33ED0F40307935EE9357E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:05:22:de:cb:e7:20:8e:35:09:a1:db:7f:f5: 99:d3:21:6c:9c:4f:34:86:a0:50:c4:b5:ad:6f:f3: 5e:8b:31:ba:a9:94:de:b3:98:32:0b:07:50:c5:2f: 6a:9c:8a:c4:28:5b:ad:ce:cb:0a:f2:b5:1e:d3:62: 88:26:a5:82:da:4d:b5:b5:0e:b6:45:51:49:68:58: 5e:81:c4:a4:fa:d1:00:97:be:e9:fd:a8:38:86:4d: 9e:97:2a:85:5c:4a:62:d9:d9:04:63:1b:b3:32:b2: e3:15:dd:66:fd:d8:ae:39:61:e9:10:9b:51:ee:35: 74:f2:e3:90:f4:38:9e:6c:6e:0a:ff:9f:b4:1f:51: 8d:79:10:2f:11:1e:cb:af:65:c4:ba:f5:f5:b3:bc: 9b:24:ee:fc:c0:26:8e:4f:4c:64:54:0e:2c:ba:76: e9:30:09:1b:a3:90:d3:c3:44:ea:6d:d7:17:ce:1f: 10:66:8a:68:bf:c9:a2:0b:12:29:49:49:02:a9:95: bd:91:7f:0d:86:26:19:45:02:a6:8c:08:6f:23:7d: 40:77:a3:86:8b:1b:b0:0a:5f:81:a1:37:25:3a:f9: 85:46:21:b0:62:84:c7:b1:8d:78:dd:a9:1d:9d:15: 0f:81:f3:d7:48:7d:90:f8:8e:9e:66:48:3f:20:dd: b8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:78:7F:58:49:3A:49:33:C1:D3:3E:D0:F4:03:07:93:5E:E9:35:7E X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133342e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.79.134.0/24 Signature Algorithm: sha256WithRSAEncryption 97:b5:ea:83:c0:04:0a:dc:fb:b5:53:89:f7:40:24:11:9e:54: 67:a9:2a:6c:a1:e8:ef:aa:25:61:1a:e1:42:a7:f9:82:2c:0c: 50:75:2a:0f:37:3f:1a:d7:ea:66:ff:87:64:8c:b2:47:a1:20: df:c3:8a:13:05:9a:b6:67:75:e8:a5:a4:18:ae:9c:f5:f9:69: bf:88:d6:ba:67:a9:b0:54:af:f2:65:a4:96:1e:0f:91:9e:3b: 96:3c:7b:00:bc:9d:41:ef:51:b7:7b:74:b1:1d:95:99:bd:46: 46:9e:eb:6e:96:b4:63:5c:e7:31:f5:4a:f3:83:d2:4b:71:d1: c6:5f:cb:4f:30:b3:80:12:3b:b7:1c:09:90:42:c3:c4:70:15: 29:9e:e2:e9:5a:23:84:38:f9:4f:af:5d:bf:df:e5:3e:02:ce: 58:2d:64:86:e4:c7:f1:41:d6:d9:d3:dd:97:24:89:f6:52:7e: 00:86:d3:db:0c:ae:6c:80:ae:9f:76:6b:eb:fa:4a:0e:82:37: fc:bb:f2:1b:f9:bc:30:a9:6b:c7:54:1a:71:fe:85:98:2c:d7: 78:a9:d1:37:fb:0e:bd:cc:f2:91:c6:a7:32:33:f4:95:17:65: 6a:d7:29:e8:03:ae:49:42:31:48:aa:fd:2d:2c:99:0b:47:7c: 8a:9e:99:14 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUJSHBm/alUTMc+N8Wmf/xzPB15j0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMTAxMjI2MzFaFw0yNzAxMDkxMjMxMzFaMDMxMTAvBgNV BAMTKDYzNzg3RjU4NDkzQTQ5MzNDMUQzM0VEMEY0MDMwNzkzNUVFOTM1N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXBSLey+cgjjUJodt/9ZnTIWyc TzSGoFDEta1v816LMbqplN6zmDILB1DFL2qcisQoW63OywrytR7TYogmpYLaTbW1 DrZFUUloWF6BxKT60QCXvun9qDiGTZ6XKoVcSmLZ2QRjG7MysuMV3Wb92K45YekQ m1HuNXTy45D0OJ5sbgr/n7QfUY15EC8RHsuvZcS69fWzvJsk7vzAJo5PTGRUDiy6 dukwCRujkNPDROpt1xfOHxBmimi/yaILEilJSQKplb2Rfw2GJhlFAqaMCG8jfUB3 o4aLG7AKX4GhNyU6+YVGIbBihMexjXjdqR2dFQ+B89dIfZD4jp5mSD8g3bg7AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUY3h/WEk6STPB0z7Q9AMHk17pNX4wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTMz MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMzMzAzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJFP hjANBgkqhkiG9w0BAQsFAAOCAQEAl7Xqg8AECtz7tVOJ90AkEZ5UZ6kqbKHo76ol YRrhQqf5giwMUHUqDzc/GtfqZv+HZIyyR6Eg38OKEwWatmd16KWkGK6c9flpv4jW umepsFSv8mWklh4PkZ47ljx7ALydQe9Rt3t0sR2Vmb1GRp7rbpa0Y1znMfVK84PS S3HRxl/LTzCzgBI7txwJkELDxHAVKZ7i6VojhDj5T69dv9/lPgLOWC1khuTH8UHW 2dPdlySJ9lJ+AIbT2wyubICun3Zr6/pKDoI3/LvyG/m8MKlrx1Qacf6FmCzXeKnR N/sOvczykcanMjP0lRdlatcp6AOuSUIxSKr9LSyZC0d8ip6ZFA== -----END CERTIFICATE-----Generated at Mon Jan 19 14:23:13 2026 by rpki-client