This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133392e302f32342d3234203d3e2032393134.roa File: 3134352e37392e3133392e302f32342d3234203d3e2032393134.roa (raw, json) Hash identifier: soI+efXY1ma+3wQQOhJHD33r7CEINLVRLN07dVm19f0= Subject key identifier: 9C:EC:84:A0:5C:76:77:AD:38:D2:C5:B5:2D:73:80:AB:E3:C2:52:E7 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 164E1BA36872C55D15EF46F58E923BCDC7241306 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133392e302f32342d3234203d3e2032393134.roa Signing time: Mon 22 Dec 2025 13:30:48 +0000 ROA not before: Mon 22 Dec 2025 13:25:48 +0000 ROA not after: Mon 21 Dec 2026 13:30:48 +0000 asID: 2914 IP address blocks: 145.79.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:4e:1b:a3:68:72:c5:5d:15:ef:46:f5:8e:92:3b:cd:c7:24:13:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 22 13:25:48 2025 GMT Not After : Dec 21 13:30:48 2026 GMT Subject: CN=9CEC84A05C7677AD38D2C5B52D7380ABE3C252E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3a:30:c3:9e:ee:b5:f6:5d:75:70:60:08:1e: ce:e3:1c:97:88:69:03:ff:c4:5d:e9:b5:1c:07:28: cc:79:ec:fb:d4:47:9c:35:4a:f9:c5:1f:eb:a5:6f: 86:bd:1f:c1:d4:d7:35:5e:89:74:d3:a0:3b:b6:61: a2:b8:f7:c5:53:f6:d9:c0:55:eb:a3:44:25:5f:03: 5f:5e:c4:85:7a:5b:07:7c:e7:73:21:23:39:e4:ee: 82:0a:8a:65:ac:d1:b9:31:bf:1a:79:c0:74:c9:e3: 74:05:b4:6c:b5:64:1c:0d:ce:cb:40:90:f7:3c:19: 3c:be:85:d1:82:26:79:b1:b5:60:c0:8c:52:2c:dd: f1:79:e3:cb:25:f0:a8:07:d9:0e:ae:9a:26:cb:7e: 74:bf:50:5b:5f:e3:65:82:55:b4:23:8b:79:b3:6b: 93:13:fc:41:38:f5:88:7a:c0:57:af:9c:6c:d2:e0: 0b:6e:f9:4b:0d:0b:6f:88:4a:b5:cf:88:3f:f4:42: ba:1f:6a:99:64:d7:84:5d:cc:d3:20:e0:69:21:50: b7:37:a6:25:44:97:ec:1a:5b:60:c4:34:4e:cb:0b: 62:14:03:a8:67:94:95:b5:94:57:02:b6:bc:50:5d: e1:c0:82:07:9f:f4:ce:ea:b5:6c:31:23:77:56:c3: 03:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EC:84:A0:5C:76:77:AD:38:D2:C5:B5:2D:73:80:AB:E3:C2:52:E7 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133392e302f32342d3234203d3e2032393134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.79.139.0/24 Signature Algorithm: sha256WithRSAEncryption 29:3f:e4:b0:93:ee:9f:13:d1:a4:e2:29:93:bd:56:0e:8e:2e: 7d:72:db:12:75:20:ba:87:af:94:8e:e9:d6:0b:77:11:35:14: 09:a2:2b:77:df:22:17:61:ae:25:3b:ce:da:bb:41:c6:a5:af: 14:b9:33:04:87:d7:aa:4b:41:92:93:39:32:cf:af:0b:49:e8: bb:8e:e6:dd:c9:b9:24:91:20:7f:0c:b6:33:f2:97:22:37:c9: 44:6c:0d:b5:44:29:f9:97:97:95:97:cb:8f:dc:f8:7f:86:30: 19:c6:ee:75:07:e4:18:68:fa:38:4a:09:a8:fd:25:10:43:3b: b2:bf:e3:13:1e:bb:72:28:82:69:9e:c6:88:b1:a6:b6:91:cd: d5:15:67:eb:2b:1e:7c:e6:2d:b2:a2:40:98:4d:8c:cd:50:62: a2:8f:7d:07:4d:38:43:98:4e:49:cb:5e:08:e4:de:2b:a3:78: 26:c0:3a:60:a8:b9:91:35:ae:64:4f:e8:c0:ce:c0:1d:5a:04: 68:ce:c0:05:f2:87:22:76:06:0c:46:fc:5a:2f:bf:22:34:ae: 4d:f9:3b:44:e2:d3:b8:0b:84:2a:b4:e1:36:e3:8c:4c:96:42: 59:bc:0f:10:23:52:99:2a:9f:46:c7:78:ec:1c:80:d6:27:65: 18:a2:c4:a3 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUFk4bo2hyxV0V70b1jpI7zcckEwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjIxMzI1NDhaFw0yNjEyMjExMzMwNDhaMDMxMTAvBgNV BAMTKDlDRUM4NEEwNUM3Njc3QUQzOEQyQzVCNTJENzM4MEFCRTNDMjUyRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8OjDDnu619l11cGAIHs7jHJeI aQP/xF3ptRwHKMx57PvUR5w1SvnFH+ulb4a9H8HU1zVeiXTToDu2YaK498VT9tnA VeujRCVfA19exIV6Wwd853MhIznk7oIKimWs0bkxvxp5wHTJ43QFtGy1ZBwNzstA kPc8GTy+hdGCJnmxtWDAjFIs3fF548sl8KgH2Q6umibLfnS/UFtf42WCVbQji3mz a5MT/EE49Yh6wFevnGzS4Atu+UsNC2+ISrXPiD/0Qrofaplk14RdzNMg4GkhULc3 piVEl+waW2DENE7LC2IUA6hnlJW1lFcCtrxQXeHAggef9M7qtWwxI3dWwwMrAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUnOyEoFx2d6040sW1LXOAq+PCUucwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTMz MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJFP izANBgkqhkiG9w0BAQsFAAOCAQEAKT/ksJPunxPRpOIpk71WDo4ufXLbEnUguoev lI7p1gt3ETUUCaIrd98iF2GuJTvO2rtBxqWvFLkzBIfXqktBkpM5Ms+vC0nou47m 3cm5JJEgfwy2M/KXIjfJRGwNtUQp+ZeXlZfLj9z4f4YwGcbudQfkGGj6OEoJqP0l EEM7sr/jEx67ciiCaZ7GiLGmtpHN1RVn6ysefOYtsqJAmE2MzVBioo99B004Q5hO ScteCOTeK6N4JsA6YKi5kTWuZE/owM7AHVoEaM7ABfKHInYGDEb8Wi+/IjSuTfk7 ROLTuAuEKrThNuOMTJZCWbwPECNSmSqfRsd47ByA1idlGKLEow== -----END CERTIFICATE-----Generated at Thu Jan 8 00:16:38 2026 by rpki-client