This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134312e302f32342d3234203d3e20383334.roa File: 3134352e37392e3134312e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: r+ARMZl7GJD3+YGcz09hQ5qjogkLnKxjY8/z2ymAKuU= Subject key identifier: D3:10:6B:C4:62:28:F2:1D:EC:2F:09:88:99:C5:E4:E2:EF:46:D3:36 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 68408DF3705605053E2842F5F391D6EB97030A38 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134312e302f32342d3234203d3e20383334.roa Signing time: Mon 12 Jan 2026 11:36:49 +0000 ROA not before: Mon 12 Jan 2026 11:31:49 +0000 ROA not after: Mon 11 Jan 2027 11:36:49 +0000 asID: 834 IP address blocks: 145.79.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:40:8d:f3:70:56:05:05:3e:28:42:f5:f3:91:d6:eb:97:03:0a:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 12 11:31:49 2026 GMT Not After : Jan 11 11:36:49 2027 GMT Subject: CN=D3106BC46228F21DEC2F098899C5E4E2EF46D336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f0:4f:57:1f:40:07:ee:83:b0:e3:cc:42:ea: ac:66:54:69:4b:05:d1:f0:e3:ad:87:46:8c:92:d8: 75:90:0d:ce:bb:97:b2:4c:2b:be:6c:e3:ca:17:48: 55:c9:bb:53:6d:ed:d3:42:49:b4:06:27:fc:b3:3f: b0:ad:75:c2:01:32:8c:ef:75:8b:16:5a:6c:56:da: be:c3:8e:aa:4a:da:b8:f0:45:a6:7e:a1:f7:19:15: 3c:0a:e7:3a:37:fe:7a:f3:e8:41:17:f4:b7:54:ef: 60:3a:0b:25:99:6d:65:3a:1e:20:87:1a:24:db:fa: ce:00:ba:fa:7d:ce:8a:67:7f:48:b2:2f:02:91:09: 55:b8:06:20:08:28:02:31:68:b7:84:78:20:48:17: b2:63:3c:2d:de:31:4b:62:8a:f8:e5:0b:75:60:3f: 05:f1:3e:00:13:a9:b2:bf:a0:b6:b4:ee:21:49:a6: 08:23:0b:7c:41:77:f3:c6:2a:67:f9:08:ab:f3:bf: 35:56:bb:28:99:c2:60:d4:a9:5d:1e:e1:74:0d:7d: fd:f7:9e:41:9f:ab:bf:f2:b4:a3:57:a4:cc:dc:52: a2:35:15:f4:02:55:65:7a:ff:e9:44:15:2d:a8:98: b8:83:af:a8:c2:71:07:7a:8f:ad:3b:55:25:f0:d8: 3c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:10:6B:C4:62:28:F2:1D:EC:2F:09:88:99:C5:E4:E2:EF:46:D3:36 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134312e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.79.141.0/24 Signature Algorithm: sha256WithRSAEncryption 04:87:fd:ab:10:4c:d2:22:01:92:7f:86:2f:03:1b:e4:9c:0c: b9:e8:46:4a:08:7a:11:88:e2:7c:5c:23:74:f0:a2:0c:e2:83: 6d:77:32:30:48:b5:55:78:ab:13:36:f2:98:bb:36:a6:fb:5c: cf:59:74:1a:31:f7:40:fb:66:00:10:97:05:53:63:dc:b9:8a: cf:20:3a:1f:de:ff:1d:d3:7b:d0:42:cb:ce:1c:69:04:f8:a8: 49:23:5a:28:ca:f4:5b:e8:08:e1:c8:c2:d6:d1:2f:1e:84:55: 89:ad:ee:f3:af:c2:f1:c2:c7:b1:cf:2c:f2:69:c7:8e:f5:f9: 24:2d:75:55:43:a7:c8:d0:c6:94:3f:d7:b8:b8:cb:2f:3e:76: 6d:67:59:6a:68:43:9a:25:8c:c1:53:53:3f:6e:12:87:3c:3c: 68:55:ac:52:6f:7a:91:60:80:92:5a:62:a9:05:38:d0:90:70: 0b:24:1f:07:19:e1:09:1e:15:77:84:2e:7c:44:a2:ff:b0:ec: 59:13:40:d9:f6:30:14:e0:60:6c:ce:6f:9e:98:d1:92:29:a1: d5:ba:4e:ac:21:60:05:63:cd:e6:8f:d2:ff:52:4e:50:0c:d3: fb:79:4d:9a:10:c4:e9:95:a4:7b:92:15:5c:89:18:28:c4:26: d5:06:4d:ce -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUaECN83BWBQU+KEL185HW65cDCjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMTIxMTMxNDlaFw0yNzAxMTExMTM2NDlaMDMxMTAvBgNV BAMTKEQzMTA2QkM0NjIyOEYyMURFQzJGMDk4ODk5QzVFNEUyRUY0NkQzMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs8E9XH0AH7oOw48xC6qxmVGlL BdHw462HRoyS2HWQDc67l7JMK75s48oXSFXJu1Nt7dNCSbQGJ/yzP7CtdcIBMozv dYsWWmxW2r7DjqpK2rjwRaZ+ofcZFTwK5zo3/nrz6EEX9LdU72A6CyWZbWU6HiCH GiTb+s4Auvp9zopnf0iyLwKRCVW4BiAIKAIxaLeEeCBIF7JjPC3eMUtiivjlC3Vg PwXxPgATqbK/oLa07iFJpggjC3xBd/PGKmf5CKvzvzVWuyiZwmDUqV0e4XQNff33 nkGfq7/ytKNXpMzcUqI1FfQCVWV6/+lEFS2omLiDr6jCcQd6j607VSXw2DzRAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU0xBrxGIo8h3sLwmImcXk4u9G0zYwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM0 MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACRT40w DQYJKoZIhvcNAQELBQADggEBAASH/asQTNIiAZJ/hi8DG+ScDLnoRkoIehGI4nxc I3Twogzig213MjBItVV4qxM28pi7Nqb7XM9ZdBox90D7ZgAQlwVTY9y5is8gOh/e /x3Te9BCy84caQT4qEkjWijK9FvoCOHIwtbRLx6EVYmt7vOvwvHCx7HPLPJpx471 +SQtdVVDp8jQxpQ/17i4yy8+dm1nWWpoQ5oljMFTUz9uEoc8PGhVrFJvepFggJJa YqkFONCQcAskHwcZ4QkeFXeELnxEov+w7FkTQNn2MBTgYGzOb56Y0ZIpodW6Tqwh YAVjzeaP0v9STlAM0/t5TZoQxOmVpHuSFVyJGCjEJtUGTc4= -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:37 2026 by rpki-client