This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134342e302f32332d3233203d3e20383334.roa File: 3134352e37392e3134342e302f32332d3233203d3e20383334.roa (raw, json) Hash identifier: YYc3eQF3JLIcbJ28m2nuS0jB75Y2JemR0zqxgjR+lFA= Subject key identifier: 03:DD:07:8C:9D:00:45:10:C5:0C:DF:88:13:FB:90:FA:2D:69:4B:CD Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 41A761C0A677C5CB9EF324B82B0606E6671A7F45 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134342e302f32332d3233203d3e20383334.roa Signing time: Mon 12 Jan 2026 11:37:31 +0000 ROA not before: Mon 12 Jan 2026 11:32:31 +0000 ROA not after: Mon 11 Jan 2027 11:37:31 +0000 asID: 834 IP address blocks: 145.79.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a7:61:c0:a6:77:c5:cb:9e:f3:24:b8:2b:06:06:e6:67:1a:7f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 12 11:32:31 2026 GMT Not After : Jan 11 11:37:31 2027 GMT Subject: CN=03DD078C9D004510C50CDF8813FB90FA2D694BCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:78:8a:01:fb:91:10:de:bb:a4:af:ba:dd:4e: d0:8d:b6:f7:50:48:86:d7:c3:c0:d8:18:0b:b5:59: 42:22:34:27:5c:c3:d5:8d:c4:d8:f6:f4:36:d2:67: 89:ef:df:9f:ab:88:dd:7b:ba:76:26:d3:71:16:c2: 3a:92:84:ff:00:d4:b5:b7:b2:6f:63:39:b8:42:82: c9:a3:59:9a:60:30:aa:ca:52:13:91:6a:2f:50:fd: 63:4f:42:35:d7:96:7e:a8:0b:80:c0:3e:27:63:1c: 4f:b8:5b:ae:60:0b:e6:67:ba:c9:e2:e7:ec:8c:e3: 6c:61:6d:de:3f:32:7f:e7:04:60:73:be:ed:c6:81: f9:d6:e2:86:c4:06:31:72:88:eb:26:a0:e5:5a:d4: ba:aa:d5:57:62:38:40:a0:da:24:e6:9d:0b:86:47: 03:7e:ac:97:81:4b:19:4b:f9:02:57:1c:7c:37:80: 5a:34:05:2b:78:e2:cb:ae:ce:eb:53:d2:dc:dd:f5: 9d:6a:0b:a1:e1:52:39:7e:d4:4b:2f:09:8b:6c:53: 9b:12:bc:ff:12:48:59:71:32:60:75:1f:1d:11:41: 20:e9:02:1e:ed:a6:91:35:d4:60:af:70:72:54:a4: c8:c5:ab:6f:0c:28:d5:20:ce:88:aa:12:0a:5d:86: d9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DD:07:8C:9D:00:45:10:C5:0C:DF:88:13:FB:90:FA:2D:69:4B:CD X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134342e302f32332d3233203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.79.144.0/23 Signature Algorithm: sha256WithRSAEncryption 93:d5:e5:05:a4:9b:7e:11:66:c5:7e:dd:82:69:02:c4:42:58: 77:89:49:b8:c8:cb:aa:50:bb:5a:e8:63:61:3c:fa:2c:44:45: a6:94:c7:a5:01:99:ac:f2:85:d3:dd:f9:65:93:fe:f3:6a:b0: da:88:08:9c:2d:91:b1:22:d5:a4:b7:90:49:a3:ea:ba:b6:38: 92:2b:9e:7f:82:65:1b:47:5c:13:b2:42:9e:99:5d:cf:72:98: 46:90:a3:ae:2d:36:9a:a8:20:9a:a2:44:79:63:bb:f4:33:f5: ed:01:38:d4:54:b8:72:87:ad:00:e5:86:f8:0b:0e:f3:53:fc: e4:aa:66:08:cc:6e:da:e2:32:39:b5:7a:10:0c:ee:95:5f:74: 11:3a:b2:04:d9:09:78:e1:f2:67:a4:9c:9b:cb:04:39:7d:d9: 6e:8e:8c:2a:c9:98:17:c6:54:89:fc:f0:5e:ef:68:db:3d:a1: e1:88:d9:a8:db:2f:22:bc:b3:40:ab:95:73:78:31:40:26:ac: 4d:02:5e:32:63:fd:e4:16:90:91:27:a1:19:3c:25:e0:3a:1e: 7a:50:ef:5e:14:c8:c7:68:fb:42:ff:6e:d1:87:eb:84:00:94: ea:5a:46:18:e2:00:4a:92:5b:4e:01:05:69:a6:96:3e:5b:1b: 23:01:53:23 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUQadhwKZ3xcue8yS4KwYG5mcaf0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMTIxMTMyMzFaFw0yNzAxMTExMTM3MzFaMDMxMTAvBgNV BAMTKDAzREQwNzhDOUQwMDQ1MTBDNTBDREY4ODEzRkI5MEZBMkQ2OTRCQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCheIoB+5EQ3rukr7rdTtCNtvdQ SIbXw8DYGAu1WUIiNCdcw9WNxNj29DbSZ4nv35+riN17unYm03EWwjqShP8A1LW3 sm9jObhCgsmjWZpgMKrKUhORai9Q/WNPQjXXln6oC4DAPidjHE+4W65gC+Znusni 5+yM42xhbd4/Mn/nBGBzvu3GgfnW4obEBjFyiOsmoOVa1Lqq1VdiOECg2iTmnQuG RwN+rJeBSxlL+QJXHHw3gFo0BSt44suuzutT0tzd9Z1qC6HhUjl+1EsvCYtsU5sS vP8SSFlxMmB1Hx0RQSDpAh7tppE11GCvcHJUpMjFq28MKNUgzoiqEgpdhtl/AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUA90HjJ0ARRDFDN+IE/uQ+i1pS80wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM0 MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGRT5Aw DQYJKoZIhvcNAQELBQADggEBAJPV5QWkm34RZsV+3YJpAsRCWHeJSbjIy6pQu1ro Y2E8+ixERaaUx6UBmazyhdPd+WWT/vNqsNqICJwtkbEi1aS3kEmj6rq2OJIrnn+C ZRtHXBOyQp6ZXc9ymEaQo64tNpqoIJqiRHlju/Qz9e0BONRUuHKHrQDlhvgLDvNT /OSqZgjMbtriMjm1ehAM7pVfdBE6sgTZCXjh8meknJvLBDl92W6OjCrJmBfGVIn8 8F7vaNs9oeGI2ajbLyK8s0CrlXN4MUAmrE0CXjJj/eQWkJEnoRk8JeA6HnpQ714U yMdo+0L/btGH64QAlOpaRhjiAEqSW04BBWmmlj5bGyMBUyM= -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:37 2026 by rpki-client