This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135342e302f32342d3234203d3e20383334.roa File: 3134352e37392e3135342e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: shJA+sisz8VqrHkLC14GIsvbivtOwSWE+C2cRowTYlQ= Subject key identifier: 4A:01:43:99:12:96:81:2C:9F:C1:97:CC:F7:B3:06:16:3A:9A:00:7C Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 2733B3A2DF4FF9308A06F2B592589BA75CC29924 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135342e302f32342d3234203d3e20383334.roa Signing time: Sun 01 Feb 2026 12:43:22 +0000 ROA not before: Sun 01 Feb 2026 12:38:22 +0000 ROA not after: Sun 31 Jan 2027 12:43:22 +0000 asID: 834 IP address blocks: 145.79.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:33:b3:a2:df:4f:f9:30:8a:06:f2:b5:92:58:9b:a7:5c:c2:99:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Feb 1 12:38:22 2026 GMT Not After : Jan 31 12:43:22 2027 GMT Subject: CN=4A0143991296812C9FC197CCF7B306163A9A007C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:16:9b:03:3e:c0:cb:0f:f3:95:ef:69:e9:e2: 09:76:aa:b0:25:8a:2e:33:18:7e:da:9c:8b:9a:7d: db:b5:7a:b3:fe:c5:38:7d:1f:f1:ed:08:37:f3:97: 16:83:e2:ec:42:1e:c1:db:0c:30:9d:c1:e5:79:65: 1e:05:cf:c5:da:f2:66:66:8c:2d:e7:ea:92:37:62: f2:0c:bb:09:92:09:6c:b9:2c:7f:8f:b2:f8:ac:94: 2e:13:66:6e:22:66:72:d8:32:6f:25:d7:c1:49:7d: c0:fb:3b:c1:48:20:0d:82:56:e3:62:c4:f1:6f:27: 17:b3:ff:2d:9b:83:af:8d:85:c1:17:6e:45:b1:75: 82:9a:c8:81:dc:8f:36:41:55:88:c7:6d:16:c3:cf: ad:02:00:a8:59:28:39:e1:ad:f3:25:91:22:95:45: 80:10:8b:e4:67:b4:21:fe:e4:2a:17:ad:fa:1e:26: 3d:f5:bf:2e:2a:6d:e2:bd:ef:85:59:17:ec:c9:84: 1c:3f:9a:de:fe:34:fb:f3:ea:2c:50:e5:73:e9:99: 60:ff:d7:73:78:e3:95:3b:db:4f:13:61:69:63:9b: 0f:bb:45:09:fb:db:85:cc:c2:cc:1f:fa:38:ed:36: 94:c9:67:56:fe:cb:bc:d2:1f:29:1a:3d:7a:d4:80: de:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:01:43:99:12:96:81:2C:9F:C1:97:CC:F7:B3:06:16:3A:9A:00:7C X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135342e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.79.154.0/24 Signature Algorithm: sha256WithRSAEncryption 77:60:8c:8e:0f:42:de:9a:e3:16:e1:e9:c8:57:c3:ee:e3:26: a0:4d:9f:4d:fd:91:e9:bc:8b:ef:59:3f:c9:6a:29:8f:31:9f: 80:14:c1:10:70:af:f9:49:a5:d8:fb:d0:ec:4d:39:b4:bc:22: 1c:f8:85:42:dc:03:e4:64:8e:3e:bf:2d:7c:a5:ca:fd:66:bb: 29:51:7f:ed:54:43:fb:c3:1c:a8:02:83:aa:06:32:43:70:84: 7b:a0:52:62:18:24:c1:d0:20:cc:16:a3:37:24:05:1d:df:3c: 78:87:cb:64:4d:50:95:3a:7a:c8:df:28:ea:46:df:f3:ee:e9: ed:c2:0c:81:f2:ba:e7:7f:9e:ec:41:e6:51:a5:57:90:ac:17: f6:82:ad:83:07:33:be:a7:e4:b9:b2:07:3b:a5:24:d0:d2:6a: 5d:50:35:4d:fd:af:d4:11:45:69:05:98:a1:96:6f:5c:ee:68: 3b:b4:ff:51:07:6e:5c:8a:58:c9:94:ec:48:65:37:19:6c:f9: 08:35:48:c7:ec:d1:2f:3c:05:d4:41:80:02:bb:f9:f6:d5:03: fd:e5:32:2d:3a:02:bf:a9:77:25:5f:c6:d6:02:83:0a:e9:6b: 1b:96:73:c4:86:2f:3c:ef:68:35:a2:49:b6:0d:69:c5:90:cd: e2:18:1c:b8 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUJzOzot9P+TCKBvK1klibp1zCmSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAyMDExMjM4MjJaFw0yNzAxMzExMjQzMjJaMDMxMTAvBgNV BAMTKDRBMDE0Mzk5MTI5NjgxMkM5RkMxOTdDQ0Y3QjMwNjE2M0E5QTAwN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiFpsDPsDLD/OV72np4gl2qrAl ii4zGH7anIuafdu1erP+xTh9H/HtCDfzlxaD4uxCHsHbDDCdweV5ZR4Fz8Xa8mZm jC3n6pI3YvIMuwmSCWy5LH+PsvislC4TZm4iZnLYMm8l18FJfcD7O8FIIA2CVuNi xPFvJxez/y2bg6+NhcEXbkWxdYKayIHcjzZBVYjHbRbDz60CAKhZKDnhrfMlkSKV RYAQi+RntCH+5CoXrfoeJj31vy4qbeK974VZF+zJhBw/mt7+NPvz6ixQ5XPpmWD/ 13N445U7208TYWljmw+7RQn724XMwswf+jjtNpTJZ1b+y7zSHykaPXrUgN6zAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUSgFDmRKWgSyfwZfM97MGFjqaAHwwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM1 MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACRT5ow DQYJKoZIhvcNAQELBQADggEBAHdgjI4PQt6a4xbh6chXw+7jJqBNn039kem8i+9Z P8lqKY8xn4AUwRBwr/lJpdj70OxNObS8Ihz4hULcA+Rkjj6/LXylyv1muylRf+1U Q/vDHKgCg6oGMkNwhHugUmIYJMHQIMwWozckBR3fPHiHy2RNUJU6esjfKOpG3/Pu 6e3CDIHyuud/nuxB5lGlV5CsF/aCrYMHM76n5LmyBzulJNDSal1QNU39r9QRRWkF mKGWb1zuaDu0/1EHblyKWMmU7EhlNxls+Qg1SMfs0S88BdRBgAK7+fbVA/3lMi06 Ar+pdyVfxtYCgwrpaxuWc8SGLzzvaDWiSbYNacWQzeIYHLg= -----END CERTIFICATE-----Generated at Sat Feb 14 17:24:07 2026 by rpki-client