This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136322e302f32342d3234203d3e20383334.roa File: 3134352e37392e3136322e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: f7gZwBbySDAwjMz3vk3lX46AuoQR6rZlnckZTvzh2ww= Subject key identifier: FC:38:6F:FB:87:B8:20:F9:E1:D7:38:44:5A:EA:39:29:71:9F:E2:21 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 6C7F195200DC3EA9CDCB098AB396FFAC12D4C4FA Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136322e302f32342d3234203d3e20383334.roa Signing time: Mon 12 Jan 2026 11:36:56 +0000 ROA not before: Mon 12 Jan 2026 11:31:56 +0000 ROA not after: Mon 11 Jan 2027 11:36:56 +0000 asID: 834 IP address blocks: 145.79.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:7f:19:52:00:dc:3e:a9:cd:cb:09:8a:b3:96:ff:ac:12:d4:c4:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 12 11:31:56 2026 GMT Not After : Jan 11 11:36:56 2027 GMT Subject: CN=FC386FFB87B820F9E1D738445AEA3929719FE221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bc:50:f8:bf:8d:a3:80:6a:86:c0:8d:5a:a6: 37:1c:99:d6:d9:e8:49:d2:f0:25:76:f2:68:52:3a: 60:a3:d2:13:06:69:86:dc:45:9f:e5:e1:1a:1c:8a: c4:50:82:95:a2:89:c2:5b:85:0b:62:13:79:6c:88: ce:e3:0d:25:aa:37:66:58:de:f4:91:60:b4:2f:c3: 99:ea:a1:85:52:2c:fd:63:ca:c4:f1:b3:55:0a:61: 5b:58:74:9b:de:38:27:57:19:b4:5f:fb:eb:c0:3f: aa:08:96:c5:11:64:67:4f:68:a0:c5:da:2d:97:db: 64:6c:f0:44:b4:0b:cb:ca:db:50:24:22:9d:a5:0e: e3:bc:4e:71:83:da:7b:20:c7:87:0a:a2:f7:9a:f1: 37:a4:e8:8b:7d:6f:71:61:a5:63:d9:49:13:66:fc: 89:88:3d:9a:1c:ad:e5:c7:cf:73:42:de:e8:c5:90: 38:88:4c:22:65:ac:60:a9:b9:7a:cd:4d:5f:15:91: 5c:c0:5a:75:36:10:b2:64:52:13:1b:e5:fc:54:34: 3b:16:9f:db:e0:4d:d2:89:6b:e2:24:fc:20:b2:56: 19:04:18:27:7f:80:00:7f:61:2d:ba:bf:3b:64:a5: 85:d9:42:35:dc:42:1f:d0:cd:e5:d0:43:5d:3e:65: 46:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:38:6F:FB:87:B8:20:F9:E1:D7:38:44:5A:EA:39:29:71:9F:E2:21 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136322e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.79.162.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:33:14:f5:4e:f8:38:e0:29:7c:22:15:2b:a9:73:ce:0d:a4: 06:3d:a8:6e:5a:fd:d0:c2:c1:d9:0e:a8:1d:4a:2d:e3:bb:5f: ac:c6:c6:96:35:99:98:3b:9c:a1:5c:b6:62:b0:68:3f:73:35: b4:d0:a2:50:0e:d2:53:11:14:ff:70:53:8b:3e:9f:5f:41:71: a0:52:8a:29:71:5c:d4:a4:b2:46:bd:8e:27:2a:54:18:af:41: 91:55:de:7a:9d:d8:e3:f3:d6:32:0a:4d:b2:72:be:a7:96:c5: 2c:ca:70:83:e8:8e:9d:cf:b0:1c:f0:17:40:e2:eb:6d:8c:53: fd:ce:58:82:68:f9:b1:aa:59:11:a0:83:e3:85:7b:d2:ea:c7: 05:04:84:d6:8b:7d:93:14:45:30:fa:5a:c8:dc:f7:c8:ab:5a: 53:34:ce:96:99:01:3c:61:28:f0:ad:96:88:91:98:45:96:4e: 2a:f8:65:f3:d5:08:1a:42:32:85:be:90:c2:7c:9e:db:81:e9: 09:98:c0:7b:76:b9:10:5b:f0:70:22:92:7e:f2:96:fb:13:7d: 34:f0:da:a4:b5:77:e5:94:fd:5c:84:84:e6:8c:44:fd:52:cf: 4a:a8:ba:6d:8a:ac:8c:a6:a5:a6:76:d1:71:1c:04:03:2d:60: fb:3e:af:9d -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUbH8ZUgDcPqnNywmKs5b/rBLUxPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMTIxMTMxNTZaFw0yNzAxMTExMTM2NTZaMDMxMTAvBgNV BAMTKEZDMzg2RkZCODdCODIwRjlFMUQ3Mzg0NDVBRUEzOTI5NzE5RkUyMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0vFD4v42jgGqGwI1apjccmdbZ 6EnS8CV28mhSOmCj0hMGaYbcRZ/l4RocisRQgpWiicJbhQtiE3lsiM7jDSWqN2ZY 3vSRYLQvw5nqoYVSLP1jysTxs1UKYVtYdJveOCdXGbRf++vAP6oIlsURZGdPaKDF 2i2X22Rs8ES0C8vK21AkIp2lDuO8TnGD2nsgx4cKovea8Tek6It9b3FhpWPZSRNm /ImIPZocreXHz3NC3ujFkDiITCJlrGCpuXrNTV8VkVzAWnU2ELJkUhMb5fxUNDsW n9vgTdKJa+Ik/CCyVhkEGCd/gAB/YS26vztkpYXZQjXcQh/QzeXQQ10+ZUafAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU/Dhv+4e4IPnh1zhEWuo5KXGf4iEwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM2 MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACRT6Iw DQYJKoZIhvcNAQELBQADggEBAJozFPVO+DjgKXwiFSupc84NpAY9qG5a/dDCwdkO qB1KLeO7X6zGxpY1mZg7nKFctmKwaD9zNbTQolAO0lMRFP9wU4s+n19BcaBSiilx XNSkska9jicqVBivQZFV3nqd2OPz1jIKTbJyvqeWxSzKcIPojp3PsBzwF0Di622M U/3OWIJo+bGqWRGgg+OFe9LqxwUEhNaLfZMURTD6Wsjc98irWlM0zpaZATxhKPCt loiRmEWWTir4ZfPVCBpCMoW+kMJ8ntuB6QmYwHt2uRBb8HAikn7ylvsTfTTw2qS1 d+WU/VyEhOaMRP1Sz0qoum2KrIympaZ20XEcBAMtYPs+r50= -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:36 2026 by rpki-client