This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138342e302f32322d3232203d3e20383334.roa File: 3134352e37392e3138342e302f32322d3232203d3e20383334.roa (raw, json) Hash identifier: JMHGuQeiwy9YqM1AorVxLhGno0Q4oZrAGObBkct1jnQ= Subject key identifier: 0E:56:B1:2F:E8:D3:33:F9:16:9C:50:24:F8:C6:42:43:F6:7D:DF:D2 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 27FA1E7C2C3B1601509D565F2D8CD1887CA5F6C7 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138342e302f32322d3232203d3e20383334.roa Signing time: Mon 12 Jan 2026 11:37:05 +0000 ROA not before: Mon 12 Jan 2026 11:32:05 +0000 ROA not after: Mon 11 Jan 2027 11:37:05 +0000 asID: 834 IP address blocks: 145.79.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:fa:1e:7c:2c:3b:16:01:50:9d:56:5f:2d:8c:d1:88:7c:a5:f6:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 12 11:32:05 2026 GMT Not After : Jan 11 11:37:05 2027 GMT Subject: CN=0E56B12FE8D333F9169C5024F8C64243F67DDFD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:af:11:49:b3:95:59:86:3b:0f:10:d8:4a:80: f3:19:5d:94:18:79:57:0d:cd:8d:f7:ac:3e:ca:f8: 32:c2:8f:9a:19:de:b6:30:51:38:d7:c1:14:2c:39: 00:ba:00:6d:a1:4a:58:c6:fb:8e:5a:5f:4f:02:b8: f1:8c:22:7e:a1:21:b9:8a:61:ad:f4:2d:98:0b:e8: ad:d5:8c:9f:69:fc:0c:72:68:5a:e4:7b:43:46:0a: 72:56:61:fb:64:10:af:ec:57:08:d4:7f:84:20:1c: 70:e8:41:1c:6f:4d:a4:71:c8:a2:c3:9e:dc:02:fd: 30:ce:f2:ce:1b:0d:0c:8e:15:a8:05:7e:49:50:71: 6e:58:31:ec:98:18:0f:97:6d:ee:f9:40:93:8c:a9: 34:d7:39:b6:09:81:8d:1b:98:cb:2c:86:0a:d3:d7: d1:49:e3:36:86:aa:08:2c:e6:d6:8d:6a:11:90:68: a6:76:b9:80:de:6a:ad:ef:dc:36:f9:b6:1f:d2:7c: bb:b1:6b:96:e1:48:75:d7:d1:b9:09:4c:ee:6b:4a: 61:25:ab:34:c5:30:01:e4:de:87:f6:98:65:c3:cd: c2:a7:ea:81:14:b2:70:95:1d:d4:ed:a6:c5:fe:f3: 1f:ce:9d:4e:48:92:e3:ba:db:49:bc:7d:33:4f:59: fb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:56:B1:2F:E8:D3:33:F9:16:9C:50:24:F8:C6:42:43:F6:7D:DF:D2 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138342e302f32322d3232203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.79.184.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:e1:66:b8:92:27:02:cb:27:cd:f5:93:0e:7e:d7:cd:8b:2b: 30:bb:2d:b5:65:c9:28:7a:9b:61:a7:e4:c9:09:75:7a:47:38: 1f:62:82:d1:a9:16:50:c1:10:e0:c2:e9:9b:3e:f2:d1:6c:ea: 23:35:6f:fa:b2:e3:75:a6:73:46:86:ac:75:83:0f:42:20:5f: e0:60:5b:1c:0f:80:49:b4:37:0c:40:5a:af:3e:a5:b5:6b:be: 18:ef:a5:86:f0:4f:4e:8f:e4:21:0a:99:a5:7b:4c:80:54:82: 07:ea:0f:0d:a3:5b:97:a5:cf:cc:de:40:b6:8c:b0:22:d2:17: f6:3a:85:2b:6d:0e:3c:15:b1:37:7d:8b:94:0d:4e:a3:58:32: 76:c0:df:af:b8:35:8a:a2:2a:96:a6:f2:48:ec:1a:97:44:86: 00:4f:af:21:8d:ef:07:27:e1:8e:77:8c:66:42:98:9c:d9:fb: 2e:78:cd:86:de:30:e7:12:a4:5a:d4:26:0c:e2:e3:cb:a9:4a: 5b:df:7b:33:c9:4c:a2:9c:a4:42:e3:f6:cf:87:44:98:62:f9: c3:c2:e8:ab:91:16:62:47:12:a4:2b:3e:08:7c:48:29:0e:c5: b4:13:4e:95:2c:60:87:81:67:38:54:37:d2:5f:21:1a:2c:fd: a3:ed:c9:2d -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUJ/oefCw7FgFQnVZfLYzRiHyl9scwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMTIxMTMyMDVaFw0yNzAxMTExMTM3MDVaMDMxMTAvBgNV BAMTKDBFNTZCMTJGRThEMzMzRjkxNjlDNTAyNEY4QzY0MjQzRjY3RERGRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDrxFJs5VZhjsPENhKgPMZXZQY eVcNzY33rD7K+DLCj5oZ3rYwUTjXwRQsOQC6AG2hSljG+45aX08CuPGMIn6hIbmK Ya30LZgL6K3VjJ9p/AxyaFrke0NGCnJWYftkEK/sVwjUf4QgHHDoQRxvTaRxyKLD ntwC/TDO8s4bDQyOFagFfklQcW5YMeyYGA+Xbe75QJOMqTTXObYJgY0bmMsshgrT 19FJ4zaGqggs5taNahGQaKZ2uYDeaq3v3Db5th/SfLuxa5bhSHXX0bkJTO5rSmEl qzTFMAHk3of2mGXDzcKn6oEUsnCVHdTtpsX+8x/OnU5IkuO620m8fTNPWfstAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUDlaxL+jTM/kWnFAk+MZCQ/Z939IwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM4 MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKRT7gw DQYJKoZIhvcNAQELBQADggEBAG3hZriSJwLLJ831kw5+182LKzC7LbVlySh6m2Gn 5MkJdXpHOB9igtGpFlDBEODC6Zs+8tFs6iM1b/qy43Wmc0aGrHWDD0IgX+BgWxwP gEm0NwxAWq8+pbVrvhjvpYbwT06P5CEKmaV7TIBUggfqDw2jW5elz8zeQLaMsCLS F/Y6hSttDjwVsTd9i5QNTqNYMnbA36+4NYqiKpam8kjsGpdEhgBPryGN7wcn4Y53 jGZCmJzZ+y54zYbeMOcSpFrUJgzi48upSlvfezPJTKKcpELj9s+HRJhi+cPC6KuR FmJHEqQrPgh8SCkOxbQTTpUsYIeBZzhUN9JfIRos/aPtyS0= -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:36 2026 by rpki-client