This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139302e302f32342d3234203d3e203235313938.roa File: 3134352e37392e3139302e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: EyHOFxmRX8sIGN0n2iTW0b82A2vh+6yDoyok/45QmEE= Subject key identifier: 0E:B4:1B:F1:73:43:F5:02:DC:8D:16:7D:69:52:D8:81:24:6B:87:D5 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 680ECBDA818FE2FE74DF1128190188C312801F08 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139302e302f32342d3234203d3e203235313938.roa Signing time: Sat 10 Jan 2026 12:28:28 +0000 ROA not before: Sat 10 Jan 2026 12:23:28 +0000 ROA not after: Sat 09 Jan 2027 12:28:28 +0000 asID: 25198 IP address blocks: 145.79.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:0e:cb:da:81:8f:e2:fe:74:df:11:28:19:01:88:c3:12:80:1f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 10 12:23:28 2026 GMT Not After : Jan 9 12:28:28 2027 GMT Subject: CN=0EB41BF17343F502DC8D167D6952D881246B87D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:92:2c:15:03:7f:bb:41:09:55:33:15:d9:53: b3:4e:e7:73:ab:ab:80:3f:68:39:a8:4b:68:90:c3: 22:ae:60:aa:9b:85:50:fb:42:4f:b7:16:5c:d0:52: af:22:0a:d6:cc:93:60:5b:9d:34:7d:2d:30:55:a0: b6:34:48:2b:8e:0f:57:0a:24:97:01:fe:df:fb:b2: d6:bf:3e:14:79:94:a7:d7:4a:79:48:be:c5:bc:c3: 7a:81:2b:b8:cd:d9:b0:99:de:85:5e:d3:4c:1e:6f: 9f:57:3d:de:d3:65:ce:e0:25:c9:65:a0:1d:e6:6b: 47:36:57:3a:35:56:eb:37:08:72:4b:a8:69:53:72: 84:14:69:67:10:e7:28:42:02:93:5f:de:80:3b:c3: 29:f1:e9:fa:6a:8f:ff:a0:cb:d2:52:3d:a2:3b:4d: 29:bb:0b:f3:5e:f8:ba:8c:8c:13:a7:83:5a:fd:7d: 17:d8:79:22:fa:bd:ba:06:56:d8:77:ea:6d:f3:9a: fa:76:e3:df:f8:4a:bf:39:13:4b:47:9e:83:4b:43: 31:5e:4b:76:74:42:9d:95:08:30:b7:47:21:4a:1f: 96:66:e1:1d:a6:9d:32:db:3c:87:3f:cc:08:a1:27: b0:f2:44:8a:cf:a4:0b:00:05:02:2d:2d:1e:82:c5: 2d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B4:1B:F1:73:43:F5:02:DC:8D:16:7D:69:52:D8:81:24:6B:87:D5 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139302e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.79.190.0/24 Signature Algorithm: sha256WithRSAEncryption 44:b1:39:23:29:07:cf:9b:ac:9f:d5:db:d1:89:25:84:a0:e2: 4d:68:07:2f:10:53:ce:59:ec:51:fe:29:19:d0:2d:78:3f:86: d9:dd:aa:b8:9a:21:af:3f:f8:ef:66:a5:06:d1:ca:b1:4f:52: 19:c2:89:27:58:ad:49:bc:0f:e7:03:fe:aa:7d:b2:13:c1:19: 9d:b8:5e:77:e2:14:30:85:e0:cc:0e:54:e4:4d:46:8a:95:a7: 6a:03:bf:f1:89:8a:43:bc:4e:4a:b2:d4:28:0a:6d:f8:51:19: 29:99:2f:c7:a4:91:de:72:f7:2d:a7:24:0a:00:41:76:54:40: 3d:b4:9d:c7:0a:11:b9:2d:5a:89:f2:3d:4b:36:50:fc:4d:cf: 5b:4e:dc:4c:07:0f:bc:e5:28:6e:fd:1c:51:a4:16:8c:89:1b: df:f9:ee:c3:4e:91:f5:d8:43:f3:de:1a:60:b6:42:69:f8:d8: b5:85:20:33:3a:7f:95:28:49:05:cb:e0:e1:77:66:a4:a3:ca: 57:ec:d2:0c:48:05:c0:1a:2a:dd:3c:18:9d:1b:39:88:4a:f2: 9c:89:65:f2:2f:87:24:4a:55:d9:8e:73:bd:4a:27:53:f2:e0: fe:00:e6:db:4d:27:e8:ec:f9:22:a1:f6:b8:8f:a3:ef:7c:bb: 3a:ca:35:3a -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUaA7L2oGP4v503xEoGQGIwxKAHwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMTAxMjIzMjhaFw0yNzAxMDkxMjI4MjhaMDMxMTAvBgNV BAMTKDBFQjQxQkYxNzM0M0Y1MDJEQzhEMTY3RDY5NTJEODgxMjQ2Qjg3RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOkiwVA3+7QQlVMxXZU7NO53Or q4A/aDmoS2iQwyKuYKqbhVD7Qk+3FlzQUq8iCtbMk2BbnTR9LTBVoLY0SCuOD1cK JJcB/t/7sta/PhR5lKfXSnlIvsW8w3qBK7jN2bCZ3oVe00web59XPd7TZc7gJcll oB3ma0c2Vzo1Vus3CHJLqGlTcoQUaWcQ5yhCApNf3oA7wynx6fpqj/+gy9JSPaI7 TSm7C/Ne+LqMjBOng1r9fRfYeSL6vboGVth36m3zmvp249/4Sr85E0tHnoNLQzFe S3Z0Qp2VCDC3RyFKH5Zm4R2mnTLbPIc/zAihJ7DyRIrPpAsABQItLR6CxS1HAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUDrQb8XND9QLcjRZ9aVLYgSRrh9UwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM5 MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM1MzEzOTM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA kU++MA0GCSqGSIb3DQEBCwUAA4IBAQBEsTkjKQfPm6yf1dvRiSWEoOJNaAcvEFPO WexR/ikZ0C14P4bZ3aq4miGvP/jvZqUG0cqxT1IZwoknWK1JvA/nA/6qfbITwRmd uF534hQwheDMDlTkTUaKladqA7/xiYpDvE5KstQoCm34URkpmS/HpJHecvctpyQK AEF2VEA9tJ3HChG5LVqJ8j1LNlD8Tc9bTtxMBw+85Shu/RxRpBaMiRvf+e7DTpH1 2EPz3hpgtkJp+Ni1hSAzOn+VKEkFy+Dhd2ako8pX7NIMSAXAGirdPBidGzmISvKc iWXyL4ckSlXZjnO9SidT8uD+AObbTSfo7Pkiofa4j6PvfLs6yjU6 -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:33 2026 by rpki-client