This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139312e302f32342d3234203d3e20383334.roa File: 3134352e37392e3139312e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: GzQo4X/L23ZkaLDm36nTri5uvlM1USGqrQmRDYErjAs= Subject key identifier: 9F:7F:28:9E:9B:DA:77:5F:A1:2D:BB:B0:31:11:09:55:88:C0:15:24 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 4AEBB70E7D49B7F9E6FC1E708A350E033E94E894 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139312e302f32342d3234203d3e20383334.roa Signing time: Mon 12 Jan 2026 11:38:06 +0000 ROA not before: Mon 12 Jan 2026 11:33:06 +0000 ROA not after: Mon 11 Jan 2027 11:38:06 +0000 asID: 834 IP address blocks: 145.79.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:eb:b7:0e:7d:49:b7:f9:e6:fc:1e:70:8a:35:0e:03:3e:94:e8:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 12 11:33:06 2026 GMT Not After : Jan 11 11:38:06 2027 GMT Subject: CN=9F7F289E9BDA775FA12DBBB03111095588C01524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2b:02:e4:43:e7:ff:64:3f:91:7a:4d:7c:ad: 91:57:01:f8:dc:62:f4:d5:92:2d:a7:7b:d2:90:46: a3:9a:c7:07:6e:6c:b6:7d:5f:44:06:1b:2f:d2:7d: 33:7f:45:37:fe:a3:b4:07:ec:9c:1f:47:49:c1:f8: 8e:8e:75:db:e2:80:e4:f3:fb:a7:37:68:b2:78:e5: 80:e0:51:4a:a9:fa:02:79:5d:4f:5b:4d:e0:50:bc: 5b:42:8d:fc:b9:8e:a0:13:e9:84:99:d9:75:91:c9: ad:44:a3:93:e1:b7:57:84:cb:37:35:92:bc:d7:92: ec:a4:95:ef:95:95:59:74:b1:a0:af:95:d2:6b:5a: 1a:cf:82:50:18:c2:83:fc:7c:9a:ae:18:19:d2:fd: 84:92:7c:af:a0:07:cb:7e:2b:ac:e0:0b:47:58:c4: ae:bc:dd:3d:f8:2e:1c:e8:12:06:c7:a9:60:ee:91: 10:f4:62:95:28:a5:e5:8f:d8:fe:2d:2c:93:55:36: bf:ba:24:3d:7b:7e:88:23:dc:bf:f7:47:d5:28:c5: f0:7e:79:45:86:40:bd:42:e9:ba:9d:10:68:9c:2e: af:af:e7:3b:6d:cf:5d:5f:81:4f:47:ee:72:cf:1e: 5d:4a:a7:9a:56:cb:7c:14:fa:3a:96:23:64:6c:ba: d3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:7F:28:9E:9B:DA:77:5F:A1:2D:BB:B0:31:11:09:55:88:C0:15:24 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139312e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.79.191.0/24 Signature Algorithm: sha256WithRSAEncryption 19:3f:06:46:67:75:18:0d:35:1e:72:45:f3:51:38:fe:c2:76: ed:ae:bc:e3:5a:06:65:0e:ea:78:6c:6b:ce:8e:e3:f3:45:d1: 0c:6d:71:3c:90:07:1a:46:d8:ee:72:15:84:50:8e:f8:45:0c: 4c:66:37:38:49:59:2c:df:77:66:a1:df:37:4d:c6:16:00:52: d4:aa:13:82:4e:3f:b9:af:50:aa:85:d2:28:ce:3e:b3:05:f3: 84:df:f4:e7:8c:b2:88:52:c2:6b:63:24:80:1b:95:4e:88:d9: fb:0d:68:9a:32:e7:d2:4e:c9:90:a6:7f:19:d9:42:38:f9:f7: 52:51:0f:92:e8:44:c9:6b:b9:b2:20:d6:14:57:99:9e:9a:bf: 13:e8:10:ff:79:4f:fb:56:92:fb:f6:e4:41:2e:f1:30:a0:e6: f3:d7:97:56:c4:83:8c:ff:29:1b:9e:5f:a9:44:0d:00:86:50: ca:37:00:3d:59:e7:58:2a:ab:c8:32:4b:32:06:3d:d5:c9:1a: 72:d4:55:fa:b9:2d:f0:56:b0:2a:f1:0f:fa:ed:88:0a:1b:ce: 0b:b8:30:b9:0a:70:da:81:68:98:75:29:a4:a3:98:c8:7b:4e: 1b:66:a1:ad:0d:f0:29:eb:d0:9d:c3:dc:70:77:00:3a:0f:71: d9:77:bc:d5 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUSuu3Dn1Jt/nm/B5wijUOAz6U6JQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMTIxMTMzMDZaFw0yNzAxMTExMTM4MDZaMDMxMTAvBgNV BAMTKDlGN0YyODlFOUJEQTc3NUZBMTJEQkJCMDMxMTEwOTU1ODhDMDE1MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAKwLkQ+f/ZD+Rek18rZFXAfjc YvTVki2ne9KQRqOaxwdubLZ9X0QGGy/SfTN/RTf+o7QH7JwfR0nB+I6OddvigOTz +6c3aLJ45YDgUUqp+gJ5XU9bTeBQvFtCjfy5jqAT6YSZ2XWRya1Eo5Pht1eEyzc1 krzXkuykle+VlVl0saCvldJrWhrPglAYwoP8fJquGBnS/YSSfK+gB8t+K6zgC0dY xK683T34LhzoEgbHqWDukRD0YpUopeWP2P4tLJNVNr+6JD17fogj3L/3R9UoxfB+ eUWGQL1C6bqdEGicLq+v5zttz11fgU9H7nLPHl1Kp5pWy3wU+jqWI2RsutPPAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUn38onpvad1+hLbuwMREJVYjAFSQwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM5 MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACRT78w DQYJKoZIhvcNAQELBQADggEBABk/BkZndRgNNR5yRfNROP7Cdu2uvONaBmUO6nhs a86O4/NF0QxtcTyQBxpG2O5yFYRQjvhFDExmNzhJWSzfd2ah3zdNxhYAUtSqE4JO P7mvUKqF0ijOPrMF84Tf9OeMsohSwmtjJIAblU6I2fsNaJoy59JOyZCmfxnZQjj5 91JRD5LoRMlrubIg1hRXmZ6avxPoEP95T/tWkvv25EEu8TCg5vPXl1bEg4z/KRue X6lEDQCGUMo3AD1Z51gqq8gySzIGPdXJGnLUVfq5LfBWsCrxD/rtiAobzgu4MLkK cNqBaJh1KaSjmMh7Thtmoa0N8Cnr0J3D3HB3ADoPcdl3vNU= -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:37 2026 by rpki-client