This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e36342e302f32342d3234203d3e2032393134.roa File: 3134352e37392e36342e302f32342d3234203d3e2032393134.roa (raw, json) Hash identifier: CRlGVGBYp58E3iVzUVuFSp57lEyZhIkNWcs+nosZE0M= Subject key identifier: DB:EB:F9:F9:CD:2B:73:83:6A:DD:90:80:08:27:8C:AF:94:98:24:D3 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 05848297B81B9C867C0F671F96F5B4F7873DBC26 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e36342e302f32342d3234203d3e2032393134.roa Signing time: Mon 22 Dec 2025 13:31:05 +0000 ROA not before: Mon 22 Dec 2025 13:26:05 +0000 ROA not after: Mon 21 Dec 2026 13:31:05 +0000 asID: 2914 IP address blocks: 145.79.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:84:82:97:b8:1b:9c:86:7c:0f:67:1f:96:f5:b4:f7:87:3d:bc:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 22 13:26:05 2025 GMT Not After : Dec 21 13:31:05 2026 GMT Subject: CN=DBEBF9F9CD2B73836ADD908008278CAF949824D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4f:80:f8:d6:14:e1:8c:4b:90:ea:cd:88:7c: 30:14:57:fa:69:ad:0b:47:5d:18:7f:c1:4f:5a:13: ad:66:9e:76:d4:32:ff:53:da:d2:23:fd:5d:e8:cc: fd:ff:cf:84:1e:16:d6:88:08:53:2e:ed:58:e6:1c: 95:d0:e2:a1:5b:c5:43:6a:75:08:fd:d2:75:32:f1: 75:8d:9d:f1:ab:82:87:b4:fb:b7:04:f6:aa:1c:36: ce:51:22:46:d2:99:2c:bb:78:1f:87:54:06:af:8a: e5:b2:88:74:dd:eb:b8:39:6e:56:9c:69:b3:2f:60: c0:6e:c0:f0:0e:f6:86:6a:7c:31:3d:a2:d3:02:ac: 9a:81:69:fe:ee:c3:d6:ea:56:b5:35:bc:78:b7:3e: fd:2d:22:28:fc:f3:c1:a8:44:f5:9e:ad:99:58:00: b7:b0:dc:3d:a4:92:1d:f2:c9:34:61:38:aa:50:5f: ff:dc:9f:15:2d:8a:45:f5:1d:a0:d1:90:bb:83:58: 58:f7:02:6a:49:47:67:7f:9e:e8:e5:f3:49:44:97: c2:47:7b:38:3a:19:06:89:c3:29:af:1c:0f:b7:82: b8:83:8b:50:80:90:f3:7b:d9:fc:21:94:f7:dd:51: fc:6f:2f:58:98:a9:ed:02:e6:f5:18:ad:44:75:e4: 8a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EB:F9:F9:CD:2B:73:83:6A:DD:90:80:08:27:8C:AF:94:98:24:D3 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e36342e302f32342d3234203d3e2032393134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.79.64.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:02:0c:4c:e9:5a:43:2f:e4:50:ee:d9:4c:9e:d5:c1:17:c5: a8:02:e0:33:f1:00:dc:ec:f6:bc:24:1c:f2:e0:23:e7:93:87: 1f:70:50:27:b6:80:7e:62:4b:7d:f5:3f:66:86:26:51:9e:98: 47:81:b8:69:7d:19:f1:19:0b:e9:2a:fe:6f:5f:61:90:ce:7d: e8:10:bc:7d:22:d9:e9:3c:2f:04:d3:e9:ee:da:3e:a1:6a:b1: 41:c7:ab:2b:ec:ee:72:18:c8:81:31:a6:1c:45:96:21:b0:5c: 6e:8b:cf:00:16:01:3b:48:05:3d:4a:ea:bc:9c:7e:04:7e:45: 72:ff:14:d6:97:25:8d:7a:2a:2e:2f:7b:18:57:c2:a4:61:42: c3:17:5f:88:c9:f5:f9:12:d2:b5:59:da:fd:9a:30:b1:ba:72: f2:37:13:2f:2d:94:a6:22:4d:37:5d:01:01:d9:a1:a9:74:5b: f3:6b:23:39:49:11:ae:5d:b8:b5:0a:b9:f6:b1:bd:c4:e3:48: 5a:df:82:fd:41:fc:c3:3b:3b:a8:99:7c:1a:f4:2c:2a:20:26: c5:bc:d2:e0:12:0d:01:2f:37:f2:46:a2:98:79:32:ee:e5:75: e8:bb:78:90:b9:60:05:26:cd:f6:d8:d4:77:1f:38:8d:41:73: ac:2b:32:43 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUBYSCl7gbnIZ8D2cflvW094c9vCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjIxMzI2MDVaFw0yNjEyMjExMzMxMDVaMDMxMTAvBgNV BAMTKERCRUJGOUY5Q0QyQjczODM2QUREOTA4MDA4Mjc4Q0FGOTQ5ODI0RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/T4D41hThjEuQ6s2IfDAUV/pp rQtHXRh/wU9aE61mnnbUMv9T2tIj/V3ozP3/z4QeFtaICFMu7VjmHJXQ4qFbxUNq dQj90nUy8XWNnfGrgoe0+7cE9qocNs5RIkbSmSy7eB+HVAaviuWyiHTd67g5blac abMvYMBuwPAO9oZqfDE9otMCrJqBaf7uw9bqVrU1vHi3Pv0tIij888GoRPWerZlY ALew3D2kkh3yyTRhOKpQX//cnxUtikX1HaDRkLuDWFj3AmpJR2d/nujl80lEl8JH ezg6GQaJwymvHA+3griDi1CAkPN72fwhlPfdUfxvL1iYqe0C5vUYrUR15IotAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU2+v5+c0rc4Nq3ZCACCeMr5SYJNMwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzNjM0 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzOTMxMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACRT0Aw DQYJKoZIhvcNAQELBQADggEBAB8CDEzpWkMv5FDu2Uye1cEXxagC4DPxANzs9rwk HPLgI+eThx9wUCe2gH5iS331P2aGJlGemEeBuGl9GfEZC+kq/m9fYZDOfegQvH0i 2ek8LwTT6e7aPqFqsUHHqyvs7nIYyIExphxFliGwXG6LzwAWATtIBT1K6rycfgR+ RXL/FNaXJY16Ki4vexhXwqRhQsMXX4jJ9fkS0rVZ2v2aMLG6cvI3Ey8tlKYiTTdd AQHZoal0W/NrIzlJEa5duLUKufaxvcTjSFrfgv1B/MM7O6iZfBr0LCogJsW80uAS DQEvN/JGoph5Mu7ldei7eJC5YAUmzfbY1HcfOI1Bc6wrMkM= -----END CERTIFICATE-----Generated at Thu Jan 8 00:16:40 2026 by rpki-client