This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e38302e302f32322d3234203d3e203437353833.roa File: 3134372e39332e38302e302f32322d3234203d3e203437353833.roa (raw, json) Hash identifier: q4Gwdnb/0UMjZL4/tjiK+9Ata4E8T7Xb1t5ulFMxYeI= Subject key identifier: 24:03:67:14:DE:B3:8F:4E:7B:35:B0:66:2E:14:EF:DD:BD:F9:12:6F Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 3CDF8692D42EC297D9E3C93D7B24035D99D19103 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e38302e302f32322d3234203d3e203437353833.roa Signing time: Tue 30 Dec 2025 11:51:08 +0000 ROA not before: Tue 30 Dec 2025 11:46:08 +0000 ROA not after: Tue 29 Dec 2026 11:51:08 +0000 asID: 47583 IP address blocks: 147.93.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:df:86:92:d4:2e:c2:97:d9:e3:c9:3d:7b:24:03:5d:99:d1:91:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 30 11:46:08 2025 GMT Not After : Dec 29 11:51:08 2026 GMT Subject: CN=24036714DEB38F4E7B35B0662E14EFDDBDF9126F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c4:9d:60:8f:fa:38:60:47:a2:b7:f1:05:60: 82:aa:a3:75:82:07:c6:3e:a9:cb:d4:66:e1:a6:2a: ba:40:2e:64:d9:d3:dd:3e:c1:5d:00:05:ea:15:be: b0:9a:4c:73:ae:51:e9:f4:93:a5:88:70:e7:46:82: fe:c2:98:25:01:cf:63:e8:cb:1a:50:52:75:d7:e2: b9:aa:61:16:1e:1d:70:68:fe:ba:54:18:58:6c:16: 4f:96:92:17:d4:8c:0b:c0:35:4e:b6:41:bf:df:f4: 84:01:db:50:7a:e4:42:63:fb:88:1e:1a:c2:15:e8: ec:b1:ac:2e:bf:28:ec:a8:1e:25:02:1e:3c:9c:34: 9f:ec:86:f0:54:77:37:a1:d2:e8:82:a9:0a:3d:35: e2:59:03:c3:50:bd:de:d1:f1:08:83:70:97:fc:da: f6:00:c4:b6:a5:38:9d:52:62:ec:18:23:ca:42:f5: 7b:b3:ac:47:db:de:e5:42:63:a1:dd:11:ae:64:5a: 0b:ff:4b:4d:3d:89:bb:7c:05:c1:07:ca:c5:c4:93: eb:b8:b1:3a:59:36:ef:6e:42:a1:db:f7:d9:e4:b6: bf:78:90:f0:d3:68:b4:fb:73:c5:09:37:7e:fe:dc: a6:d5:85:fb:75:be:31:ea:22:ca:9d:ea:84:51:4c: 67:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:03:67:14:DE:B3:8F:4E:7B:35:B0:66:2E:14:EF:DD:BD:F9:12:6F X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e38302e302f32322d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.93.80.0/22 Signature Algorithm: sha256WithRSAEncryption 21:40:82:11:56:6b:f0:f3:78:8f:95:95:f9:1b:55:c4:73:58: 61:82:ad:b3:1c:2e:76:a5:13:bd:f3:ae:e7:03:13:eb:7a:a0: 6e:94:c0:5d:fd:1f:8c:4a:be:a9:23:db:91:c3:28:92:f0:15: bd:20:5c:14:ac:a1:19:94:c1:a5:a7:a5:ee:ae:47:10:d2:21: e2:c3:d5:52:05:14:3e:51:ea:cc:f0:ee:0f:f1:e3:7c:57:a1: 67:34:d8:00:e1:b6:43:58:49:f5:71:62:9d:96:14:e0:f4:ef: d2:5c:9f:98:78:70:26:a1:07:c4:e3:3e:a5:29:2f:1e:cf:ea: cf:40:f1:50:05:25:ec:16:c2:76:32:f2:50:7c:54:6d:d5:c7: 32:d7:08:e3:dc:5a:bf:fe:1e:38:98:fd:87:b2:21:d7:b5:6b: c6:7f:0b:f0:25:70:bd:d5:5e:32:5c:f9:95:05:c3:8c:6e:92: 1f:86:65:7e:72:dd:04:c8:6e:30:6c:f2:1a:cb:31:60:5e:75: 3c:db:b5:7f:45:fb:93:4e:5f:d4:10:3c:89:3d:2c:30:c0:e8: 9c:ae:19:f8:ef:a8:70:f5:e8:ec:9e:3f:94:ce:b5:86:90:95: fa:36:11:8b:f7:bf:0d:12:27:ad:dd:57:0f:5a:a5:f7:1f:0a: cf:e7:e7:76 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUPN+GktQuwpfZ48k9eyQDXZnRkQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMzAxMTQ2MDhaFw0yNjEyMjkxMTUxMDhaMDMxMTAvBgNV BAMTKDI0MDM2NzE0REVCMzhGNEU3QjM1QjA2NjJFMTRFRkREQkRGOTEyNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkxJ1gj/o4YEeit/EFYIKqo3WC B8Y+qcvUZuGmKrpALmTZ090+wV0ABeoVvrCaTHOuUen0k6WIcOdGgv7CmCUBz2Po yxpQUnXX4rmqYRYeHXBo/rpUGFhsFk+WkhfUjAvANU62Qb/f9IQB21B65EJj+4ge GsIV6OyxrC6/KOyoHiUCHjycNJ/shvBUdzeh0uiCqQo9NeJZA8NQvd7R8QiDcJf8 2vYAxLalOJ1SYuwYI8pC9XuzrEfb3uVCY6HdEa5kWgv/S009ibt8BcEHysXEk+u4 sTpZNu9uQqHb99nktr94kPDTaLT7c8UJN37+3KbVhft1vjHqIsqd6oRRTGf9AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUJANnFN6zj057NbBmLhTv3b35Em8wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM3MmUzOTMzMmUzODMw MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEApNd UDANBgkqhkiG9w0BAQsFAAOCAQEAIUCCEVZr8PN4j5WV+RtVxHNYYYKtsxwudqUT vfOu5wMT63qgbpTAXf0fjEq+qSPbkcMokvAVvSBcFKyhGZTBpael7q5HENIh4sPV UgUUPlHqzPDuD/HjfFehZzTYAOG2Q1hJ9XFinZYU4PTv0lyfmHhwJqEHxOM+pSkv Hs/qz0DxUAUl7BbCdjLyUHxUbdXHMtcI49xav/4eOJj9h7Ih17Vrxn8L8CVwvdVe Mlz5lQXDjG6SH4ZlfnLdBMhuMGzyGssxYF51PNu1f0X7k05f1BA8iT0sMMDonK4Z +O+ocPXo7J4/lM61hpCV+jYRi/e/DRInrd1XD1ql9x8Kz+fndg== -----END CERTIFICATE-----Generated at Mon Jan 19 14:23:29 2026 by rpki-client