This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135312e3130362e39362e302f32302d3234203d3e203437353833.roa File: 3135312e3130362e39362e302f32302d3234203d3e203437353833.roa (raw, json) Hash identifier: vjukyJY9t8+x5bUFb5GXmTMithnTVJT32+LWu77Sy8g= Subject key identifier: 6A:5D:81:AC:17:D3:AE:16:AF:BE:D3:F0:A0:DA:E4:ED:67:72:6D:4F Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 58558655FF7CC693ADE57FE80F2202BB0494F439 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135312e3130362e39362e302f32302d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:38 +0000 ROA not before: Mon 29 Dec 2025 09:45:38 +0000 ROA not after: Mon 28 Dec 2026 09:50:38 +0000 asID: 47583 IP address blocks: 151.106.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:55:86:55:ff:7c:c6:93:ad:e5:7f:e8:0f:22:02:bb:04:94:f4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:38 2025 GMT Not After : Dec 28 09:50:38 2026 GMT Subject: CN=6A5D81AC17D3AE16AFBED3F0A0DAE4ED67726D4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8d:9e:66:f9:25:23:a0:0d:a7:7b:af:b2:18: 9c:0a:a4:cc:0c:10:05:4b:a5:f5:77:ae:76:81:8a: 34:25:1b:bd:d7:07:35:44:07:a3:da:cf:14:2a:a5: 1f:2d:6a:e4:8b:5f:8b:f1:97:07:fb:da:72:bc:55: 99:97:92:02:d5:f3:d3:42:2e:83:be:db:09:a8:f3: b0:60:2f:60:59:46:8b:82:b3:82:94:82:25:65:df: ff:28:46:83:07:48:bc:c2:6b:bb:83:24:40:e5:cc: bd:cf:b7:34:53:67:47:7c:ec:b8:c1:8f:ab:7b:7a: 6b:c7:5e:ac:c6:41:92:7a:30:db:78:b2:d9:42:77: 3d:4c:b6:2a:93:de:0a:8d:9c:f4:c6:26:b7:85:69: c1:3e:c5:57:b0:fc:37:0c:42:8b:e2:05:17:ce:7b: 04:c6:5e:be:fc:3c:df:f4:f4:15:62:53:ed:20:ea: 93:4a:0e:0a:c5:22:22:00:36:64:4f:46:82:1b:5b: 70:dd:1f:e6:75:83:9a:cc:c1:1a:59:28:7b:72:25: 64:84:f8:bc:f7:1b:94:b9:92:e4:df:d2:b2:f6:54: 8c:a9:c3:bb:43:a0:6d:03:0f:80:0e:44:6e:a7:3c: c3:4c:ba:83:43:42:fc:b4:29:81:24:b5:96:e8:6f: 3b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5D:81:AC:17:D3:AE:16:AF:BE:D3:F0:A0:DA:E4:ED:67:72:6D:4F X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135312e3130362e39362e302f32302d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.106.96.0/20 Signature Algorithm: sha256WithRSAEncryption 20:9b:82:0f:d4:a3:ad:97:35:eb:11:83:32:11:eb:9d:f5:ab: ac:f8:f3:d1:67:ad:54:35:02:73:1f:e2:e8:f3:f4:bf:64:3a: bf:d5:80:cb:26:0c:97:dc:97:99:67:15:2a:13:40:04:dd:b0: a5:87:e0:3e:bf:ab:b3:71:c8:fa:d8:aa:c4:0e:92:38:bf:ce: b3:b3:6d:b9:26:18:c6:f8:04:d6:b8:48:5b:dc:56:d8:fd:04: ff:5d:45:57:36:16:36:01:07:9f:eb:96:50:84:79:53:c6:47: 22:e1:32:f7:58:64:a6:fc:65:b3:b9:da:da:03:7d:60:08:67: e5:63:c0:b6:56:c7:48:e9:32:e1:6f:fb:7a:d6:f9:d9:43:9b: e7:a9:1d:05:ca:6f:83:a5:01:35:5f:22:81:9f:ee:7e:ba:7d: cc:32:c9:c2:07:13:1a:9b:85:4d:0e:e7:ea:5c:d3:ff:45:13: bd:e9:f1:d3:90:06:a0:1e:33:6a:41:23:49:91:cc:32:4d:6f: bd:c6:b3:de:1b:6e:02:f0:ab:cd:2d:54:3e:04:0b:68:38:6f: 70:24:77:ea:1a:83:14:36:a0:a4:96:8e:cc:b5:a7:14:42:a1: 3f:d7:6f:d8:8f:ce:ad:1d:8a:da:2c:73:eb:5c:70:0c:b3:29: 9e:c3:97:4f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUWFWGVf98xpOt5X/oDyICuwSU9DkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1MzhaFw0yNjEyMjgwOTUwMzhaMDMxMTAvBgNV BAMTKDZBNUQ4MUFDMTdEM0FFMTZBRkJFRDNGMEEwREFFNEVENjc3MjZENEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpjZ5m+SUjoA2ne6+yGJwKpMwM EAVLpfV3rnaBijQlG73XBzVEB6PazxQqpR8tauSLX4vxlwf72nK8VZmXkgLV89NC LoO+2wmo87BgL2BZRouCs4KUgiVl3/8oRoMHSLzCa7uDJEDlzL3PtzRTZ0d87LjB j6t7emvHXqzGQZJ6MNt4stlCdz1MtiqT3gqNnPTGJreFacE+xVew/DcMQoviBRfO ewTGXr78PN/09BViU+0g6pNKDgrFIiIANmRPRoIbW3DdH+Z1g5rMwRpZKHtyJWSE +Lz3G5S5kuTf0rL2VIypw7tDoG0DD4AORG6nPMNMuoNDQvy0KYEktZbobzuxAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUal2BrBfTrhavvtPwoNrk7WdybU8wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTMxMmUzMTMwMzYyZTM5 MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE l2pgMA0GCSqGSIb3DQEBCwUAA4IBAQAgm4IP1KOtlzXrEYMyEeud9aus+PPRZ61U NQJzH+Lo8/S/ZDq/1YDLJgyX3JeZZxUqE0AE3bClh+A+v6uzccj62KrEDpI4v86z s225JhjG+ATWuEhb3FbY/QT/XUVXNhY2AQef65ZQhHlTxkci4TL3WGSm/GWzudra A31gCGflY8C2VsdI6TLhb/t61vnZQ5vnqR0Fym+DpQE1XyKBn+5+un3MMsnCBxMa m4VNDufqXNP/RRO96fHTkAagHjNqQSNJkcwyTW+9xrPeG24C8KvNLVQ+BAtoOG9w JHfqGoMUNqCklo7MtacUQqE/12/Yj86tHYraLHPrXHAMsymew5dP -----END CERTIFICATE-----Generated at Mon Jan 19 14:23:20 2026 by rpki-client