This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e302e302f32342d3332203d3e203531313637.roa File: 3135352e3133332e302e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: W+b/IPEhGy1CVst2xIfXr2C+4zyVO5BdkZFxwUy0oC8= Subject key identifier: 23:35:3E:1D:ED:E7:5B:72:CE:E3:CA:5D:61:B3:3F:17:DA:43:7E:1A Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 26E046FA9976E134F1D00F8263BA0FC441EFCB2E Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e302e302f32342d3332203d3e203531313637.roa Signing time: Mon 29 Dec 2025 09:50:44 +0000 ROA not before: Mon 29 Dec 2025 09:45:44 +0000 ROA not after: Mon 28 Dec 2026 09:50:44 +0000 asID: 51167 IP address blocks: 155.133.0.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e0:46:fa:99:76:e1:34:f1:d0:0f:82:63:ba:0f:c4:41:ef:cb:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:44 2025 GMT Not After : Dec 28 09:50:44 2026 GMT Subject: CN=23353E1DEDE75B72CEE3CA5D61B33F17DA437E1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:64:30:c2:a0:04:4c:af:0a:58:5a:5e:0a: 9d:de:d1:dc:c0:2a:4e:bd:67:d9:ed:98:32:8b:17: 2d:d9:03:57:ad:01:05:ce:1b:3e:3d:8c:b1:90:aa: 7f:b7:c6:51:57:ec:3c:20:34:f4:fc:d7:81:17:f4: 50:cb:ef:21:63:c3:64:72:3a:18:e4:68:9d:1e:81: 47:bf:6c:58:dc:5d:c8:86:df:99:3c:be:89:e8:9d: 5f:f2:ec:bf:f4:7d:6d:b5:a2:25:8f:33:2f:a6:d6: fc:ae:07:0e:d0:3d:78:62:81:e8:29:ec:b5:6d:f5: d1:91:80:0a:aa:c5:9e:a9:ab:56:87:f8:6f:9c:4a: c2:b5:8f:93:76:22:da:1a:93:ce:4e:5e:eb:91:59: b1:b6:cd:0f:2d:b2:ff:36:11:27:49:8d:90:9e:4f: 6c:b3:2f:cf:13:4a:1b:d8:18:99:bb:92:f8:57:68: b2:fd:d3:42:84:61:5d:82:d8:e7:98:89:27:b6:99: 45:ce:5e:79:9c:40:53:80:d4:c5:1b:7f:32:97:a9: b2:9c:29:78:91:c1:27:ad:76:a6:4b:a5:13:d2:44: b5:26:47:85:8a:9c:95:3e:cf:5a:80:ad:21:b7:89: 2f:e5:73:1c:36:cb:d3:7e:57:8f:6c:5f:df:80:51: f8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:35:3E:1D:ED:E7:5B:72:CE:E3:CA:5D:61:B3:3F:17:DA:43:7E:1A X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e302e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.133.0.0/24 Signature Algorithm: sha256WithRSAEncryption 15:75:50:cb:23:ed:53:36:99:42:e6:0d:83:2b:b7:a0:64:2f: e7:de:dd:9d:11:46:61:17:1a:9a:ef:0a:4c:e5:fe:68:a6:76: 57:19:b4:2b:38:7f:28:8e:df:ad:aa:c6:1d:e2:d4:a9:c2:c6: 54:60:f2:f9:9c:d1:c2:42:27:97:69:f5:62:40:3e:f7:01:16: 3f:a3:5e:11:ed:c7:15:ef:7a:93:96:8d:9f:dc:e8:b1:b8:f8: 79:0a:37:d6:67:37:15:12:45:96:9b:10:da:af:4e:9b:bb:83: 24:a0:31:25:c6:1a:20:64:b7:91:63:1e:43:79:5c:4d:0d:77: a2:16:48:6d:9c:fe:31:cb:a7:75:e5:ae:8a:da:41:97:f8:93: e7:40:f2:0a:7e:c2:6d:e5:5c:11:96:7c:52:6a:d6:a5:98:16: b6:56:c3:1a:66:c6:da:b4:bf:b3:73:92:ef:28:3c:10:b6:d2: 17:33:b1:e8:c4:1e:7d:00:c0:44:e2:bc:59:05:e2:01:02:06: 8b:6d:a7:10:dc:90:c0:34:9e:f2:85:46:12:6e:0f:fe:d4:67: fc:62:a8:92:ff:ea:72:e7:61:46:d1:88:c5:ba:fa:8c:49:a7: e5:3d:28:0c:f5:9d:78:48:70:ca:7a:8a:45:db:3a:5a:be:16: ce:47:c2:b1 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUJuBG+pl24TTx0A+CY7oPxEHvyy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDRaFw0yNjEyMjgwOTUwNDRaMDMxMTAvBgNV BAMTKDIzMzUzRTFERURFNzVCNzJDRUUzQ0E1RDYxQjMzRjE3REE0MzdFMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCslWQwwqAETK8KWFpeCp3e0dzA Kk69Z9ntmDKLFy3ZA1etAQXOGz49jLGQqn+3xlFX7DwgNPT814EX9FDL7yFjw2Ry OhjkaJ0egUe/bFjcXciG35k8vononV/y7L/0fW21oiWPMy+m1vyuBw7QPXhigegp 7LVt9dGRgAqqxZ6pq1aH+G+cSsK1j5N2Itoak85OXuuRWbG2zQ8tsv82ESdJjZCe T2yzL88TShvYGJm7kvhXaLL900KEYV2C2OeYiSe2mUXOXnmcQFOA1MUbfzKXqbKc KXiRwSetdqZLpRPSRLUmR4WKnJU+z1qArSG3iS/lcxw2y9N+V49sX9+AUfjjAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUIzU+He3nW3LO48pdYbM/F9pDfhowHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM1MmUzMTMzMzMyZTMw MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJuF ADANBgkqhkiG9w0BAQsFAAOCAQEAFXVQyyPtUzaZQuYNgyu3oGQv597dnRFGYRca mu8KTOX+aKZ2Vxm0Kzh/KI7frarGHeLUqcLGVGDy+ZzRwkInl2n1YkA+9wEWP6Ne Ee3HFe96k5aNn9zosbj4eQo31mc3FRJFlpsQ2q9Om7uDJKAxJcYaIGS3kWMeQ3lc TQ13ohZIbZz+McundeWuitpBl/iT50DyCn7CbeVcEZZ8UmrWpZgWtlbDGmbG2rS/ s3OS7yg8ELbSFzOx6MQefQDAROK8WQXiAQIGi22nENyQwDSe8oVGEm4P/tRn/GKo kv/qcudhRtGIxbr6jEmn5T0oDPWdeEhwynqKRds6Wr4WzkfCsQ== -----END CERTIFICATE-----Generated at Tue Feb 10 06:10:45 2026 by rpki-client