This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31332e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e31332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: LTlUXGqhpU4nZRGSgNx3kuef56xwdib30wjYlF29FJw=
Subject key identifier: 66:3A:D7:7B:33:28:65:BA:F8:66:22:94:B7:81:89:EF:4C:A6:75:93
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 277E0F063144A5096FAD0412424C4AA621E94704
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31332e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 03 Jan 2026 22:51:14 +0000
ROA not before: Sat 03 Jan 2026 22:46:14 +0000
ROA not after: Sat 02 Jan 2027 22:51:14 +0000
asID: 136787
IP address blocks: 155.133.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 14:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:7e:0f:06:31:44:a5:09:6f:ad:04:12:42:4c:4a:a6:21:e9:47:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 3 22:46:14 2026 GMT
Not After : Jan 2 22:51:14 2027 GMT
Subject: CN=663AD77B332865BAF8662294B78189EF4CA67593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:12:f6:d3:d2:2a:f7:6c:3e:db:fd:f6:b8:f5:
c4:e6:9f:2a:1d:c8:df:41:7c:7b:4c:1f:0b:66:80:
57:84:3c:03:d1:4e:ee:29:0c:cd:72:a5:e3:06:64:
72:9a:07:98:b4:77:8e:3d:f3:e1:96:38:e7:e9:d5:
01:b6:e0:87:45:8e:9f:ea:f6:d6:4b:e8:3b:f1:8f:
a5:4a:4c:37:ee:a3:c6:af:a7:46:00:53:7d:27:93:
0c:e4:eb:6b:8e:65:8b:35:58:fb:8f:22:46:6f:7d:
36:f9:79:8c:49:7e:7e:ef:9a:9c:c7:44:83:d7:d9:
8b:50:55:09:c3:0a:9e:fa:94:91:a9:95:39:56:8d:
b9:da:33:90:de:a7:cb:41:03:39:a2:ad:96:65:58:
c2:0e:3b:3a:ac:c3:0e:78:31:31:34:ae:46:e4:ad:
29:87:e5:b3:15:c1:03:ce:e6:bc:61:f1:b2:9b:11:
35:d3:31:96:e2:cd:48:2b:8f:ef:f7:3a:06:99:60:
e3:74:f1:ec:b3:c1:fe:9d:79:24:9c:16:b9:31:b4:
4a:a8:4f:e1:bc:a8:22:34:e1:76:fd:dc:42:a6:26:
f4:fb:d6:7d:c2:7f:d1:ce:a2:ad:d6:fc:9e:70:4b:
f8:85:39:b9:cd:c5:c5:b9:67:da:2e:53:8f:ec:16:
a3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3A:D7:7B:33:28:65:BA:F8:66:22:94:B7:81:89:EF:4C:A6:75:93
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.13.0/24
Signature Algorithm: sha256WithRSAEncryption
39:b1:8b:f7:ef:4b:72:c0:30:f8:68:9d:07:32:56:13:77:9c:
4d:7e:0b:fc:59:33:19:5e:34:1f:c4:db:82:e7:91:8a:91:dc:
99:60:72:eb:1a:9f:13:24:d2:f0:f2:72:95:a0:4c:48:ed:3c:
78:84:66:c2:20:de:55:67:d7:00:48:34:aa:7c:c0:c4:a6:84:
c4:1a:2e:3a:8b:4a:67:e6:7a:5d:75:3b:7d:84:21:73:67:5d:
04:f7:b4:35:fb:35:4e:68:3a:50:5a:66:0c:2c:4e:c4:6d:05:
a2:bd:27:54:76:67:e7:36:99:df:84:31:d3:4f:37:88:4c:38:
0c:16:e8:c9:97:e0:c8:49:4f:bf:06:c9:0e:46:89:2e:f1:fc:
95:d0:5b:a5:83:60:24:fe:1b:b0:e9:17:fe:98:83:8e:33:44:
a1:8b:29:68:d4:0e:b3:f4:5f:28:19:49:47:49:83:4f:4a:d5:
f8:94:9b:22:1e:fa:6b:d7:33:d8:10:d8:ad:83:23:3f:b6:fd:
d2:ba:b1:b2:0e:c3:1d:41:6e:4a:6d:8b:6b:e4:ea:69:fe:41:
87:cc:d0:2e:97:17:41:a7:d6:f6:f8:54:33:29:58:a7:7c:f3:
13:d9:7e:34:5e:b8:f9:50:6f:9e:94:31:a5:7d:c3:8f:ea:a5:
7a:01:ec:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 04:26:23 2026 by rpki-client