This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e32322e302f32332d3332203d3e203531313637.roa File: 3135352e3133332e32322e302f32332d3332203d3e203531313637.roa (raw, json) Hash identifier: 4aTb44YNnYztBUYmIA7lWUhRghf4Yx2Lrmt6utxesMQ= Subject key identifier: 43:A0:35:03:9B:29:33:75:64:5E:95:78:D4:B8:B3:27:D7:2E:0C:15 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 0C01752FC93BDD93D32F7B238C2830DBAFC11165 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e32322e302f32332d3332203d3e203531313637.roa Signing time: Mon 29 Dec 2025 09:51:02 +0000 ROA not before: Mon 29 Dec 2025 09:46:02 +0000 ROA not after: Mon 28 Dec 2026 09:51:02 +0000 asID: 51167 IP address blocks: 155.133.22.0/23 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:01:75:2f:c9:3b:dd:93:d3:2f:7b:23:8c:28:30:db:af:c1:11:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:46:02 2025 GMT Not After : Dec 28 09:51:02 2026 GMT Subject: CN=43A035039B293375645E9578D4B8B327D72E0C15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f3:d1:e0:86:8e:93:5d:aa:39:02:aa:2a:d8: c9:82:74:40:33:1e:ef:14:ab:c4:bb:9d:bd:f4:1f: bd:18:68:97:35:9e:9a:d2:91:6d:60:b2:e3:d1:df: 3c:c3:70:1f:93:07:3f:46:3e:e2:a5:92:fa:c7:92: f2:33:14:d6:51:84:b2:f9:4f:8a:a2:3c:6a:08:e0: 4c:49:e9:d9:e5:9d:4d:c8:98:1f:5e:95:ea:67:1a: a9:22:39:8e:fb:75:41:d5:48:77:85:96:71:f7:62: 32:e1:75:59:aa:c5:2e:7c:47:00:42:3f:56:20:7e: 9e:25:e6:4c:6e:d3:a8:a6:d8:65:61:30:37:33:32: c2:80:f1:9e:0e:9d:3b:b7:07:90:c1:10:3d:26:09: 33:c9:35:41:34:82:48:26:a7:39:00:d0:60:89:eb: 4b:f3:50:3b:8e:91:9f:9c:88:11:52:76:5e:d5:c4: 37:4a:3f:39:d4:24:37:e7:93:4b:49:50:35:a3:89: ba:48:d0:9e:b9:8a:2b:82:cd:d4:4a:32:06:b4:04: a5:de:83:dd:ec:c4:31:3e:bb:e3:99:46:d5:48:0b: 56:72:9c:f3:91:29:67:d3:11:56:bf:31:6f:3f:24: 87:0f:59:dc:37:a7:9e:57:15:a4:70:6a:49:0f:52: df:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A0:35:03:9B:29:33:75:64:5E:95:78:D4:B8:B3:27:D7:2E:0C:15 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e32322e302f32332d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.133.22.0/23 Signature Algorithm: sha256WithRSAEncryption 41:35:38:73:fa:0f:0c:20:bf:f1:85:1c:e2:b4:5c:22:4f:fb: 60:2f:07:0f:d7:c9:f2:2c:b9:8d:ee:dc:87:48:db:dc:8c:bb: d9:4a:0c:89:ae:cd:ee:da:6e:f7:87:13:17:89:a7:da:37:80: 56:02:c8:eb:df:8d:ed:0b:b4:b0:09:19:de:94:7a:ed:91:ba: 0d:23:07:b6:30:f4:7e:ef:6c:2b:91:13:5d:1f:cc:27:04:86: c9:ac:16:7f:3a:1d:8b:d1:74:18:e2:4e:93:6c:2e:73:c8:90: fa:19:e1:59:0d:00:02:a3:04:14:12:5c:13:1e:3f:e4:87:2f: 0a:eb:bc:df:84:60:75:c8:ea:33:f5:5c:7d:c5:1d:d9:f2:aa: 87:18:1a:24:0b:b6:67:ef:ab:ef:85:4b:12:2c:18:61:5c:9c: f7:2c:b3:af:51:53:80:8c:b6:81:6f:d7:f8:95:c6:57:cc:63: 2d:7f:28:a7:21:c9:d3:0a:98:dd:97:0d:76:a7:aa:14:23:4d: a3:44:84:b8:b4:41:9d:a3:12:82:0b:5f:20:35:e6:47:50:38: 97:58:28:d5:61:52:88:ea:e8:9e:c7:32:81:44:95:b3:bc:0d: f8:22:7d:86:6c:5f:01:2d:f2:20:4d:9a:1d:7a:31:ca:f5:21: ab:95:93:30 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUDAF1L8k73ZPTL3sjjCgw26/BEWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ2MDJaFw0yNjEyMjgwOTUxMDJaMDMxMTAvBgNV BAMTKDQzQTAzNTAzOUIyOTMzNzU2NDVFOTU3OEQ0QjhCMzI3RDcyRTBDMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC789Hgho6TXao5Aqoq2MmCdEAz Hu8Uq8S7nb30H70YaJc1nprSkW1gsuPR3zzDcB+TBz9GPuKlkvrHkvIzFNZRhLL5 T4qiPGoI4ExJ6dnlnU3ImB9elepnGqkiOY77dUHVSHeFlnH3YjLhdVmqxS58RwBC P1Ygfp4l5kxu06im2GVhMDczMsKA8Z4OnTu3B5DBED0mCTPJNUE0gkgmpzkA0GCJ 60vzUDuOkZ+ciBFSdl7VxDdKPznUJDfnk0tJUDWjibpI0J65iiuCzdRKMga0BKXe g93sxDE+u+OZRtVIC1ZynPORKWfTEVa/MW8/JIcPWdw3p55XFaRwakkPUt9lAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUQ6A1A5spM3VkXpV41LizJ9cuDBUwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM1MmUzMTMzMzMyZTMy MzIyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB m4UWMA0GCSqGSIb3DQEBCwUAA4IBAQBBNThz+g8MIL/xhRzitFwiT/tgLwcP18ny LLmN7tyHSNvcjLvZSgyJrs3u2m73hxMXiafaN4BWAsjr343tC7SwCRnelHrtkboN Iwe2MPR+72wrkRNdH8wnBIbJrBZ/Oh2L0XQY4k6TbC5zyJD6GeFZDQACowQUElwT Hj/khy8K67zfhGB1yOoz9Vx9xR3Z8qqHGBokC7Zn76vvhUsSLBhhXJz3LLOvUVOA jLaBb9f4lcZXzGMtfyinIcnTCpjdlw12p6oUI02jRIS4tEGdoxKCC18gNeZHUDiX WCjVYVKI6uiexzKBRJWzvA34In2GbF8BLfIgTZodejHK9SGrlZMw -----END CERTIFICATE-----Generated at Mon Jan 19 14:27:32 2026 by rpki-client