This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e32362e302f32332d3332203d3e203531313637.roa File: 3135352e3133332e32362e302f32332d3332203d3e203531313637.roa (raw, json) Hash identifier: E9g/1GUFF8XlDpuV6Y9ceGqUxsiYLRDB1a8vcD2hItM= Subject key identifier: 09:08:E1:3E:11:E3:92:56:B8:8F:14:24:58:2A:62:7A:6C:53:CE:43 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 7F4745360BB5FA8B90FCF1C1A4A054A5FC822BCA Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e32362e302f32332d3332203d3e203531313637.roa Signing time: Mon 29 Dec 2025 09:50:36 +0000 ROA not before: Mon 29 Dec 2025 09:45:36 +0000 ROA not after: Mon 28 Dec 2026 09:50:36 +0000 asID: 51167 IP address blocks: 155.133.26.0/23 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:47:45:36:0b:b5:fa:8b:90:fc:f1:c1:a4:a0:54:a5:fc:82:2b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:36 2025 GMT Not After : Dec 28 09:50:36 2026 GMT Subject: CN=0908E13E11E39256B88F1424582A627A6C53CE43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7c:b1:c9:00:92:81:9b:a3:41:c1:f6:6f:0a: 69:d6:53:1f:c6:1f:64:26:0c:05:5c:ae:d2:0d:40: 6e:3e:23:38:da:40:6b:7a:14:b9:72:5d:db:5a:0c: a0:e5:23:30:b6:19:2e:e2:2e:c9:3e:c3:c7:40:ea: 1f:1f:c2:4a:ed:a2:12:cb:c0:ae:d7:07:09:05:20: fe:d7:79:cc:b6:13:96:61:41:39:8c:68:7c:f7:58: 17:6c:8e:c9:bb:31:ef:11:db:68:9a:b7:84:e6:48: e9:82:f0:94:90:a8:4c:59:75:c1:0a:b4:97:5f:a5: 3b:3c:d2:0e:da:ab:33:fa:fd:17:57:36:9f:80:18: 24:46:b1:74:05:23:69:f3:16:35:ca:5e:9a:80:9e: 2b:1b:26:63:88:7a:51:83:0d:87:96:75:db:dc:3a: 58:ed:32:5c:0c:95:88:ba:03:d3:ac:07:43:9e:87: 28:dc:16:b4:23:d8:77:77:ff:d6:b2:83:ac:e7:1a: 31:2f:2c:9d:cb:28:b1:e6:00:1e:f5:a5:7f:0e:e6: b0:01:e3:df:f3:94:e3:18:25:be:96:a3:df:54:2a: 38:91:50:f5:c6:9e:6e:34:4e:84:f8:0f:61:60:f0: 15:c7:4c:0a:64:8f:cf:b0:af:55:07:67:11:f5:98: 93:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:08:E1:3E:11:E3:92:56:B8:8F:14:24:58:2A:62:7A:6C:53:CE:43 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e32362e302f32332d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.133.26.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:97:62:cc:82:7f:bc:24:5e:45:40:4f:87:d1:c0:7f:e3:43: 3d:f9:f3:e7:1a:8d:f5:19:cc:e6:c5:40:f6:91:78:02:90:3b: 60:23:fb:9d:15:57:df:87:d1:44:8a:cf:b4:2e:52:5b:c8:07: b4:19:2a:09:a6:e5:84:7f:08:92:34:de:41:44:90:89:ce:c0: c2:43:2d:70:bd:67:bd:58:dd:be:fa:1f:ff:76:b4:17:be:73: f4:76:bd:8b:d9:16:f2:f2:d6:1e:52:f8:7c:dc:4f:d1:48:91: 70:bd:c4:d4:42:32:99:b0:b1:c6:19:ea:7d:f3:2c:7b:9b:ad: fd:74:0f:70:b6:f0:e2:b1:74:0e:e9:7b:88:63:74:ba:c9:6f: 24:0b:96:8b:d4:e9:9c:aa:34:19:cc:23:5b:6c:97:5f:db:aa: d4:58:45:b7:1d:26:10:eb:08:c3:99:e4:3a:f6:d5:f9:f3:9e: bf:ae:d8:4c:d6:8a:5b:61:75:76:e0:ee:52:ba:a4:38:51:13: 33:4d:a3:fa:e5:45:b1:e5:b1:e8:e2:59:4a:5c:9a:76:8e:8b: 85:86:6c:1f:8e:b0:c4:8f:a0:68:62:f2:e6:5b:0c:6d:cc:49: 5c:2f:a7:e7:ee:15:5f:96:13:b8:15:ac:ee:76:bd:c5:52:da: a1:b0:a1:a6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUf0dFNgu1+ouQ/PHBpKBUpfyCK8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1MzZaFw0yNjEyMjgwOTUwMzZaMDMxMTAvBgNV BAMTKDA5MDhFMTNFMTFFMzkyNTZCODhGMTQyNDU4MkE2MjdBNkM1M0NFNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpfLHJAJKBm6NBwfZvCmnWUx/G H2QmDAVcrtINQG4+IzjaQGt6FLlyXdtaDKDlIzC2GS7iLsk+w8dA6h8fwkrtohLL wK7XBwkFIP7Xecy2E5ZhQTmMaHz3WBdsjsm7Me8R22iat4TmSOmC8JSQqExZdcEK tJdfpTs80g7aqzP6/RdXNp+AGCRGsXQFI2nzFjXKXpqAnisbJmOIelGDDYeWddvc OljtMlwMlYi6A9OsB0OehyjcFrQj2Hd3/9ayg6znGjEvLJ3LKLHmAB71pX8O5rAB 49/zlOMYJb6Wo99UKjiRUPXGnm40ToT4D2Fg8BXHTApkj8+wr1UHZxH1mJP9AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUCQjhPhHjkla4jxQkWCpiemxTzkMwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM1MmUzMTMzMzMyZTMy MzYyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB m4UaMA0GCSqGSIb3DQEBCwUAA4IBAQBvl2LMgn+8JF5FQE+H0cB/40M9+fPnGo31 GczmxUD2kXgCkDtgI/udFVffh9FEis+0LlJbyAe0GSoJpuWEfwiSNN5BRJCJzsDC Qy1wvWe9WN2++h//drQXvnP0dr2L2Rby8tYeUvh83E/RSJFwvcTUQjKZsLHGGep9 8yx7m639dA9wtvDisXQO6XuIY3S6yW8kC5aL1OmcqjQZzCNbbJdf26rUWEW3HSYQ 6wjDmeQ69tX5856/rthM1opbYXV24O5SuqQ4URMzTaP65UWx5bHo4llKXJp2jouF hmwfjrDEj6BoYvLmWwxtzElcL6fn7hVflhO4Fazudr3FUtqhsKGm -----END CERTIFICATE-----Generated at Mon Jan 19 14:27:32 2026 by rpki-client