This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36392e302f32342d3234203d3e20313336373837.roa File: 3135352e3133332e36392e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: hMKYlCzs9p5JDTaFOILjdqxPCeNv7ubu/cTvqQ9YT20= Subject key identifier: A8:E5:19:DF:34:2A:50:0F:B4:D0:BA:2D:77:D9:C1:53:17:75:C4:60 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 054F56C75EDC7D2C947C8114C7DC5675F0723B40 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36392e302f32342d3234203d3e20313336373837.roa Signing time: Tue 06 Jan 2026 20:23:26 +0000 ROA not before: Tue 06 Jan 2026 20:18:26 +0000 ROA not after: Tue 05 Jan 2027 20:23:26 +0000 asID: 136787 IP address blocks: 155.133.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:4f:56:c7:5e:dc:7d:2c:94:7c:81:14:c7:dc:56:75:f0:72:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 6 20:18:26 2026 GMT Not After : Jan 5 20:23:26 2027 GMT Subject: CN=A8E519DF342A500FB4D0BA2D77D9C1531775C460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:19:9f:ca:da:0f:f6:fb:69:88:31:ef:df:9a: 82:27:c0:75:f7:4e:2e:e1:68:4d:12:14:e1:ac:ff: 61:57:4d:95:b0:65:ab:ef:cf:1c:12:0f:f7:fe:56: 85:c0:50:d8:d2:1c:46:d2:e2:92:9e:3b:dc:98:fe: 13:b2:60:18:f0:91:f4:e0:ad:3e:4e:60:4c:e7:3b: f8:b7:0f:3d:67:fe:80:c0:41:b5:a0:b4:d1:17:d8: c3:58:8f:7b:2e:f7:ad:71:4f:29:f5:26:24:35:5d: 75:98:62:77:79:f5:6f:7a:8a:97:dc:f4:de:72:54: ac:ae:bd:12:9b:c0:e9:91:97:1b:b2:a1:59:2c:20: 1c:51:8b:5a:4c:da:e4:c5:64:59:9a:2f:5f:55:7f: 38:98:03:59:c8:e7:84:11:32:38:00:59:96:57:b7: 3c:de:7c:d2:35:3a:e6:a6:42:15:38:4d:74:c6:f3: 04:d8:1e:b8:79:b3:98:36:38:07:01:06:c8:88:13: 04:ec:46:20:ab:6c:31:d7:86:75:a6:5a:9a:f2:3b: e7:09:00:03:23:2d:b1:fa:99:eb:b7:47:1d:90:c8: f5:1d:9b:a3:af:86:36:c7:56:dd:67:64:83:70:18: d9:b7:2e:e9:6b:bf:5f:21:fd:3b:cf:b3:3c:3f:76: d3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E5:19:DF:34:2A:50:0F:B4:D0:BA:2D:77:D9:C1:53:17:75:C4:60 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36392e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.133.69.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:6d:81:81:ad:69:dd:5c:95:53:78:14:3a:26:af:ea:dc:74: 80:c7:6b:ba:f4:b5:09:7e:fe:4c:2c:f2:a5:ce:53:d0:cd:63: fb:2c:92:28:3f:24:ff:77:48:fe:95:3b:1d:bd:6f:4b:f3:d4: 69:73:0f:ca:e3:5f:ce:b4:12:dd:ad:69:2d:67:19:2f:71:4d: a6:c3:fd:31:1e:bc:74:a3:5b:9a:a9:e0:63:09:0c:30:5c:c4: eb:84:81:d5:dc:93:bd:54:c6:bb:7b:c7:1d:c4:36:b3:e3:0a: be:f1:ac:da:cb:6e:9e:5e:ee:33:3b:0b:0a:18:b5:17:4f:91: 44:a5:5d:86:e1:81:17:e6:76:8f:e3:69:00:89:1f:9d:09:84: 1f:f7:a6:90:37:a8:26:b5:9c:53:0e:92:8f:65:eb:4a:9e:11: f2:00:20:c2:c9:65:82:22:50:a2:1d:ba:18:16:7f:98:fc:9e: 2a:60:c9:c8:05:3a:ac:3c:1e:b4:1e:e1:87:62:d3:6a:59:39: ff:a1:08:1c:18:36:fe:65:59:9b:8a:85:95:e4:e1:4d:c2:2c: fd:7e:a4:b2:7a:35:91:33:f8:30:6b:e6:de:93:78:b3:48:bb: 0c:8a:e4:08:72:73:08:3b:92:9e:bf:73:53:ba:08:1a:de:2a: 63:a7:46:50 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUBU9Wx17cfSyUfIEUx9xWdfByO0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMDYyMDE4MjZaFw0yNzAxMDUyMDIzMjZaMDMxMTAvBgNV BAMTKEE4RTUxOURGMzQyQTUwMEZCNEQwQkEyRDc3RDlDMTUzMTc3NUM0NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+GZ/K2g/2+2mIMe/fmoInwHX3 Ti7haE0SFOGs/2FXTZWwZavvzxwSD/f+VoXAUNjSHEbS4pKeO9yY/hOyYBjwkfTg rT5OYEznO/i3Dz1n/oDAQbWgtNEX2MNYj3su961xTyn1JiQ1XXWYYnd59W96ipfc 9N5yVKyuvRKbwOmRlxuyoVksIBxRi1pM2uTFZFmaL19VfziYA1nI54QRMjgAWZZX tzzefNI1OuamQhU4TXTG8wTYHrh5s5g2OAcBBsiIEwTsRiCrbDHXhnWmWpryO+cJ AAMjLbH6meu3Rx2QyPUdm6OvhjbHVt1nZINwGNm3Lulrv18h/TvPszw/dtOvAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUqOUZ3zQqUA+00Lotd9nBUxd1xGAwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM1MmUzMTMzMzMyZTM2 MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACbhUUwDQYJKoZIhvcNAQELBQADggEBAG5tgYGtad1clVN4FDomr+rcdIDHa7r0 tQl+/kws8qXOU9DNY/sskig/JP93SP6VOx29b0vz1GlzD8rjX860Et2taS1nGS9x TabD/TEevHSjW5qp4GMJDDBcxOuEgdXck71Uxrt7xx3ENrPjCr7xrNrLbp5e7jM7 CwoYtRdPkUSlXYbhgRfmdo/jaQCJH50JhB/3ppA3qCa1nFMOko9l60qeEfIAIMLJ ZYIiUKIduhgWf5j8nipgycgFOqw8HrQe4Ydi02pZOf+hCBwYNv5lWZuKhZXk4U3C LP1+pLJ6NZEz+DBr5t6TeLNIuwyK5Ahycwg7kp6/c1O6CBreKmOnRlA= -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:31 2026 by rpki-client