This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37302e302f32342d3234203d3e20323039383534.roa File: 3135352e3133332e37302e302f32342d3234203d3e20323039383534.roa (raw, json) Hash identifier: f7Lo4HgL1hPW7wNLDLN9vvYZj8aT0gjRclDIBDQDLns= Subject key identifier: F0:57:CE:18:4D:2C:48:2F:3D:A4:C6:8C:5E:49:D7:0A:C9:FB:85:B5 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 582712F9B590675FA24B47FCC1E7CBDA6EAD2275 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37302e302f32342d3234203d3e20323039383534.roa Signing time: Mon 05 Jan 2026 09:51:16 +0000 ROA not before: Mon 05 Jan 2026 09:46:16 +0000 ROA not after: Mon 04 Jan 2027 09:51:16 +0000 asID: 209854 IP address blocks: 155.133.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:27:12:f9:b5:90:67:5f:a2:4b:47:fc:c1:e7:cb:da:6e:ad:22:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 5 09:46:16 2026 GMT Not After : Jan 4 09:51:16 2027 GMT Subject: CN=F057CE184D2C482F3DA4C68C5E49D70AC9FB85B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7b:0f:50:a8:a8:13:f5:a6:6c:39:d2:1a:a7: ae:8e:d4:2b:c8:08:ec:ac:4c:25:72:1f:6b:78:2d: 01:a1:5e:e4:13:26:05:2b:34:f7:45:44:07:34:1a: 6d:85:0e:93:f6:7f:10:b9:e9:ef:0d:db:04:b5:6b: db:ec:e3:54:53:da:29:c4:67:07:5b:1a:77:0a:86: ed:c4:ff:cc:d0:d7:d3:f1:24:fc:5c:bf:a5:6c:56: 57:fa:b8:b6:97:ad:4c:b5:38:11:ba:61:05:b9:12: 26:d3:0a:e9:17:b5:95:23:14:ad:40:47:9f:2b:b1: 51:83:41:e1:af:87:83:fa:ad:ac:20:02:90:47:34: d8:5a:f8:2c:3b:43:71:79:9f:23:6c:9a:03:08:94: 1d:2f:d2:a4:e0:49:65:09:81:aa:d2:84:4c:ac:13: 2b:74:79:e4:f6:3a:ea:4e:92:77:32:26:dd:49:46: d3:75:86:b0:b7:b1:22:f3:09:e5:59:4e:54:ad:9d: 3f:8f:3f:4f:74:f3:16:94:ae:5c:11:d7:36:87:4e: a5:6f:9d:a9:cf:a2:4f:e3:a3:e1:ce:ce:81:67:16: e4:70:dc:6a:78:4e:2a:66:78:cb:8a:cb:96:43:aa: 36:02:49:c6:5f:e8:0b:93:e8:d2:a9:a8:32:b0:41: c3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:57:CE:18:4D:2C:48:2F:3D:A4:C6:8C:5E:49:D7:0A:C9:FB:85:B5 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37302e302f32342d3234203d3e20323039383534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.133.70.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:64:15:31:94:8f:1f:b5:fa:a4:73:e2:54:d3:7c:04:78:08: f6:db:e9:bb:b9:bc:0c:55:61:cd:b9:80:b4:30:7b:a9:68:27: 57:6f:8b:35:ab:33:ef:72:06:79:84:d4:b7:cf:e4:e1:97:37: d1:6a:3a:60:23:ea:20:9b:0d:5e:44:17:58:5f:b5:35:92:ea: a3:53:c3:ee:82:a6:49:4b:00:7e:02:3c:6d:53:80:57:aa:5b: ad:8f:06:68:cc:f5:51:27:0d:75:bb:d8:33:ca:b8:3b:f5:0b: 69:1a:84:b1:cc:af:20:1b:ff:59:a1:eb:2f:e5:b7:49:cf:97: e9:4d:50:b2:9e:44:04:fa:46:38:47:1b:e8:9d:b8:5f:48:11: cc:a8:a7:ec:c0:f4:6d:01:1c:fa:f5:03:36:b1:32:e8:a8:ae: 02:56:e3:6d:63:77:e7:46:7a:7f:85:5d:db:d4:6b:65:56:52: f2:ec:b0:6b:ab:06:b7:c2:a4:6d:f7:7c:0e:44:4c:c8:97:f4: 83:87:e1:d4:c7:b5:4f:03:a2:19:9d:6d:7e:e9:ed:f3:a0:91: c7:7c:6a:2a:fe:be:6f:c5:08:72:e2:34:9d:42:2f:f6:c9:50: 9f:e8:d1:06:b3:86:09:5e:c7:7c:f8:03:e4:86:e5:25:0b:a1: a6:a5:11:09 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUWCcS+bWQZ1+iS0f8wefL2m6tInUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMDUwOTQ2MTZaFw0yNzAxMDQwOTUxMTZaMDMxMTAvBgNV BAMTKEYwNTdDRTE4NEQyQzQ4MkYzREE0QzY4QzVFNDlENzBBQzlGQjg1QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmew9QqKgT9aZsOdIap66O1CvI COysTCVyH2t4LQGhXuQTJgUrNPdFRAc0Gm2FDpP2fxC56e8N2wS1a9vs41RT2inE ZwdbGncKhu3E/8zQ19PxJPxcv6VsVlf6uLaXrUy1OBG6YQW5EibTCukXtZUjFK1A R58rsVGDQeGvh4P6rawgApBHNNha+Cw7Q3F5nyNsmgMIlB0v0qTgSWUJgarShEys Eyt0eeT2OupOkncyJt1JRtN1hrC3sSLzCeVZTlStnT+PP0908xaUrlwR1zaHTqVv nanPok/jo+HOzoFnFuRw3Gp4TipmeMuKy5ZDqjYCScZf6AuT6NKpqDKwQcM9AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU8FfOGE0sSC89pMaMXknXCsn7hbUwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM1MmUzMTMzMzMyZTM3 MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzkzODM1MzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACbhUYwDQYJKoZIhvcNAQELBQADggEBAFxkFTGUjx+1+qRz4lTTfAR4CPbb6bu5 vAxVYc25gLQwe6loJ1dvizWrM+9yBnmE1LfP5OGXN9FqOmAj6iCbDV5EF1hftTWS 6qNTw+6CpklLAH4CPG1TgFeqW62PBmjM9VEnDXW72DPKuDv1C2kahLHMryAb/1mh 6y/lt0nPl+lNULKeRAT6RjhHG+iduF9IEcyop+zA9G0BHPr1AzaxMuiorgJW421j d+dGen+FXdvUa2VWUvLssGurBrfCpG33fA5ETMiX9IOH4dTHtU8DohmdbX7p7fOg kcd8air+vm/FCHLiNJ1CL/bJUJ/o0Qazhglex3z4A+SG5SULoaalEQk= -----END CERTIFICATE-----Generated at Mon Jan 19 17:35:24 2026 by rpki-client