This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e38302e302f32302d3332203d3e203531313637.roa File: 3135382e3232302e38302e302f32302d3332203d3e203531313637.roa (raw, json) Hash identifier: DjmfTa7S3RALqLw/pwMi4DZAwW76E/FT8hrpu5bIjxY= Subject key identifier: FC:A7:4E:62:1D:14:4C:5D:E4:D9:16:BE:B9:25:8F:08:14:93:2A:79 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: EFFE95C734A9F34EA0C5892C43E531598EDD49 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e38302e302f32302d3332203d3e203531313637.roa Signing time: Fri 02 Jan 2026 09:51:10 +0000 ROA not before: Fri 02 Jan 2026 09:46:10 +0000 ROA not after: Fri 01 Jan 2027 09:51:10 +0000 asID: 51167 IP address blocks: 158.220.80.0/20 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ef:fe:95:c7:34:a9:f3:4e:a0:c5:89:2c:43:e5:31:59:8e:dd:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 2 09:46:10 2026 GMT Not After : Jan 1 09:51:10 2027 GMT Subject: CN=FCA74E621D144C5DE4D916BEB9258F0814932A79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1b:3a:51:40:3c:8d:90:37:41:e5:7e:91:9a: 87:00:47:55:28:4b:b5:c1:35:cf:59:87:5d:2e:c3: 9f:26:bd:d4:ae:41:ae:eb:00:ef:8c:6d:6a:46:b8: 15:5c:d9:ba:17:99:71:01:91:74:81:0a:48:9f:e2: 89:22:3a:45:97:4e:78:4e:d0:da:69:40:70:0e:1b: 8a:e7:d0:2c:fc:97:f0:a5:ba:1b:c3:0d:9a:a4:d0: 7d:26:0f:ed:b7:1e:3e:20:66:ec:da:72:bd:19:e4: 2d:b6:a4:f0:70:d6:5a:c2:f2:17:3f:ff:da:87:0e: 5e:37:f2:1e:fc:54:64:9c:1a:ff:65:67:cf:6e:cd: d5:ba:58:3e:9d:89:08:49:c0:f9:c4:3c:f0:f4:0a: 0f:c0:c8:c6:9e:04:c0:25:e0:0f:4b:a4:5e:82:43: ca:17:10:11:56:65:a2:c0:c8:bd:37:94:37:50:9b: cd:e1:b0:ca:29:3f:d3:ab:10:22:f8:e4:ea:c3:7c: c7:b0:8d:e9:cb:e3:54:20:9b:7e:4e:b5:05:28:80: 22:91:8d:d0:1a:65:df:da:e6:77:6c:5e:a3:56:df: 40:fc:66:7c:ed:82:e6:d7:40:88:c3:bd:80:7c:74: 21:44:14:f9:49:2d:a5:c5:af:e5:fb:5a:3a:d6:f0: cc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A7:4E:62:1D:14:4C:5D:E4:D9:16:BE:B9:25:8F:08:14:93:2A:79 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e38302e302f32302d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.220.80.0/20 Signature Algorithm: sha256WithRSAEncryption 04:a3:fc:a9:f1:bf:87:18:87:c6:2f:a6:6a:db:fe:fa:eb:8f: 1d:49:6c:c1:8a:66:14:b2:3e:a2:ab:cb:a6:b8:d4:e4:97:28: 52:59:d7:db:ac:4e:1a:e6:4b:78:05:3f:02:12:b7:08:72:0d: 16:74:ab:b5:e2:9b:23:b0:c9:1c:e2:32:46:55:cc:b4:56:5c: db:90:6b:b9:37:4e:8b:2c:0c:d2:ac:d8:1f:06:b1:55:27:ae: 6e:7c:65:1e:f2:c9:43:d7:f0:30:a6:d7:16:aa:88:d6:b8:51: de:85:71:f4:6f:5a:37:d8:1f:a2:0a:32:2d:83:e9:86:c6:28: bb:6c:10:43:6d:24:6a:ef:c4:2f:02:53:dc:45:6e:bc:97:ba: ca:9b:95:01:7f:ad:9e:95:42:fd:cc:2b:c8:09:a3:ca:f1:fa: 69:6a:44:bc:cd:84:5a:c8:cc:7f:7d:09:e4:0d:fd:95:c8:76: a2:c5:a2:40:95:e6:14:33:69:84:82:5d:a7:92:b9:8b:37:22: 71:86:fb:a1:85:af:ca:40:09:05:5d:3f:97:f0:a0:44:c8:80: 32:b9:91:d4:d9:af:68:b9:dd:64:22:a4:38:0d:04:a0:41:99: d9:77:6c:4f:de:e4:35:1d:e1:90:db:ea:3d:47:5e:ae:b4:a9: 55:cf:39:7d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUAO/+lcc0qfNOoMWJLEPlMVmO3UkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMDIwOTQ2MTBaFw0yNzAxMDEwOTUxMTBaMDMxMTAvBgNV BAMTKEZDQTc0RTYyMUQxNDRDNURFNEQ5MTZCRUI5MjU4RjA4MTQ5MzJBNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1GzpRQDyNkDdB5X6RmocAR1Uo S7XBNc9Zh10uw58mvdSuQa7rAO+MbWpGuBVc2boXmXEBkXSBCkif4okiOkWXTnhO 0NppQHAOG4rn0Cz8l/CluhvDDZqk0H0mD+23Hj4gZuzacr0Z5C22pPBw1lrC8hc/ /9qHDl438h78VGScGv9lZ89uzdW6WD6diQhJwPnEPPD0Cg/AyMaeBMAl4A9LpF6C Q8oXEBFWZaLAyL03lDdQm83hsMopP9OrECL45OrDfMewjenL41Qgm35OtQUogCKR jdAaZd/a5ndsXqNW30D8ZnztgubXQIjDvYB8dCFEFPlJLaXFr+X7WjrW8MzPAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU/KdOYh0UTF3k2Ra+uSWPCBSTKnkwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM4MmUzMjMyMzAyZTM4 MzAyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE ntxQMA0GCSqGSIb3DQEBCwUAA4IBAQAEo/yp8b+HGIfGL6Zq2/76648dSWzBimYU sj6iq8umuNTklyhSWdfbrE4a5kt4BT8CErcIcg0WdKu14psjsMkc4jJGVcy0Vlzb kGu5N06LLAzSrNgfBrFVJ65ufGUe8slD1/AwptcWqojWuFHehXH0b1o32B+iCjIt g+mGxii7bBBDbSRq78QvAlPcRW68l7rKm5UBf62elUL9zCvICaPK8fppakS8zYRa yMx/fQnkDf2VyHaixaJAleYUM2mEgl2nkrmLNyJxhvuhha/KQAkFXT+X8KBEyIAy uZHU2a9oud1kIqQ4DQSgQZnZd2xP3uQ1HeGQ2+o9R16utKlVzzl9 -----END CERTIFICATE-----Generated at Mon Jan 19 14:25:00 2026 by rpki-client