This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133372e302f32342d3332203d3e203531313637.roa File: 3138352e3133352e3133372e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: KUfQaN57/CEDCIl6UuVD4Ika0KQossZGqC6ZRHISz3k= Subject key identifier: A4:3D:97:BA:F5:CA:E2:BA:BA:A0:CB:26:CF:01:85:60:60:77:94:10 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 0481E50AACE7041906FAFA50679B07EB01EE7F6F Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133372e302f32342d3332203d3e203531313637.roa Signing time: Mon 29 Dec 2025 09:51:03 +0000 ROA not before: Mon 29 Dec 2025 09:46:03 +0000 ROA not after: Mon 28 Dec 2026 09:51:03 +0000 asID: 51167 IP address blocks: 185.135.137.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:81:e5:0a:ac:e7:04:19:06:fa:fa:50:67:9b:07:eb:01:ee:7f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:46:03 2025 GMT Not After : Dec 28 09:51:03 2026 GMT Subject: CN=A43D97BAF5CAE2BABAA0CB26CF01856060779410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:75:75:67:fa:c8:64:b9:3e:2a:1f:71:73:63: 4d:bf:19:08:49:39:c7:8b:18:c3:a6:a9:30:3e:73: 24:6c:42:c3:7c:9b:6e:f6:cb:f8:ba:b9:2b:31:d0: 13:09:d8:dc:c6:29:08:42:30:d1:44:b6:73:b5:6d: fc:a5:fc:86:59:99:62:fe:59:d4:d5:c3:2c:cf:f5: d0:00:c1:f1:30:59:79:a6:d2:9b:a5:0a:ff:b8:9a: 44:7d:c6:72:f3:c5:e4:72:55:aa:90:87:cc:41:65: 82:ca:7c:6b:fe:f0:71:74:92:9c:1b:9c:45:22:e7: 64:b9:d8:95:26:86:15:e0:0e:1b:a5:2c:da:63:ce: 32:c2:13:e3:67:30:7c:f6:7f:02:5b:83:b7:a3:cc: 1e:a7:ba:ba:eb:dd:f2:6d:3b:72:b8:35:12:42:2b: 58:1a:94:9f:75:4d:13:ef:ec:1a:f1:37:3b:52:b9: fd:a3:e7:c7:b5:dd:b9:ae:e7:c9:2a:68:80:4a:d7: a8:b7:e9:c0:d0:af:3e:94:0f:3b:b1:bd:5c:57:5b: a1:89:17:c4:c4:8e:18:1e:37:00:49:5b:11:6e:b1: 39:ee:62:0a:d7:9a:f6:67:91:55:3f:e9:17:28:f9: a5:cf:ef:fc:af:c5:80:23:f5:48:20:78:b4:6f:03: 91:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3D:97:BA:F5:CA:E2:BA:BA:A0:CB:26:CF:01:85:60:60:77:94:10 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133372e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.137.0/24 Signature Algorithm: sha256WithRSAEncryption 36:28:61:e3:21:3d:92:fb:10:9d:9c:9d:0d:fa:fd:40:7e:25: 4e:af:c5:e6:9f:7c:79:83:5f:b7:c6:92:f1:f0:29:14:f6:8f: fd:3b:9d:19:4b:f3:a2:b5:71:cf:66:b1:85:5d:f5:a9:6f:13: 5f:eb:ce:d3:17:75:b1:57:58:66:2d:23:ce:85:27:5c:40:ec: 12:f0:e9:81:28:eb:fb:3c:25:16:43:b7:c8:da:ae:7f:da:0c: e9:5d:8e:b5:dc:22:e8:20:62:24:3c:6c:04:2f:c5:a3:8c:16: 73:f0:68:ff:94:47:0b:2d:72:9e:d8:90:63:ad:0b:42:85:ba: af:e5:a2:54:53:43:38:b1:37:eb:e6:92:7b:f9:3b:17:e8:3a: 00:12:ee:46:0a:59:62:94:e0:1d:86:6e:6b:c6:3e:9e:e0:8e: 9b:f2:1f:55:20:b5:c7:9e:fa:1b:c6:a8:3c:9d:ba:00:6e:38: 81:43:92:d3:16:19:32:98:07:72:1c:82:dd:85:84:3c:af:34: 48:bc:1c:68:08:ef:3d:44:2f:4a:92:85:07:01:91:72:5a:a3: 25:e1:04:4c:7d:04:0a:c2:4f:66:e4:92:18:ab:89:8c:02:81: 82:5e:36:41:5b:d2:89:84:08:7a:28:cc:91:85:14:eb:bd:e7: 97:bd:c2:64 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUBIHlCqznBBkG+vpQZ5sH6wHuf28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ2MDNaFw0yNjEyMjgwOTUxMDNaMDMxMTAvBgNV BAMTKEE0M0Q5N0JBRjVDQUUyQkFCQUEwQ0IyNkNGMDE4NTYwNjA3Nzk0MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtdXVn+shkuT4qH3FzY02/GQhJ OceLGMOmqTA+cyRsQsN8m272y/i6uSsx0BMJ2NzGKQhCMNFEtnO1bfyl/IZZmWL+ WdTVwyzP9dAAwfEwWXmm0pulCv+4mkR9xnLzxeRyVaqQh8xBZYLKfGv+8HF0kpwb nEUi52S52JUmhhXgDhulLNpjzjLCE+NnMHz2fwJbg7ejzB6nurrr3fJtO3K4NRJC K1galJ91TRPv7BrxNztSuf2j58e13bmu58kqaIBK16i36cDQrz6UDzuxvVxXW6GJ F8TEjhgeNwBJWxFusTnuYgrXmvZnkVU/6Rco+aXP7/yvxYAj9UggeLRvA5E3AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUpD2XuvXK4rq6oMsmzwGFYGB3lBAwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTMzMzUyZTMx MzMzNzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5h4kwDQYJKoZIhvcNAQELBQADggEBADYoYeMhPZL7EJ2cnQ36/UB+JU6vxeaf fHmDX7fGkvHwKRT2j/07nRlL86K1cc9msYVd9alvE1/rztMXdbFXWGYtI86FJ1xA 7BLw6YEo6/s8JRZDt8jarn/aDOldjrXcIuggYiQ8bAQvxaOMFnPwaP+URwstcp7Y kGOtC0KFuq/lolRTQzixN+vmknv5OxfoOgAS7kYKWWKU4B2GbmvGPp7gjpvyH1Ug tcee+hvGqDydugBuOIFDktMWGTKYB3Icgt2FhDyvNEi8HGgI7z1EL0qShQcBkXJa oyXhBEx9BArCT2bkkhiriYwCgYJeNkFb0omECHoozJGFFOu955e9wmQ= -----END CERTIFICATE-----Generated at Mon Jan 19 14:26:17 2026 by rpki-client