This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3137302e302f32342d3332203d3e203531313637.roa File: 3138352e3138372e3137302e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: 0qJBLIabgigGq85KOMOcCwsx7nGKgf3UGr1ktz2DGdo= Subject key identifier: 21:95:C0:B7:BC:7D:15:FC:50:A6:CB:E0:54:E8:58:C5:11:21:2E:BA Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 2EEF04C9F0F5DED7FE5FB81170ED7B92AC7561FC Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3137302e302f32342d3332203d3e203531313637.roa Signing time: Mon 29 Dec 2025 09:50:56 +0000 ROA not before: Mon 29 Dec 2025 09:45:56 +0000 ROA not after: Mon 28 Dec 2026 09:50:56 +0000 asID: 51167 IP address blocks: 185.187.170.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ef:04:c9:f0:f5:de:d7:fe:5f:b8:11:70:ed:7b:92:ac:75:61:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:56 2025 GMT Not After : Dec 28 09:50:56 2026 GMT Subject: CN=2195C0B7BC7D15FC50A6CBE054E858C511212EBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:07:e7:0a:8b:b6:7f:b5:78:38:31:19:79: 9e:55:c6:be:23:29:a4:97:ae:8f:8b:2c:90:e5:ac: c9:fd:dc:e0:93:ec:1e:f6:97:12:12:81:2e:5b:01: a2:47:d7:d5:a7:ec:bf:fe:91:3e:62:31:33:63:ef: 86:09:82:a1:60:1e:06:18:74:34:bb:f4:99:44:88: 07:3e:fe:d8:e5:2b:be:22:44:90:4a:38:ce:4f:de: b8:ef:3a:ea:7a:7e:71:1c:fa:bb:31:df:82:f4:bb: 78:cc:c8:f0:a0:28:bd:62:99:2c:04:ec:1d:6d:05: 9a:be:d6:e3:64:79:5e:22:8c:3c:5c:d6:38:c5:fb: 9d:8c:e9:9f:4a:cc:cd:8a:df:fe:14:ad:14:4f:69: 8b:7d:57:ec:a7:ba:48:c9:b3:8e:e1:41:3f:9a:47: 0a:41:96:79:fe:9b:1e:e4:97:10:1f:8d:7a:15:2c: b4:37:b5:27:e1:e3:a1:35:4b:2a:29:ea:90:6f:68: 94:42:74:09:ba:e4:f2:75:43:49:d9:90:60:5e:97: 69:64:8a:ed:51:1b:de:b4:0f:15:e1:dd:26:49:c6: a3:d2:38:cc:dd:2d:0d:fd:bb:d8:88:15:39:4c:9d: 53:3c:8e:12:67:82:f9:e1:4f:da:7f:a0:8f:42:7f: ff:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:95:C0:B7:BC:7D:15:FC:50:A6:CB:E0:54:E8:58:C5:11:21:2E:BA X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3137302e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.170.0/24 Signature Algorithm: sha256WithRSAEncryption 11:8a:e6:1c:35:fc:6b:43:d5:88:de:e4:7c:2f:b0:5c:72:2c: 6d:f6:ae:0a:27:74:ad:61:e7:97:0e:50:cf:52:0e:a6:65:fe: 62:f9:1c:c9:2f:e2:b8:f0:78:a8:11:6e:e8:fd:e4:e7:83:3e: 68:52:ee:a5:b1:a6:ae:d1:b1:3f:8f:fc:c2:16:1f:1d:95:17: e1:86:d1:0d:fd:ce:89:4a:d7:bb:98:3a:18:40:f4:6b:1a:ba: 94:60:5e:30:4e:39:6a:d1:7f:53:0e:b3:c2:90:6b:63:79:e3: 42:04:f9:52:c8:f5:c5:d7:6b:dd:b4:4b:2b:5a:36:8a:8b:8b: 93:04:65:91:df:cf:c2:f2:7d:35:90:69:55:4e:3d:93:19:4d: 6c:c3:ce:56:4d:00:8e:5d:1d:84:57:77:36:6e:27:3e:91:f7: 5c:4f:ad:bd:49:d7:a5:10:4e:79:c9:ac:73:b3:a6:d7:2f:61: 7f:89:02:7a:98:0e:79:cf:bc:f1:71:86:3b:ae:47:31:8a:ce: 2f:20:39:87:5d:58:25:de:a8:b2:63:5e:34:10:42:e1:1d:0d: be:17:20:45:46:0f:6c:b3:06:31:d1:61:1e:66:28:ce:9d:e7: 27:aa:2c:83:61:37:2a:40:d6:af:5c:8c:55:a0:5a:ca:50:d9: 55:a4:51:bd -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIULu8EyfD13tf+X7gRcO17kqx1YfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTZaFw0yNjEyMjgwOTUwNTZaMDMxMTAvBgNV BAMTKDIxOTVDMEI3QkM3RDE1RkM1MEE2Q0JFMDU0RTg1OEM1MTEyMTJFQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCprQfnCou2f7V4ODEZeZ5Vxr4j KaSXro+LLJDlrMn93OCT7B72lxISgS5bAaJH19Wn7L/+kT5iMTNj74YJgqFgHgYY dDS79JlEiAc+/tjlK74iRJBKOM5P3rjvOup6fnEc+rsx34L0u3jMyPCgKL1imSwE 7B1tBZq+1uNkeV4ijDxc1jjF+52M6Z9KzM2K3/4UrRRPaYt9V+ynukjJs47hQT+a RwpBlnn+mx7klxAfjXoVLLQ3tSfh46E1Syop6pBvaJRCdAm65PJ1Q0nZkGBel2lk iu1RG960DxXh3SZJxqPSOMzdLQ39u9iIFTlMnVM8jhJngvnhT9p/oI9Cf/9xAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUIZXAt7x9FfxQpsvgVOhYxREhLrowHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM4MzcyZTMx MzczMDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5u6owDQYJKoZIhvcNAQELBQADggEBABGK5hw1/GtD1Yje5HwvsFxyLG32rgon dK1h55cOUM9SDqZl/mL5HMkv4rjweKgRbuj95OeDPmhS7qWxpq7RsT+P/MIWHx2V F+GG0Q39zolK17uYOhhA9GsaupRgXjBOOWrRf1MOs8KQa2N540IE+VLI9cXXa920 SytaNoqLi5MEZZHfz8LyfTWQaVVOPZMZTWzDzlZNAI5dHYRXdzZuJz6R91xPrb1J 16UQTnnJrHOzptcvYX+JAnqYDnnPvPFxhjuuRzGKzi8gOYddWCXeqLJjXjQQQuEd Db4XIEVGD2yzBjHRYR5mKM6d5yeqLINhNypA1q9cjFWgWspQ2VWkUb0= -----END CERTIFICATE-----Generated at Mon Jan 19 14:27:32 2026 by rpki-client