This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138382e3234392e302f32342d3332203d3e203531313637.roa File: 3138352e3138382e3234392e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: vAUjHxYlkylrU3JO7/9KGJXE7hT9tzpnX6BsmglS2C4= Subject key identifier: B8:B8:DC:AA:25:2F:62:B8:72:6A:E6:CD:40:55:69:68:9F:64:3C:DA Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 708730E0C34D9B09D25E58DEED3202641952E2DD Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138382e3234392e302f32342d3332203d3e203531313637.roa Signing time: Mon 29 Dec 2025 09:50:49 +0000 ROA not before: Mon 29 Dec 2025 09:45:49 +0000 ROA not after: Mon 28 Dec 2026 09:50:49 +0000 asID: 51167 IP address blocks: 185.188.249.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:87:30:e0:c3:4d:9b:09:d2:5e:58:de:ed:32:02:64:19:52:e2:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:49 2025 GMT Not After : Dec 28 09:50:49 2026 GMT Subject: CN=B8B8DCAA252F62B8726AE6CD405569689F643CDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c4:94:38:2d:3e:52:fa:91:8f:e6:a3:83:2d: 53:ea:db:fb:67:30:b9:4c:97:fa:89:f6:6e:66:86: 9a:fb:1f:3c:47:92:c3:7e:cf:36:6a:b7:0a:e4:31: bc:18:70:d2:2c:8f:de:8a:5a:96:b9:f9:e0:51:b9: cf:fa:fa:70:75:15:34:d8:2b:b3:15:0e:2b:44:89: 99:e0:ab:fc:4c:fa:b4:0c:b7:65:ec:e6:f8:85:8a: d7:46:37:c2:c0:27:6a:83:86:b3:4f:49:0a:82:a3: dd:1a:ab:a3:b2:0f:29:b4:1d:32:7d:19:c9:4a:16: 10:94:1b:9b:88:7a:d4:1e:67:f3:56:01:04:e6:44: 52:23:34:b0:41:11:68:08:b4:37:67:f0:62:94:62: 64:40:7f:05:1f:99:31:04:76:cd:fe:54:07:01:a9: e1:69:44:4b:25:f3:86:3b:25:5f:11:20:17:ea:b8: ac:19:30:01:bb:02:c4:7a:b2:a9:f6:b0:95:5e:09: 3b:7a:03:10:1a:d5:19:b1:ec:ae:1d:30:47:94:96: 84:54:ad:74:37:9c:b5:74:b3:33:0a:78:17:ab:b2: f2:b5:27:92:82:88:ee:40:15:fd:50:6b:ac:aa:cc: d9:0e:d8:02:c8:6a:51:3b:d1:d7:ac:95:40:f2:d1: 0a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B8:DC:AA:25:2F:62:B8:72:6A:E6:CD:40:55:69:68:9F:64:3C:DA X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138382e3234392e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.249.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:ec:89:08:c8:f3:d0:8a:09:69:47:24:fc:ac:f9:d0:ec:16: f1:b3:e8:2d:01:a6:91:28:e1:e2:e8:b1:5b:57:09:d0:00:28: 4d:30:dd:2e:6f:08:b0:a9:15:d7:89:5f:86:1b:35:52:14:5b: 70:71:99:07:02:2b:42:07:bd:7f:fa:7e:b2:ea:ce:64:57:f6: d3:bd:ab:e2:14:93:b0:3a:76:4f:75:b8:50:a6:2f:59:8f:8f: 4f:71:0d:ab:38:69:ec:a2:0a:ef:82:ac:88:4c:bb:29:0f:8e: 46:85:17:28:86:f8:e9:c1:ef:4b:ea:09:15:48:b2:e1:11:cb: 05:58:cf:9e:22:7d:d1:30:40:b5:a5:5e:f4:b4:91:fe:e9:a5: 02:d2:17:ff:69:bb:41:da:82:16:de:65:51:01:de:ef:21:f5: 7e:9e:29:e8:dc:98:96:77:1c:86:61:77:53:f7:c7:cc:20:48: b9:14:09:6a:23:25:72:39:c1:be:0a:4a:a9:a7:03:11:01:4b: 29:45:d0:41:79:ba:91:fe:be:01:47:04:56:b0:5e:0b:e5:29: ac:37:40:df:25:93:56:7f:bc:5b:09:71:65:3f:50:b3:3d:f8: 64:0e:17:48:b4:92:ce:12:b1:83:43:5f:0a:a4:59:9e:23:9f: a2:36:53:a7 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUcIcw4MNNmwnSXlje7TICZBlS4t0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDlaFw0yNjEyMjgwOTUwNDlaMDMxMTAvBgNV BAMTKEI4QjhEQ0FBMjUyRjYyQjg3MjZBRTZDRDQwNTU2OTY4OUY2NDNDREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9xJQ4LT5S+pGP5qODLVPq2/tn MLlMl/qJ9m5mhpr7HzxHksN+zzZqtwrkMbwYcNIsj96KWpa5+eBRuc/6+nB1FTTY K7MVDitEiZngq/xM+rQMt2Xs5viFitdGN8LAJ2qDhrNPSQqCo90aq6OyDym0HTJ9 GclKFhCUG5uIetQeZ/NWAQTmRFIjNLBBEWgItDdn8GKUYmRAfwUfmTEEds3+VAcB qeFpREsl84Y7JV8RIBfquKwZMAG7AsR6sqn2sJVeCTt6AxAa1Rmx7K4dMEeUloRU rXQ3nLV0szMKeBersvK1J5KCiO5AFf1Qa6yqzNkO2ALIalE70deslUDy0QoLAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUuLjcqiUvYrhyaubNQFVpaJ9kPNowHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM4MzgyZTMy MzQzOTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5vPkwDQYJKoZIhvcNAQELBQADggEBAF/siQjI89CKCWlHJPys+dDsFvGz6C0B ppEo4eLosVtXCdAAKE0w3S5vCLCpFdeJX4YbNVIUW3BxmQcCK0IHvX/6frLqzmRX 9tO9q+IUk7A6dk91uFCmL1mPj09xDas4aeyiCu+CrIhMuykPjkaFFyiG+OnB70vq CRVIsuERywVYz54ifdEwQLWlXvS0kf7ppQLSF/9pu0HaghbeZVEB3u8h9X6eKejc mJZ3HIZhd1P3x8wgSLkUCWojJXI5wb4KSqmnAxEBSylF0EF5upH+vgFHBFawXgvl Kaw3QN8lk1Z/vFsJcWU/ULM9+GQOF0i0ks4SsYNDXwqkWZ4jn6I2U6c= -----END CERTIFICATE-----Generated at Mon Jan 19 14:28:06 2026 by rpki-client