This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138382e3235302e302f32342d3332203d3e203531313637.roa File: 3138352e3138382e3235302e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: 67ehMEtO6lRP/Zqmd+fJ5Ffx+poPwsr40bevcPaxtYo= Subject key identifier: 3C:97:1C:7F:A8:99:D0:AC:4C:33:04:4D:CF:3B:10:3B:56:B0:8E:10 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 6692B7039E2DCDBAA813C5462E6E1A9EE077C382 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138382e3235302e302f32342d3332203d3e203531313637.roa Signing time: Mon 29 Dec 2025 09:50:36 +0000 ROA not before: Mon 29 Dec 2025 09:45:36 +0000 ROA not after: Mon 28 Dec 2026 09:50:36 +0000 asID: 51167 IP address blocks: 185.188.250.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:92:b7:03:9e:2d:cd:ba:a8:13:c5:46:2e:6e:1a:9e:e0:77:c3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:36 2025 GMT Not After : Dec 28 09:50:36 2026 GMT Subject: CN=3C971C7FA899D0AC4C33044DCF3B103B56B08E10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:86:b0:1f:33:32:58:80:fb:e9:c0:21:2e:a5: f2:e7:53:b3:bb:12:cb:aa:1a:84:96:4e:09:f5:6e: e4:1a:ee:bc:0a:07:77:23:81:12:0c:ae:2a:27:2d: d3:6f:78:88:ac:6f:f7:ed:d2:a9:25:35:47:78:58: ad:06:4e:01:d0:25:3d:19:99:bd:70:cd:67:1a:2c: cd:4e:fc:e8:ee:ed:69:27:0e:5b:b2:71:a8:23:63: d3:be:c5:dd:00:d6:05:0b:53:5d:c4:87:43:de:1c: 8f:78:66:55:3e:3b:7f:44:42:9d:78:67:a7:7a:10: ee:0b:7f:ac:e4:99:85:65:a0:41:c1:6f:14:b3:60: 2d:d9:b1:2e:45:50:29:74:7a:bf:bf:8d:da:95:5d: b5:52:3c:4f:29:f0:a3:d8:ab:ed:95:e7:70:41:58: a8:18:4c:a9:59:2f:db:0c:b1:c1:1d:e0:1e:e2:1b: 6b:ae:a3:c8:ee:62:7e:70:af:1a:1f:cb:45:20:dd: 3f:0a:b3:e2:0d:2f:84:1c:86:07:97:56:9d:2d:13: e1:86:e5:d0:7b:1f:74:6f:dc:42:8b:4c:17:ff:84: 82:46:2a:77:1a:61:a3:ee:2a:83:3a:2f:5f:a7:a5: 72:36:9f:a1:68:74:8f:d4:dc:61:2c:85:6a:09:08: c0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:97:1C:7F:A8:99:D0:AC:4C:33:04:4D:CF:3B:10:3B:56:B0:8E:10 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138382e3235302e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.250.0/24 Signature Algorithm: sha256WithRSAEncryption 58:e2:15:1b:84:4d:6c:2a:ee:77:92:47:e3:0f:f4:59:78:72: 3e:39:9c:02:bc:85:59:45:f7:f2:6b:b0:f8:c8:cc:c0:43:2e: 33:75:e4:59:5b:e8:5c:3d:c8:ed:f4:59:53:96:e3:aa:32:63: 18:b8:46:b4:5e:6d:ab:19:ff:78:e4:63:54:15:eb:79:89:9c: 7c:c8:46:da:35:8c:e6:ab:b7:e6:11:ab:4e:40:e7:11:4f:aa: 8c:57:3f:a7:d0:dc:98:7e:70:b2:82:23:1b:0d:ec:8e:5b:ec: 97:83:0b:24:9d:d0:26:c9:9f:7c:81:1d:61:af:b7:7d:52:b9: fb:bc:af:38:31:f7:43:92:08:38:46:f0:7c:70:fb:c9:29:00: 6d:96:d9:78:34:2a:e1:68:64:b8:82:5a:c5:9b:3f:b0:f0:57: 8e:9a:95:49:8e:60:ec:c9:b9:ef:c5:a5:af:0b:4c:df:1e:6c: fb:11:52:a4:28:35:f5:10:fa:c9:6b:11:64:14:90:66:81:1d: 5a:e6:6b:7b:ee:70:97:ce:73:13:91:5b:0c:00:15:10:64:7d: c6:ee:8c:bb:a5:5c:cc:f0:de:dd:f2:77:37:a3:c8:45:7b:bc: 75:53:5b:c5:5e:5d:22:af:98:f1:4f:e7:58:93:44:c3:10:f3: b5:d6:25:85 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUZpK3A54tzbqoE8VGLm4anuB3w4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1MzZaFw0yNjEyMjgwOTUwMzZaMDMxMTAvBgNV BAMTKDNDOTcxQzdGQTg5OUQwQUM0QzMzMDQ0RENGM0IxMDNCNTZCMDhFMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDphrAfMzJYgPvpwCEupfLnU7O7 EsuqGoSWTgn1buQa7rwKB3cjgRIMrionLdNveIisb/ft0qklNUd4WK0GTgHQJT0Z mb1wzWcaLM1O/Oju7WknDluycagjY9O+xd0A1gULU13Eh0PeHI94ZlU+O39EQp14 Z6d6EO4Lf6zkmYVloEHBbxSzYC3ZsS5FUCl0er+/jdqVXbVSPE8p8KPYq+2V53BB WKgYTKlZL9sMscEd4B7iG2uuo8juYn5wrxofy0Ug3T8Ks+INL4QchgeXVp0tE+GG 5dB7H3Rv3EKLTBf/hIJGKncaYaPuKoM6L1+npXI2n6FodI/U3GEshWoJCMDXAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUPJccf6iZ0KxMMwRNzzsQO1awjhAwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM4MzgyZTMy MzUzMDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5vPowDQYJKoZIhvcNAQELBQADggEBAFjiFRuETWwq7neSR+MP9Fl4cj45nAK8 hVlF9/JrsPjIzMBDLjN15Flb6Fw9yO30WVOW46oyYxi4RrRebasZ/3jkY1QV63mJ nHzIRto1jOart+YRq05A5xFPqoxXP6fQ3Jh+cLKCIxsN7I5b7JeDCySd0CbJn3yB HWGvt31Sufu8rzgx90OSCDhG8Hxw+8kpAG2W2Xg0KuFoZLiCWsWbP7DwV46alUmO YOzJue/Fpa8LTN8ebPsRUqQoNfUQ+slrEWQUkGaBHVrma3vucJfOcxORWwwAFRBk fcbujLulXMzw3t3ydzejyEV7vHVTW8VeXSKvmPFP51iTRMMQ87XWJYU= -----END CERTIFICATE-----Generated at Tue Feb 10 06:10:59 2026 by rpki-client