This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139322e39362e302f32332d3332203d3e203531313637.roa File: 3138352e3139322e39362e302f32332d3332203d3e203531313637.roa (raw, json) Hash identifier: PgGMLUmK38mkSZ6mGyX8xo92FdCvUVjDic+g5Vvci0Y= Subject key identifier: 64:BA:11:0A:15:6E:F0:C2:91:51:39:AF:9C:08:B4:02:25:5B:5B:F8 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 264DE852F185C52E4FF67A41A3F43B87B5FBBF87 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139322e39362e302f32332d3332203d3e203531313637.roa Signing time: Mon 29 Dec 2025 09:50:58 +0000 ROA not before: Mon 29 Dec 2025 09:45:58 +0000 ROA not after: Mon 28 Dec 2026 09:50:58 +0000 asID: 51167 IP address blocks: 185.192.96.0/23 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:4d:e8:52:f1:85:c5:2e:4f:f6:7a:41:a3:f4:3b:87:b5:fb:bf:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:58 2025 GMT Not After : Dec 28 09:50:58 2026 GMT Subject: CN=64BA110A156EF0C2915139AF9C08B402255B5BF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f6:cf:53:b5:b7:4a:ce:34:83:cf:25:ab:e9: e8:7d:04:33:7b:75:a4:5a:0f:fd:11:0e:95:4f:85: 7c:cf:c1:d4:ea:a0:b1:9f:4f:b6:b6:66:07:24:cc: 25:80:85:a4:b8:45:f0:35:b3:30:5c:05:b9:5f:e0: f0:95:bd:04:f6:4c:07:fc:e7:4e:c6:bd:61:07:a1: 64:bf:50:8d:16:5a:39:08:97:5f:9a:be:47:e5:67: d6:bb:1b:7b:bf:44:0c:22:4b:22:09:ac:78:d8:03: c9:fd:86:6b:86:ab:d8:73:e3:76:d1:03:e6:cc:d4: f7:83:62:33:78:a0:57:c0:68:c2:83:eb:ad:53:0f: 1c:98:bc:ec:ba:6a:4f:c9:c0:11:fe:83:4b:d2:99: cc:5e:c9:59:ff:3c:87:7e:6a:bc:55:d4:28:8e:7a: 04:58:2b:c2:ae:ef:12:80:3a:b5:57:cb:f1:6f:e5: e8:da:0a:4f:65:e5:20:0d:e5:4b:28:ec:15:84:43: 59:56:8b:e1:9d:5a:c6:50:04:5c:36:38:bb:d7:00: 83:fc:6d:29:40:f0:ff:6e:49:a3:4f:cb:8f:90:6b: 89:7c:3d:2f:97:59:82:88:a3:07:25:a0:0f:d3:f6: 2e:49:0e:ec:37:bc:52:04:c7:e6:0f:d2:74:11:d8: 23:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BA:11:0A:15:6E:F0:C2:91:51:39:AF:9C:08:B4:02:25:5B:5B:F8 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139322e39362e302f32332d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.96.0/23 Signature Algorithm: sha256WithRSAEncryption 81:9e:99:03:dd:45:b0:0a:d1:10:2e:56:a4:12:e6:1c:96:de: 87:9f:8b:70:62:ca:f2:ed:70:93:bb:91:aa:11:dd:1c:e9:fd: 43:01:5b:af:18:4d:59:a2:8a:4c:f2:dc:b4:cb:71:73:23:7e: 63:fb:38:52:0e:da:53:a0:07:b2:85:a0:b3:fc:18:3b:ba:7d: b4:58:d2:36:61:f0:0e:a9:17:97:5f:0f:03:0f:7b:90:9a:1f: 43:36:16:bb:32:3d:36:a8:5c:f4:e0:e6:32:3c:b9:3d:2a:ef: 7e:4a:1b:88:00:10:8e:1a:8a:ae:ad:27:ba:17:a0:38:18:fe: 38:dd:1a:7a:ee:69:a0:37:f1:55:f0:8d:bf:1a:2d:13:7d:ea: 81:15:95:e1:c2:66:14:0b:cd:7a:6b:88:16:d8:e1:95:15:95: e5:dd:dd:b1:2a:4e:26:28:e6:f9:92:c3:ec:20:10:59:4b:9a: 9b:74:3b:01:5f:d5:97:a2:73:bc:ca:e3:ca:ef:f3:26:e6:11: be:6e:eb:8c:9d:8b:b8:23:23:61:f1:06:cb:bf:a0:88:05:dd: 15:01:42:71:46:27:55:71:99:c4:da:6b:c2:2f:af:d0:5a:10: 17:06:b3:47:53:17:9f:ad:c3:77:cf:7f:25:54:5d:86:85:67: 71:2a:f4:e1 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUJk3oUvGFxS5P9npBo/Q7h7X7v4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NThaFw0yNjEyMjgwOTUwNThaMDMxMTAvBgNV BAMTKDY0QkExMTBBMTU2RUYwQzI5MTUxMzlBRjlDMDhCNDAyMjU1QjVCRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/9s9TtbdKzjSDzyWr6eh9BDN7 daRaD/0RDpVPhXzPwdTqoLGfT7a2ZgckzCWAhaS4RfA1szBcBblf4PCVvQT2TAf8 507GvWEHoWS/UI0WWjkIl1+avkflZ9a7G3u/RAwiSyIJrHjYA8n9hmuGq9hz43bR A+bM1PeDYjN4oFfAaMKD661TDxyYvOy6ak/JwBH+g0vSmcxeyVn/PId+arxV1CiO egRYK8Ku7xKAOrVXy/Fv5ejaCk9l5SAN5Uso7BWEQ1lWi+GdWsZQBFw2OLvXAIP8 bSlA8P9uSaNPy4+Qa4l8PS+XWYKIowcloA/T9i5JDuw3vFIEx+YP0nQR2CM/AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUZLoRChVu8MKRUTmvnAi0AiVbW/gwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM5MzIyZTM5 MzYyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB ucBgMA0GCSqGSIb3DQEBCwUAA4IBAQCBnpkD3UWwCtEQLlakEuYclt6Hn4twYsry 7XCTu5GqEd0c6f1DAVuvGE1ZoopM8ty0y3FzI35j+zhSDtpToAeyhaCz/Bg7un20 WNI2YfAOqReXXw8DD3uQmh9DNha7Mj02qFz04OYyPLk9Ku9+ShuIABCOGoqurSe6 F6A4GP443Rp67mmgN/FV8I2/Gi0TfeqBFZXhwmYUC816a4gW2OGVFZXl3d2xKk4m KOb5ksPsIBBZS5qbdDsBX9WXonO8yuPK7/Mm5hG+buuMnYu4IyNh8QbLv6CIBd0V AUJxRidVcZnE2mvCL6/QWhAXBrNHUxefrcN3z38lVF2GhWdxKvTh -----END CERTIFICATE-----Generated at Mon Jan 19 14:28:33 2026 by rpki-client