This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3235302e302f32332d3332203d3e203531313637.roa File: 3138352e3139372e3235302e302f32332d3332203d3e203531313637.roa (raw, json) Hash identifier: Q+ry8eLQWRcFpqMNFgZfpQhF1HNfGgmd/qG39M4WzQk= Subject key identifier: 27:D4:73:9D:A7:CC:6A:6D:08:91:47:7D:89:EE:AC:D8:EE:9C:3D:7E Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 683006D3695498C96E40BD99221FE1766CCB5E7B Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3235302e302f32332d3332203d3e203531313637.roa Signing time: Mon 29 Dec 2025 09:50:42 +0000 ROA not before: Mon 29 Dec 2025 09:45:42 +0000 ROA not after: Mon 28 Dec 2026 09:50:42 +0000 asID: 51167 IP address blocks: 185.197.250.0/23 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:30:06:d3:69:54:98:c9:6e:40:bd:99:22:1f:e1:76:6c:cb:5e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:42 2025 GMT Not After : Dec 28 09:50:42 2026 GMT Subject: CN=27D4739DA7CC6A6D0891477D89EEACD8EE9C3D7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:aa:a4:f1:21:df:2a:ba:6a:83:39:4f:10:c0: a0:ff:37:1d:f3:a0:8e:be:ec:73:7b:a4:f1:e8:c0: 8a:1e:f4:cd:2f:a4:27:5c:ad:b4:61:93:4c:66:2e: 81:37:8b:7e:7a:4b:26:64:3c:10:64:13:51:10:e6: bb:25:66:89:40:b8:c6:59:53:55:7b:55:05:0d:19: 62:1b:b8:27:6b:84:5f:8c:a2:e6:1b:7f:7e:00:77: f9:3d:90:d1:48:35:17:d5:41:c0:68:27:2a:71:6d: e7:5c:d0:0f:b1:f8:66:f4:00:4a:72:68:24:58:ab: 12:a8:b1:ad:44:d2:97:99:de:f5:eb:7d:4d:a8:0f: e1:26:17:5b:54:4f:5c:57:5a:5f:2d:ed:e0:17:be: db:17:b7:86:60:94:a4:c2:06:23:1b:cf:5c:50:21: 40:d0:f3:62:da:c9:bf:ae:41:63:39:fb:7b:b7:96: 43:13:d6:ad:11:1f:c0:f9:8f:80:3d:83:31:cf:82: 31:b7:d6:ef:65:de:0d:86:1c:64:7d:75:b8:cd:3a: d1:29:db:15:79:af:0d:d6:eb:7b:92:ef:da:1b:1c: a8:e7:fa:6b:2e:00:24:12:12:41:49:09:3e:bc:22: 51:91:ec:dc:58:6b:72:47:4a:00:ea:a0:6d:23:51: 14:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D4:73:9D:A7:CC:6A:6D:08:91:47:7D:89:EE:AC:D8:EE:9C:3D:7E X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3235302e302f32332d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.250.0/23 Signature Algorithm: sha256WithRSAEncryption 29:03:5c:11:fa:5a:9c:c7:26:f3:e5:c4:ba:3e:be:10:ac:79: 71:eb:68:d8:5e:8b:15:f9:d7:f2:e3:ec:d0:5f:15:da:12:c7: ed:9f:7a:48:31:e0:9b:f2:bd:f7:27:e0:80:bb:14:74:e9:70: dc:0e:f5:6d:ee:4e:62:1a:01:ec:2d:5c:a9:79:e9:e5:3a:e5: 47:a8:e8:d8:d4:88:ba:6b:01:e0:42:ce:10:66:9e:43:75:26: 17:82:80:4c:b9:3c:cb:dc:1a:9b:7a:16:7b:60:f7:a9:a8:36: 49:9d:45:7a:34:d5:8b:c0:da:0a:44:11:7f:36:a2:96:1e:77: 62:47:fa:2d:bc:61:cb:9c:7d:67:8d:79:a3:7e:c4:51:b9:cd: 84:45:32:db:75:15:4e:40:8d:dd:83:32:4a:70:b5:17:e8:98: cd:3a:4f:5b:de:96:bf:3c:54:ce:d0:ec:ed:a8:2f:6e:47:d3: 0f:ba:5f:5e:44:bf:0e:6b:df:cc:2f:51:ff:06:1a:21:53:c8: 8b:2d:55:3d:e8:53:4f:eb:11:94:8f:13:37:45:b3:df:e9:12: 52:3a:41:9e:31:b0:29:bd:b2:3b:9e:9e:dd:55:33:7c:71:95: 95:20:ab:b1:fa:ef:71:62:55:67:b9:ae:b8:96:83:de:a8:46: 6b:1a:ac:32 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUaDAG02lUmMluQL2ZIh/hdmzLXnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDJaFw0yNjEyMjgwOTUwNDJaMDMxMTAvBgNV BAMTKDI3RDQ3MzlEQTdDQzZBNkQwODkxNDc3RDg5RUVBQ0Q4RUU5QzNEN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXqqTxId8qumqDOU8QwKD/Nx3z oI6+7HN7pPHowIoe9M0vpCdcrbRhk0xmLoE3i356SyZkPBBkE1EQ5rslZolAuMZZ U1V7VQUNGWIbuCdrhF+MouYbf34Ad/k9kNFINRfVQcBoJypxbedc0A+x+Gb0AEpy aCRYqxKosa1E0peZ3vXrfU2oD+EmF1tUT1xXWl8t7eAXvtsXt4ZglKTCBiMbz1xQ IUDQ82Layb+uQWM5+3u3lkMT1q0RH8D5j4A9gzHPgjG31u9l3g2GHGR9dbjNOtEp 2xV5rw3W63uS79obHKjn+msuACQSEkFJCT68IlGR7NxYa3JHSgDqoG0jURRrAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUJ9RznafMam0IkUd9ie6s2O6cPX4wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM5MzcyZTMy MzUzMDJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAG5xfowDQYJKoZIhvcNAQELBQADggEBACkDXBH6WpzHJvPlxLo+vhCseXHraNhe ixX51/Lj7NBfFdoSx+2fekgx4Jvyvfcn4IC7FHTpcNwO9W3uTmIaAewtXKl56eU6 5Ueo6NjUiLprAeBCzhBmnkN1JheCgEy5PMvcGpt6Fntg96moNkmdRXo01YvA2gpE EX82opYed2JH+i28YcucfWeNeaN+xFG5zYRFMtt1FU5Ajd2DMkpwtRfomM06T1ve lr88VM7Q7O2oL25H0w+6X15Evw5r38wvUf8GGiFTyIstVT3oU0/rEZSPEzdFs9/p ElI6QZ4xsCm9sjuent1VM3xxlZUgq7H673FiVWe5rriWg96oRmsarDI= -----END CERTIFICATE-----Generated at Mon Jan 19 14:27:33 2026 by rpki-client