This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230312e382e302f32332d3234203d3e203437353833.roa File: 3138352e3230312e382e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: +HZlSuisrUnskRw1Rp3QYehrVbi1bbI9c4zYcdzCZ8Q= Subject key identifier: 07:A5:66:78:F0:FC:0C:31:A9:76:33:6C:2F:D3:6B:0C:1F:A9:7B:3F Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 1FA84E81065F468F03CE23F9849F860CC23D39C2 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230312e382e302f32332d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:48 +0000 ROA not before: Mon 29 Dec 2025 09:45:48 +0000 ROA not after: Mon 28 Dec 2026 09:50:48 +0000 asID: 47583 IP address blocks: 185.201.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:a8:4e:81:06:5f:46:8f:03:ce:23:f9:84:9f:86:0c:c2:3d:39:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:48 2025 GMT Not After : Dec 28 09:50:48 2026 GMT Subject: CN=07A56678F0FC0C31A976336C2FD36B0C1FA97B3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:08:fd:33:5a:53:45:a5:33:79:9f:a2:e6:22: c3:f0:73:4a:33:6c:dd:f2:c5:70:af:bf:dd:49:eb: e0:1c:65:0e:05:7c:ef:0e:38:41:f3:2f:fb:b1:7f: 28:22:0e:34:49:69:b3:f8:88:e1:76:a1:10:7b:ee: cc:5b:94:2e:7e:d4:11:0c:49:b5:65:f6:ee:a3:4d: b2:61:8b:1a:e9:b7:0e:37:c7:ce:16:41:13:f2:e0: da:68:52:0c:a1:ea:06:f6:05:5d:aa:89:9e:97:a7: 5c:2d:da:c0:16:de:d4:17:6a:67:a7:0b:7f:f5:67: d2:78:6b:44:ff:fa:ca:96:e5:ea:bd:9a:47:4f:31: c1:0e:f2:57:15:7e:40:18:69:01:83:19:99:05:cf: 2c:2a:e3:94:32:30:d3:4f:8c:37:0a:ae:d1:02:ef: cd:40:8f:19:ba:1a:5d:5a:d8:4f:a1:e8:bc:9f:19: 44:61:f1:a9:4d:71:5a:c7:56:bb:b0:b2:38:c2:f6: e1:24:4b:6b:0b:be:df:5e:70:82:8f:94:4f:c7:22: 26:94:24:d0:3b:c8:1c:62:da:74:76:50:93:c4:49: 52:ff:d1:fc:7e:5c:09:27:c7:24:02:57:9a:74:80: d6:a4:36:16:4c:c9:a5:9c:13:b8:50:5f:68:3a:5e: 7a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A5:66:78:F0:FC:0C:31:A9:76:33:6C:2F:D3:6B:0C:1F:A9:7B:3F X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230312e382e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.201.8.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:53:f2:92:c7:15:9d:f0:50:0a:d7:6d:fa:c3:c8:7c:84:35: ba:40:5e:a3:cf:f0:4f:3d:a7:89:65:fd:ea:b6:f2:37:0b:51: bb:08:17:05:01:b9:bd:88:61:ec:13:36:57:8d:83:c2:68:42: 6e:7b:08:2f:b7:fe:65:a2:da:66:29:fd:2f:30:6d:d4:e1:01: a1:a0:16:d1:fb:13:c8:62:33:40:8d:5c:2d:63:0f:18:15:63: 59:ab:e3:f8:4d:cc:f6:9d:97:f9:68:8f:da:24:03:fb:03:56: aa:c3:76:4e:dc:ee:98:b6:c6:e2:8f:a0:3f:06:84:53:e5:5d: 8d:a5:eb:6f:9a:e0:e2:81:5e:64:0e:a5:8e:5c:a6:2c:10:eb: 55:50:39:08:78:0e:cc:8e:79:e9:d4:d4:cb:72:6d:a6:ca:bd: 39:27:3c:91:93:64:ff:d2:31:34:64:b1:04:9c:d7:7c:03:b0: 1f:8f:3a:00:85:38:74:bd:9f:de:af:67:4b:bb:dc:23:a3:4e: 1f:35:44:12:12:61:fe:f5:35:f9:6c:e8:8f:53:b9:5b:e6:2b: 7f:7b:0b:51:7c:8f:1c:25:1e:31:a2:bb:e7:8a:a3:b3:91:4f: 9c:67:13:e4:51:38:79:36:c1:57:d8:ae:be:d4:d4:a5:ed:f6: 0e:ea:95:63 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUH6hOgQZfRo8DziP5hJ+GDMI9OcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDhaFw0yNjEyMjgwOTUwNDhaMDMxMTAvBgNV BAMTKDA3QTU2Njc4RjBGQzBDMzFBOTc2MzM2QzJGRDM2QjBDMUZBOTdCM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmCP0zWlNFpTN5n6LmIsPwc0oz bN3yxXCvv91J6+AcZQ4FfO8OOEHzL/uxfygiDjRJabP4iOF2oRB77sxblC5+1BEM SbVl9u6jTbJhixrptw43x84WQRPy4NpoUgyh6gb2BV2qiZ6Xp1wt2sAW3tQXamen C3/1Z9J4a0T/+sqW5eq9mkdPMcEO8lcVfkAYaQGDGZkFzywq45QyMNNPjDcKrtEC 781Ajxm6Gl1a2E+h6LyfGURh8alNcVrHVruwsjjC9uEkS2sLvt9ecIKPlE/HIiaU JNA7yBxi2nR2UJPESVL/0fx+XAknxyQCV5p0gNakNhZMyaWcE7hQX2g6XnqRAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUB6VmePD8DDGpdjNsL9NrDB+pez8wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMwMzEyZTM4 MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbnJ CDANBgkqhkiG9w0BAQsFAAOCAQEAbVPykscVnfBQCtdt+sPIfIQ1ukBeo8/wTz2n iWX96rbyNwtRuwgXBQG5vYhh7BM2V42DwmhCbnsIL7f+ZaLaZin9LzBt1OEBoaAW 0fsTyGIzQI1cLWMPGBVjWavj+E3M9p2X+WiP2iQD+wNWqsN2TtzumLbG4o+gPwaE U+VdjaXrb5rg4oFeZA6ljlymLBDrVVA5CHgOzI556dTUy3Jtpsq9OSc8kZNk/9Ix NGSxBJzXfAOwH486AIU4dL2f3q9nS7vcI6NOHzVEEhJh/vU1+Wzoj1O5W+Yrf3sL UXyPHCUeMaK754qjs5FPnGcT5FE4eTbBV9iuvtTUpe32DuqVYw== -----END CERTIFICATE-----Generated at Mon Jan 19 14:23:32 2026 by rpki-client