This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3233372e302f32342d3234203d3e20323039383534.roa File: 3138352e3230322e3233372e302f32342d3234203d3e20323039383534.roa (raw, json) Hash identifier: B1cBgNJD+sMz0JNLYafmL+S8DyYLe/+pkJr2ikFvGa0= Subject key identifier: 64:65:62:85:D2:05:E6:E0:5A:DE:30:0D:8F:68:6D:5C:E1:46:75:53 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 755D5292D02792F37847E62C4E2281C59D2B7900 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3233372e302f32342d3234203d3e20323039383534.roa Signing time: Mon 05 Jan 2026 09:51:16 +0000 ROA not before: Mon 05 Jan 2026 09:46:16 +0000 ROA not after: Mon 04 Jan 2027 09:51:16 +0000 asID: 209854 IP address blocks: 185.202.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:5d:52:92:d0:27:92:f3:78:47:e6:2c:4e:22:81:c5:9d:2b:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 5 09:46:16 2026 GMT Not After : Jan 4 09:51:16 2027 GMT Subject: CN=64656285D205E6E05ADE300D8F686D5CE1467553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:80:64:36:e1:03:1b:ec:0d:39:37:be:ba:16: c4:b2:6a:af:2c:c3:bf:49:34:9a:ac:ff:8c:42:c3: 11:fe:15:cd:d8:c0:32:e9:9f:5d:27:a8:c6:01:1f: ba:b1:04:c5:4f:b3:ca:44:48:17:0a:5e:25:c7:9b: 07:81:33:ef:da:ee:f3:6f:c3:60:73:16:d6:fb:de: 52:88:3a:c9:25:e4:05:32:75:d2:03:c2:e6:cc:b4: e7:44:99:5f:c3:af:b6:09:7d:57:c0:bb:8e:7d:c3: 20:2e:73:c4:22:04:6e:ac:bb:54:95:41:11:34:03: 5f:34:11:52:47:08:4d:0b:2e:e4:91:05:48:31:3d: 59:ac:9e:8e:e7:e7:ec:90:1b:de:8c:b7:61:a6:d5: ed:9b:0f:62:b2:74:0f:10:87:b6:2d:17:73:09:b9: f5:49:e4:d3:f2:ff:fa:e1:b3:77:6b:9d:94:72:78: 6f:f8:80:df:10:da:60:07:0b:de:b0:2e:63:ac:ff: c5:ea:92:c5:ec:b4:60:51:2a:8b:c3:55:9e:81:f1: 8e:9e:fb:70:fd:3a:dc:fc:e8:1b:8c:55:d3:51:00: fd:96:61:3f:7c:ac:1f:1e:3a:e2:fd:cd:d0:f6:6d: d5:43:e8:a8:f4:60:8e:82:f0:1a:9f:a2:07:dd:cd: 6e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:65:62:85:D2:05:E6:E0:5A:DE:30:0D:8F:68:6D:5C:E1:46:75:53 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3233372e302f32342d3234203d3e20323039383534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.202.237.0/24 Signature Algorithm: sha256WithRSAEncryption 55:04:24:d0:54:17:82:27:bd:98:d5:5a:89:7c:07:e2:1b:d8: dc:f0:ba:69:6f:24:e9:f0:49:a8:52:0c:c1:25:3d:69:86:9e: 63:2c:2e:20:94:c2:20:65:99:1a:f1:a3:ff:c3:2a:c1:48:f9: 84:36:89:1b:90:a5:77:8a:5e:af:b0:82:1f:8a:7d:25:be:f2: 2d:e9:ca:6a:19:10:70:f3:8e:fe:dc:ed:f0:19:69:dd:de:f6: fe:9f:a8:7f:4a:0b:d6:d3:4e:be:0b:3c:90:ad:fc:65:2a:14: a1:4b:3e:da:27:60:c3:c9:08:ae:24:20:32:56:cc:4e:c7:46: 06:8b:6d:bd:52:bb:ac:eb:dd:6f:9b:74:63:b1:c2:f8:1a:11: 14:6a:49:68:d1:82:b6:1d:8e:fc:43:7a:51:cb:52:ba:ed:09: 88:df:bd:51:42:ac:89:c1:0f:95:f8:9d:03:32:2e:de:32:c7: 66:63:4d:81:68:11:ad:15:1e:88:1d:0c:8f:81:b9:3a:96:09: 65:2f:90:72:c1:3c:f4:25:7d:c6:9c:62:0e:e6:82:97:79:99: 2d:34:d6:03:75:24:ca:09:99:28:62:f5:68:f6:3b:c9:21:cf: d6:1e:5c:84:d4:37:f3:38:70:65:da:43:3d:9b:a7:79:d9:34: 38:e8:13:20 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUdV1SktAnkvN4R+YsTiKBxZ0reQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMDUwOTQ2MTZaFw0yNzAxMDQwOTUxMTZaMDMxMTAvBgNV BAMTKDY0NjU2Mjg1RDIwNUU2RTA1QURFMzAwRDhGNjg2RDVDRTE0Njc1NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFgGQ24QMb7A05N766FsSyaq8s w79JNJqs/4xCwxH+Fc3YwDLpn10nqMYBH7qxBMVPs8pESBcKXiXHmweBM+/a7vNv w2BzFtb73lKIOskl5AUyddIDwubMtOdEmV/Dr7YJfVfAu459wyAuc8QiBG6su1SV QRE0A180EVJHCE0LLuSRBUgxPVmsno7n5+yQG96Mt2Gm1e2bD2KydA8Qh7YtF3MJ ufVJ5NPy//rhs3drnZRyeG/4gN8Q2mAHC96wLmOs/8XqksXstGBRKovDVZ6B8Y6e +3D9Otz86BuMVdNRAP2WYT98rB8eOuL9zdD2bdVD6Kj0YI6C8BqfogfdzW49AgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUZGVihdIF5uBa3jANj2htXOFGdVMwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMwMzIyZTMy MzMzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzOTM4MzUzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALnK7TANBgkqhkiG9w0BAQsFAAOCAQEAVQQk0FQXgie9mNVaiXwH4hvY3PC6 aW8k6fBJqFIMwSU9aYaeYywuIJTCIGWZGvGj/8MqwUj5hDaJG5Cld4per7CCH4p9 Jb7yLenKahkQcPOO/tzt8Blp3d72/p+of0oL1tNOvgs8kK38ZSoUoUs+2idgw8kI riQgMlbMTsdGBottvVK7rOvdb5t0Y7HC+BoRFGpJaNGCth2O/EN6UctSuu0JiN+9 UUKsicEPlfidAzIu3jLHZmNNgWgRrRUeiB0Mj4G5OpYJZS+QcsE89CV9xpxiDuaC l3mZLTTWA3UkygmZKGL1aPY7ySHP1h5chNQ38zhwZdpDPZunedk0OOgTIA== -----END CERTIFICATE-----Generated at Mon Jan 19 17:35:24 2026 by rpki-client