This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3132322e302f32342d3234203d3e20313336373837.roa File: 3138352e3230332e3132322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 8pFHnMwTBte2usmnRa/lPHVA/D6q6FonCRQO+xS92uI= Subject key identifier: 00:ED:D7:E1:F5:F4:E5:A3:42:B7:8A:A0:BB:DA:88:86:2D:5A:61:86 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 5B2E8643BCC2FE11E2217224375B8E04FF402D31 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3132322e302f32342d3234203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:50:59 +0000 ROA not before: Mon 29 Dec 2025 09:45:59 +0000 ROA not after: Mon 28 Dec 2026 09:50:59 +0000 asID: 136787 IP address blocks: 185.203.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:2e:86:43:bc:c2:fe:11:e2:21:72:24:37:5b:8e:04:ff:40:2d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:59 2025 GMT Not After : Dec 28 09:50:59 2026 GMT Subject: CN=00EDD7E1F5F4E5A342B78AA0BBDA88862D5A6186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8f:ee:d7:04:6e:b4:ed:32:9a:1d:f2:ac:89: 87:b9:06:73:96:5b:e1:87:32:2b:c5:05:10:1a:84: 08:81:31:09:41:c6:32:2a:94:85:d5:3e:6b:39:6c: 5b:2c:18:5c:97:00:60:40:ca:af:a8:4d:dd:1a:ba: ca:a1:3a:da:0e:83:83:06:e8:03:31:3f:28:bc:12: 5e:eb:b4:a7:c7:fe:0e:ec:0a:7b:ee:23:86:b2:d4: 37:60:54:d8:3f:49:ea:4c:0e:85:ef:63:21:fc:48: d4:f2:f1:ed:23:48:b5:92:65:70:ff:35:b4:b0:25: 03:50:26:75:85:c8:ec:ec:66:b7:91:96:22:9a:da: 71:2c:ba:91:84:d9:d2:2d:de:67:5d:33:bf:1d:b3: 8a:2b:a3:3a:3a:e8:5a:70:83:0b:ae:cc:9f:24:31: 4e:a6:67:85:40:87:df:82:a0:da:3a:46:af:a0:98: 1b:99:f6:d9:d1:c4:d8:58:8f:62:53:63:bb:bf:d2: 46:44:97:1d:9a:ee:c6:54:18:23:7f:87:62:25:ad: 5f:57:d0:e0:84:35:f0:ef:cb:ce:07:45:27:8a:95: 55:27:f1:64:11:0b:51:34:45:12:1a:df:15:80:56: 36:27:28:51:7e:a5:23:51:04:64:f2:ff:f9:4a:67: b0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:ED:D7:E1:F5:F4:E5:A3:42:B7:8A:A0:BB:DA:88:86:2D:5A:61:86 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3132322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.203.122.0/24 Signature Algorithm: sha256WithRSAEncryption a1:28:4e:5a:4e:7b:db:d6:7c:82:be:f9:3d:ad:28:a5:fe:15: f5:4d:d4:ae:8c:76:9a:a8:72:84:92:f7:88:e3:99:3b:1c:33: 62:dd:69:3d:8b:65:09:58:0b:01:01:37:9e:12:d7:28:dd:99: 28:45:d1:f4:4a:16:aa:b1:f1:21:04:aa:2f:d5:31:e8:5d:96: 69:3f:c0:10:97:93:18:62:9a:1a:8c:43:51:fb:c0:ce:43:65: 1f:a8:c6:0d:54:8e:c5:27:28:5f:46:a6:4b:68:89:a2:96:fa: e9:79:6d:de:47:2e:d7:83:82:4a:85:60:52:d8:16:25:50:60: db:2c:a4:61:98:f9:5c:8c:26:8e:aa:c0:ca:c1:1a:21:87:5f: 15:34:bc:88:4a:8c:0b:b0:a9:f2:57:ac:1c:2b:45:a8:9a:21: 67:f5:f2:b4:b8:68:d3:10:ca:e0:6a:c3:72:f0:c3:cb:a7:85: 26:e1:2d:eb:7b:95:d9:94:9a:20:65:d4:e0:4c:91:65:84:a7: d5:4f:bc:a4:ff:00:58:cf:e0:1c:22:2f:cf:a6:3d:fe:f8:dd: c3:da:4e:fd:09:f0:c2:b7:55:d4:5d:7e:49:1a:e5:04:4b:ef: 31:98:1c:2d:17:77:5c:8c:18:7b:48:a6:ac:4e:f7:19:4b:c9: de:67:59:d5 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUWy6GQ7zC/hHiIXIkN1uOBP9ALTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTlaFw0yNjEyMjgwOTUwNTlaMDMxMTAvBgNV BAMTKDAwRUREN0UxRjVGNEU1QTM0MkI3OEFBMEJCREE4ODg2MkQ1QTYxODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCj+7XBG607TKaHfKsiYe5BnOW W+GHMivFBRAahAiBMQlBxjIqlIXVPms5bFssGFyXAGBAyq+oTd0ausqhOtoOg4MG 6AMxPyi8El7rtKfH/g7sCnvuI4ay1DdgVNg/SepMDoXvYyH8SNTy8e0jSLWSZXD/ NbSwJQNQJnWFyOzsZreRliKa2nEsupGE2dIt3mddM78ds4orozo66FpwgwuuzJ8k MU6mZ4VAh9+CoNo6Rq+gmBuZ9tnRxNhYj2JTY7u/0kZElx2a7sZUGCN/h2IlrV9X 0OCENfDvy84HRSeKlVUn8WQRC1E0RRIa3xWAVjYnKFF+pSNRBGTy//lKZ7D/AgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUAO3X4fX05aNCt4qgu9qIhi1aYYYwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMwMzMyZTMx MzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALnLejANBgkqhkiG9w0BAQsFAAOCAQEAoShOWk5729Z8gr75Pa0opf4V9U3U rox2mqhyhJL3iOOZOxwzYt1pPYtlCVgLAQE3nhLXKN2ZKEXR9EoWqrHxIQSqL9Ux 6F2WaT/AEJeTGGKaGoxDUfvAzkNlH6jGDVSOxScoX0amS2iJopb66Xlt3kcu14OC SoVgUtgWJVBg2yykYZj5XIwmjqrAysEaIYdfFTS8iEqMC7Cp8lesHCtFqJohZ/Xy tLho0xDK4GrDcvDDy6eFJuEt63uV2ZSaIGXU4EyRZYSn1U+8pP8AWM/gHCIvz6Y9 /vjdw9pO/QnwwrdV1F1+SRrlBEvvMZgcLRd3XIwYe0imrE73GUvJ3mdZ1Q== -----END CERTIFICATE-----Generated at Mon Jan 19 14:25:55 2026 by rpki-client