This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3234342e302f32342d3332203d3e203531313637.roa File: 3138352e3230352e3234342e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: 1nqEm/v2RshJGvjHKWfVfSwdYbh6Blj5fHRaofjayHI= Subject key identifier: 55:C8:FB:C4:3E:B3:69:7D:82:86:35:35:A7:C3:58:AC:8E:16:53:AD Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 1BA176BD68E9816B2606D2177B07CE4A2A358FDB Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3234342e302f32342d3332203d3e203531313637.roa Signing time: Mon 29 Dec 2025 09:51:03 +0000 ROA not before: Mon 29 Dec 2025 09:46:03 +0000 ROA not after: Mon 28 Dec 2026 09:51:03 +0000 asID: 51167 IP address blocks: 185.205.244.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a1:76:bd:68:e9:81:6b:26:06:d2:17:7b:07:ce:4a:2a:35:8f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:46:03 2025 GMT Not After : Dec 28 09:51:03 2026 GMT Subject: CN=55C8FBC43EB3697D82863535A7C358AC8E1653AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:de:f1:b1:9f:33:dc:2a:6c:f8:07:b7:94:01: ce:d5:56:03:f4:37:1f:23:5d:33:09:3f:9b:a5:e4: ae:a7:b0:e4:9b:d1:90:38:b6:75:31:2c:6e:e5:6c: 4a:6c:e6:b4:73:99:2a:cc:1b:55:b4:c0:99:98:cb: c6:da:02:65:de:23:8d:28:09:24:8c:05:52:d0:8f: 12:7f:ab:46:f0:66:9c:24:fb:d3:98:65:79:99:7f: 1f:ed:36:17:f0:b1:d7:0e:2a:dd:1c:6b:43:b1:5b: c0:aa:23:40:ce:04:0c:df:86:f6:e6:10:71:36:1c: 18:a4:4e:69:be:9a:ef:53:da:1f:3c:51:ac:11:04: 99:40:2d:69:38:f2:7d:ee:ed:17:80:12:e3:9a:b3: 3e:96:d1:47:38:71:97:d2:c5:18:d4:51:dc:a0:a6: c0:17:4f:ed:3d:c8:a4:2d:46:dd:8f:46:57:27:a7: 31:25:49:db:81:56:4d:c0:59:1b:05:97:8e:27:a4: 85:9d:95:86:04:30:d3:0b:fa:57:e6:a2:33:1e:da: 73:9d:04:56:c1:e0:e4:ab:c8:66:84:b1:26:90:9c: 16:e7:94:48:bc:f9:f6:28:65:d9:e5:9f:b4:50:8a: 29:19:01:4e:ae:1a:50:4a:c7:c7:24:b6:35:5b:43: a2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C8:FB:C4:3E:B3:69:7D:82:86:35:35:A7:C3:58:AC:8E:16:53:AD X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3234342e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.244.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:ad:06:e9:b2:f4:54:b2:00:9a:01:f8:4c:ba:4b:31:60:9d: ef:90:da:6b:3e:36:01:39:b7:59:f3:3f:09:af:30:e3:80:da: 4a:35:d1:4d:e1:ec:b7:e9:8f:20:d2:96:1e:52:56:d8:f9:db: ad:d0:fb:0e:d9:95:52:6a:2c:43:06:a2:63:4a:9d:5f:b8:11: 28:4c:eb:9b:61:4f:b3:a9:ad:3f:65:69:a3:3e:0c:81:fe:a1: 22:25:c7:82:7d:cd:c6:72:35:ba:6b:11:65:9a:3e:68:55:6c: 80:55:2a:9a:f2:78:b2:b4:4e:93:88:89:93:0d:29:44:58:2e: a2:e2:5f:3b:f4:1a:19:b0:39:75:02:61:22:ca:0a:1f:0d:48: 43:ee:3a:7d:aa:57:e4:45:29:6a:26:00:1c:21:5e:c1:88:3a: 44:72:a6:a9:ab:46:7c:6f:33:61:12:d8:90:f4:1c:7b:93:7c: 0a:fe:be:c7:e3:33:24:cb:51:4e:a2:30:1f:5a:43:f3:2a:2d: 6a:ae:d7:32:8c:31:e0:51:85:a2:8d:28:6d:65:01:85:8d:e0: b1:2e:0b:ec:04:21:d3:11:86:8c:3d:56:c9:cd:fe:e5:d7:b2: 9a:b4:f8:02:19:08:80:01:6e:be:d6:99:fd:d1:2c:56:a6:7b: c1:bd:64:79 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUG6F2vWjpgWsmBtIXewfOSio1j9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ2MDNaFw0yNjEyMjgwOTUxMDNaMDMxMTAvBgNV BAMTKDU1QzhGQkM0M0VCMzY5N0Q4Mjg2MzUzNUE3QzM1OEFDOEUxNjUzQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3vGxnzPcKmz4B7eUAc7VVgP0 Nx8jXTMJP5ul5K6nsOSb0ZA4tnUxLG7lbEps5rRzmSrMG1W0wJmYy8baAmXeI40o CSSMBVLQjxJ/q0bwZpwk+9OYZXmZfx/tNhfwsdcOKt0ca0OxW8CqI0DOBAzfhvbm EHE2HBikTmm+mu9T2h88UawRBJlALWk48n3u7ReAEuOasz6W0Uc4cZfSxRjUUdyg psAXT+09yKQtRt2PRlcnpzElSduBVk3AWRsFl44npIWdlYYEMNML+lfmojMe2nOd BFbB4OSryGaEsSaQnBbnlEi8+fYoZdnln7RQiikZAU6uGlBKx8cktjVbQ6J1AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUVcj7xD6zaX2ChjU1p8NYrI4WU60wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMwMzUyZTMy MzQzNDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5zfQwDQYJKoZIhvcNAQELBQADggEBAIutBumy9FSyAJoB+Ey6SzFgne+Q2ms+ NgE5t1nzPwmvMOOA2ko10U3h7LfpjyDSlh5SVtj5263Q+w7ZlVJqLEMGomNKnV+4 EShM65thT7OprT9laaM+DIH+oSIlx4J9zcZyNbprEWWaPmhVbIBVKpryeLK0TpOI iZMNKURYLqLiXzv0GhmwOXUCYSLKCh8NSEPuOn2qV+RFKWomABwhXsGIOkRypqmr RnxvM2ES2JD0HHuTfAr+vsfjMyTLUU6iMB9aQ/MqLWqu1zKMMeBRhaKNKG1lAYWN 4LEuC+wEIdMRhow9VsnN/uXXspq0+AIZCIABbr7Wmf3RLFame8G9ZHk= -----END CERTIFICATE-----Generated at Mon Jan 19 14:26:14 2026 by rpki-client