This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231322e37302e302f32332d3234203d3e203437353833.roa File: 3138352e3231322e37302e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: ZlYCMza7PlZaL2TXUPOdetdBoxwMV5Joy2RtbnguiH0= Subject key identifier: 02:56:24:51:6B:75:49:D5:6E:0A:50:08:4A:B6:4F:02:B3:74:44:28 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 2A45A3FA822CD75E709E98813E48E140304E029E Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231322e37302e302f32332d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:40 +0000 ROA not before: Mon 29 Dec 2025 09:45:40 +0000 ROA not after: Mon 28 Dec 2026 09:50:40 +0000 asID: 47583 IP address blocks: 185.212.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:45:a3:fa:82:2c:d7:5e:70:9e:98:81:3e:48:e1:40:30:4e:02:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:40 2025 GMT Not After : Dec 28 09:50:40 2026 GMT Subject: CN=025624516B7549D56E0A50084AB64F02B3744428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2b:9b:3c:73:69:08:bb:21:23:9a:38:c0:8c: 2b:6c:59:fd:14:b8:f0:a5:70:16:14:2f:10:90:9f: c5:7f:f8:15:07:9e:4b:8f:b9:4a:3f:8a:4f:75:f2: 23:0c:2c:63:f2:a7:a1:30:f9:78:9c:a2:65:87:67: 0a:c3:da:56:c7:ff:60:f0:29:3b:f0:11:38:c5:45: 86:66:3d:7e:e2:40:0b:0c:64:fd:08:d3:7e:64:cf: fe:51:ca:b5:64:42:71:f5:9f:96:44:40:75:ff:26: 03:f9:2d:1a:08:a3:c1:03:5b:a4:26:9a:46:2d:53: 36:cd:47:cf:c0:ec:1f:72:7a:bf:76:fd:34:ad:73: 7d:e0:45:54:92:21:1e:7b:ac:e6:8f:39:05:e7:65: 38:db:6f:17:aa:29:33:8d:9a:95:78:2b:5a:3c:75: 2e:ce:9f:c9:71:d1:05:2c:34:79:58:4e:bc:e9:07: d3:5b:e9:dc:1f:98:9f:e3:15:52:ee:c0:ba:76:a5: 47:27:c8:32:6c:a5:db:f2:6d:db:62:82:3b:0a:74: 2b:b7:0b:fa:54:8a:d5:4d:d5:3f:50:20:22:de:9a: e1:9c:4f:79:bb:7a:9b:b6:0c:ce:5d:c6:78:c8:a8: 48:06:fa:a2:6e:ee:5f:7b:42:58:ad:96:8d:3b:81: 8f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:56:24:51:6B:75:49:D5:6E:0A:50:08:4A:B6:4F:02:B3:74:44:28 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231322e37302e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.212.70.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:14:8b:fe:10:19:3e:d5:e1:59:e9:3b:6d:4b:de:90:dd:85: c7:13:61:77:d3:de:02:2a:ad:01:e3:57:13:f0:52:d4:ef:97: 75:26:a1:b8:68:7c:3c:12:7b:22:c4:19:a4:05:09:7c:b5:6f: 3f:64:20:08:ea:a9:2a:ee:d5:15:b5:2a:0d:b3:1d:f1:73:ea: 90:1f:47:ba:20:70:7e:83:3e:c2:54:99:d4:72:bd:db:a6:ea: ab:2c:e3:2c:4d:47:c3:89:02:b3:6a:c2:75:70:34:bf:08:33: e4:0b:e5:fc:e6:c5:80:8d:48:17:c1:e9:92:c5:7c:8e:04:db: 19:d4:9c:2d:a5:4f:f0:91:69:6c:9f:15:ed:82:5e:75:3f:fe: ff:ce:94:74:a0:e6:3d:4e:83:e8:fe:b6:00:ed:38:82:2c:2e: c6:03:fd:12:b8:0a:77:ee:ba:2c:43:69:6d:ce:47:a7:7d:cf: 81:d5:c7:f9:b2:a8:4b:9b:51:37:f0:77:20:5b:a1:28:cc:b3: 79:55:da:65:0a:ba:fc:02:0e:bb:ee:f1:f0:28:a3:a6:c4:c2: 5e:e5:27:6d:7f:52:05:e0:c6:aa:56:93:eb:dd:86:82:4a:ca: 12:0b:94:69:73:70:c3:de:4c:b2:97:b3:3a:b7:b9:4b:25:6d: a9:51:e2:c4 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUKkWj+oIs115wnpiBPkjhQDBOAp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDBaFw0yNjEyMjgwOTUwNDBaMDMxMTAvBgNV BAMTKDAyNTYyNDUxNkI3NTQ5RDU2RTBBNTAwODRBQjY0RjAyQjM3NDQ0MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMK5s8c2kIuyEjmjjAjCtsWf0U uPClcBYULxCQn8V/+BUHnkuPuUo/ik918iMMLGPyp6Ew+XicomWHZwrD2lbH/2Dw KTvwETjFRYZmPX7iQAsMZP0I035kz/5RyrVkQnH1n5ZEQHX/JgP5LRoIo8EDW6Qm mkYtUzbNR8/A7B9yer92/TStc33gRVSSIR57rOaPOQXnZTjbbxeqKTONmpV4K1o8 dS7On8lx0QUsNHlYTrzpB9Nb6dwfmJ/jFVLuwLp2pUcnyDJspdvybdtigjsKdCu3 C/pUitVN1T9QICLemuGcT3m7epu2DM5dxnjIqEgG+qJu7l97Qlitlo07gY9xAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUAlYkUWt1SdVuClAISrZPArN0RCgwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMxMzIyZTM3 MzAyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB udRGMA0GCSqGSIb3DQEBCwUAA4IBAQBKFIv+EBk+1eFZ6TttS96Q3YXHE2F3094C Kq0B41cT8FLU75d1JqG4aHw8EnsixBmkBQl8tW8/ZCAI6qkq7tUVtSoNsx3xc+qQ H0e6IHB+gz7CVJnUcr3bpuqrLOMsTUfDiQKzasJ1cDS/CDPkC+X85sWAjUgXwemS xXyOBNsZ1JwtpU/wkWlsnxXtgl51P/7/zpR0oOY9ToPo/rYA7TiCLC7GA/0SuAp3 7rosQ2ltzkenfc+B1cf5sqhLm1E38HcgW6EozLN5VdplCrr8Ag677vHwKKOmxMJe 5Sdtf1IF4MaqVpPr3YaCSsoSC5Rpc3DD3kyyl7M6t7lLJW2pUeLE -----END CERTIFICATE-----Generated at Mon Jan 19 14:24:13 2026 by rpki-client