This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232362e3134352e302f32342d3234203d3e20313336373837.roa
File: 3138352e3232362e3134352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 44JS4UUc5zMK9XhMHFdysj2QyVSNEn7TdUlPvlsOveY=
Subject key identifier: EE:27:09:5C:43:45:FC:8B:B9:5A:F3:F7:44:8B:DB:3B:F7:49:A6:AA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4FDE703BA9892D3135F6A74A3415308BBE224BFD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232362e3134352e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 29 Dec 2025 09:50:45 +0000
ROA not before: Mon 29 Dec 2025 09:45:45 +0000
ROA not after: Mon 28 Dec 2026 09:50:45 +0000
asID: 136787
IP address blocks: 185.226.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 01:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:de:70:3b:a9:89:2d:31:35:f6:a7:4a:34:15:30:8b:be:22:4b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 29 09:45:45 2025 GMT
Not After : Dec 28 09:50:45 2026 GMT
Subject: CN=EE27095C4345FC8BB95AF3F7448BDB3BF749A6AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:34:8c:ee:93:fe:3c:6e:73:68:16:78:58:26:
5c:0f:a9:2f:83:3d:e6:a2:b9:bf:d0:0e:f8:10:cd:
66:04:66:ce:3c:9b:2a:92:58:72:d1:32:52:37:f6:
06:72:f3:d3:6f:8d:b3:2e:c1:ac:5f:67:8e:1d:a7:
25:0f:f8:09:35:97:7c:f9:99:84:6a:00:8f:6b:ff:
65:07:6c:0b:be:07:23:db:e1:1e:fd:e1:a1:d3:63:
99:b8:f7:c7:de:d6:46:c4:78:ee:11:13:bd:d1:a2:
08:24:87:17:b2:5f:3c:9d:4e:7b:a1:bb:72:68:3b:
f7:ed:27:29:2c:c7:4f:60:80:b8:d1:2f:4b:14:0b:
4d:ca:0d:37:bd:38:d4:9e:5d:cf:75:f6:c5:da:d2:
b1:ae:3d:8f:a7:52:1e:c9:db:f3:75:95:c5:26:25:
b1:3e:e7:fa:63:30:b7:fd:ed:b3:45:62:6f:51:bb:
cc:2d:ec:6c:42:86:af:cb:e0:3f:ae:1b:96:ac:8d:
f7:53:8d:6b:ac:ad:82:b2:fb:cc:f9:35:38:db:22:
1e:22:9a:06:24:1b:27:c6:67:ad:8a:89:cb:ab:7a:
d8:80:33:4a:1e:7c:c7:11:ff:47:67:cc:31:a2:00:
ac:58:f3:30:ef:c0:d4:93:4c:b6:f5:a2:44:37:a7:
a8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:27:09:5C:43:45:FC:8B:B9:5A:F3:F7:44:8B:DB:3B:F7:49:A6:AA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232362e3134352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.145.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:37:a5:06:e4:cf:e8:ef:be:a5:14:dc:da:24:c1:b4:e1:83:
9e:0f:d7:5c:c7:a8:21:e2:59:01:c0:e4:19:9c:f0:be:96:96:
5b:91:d2:f2:9e:0f:be:b8:a6:15:4f:e9:a5:10:6f:1b:a9:67:
82:23:cc:fa:fa:49:7a:35:bb:ee:6e:93:b7:52:2e:10:d3:af:
be:4f:be:c0:95:0b:96:00:1f:c7:52:34:0e:67:e2:0a:ff:ff:
e8:07:e8:07:57:0f:8a:18:c2:33:b7:48:61:77:3e:43:b4:ba:
45:04:4c:57:9f:92:35:d5:b8:6e:76:3f:89:3b:17:81:9a:28:
21:3a:cd:06:12:b0:c4:d2:35:0b:b3:db:56:6d:b8:12:16:93:
b3:b9:94:f5:50:5f:6b:92:c9:e2:99:12:45:b2:2a:9f:1b:db:
0e:f6:d4:70:50:da:27:8f:1a:c9:e3:95:20:2b:62:54:c5:0d:
3f:7f:b1:c1:5d:b0:8d:f3:48:37:58:e4:48:bd:99:7b:df:b8:
2b:27:5f:74:60:4d:9a:df:54:22:2b:e7:6f:65:f1:55:9e:9b:
69:c6:81:93:42:2a:a6:e0:a2:ac:86:9a:72:47:99:29:cb:7a:
34:fd:10:64:ec:c5:49:63:20:b7:e1:90:4a:bd:3a:42:cd:75:
8d:1b:24:26
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUT95wO6mJLTE19qdKNBUwi74iS/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDVaFw0yNjEyMjgwOTUwNDVaMDMxMTAvBgNV
BAMTKEVFMjcwOTVDNDM0NUZDOEJCOTVBRjNGNzQ0OEJEQjNCRjc0OUE2QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmNIzuk/48bnNoFnhYJlwPqS+D
Peaiub/QDvgQzWYEZs48myqSWHLRMlI39gZy89NvjbMuwaxfZ44dpyUP+Ak1l3z5
mYRqAI9r/2UHbAu+ByPb4R794aHTY5m498fe1kbEeO4RE73RoggkhxeyXzydTnuh
u3JoO/ftJyksx09ggLjRL0sUC03KDTe9ONSeXc919sXa0rGuPY+nUh7J2/N1lcUm
JbE+5/pjMLf97bNFYm9Ru8wt7GxChq/L4D+uG5asjfdTjWusrYKy+8z5NTjbIh4i
mgYkGyfGZ62KicuretiAM0oefMcR/0dnzDGiAKxY8zDvwNSTTLb1okQ3p6ilAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU7icJXENF/Iu5WvP3RIvbO/dJpqowHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMyMzYyZTMx
MzQzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnikTANBgkqhkiG9w0BAQsFAAOCAQEAGjelBuTP6O++pRTc2iTBtOGDng/X
XMeoIeJZAcDkGZzwvpaWW5HS8p4PvrimFU/ppRBvG6lngiPM+vpJejW77m6Tt1Iu
ENOvvk++wJULlgAfx1I0DmfiCv//6AfoB1cPihjCM7dIYXc+Q7S6RQRMV5+SNdW4
bnY/iTsXgZooITrNBhKwxNI1C7PbVm24EhaTs7mU9VBfa5LJ4pkSRbIqnxvbDvbU
cFDaJ48ayeOVICtiVMUNP3+xwV2wjfNIN1jkSL2Ze9+4KydfdGBNmt9UIivnb2Xx
VZ6bacaBk0IqpuCirIaackeZKct6NP0QZOzFSWMgt+GQSr06Qs11jRskJg==
-----END CERTIFICATE-----
Generated at Mon Jan 19 14:27:18 2026 by rpki-client