This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35392e302f32342d3234203d3e20313437303439.roa File: 3138352e3232392e35392e302f32342d3234203d3e20313437303439.roa (raw, json) Hash identifier: o0BLtQJiB9LK4AD6/DbeVO2l2ILUoMFXUrmKdJxZTQ8= Subject key identifier: 65:7C:3F:DE:06:B8:6F:1F:19:24:67:90:40:08:B6:3C:DB:4A:37:79 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 40523DEAA63925D6490BB9FB72FB70B0E9A28494 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35392e302f32342d3234203d3e20313437303439.roa Signing time: Mon 29 Dec 2025 09:50:57 +0000 ROA not before: Mon 29 Dec 2025 09:45:57 +0000 ROA not after: Mon 28 Dec 2026 09:50:57 +0000 asID: 147049 IP address blocks: 185.229.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:52:3d:ea:a6:39:25:d6:49:0b:b9:fb:72:fb:70:b0:e9:a2:84:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:57 2025 GMT Not After : Dec 28 09:50:57 2026 GMT Subject: CN=657C3FDE06B86F1F192467904008B63CDB4A3779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ae:6a:fe:b5:e8:f0:86:8b:c5:9e:6b:bd:b6: c3:db:3f:ec:b3:10:00:b5:fa:8f:22:05:7a:50:b0: ec:37:dd:ba:56:46:da:72:66:57:fb:a8:b9:5c:9c: 6c:a8:c5:0f:82:19:70:04:c5:22:20:d3:04:5d:f5: 94:e1:05:37:95:64:5d:87:9c:ad:49:2a:06:cd:ed: 94:83:bb:a0:69:f1:b2:42:4c:21:ef:23:82:13:41: 25:31:7a:d5:76:52:c5:8f:81:b9:40:ee:00:ba:4f: 8f:c7:2c:df:27:1a:67:f0:34:6d:cd:46:d1:5e:92: 60:72:33:86:c1:6b:35:59:3a:3f:db:aa:9e:c8:d6: de:04:ec:28:42:46:d3:81:be:9e:df:66:4e:c3:be: d7:fe:9a:f8:4a:b4:5d:22:95:58:0d:6d:bb:d5:91: ba:bc:e6:f7:7c:35:cd:9f:28:32:8e:3d:64:59:2b: 2a:52:cc:2d:d5:1c:cb:b7:dd:bc:70:aa:bd:6b:fb: 3f:d0:67:65:76:e2:bc:36:5d:30:8c:62:5a:6a:47: 95:36:11:02:a9:68:c5:b3:6c:8d:01:d2:86:4d:2e: 11:5a:17:98:8a:e2:ec:53:79:01:2a:69:84:d7:fc: da:88:d5:b7:63:de:7d:a2:50:80:03:9b:c1:65:fc: 59:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7C:3F:DE:06:B8:6F:1F:19:24:67:90:40:08:B6:3C:DB:4A:37:79 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35392e302f32342d3234203d3e20313437303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.59.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:4c:9c:b8:69:c5:65:19:24:24:4a:24:17:86:2c:b7:50:8e: 16:97:b0:12:43:15:d7:78:d3:df:ea:f1:9d:5d:16:80:71:3a: 1c:cf:d8:82:f8:d0:39:3d:a0:fe:11:47:8d:37:25:09:be:a6: f0:75:48:66:75:7b:fc:a8:6f:fb:9d:29:db:0e:4e:a0:d7:de: 04:92:03:d9:29:40:24:f1:31:cf:24:37:2e:9b:c7:ed:74:c5: fe:f8:7a:bd:f0:03:4c:16:4a:23:4c:68:54:5b:cb:ba:57:66: b5:ee:ae:9c:9d:28:12:48:4d:9f:ea:1e:89:ab:df:48:a4:a3: 09:38:61:39:60:08:92:79:c0:ae:57:51:67:b2:c4:bd:a7:7a: e1:47:f8:42:19:fc:3d:35:66:10:43:30:86:5d:e7:fe:27:7c: 4e:3a:c3:73:56:f3:51:f9:55:b0:c9:75:fc:bb:b7:9d:62:d9: 43:11:1f:de:03:74:45:d1:8e:fe:20:4b:70:70:ab:1c:70:65: f5:a6:e4:5c:04:e7:5f:9f:4a:f8:01:e6:86:85:da:b9:be:9c: 37:80:a1:33:9e:a6:19:7e:34:2a:bc:f2:d0:f0:d4:c3:ef:32: 34:e5:9c:f3:0c:c7:9d:4d:d1:75:66:da:d0:8c:1f:a5:ad:2e: 00:72:91:35 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUQFI96qY5JdZJC7n7cvtwsOmihJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTdaFw0yNjEyMjgwOTUwNTdaMDMxMTAvBgNV BAMTKDY1N0MzRkRFMDZCODZGMUYxOTI0Njc5MDQwMDhCNjNDREI0QTM3NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcrmr+tejwhovFnmu9tsPbP+yz EAC1+o8iBXpQsOw33bpWRtpyZlf7qLlcnGyoxQ+CGXAExSIg0wRd9ZThBTeVZF2H nK1JKgbN7ZSDu6Bp8bJCTCHvI4ITQSUxetV2UsWPgblA7gC6T4/HLN8nGmfwNG3N RtFekmByM4bBazVZOj/bqp7I1t4E7ChCRtOBvp7fZk7Dvtf+mvhKtF0ilVgNbbvV kbq85vd8Nc2fKDKOPWRZKypSzC3VHMu33bxwqr1r+z/QZ2V24rw2XTCMYlpqR5U2 EQKpaMWzbI0B0oZNLhFaF5iK4uxTeQEqaYTX/NqI1bdj3n2iUIADm8Fl/FmlAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUZXw/3ga4bx8ZJGeQQAi2PNtKN3kwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMyMzkyZTM1 MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM0Mzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC55TswDQYJKoZIhvcNAQELBQADggEBAC5MnLhpxWUZJCRKJBeGLLdQjhaXsBJD Fdd409/q8Z1dFoBxOhzP2IL40Dk9oP4RR403JQm+pvB1SGZ1e/yob/udKdsOTqDX 3gSSA9kpQCTxMc8kNy6bx+10xf74er3wA0wWSiNMaFRby7pXZrXurpydKBJITZ/q Homr30ikowk4YTlgCJJ5wK5XUWeyxL2neuFH+EIZ/D01ZhBDMIZd5/4nfE46w3NW 81H5VbDJdfy7t51i2UMRH94DdEXRjv4gS3BwqxxwZfWm5FwE51+fSvgB5oaF2rm+ nDeAoTOephl+NCq88tDw1MPvMjTlnPMMx51N0XVm2tCMH6WtLgBykTU= -----END CERTIFICATE-----Generated at Mon Jan 19 14:28:12 2026 by rpki-client