This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132372e302f32342d3234203d3e20313337343039.roa File: 3138352e38312e3132372e302f32342d3234203d3e20313337343039.roa (raw, json) Hash identifier: /9YmHtr9SDTqH5KqvikUpTJtNyfuWW9mbTjw7Fj8JYw= Subject key identifier: 2A:B6:DE:FD:4D:44:85:B8:99:39:9E:B0:45:E2:00:19:2B:45:4E:30 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 1A6556CDEEF6C7942B168387D3853D2EBAB8E2F3 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132372e302f32342d3234203d3e20313337343039.roa Signing time: Thu 01 Jan 2026 18:51:09 +0000 ROA not before: Thu 01 Jan 2026 18:46:09 +0000 ROA not after: Thu 31 Dec 2026 18:51:09 +0000 asID: 137409 IP address blocks: 185.81.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:65:56:cd:ee:f6:c7:94:2b:16:83:87:d3:85:3d:2e:ba:b8:e2:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 1 18:46:09 2026 GMT Not After : Dec 31 18:51:09 2026 GMT Subject: CN=2AB6DEFD4D4485B899399EB045E200192B454E30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:11:a7:de:ad:8e:29:24:fa:2f:50:a6:69:e6: 65:4b:85:6b:1e:e7:00:f6:ba:81:d4:f3:4b:cb:d0: 34:2d:e0:b4:f3:8f:c6:b9:da:5d:d7:39:1c:a5:54: 12:30:07:0a:6d:c6:b5:05:cc:7a:e6:ad:5e:72:5d: e7:f9:96:ef:fb:52:ab:1a:26:c8:10:c3:0d:bb:dc: af:a0:6d:ec:bc:28:71:ab:35:90:11:d1:6c:60:3b: ce:03:87:7e:a3:0a:f2:e9:7b:32:05:7c:57:0a:ca: 06:87:82:f2:75:9d:71:91:88:1d:fd:8b:77:41:e0: c7:6a:30:85:1f:5d:dd:df:00:3b:cb:f9:26:4f:fc: 5a:2c:98:63:34:c5:9f:3a:0a:29:47:64:0f:d4:5e: 41:2f:0b:2b:29:09:ff:3d:e2:fa:88:74:94:8a:0a: ec:0f:a6:1a:93:3f:10:0d:16:c8:f4:b5:aa:a1:f5: 64:f5:86:a1:e2:14:e2:e7:20:13:86:a3:c5:06:7e: bb:7c:11:b4:84:e7:3a:86:ef:61:f7:09:d8:13:cf: fd:54:d5:39:33:26:58:23:ed:b8:4e:40:b1:66:0a: 29:21:09:b6:3a:9d:e3:8c:40:fa:ca:ff:86:b7:ac: 00:d2:7c:45:6a:13:ba:cb:99:0a:27:8e:2b:0d:be: af:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B6:DE:FD:4D:44:85:B8:99:39:9E:B0:45:E2:00:19:2B:45:4E:30 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132372e302f32342d3234203d3e20313337343039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.81.127.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:d4:49:b8:80:02:bd:f2:43:3a:32:a6:4c:f1:ce:c8:43:f3: 97:3f:c5:21:54:c8:dd:e1:0e:dd:e5:76:cf:d7:06:d0:d3:b0: 7c:8a:d4:6e:d8:b2:15:a5:ed:56:2f:cb:97:e2:d0:d2:d2:1b: ce:56:7c:0f:21:9d:fc:0f:c2:f9:ab:d0:4c:0d:7d:df:29:e7: c2:53:df:61:2f:09:af:ae:45:bd:ec:62:19:b9:9c:06:2b:82: 2e:10:9d:d5:10:5b:2c:d2:ce:d7:e5:c1:f8:66:f1:d1:ac:31: 57:f4:62:e6:b7:9f:77:29:bf:b8:fe:51:57:4d:11:07:85:00: 5b:e0:27:4c:50:09:0c:d5:34:e3:21:8b:99:ad:18:28:d2:4d: 52:5c:a5:40:1a:66:bf:d8:36:98:1e:5e:0c:25:26:cb:33:f0: ce:84:22:6f:ee:2a:63:36:d2:59:8a:16:44:90:11:72:84:8f: 0d:63:e1:10:75:4c:fb:5f:ea:90:a5:82:f1:63:63:24:ae:4b: 83:51:c5:f8:3c:22:d3:b0:d6:14:dc:19:92:84:13:da:0e:68: 13:d0:32:1f:be:60:e9:ea:62:0d:26:18:a4:21:07:3c:a2:82: a7:17:65:6e:4d:c8:d8:10:d9:06:55:93:b9:12:fe:c7:c7:15: 31:f1:b2:24 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUGmVWze72x5QrFoOH04U9Lrq44vMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMDExODQ2MDlaFw0yNjEyMzExODUxMDlaMDMxMTAvBgNV BAMTKDJBQjZERUZENEQ0NDg1Qjg5OTM5OUVCMDQ1RTIwMDE5MkI0NTRFMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLEaferY4pJPovUKZp5mVLhWse 5wD2uoHU80vL0DQt4LTzj8a52l3XORylVBIwBwptxrUFzHrmrV5yXef5lu/7Uqsa JsgQww273K+gbey8KHGrNZAR0WxgO84Dh36jCvLpezIFfFcKygaHgvJ1nXGRiB39 i3dB4MdqMIUfXd3fADvL+SZP/FosmGM0xZ86CilHZA/UXkEvCyspCf894vqIdJSK CuwPphqTPxANFsj0taqh9WT1hqHiFOLnIBOGo8UGfrt8EbSE5zqG72H3CdgTz/1U 1TkzJlgj7bhOQLFmCikhCbY6neOMQPrK/4a3rADSfEVqE7rLmQonjisNvq+ZAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUKrbe/U1EhbiZOZ6wReIAGStFTjAwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzODMxMmUzMTMy MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczNDMwMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5UX8wDQYJKoZIhvcNAQELBQADggEBAD/USbiAAr3yQzoypkzxzshD85c/xSFU yN3hDt3lds/XBtDTsHyK1G7YshWl7VYvy5fi0NLSG85WfA8hnfwPwvmr0EwNfd8p 58JT32EvCa+uRb3sYhm5nAYrgi4QndUQWyzSztflwfhm8dGsMVf0Yua3n3cpv7j+ UVdNEQeFAFvgJ0xQCQzVNOMhi5mtGCjSTVJcpUAaZr/YNpgeXgwlJssz8M6EIm/u KmM20lmKFkSQEXKEjw1j4RB1TPtf6pClgvFjYySuS4NRxfg8ItOw1hTcGZKEE9oO aBPQMh++YOnqYg0mGKQhBzyigqcXZW5NyNgQ2QZVk7kS/sfHFTHxsiQ= -----END CERTIFICATE-----Generated at Mon Jan 19 14:26:13 2026 by rpki-client