This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34332e3133342e302f32342d3234203d3e203437353833.roa File: 3139332e34332e3133342e302f32342d3234203d3e203437353833.roa (raw, json) Hash identifier: gw1pmV+hHhbgMtWPUY/+mDKyIOU9/4uwjha8GjYkUJU= Subject key identifier: AE:8B:67:B1:74:28:5E:D5:4F:B5:15:31:4B:FE:AD:81:FA:F7:7C:26 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 1937FAF84D52F66173ECC1618B6D14F9674DE7E2 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34332e3133342e302f32342d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:49 +0000 ROA not before: Mon 29 Dec 2025 09:45:49 +0000 ROA not after: Mon 28 Dec 2026 09:50:49 +0000 asID: 47583 IP address blocks: 193.43.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:37:fa:f8:4d:52:f6:61:73:ec:c1:61:8b:6d:14:f9:67:4d:e7:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:49 2025 GMT Not After : Dec 28 09:50:49 2026 GMT Subject: CN=AE8B67B174285ED54FB515314BFEAD81FAF77C26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:24:c8:96:2a:cf:3c:fb:d9:fd:d5:cf:ac:9f: f0:e2:10:e4:db:59:bd:8e:ac:45:6b:0b:c1:57:a7: 1b:98:ad:e0:20:9a:37:79:af:9e:55:08:13:a9:3a: 18:54:6b:54:b8:37:17:61:db:f6:80:75:1f:93:53: ff:36:f6:d6:6c:5a:97:9e:b4:0f:95:e3:c6:ee:ab: 32:78:ba:fc:eb:d0:f8:15:a7:47:56:6c:f5:fc:58: 60:46:7a:01:6e:2f:ee:c5:10:e9:e5:cf:78:b9:bc: f1:8e:2a:99:53:75:cf:cf:34:e8:85:07:f0:28:29: 43:c1:a5:d3:6e:54:45:49:9a:71:fc:d5:43:4d:26: e5:9a:d0:88:bb:0e:08:f4:3a:dd:ee:d7:ea:26:de: 2e:e4:2a:80:ba:14:be:f7:68:52:8b:43:a9:58:e2: 68:26:60:40:23:ed:76:b3:ec:be:59:10:1d:28:8f: 5c:4e:13:b8:43:ca:d4:7d:12:51:53:d3:cc:a8:f6: 6a:4b:28:e4:98:3d:2b:34:3a:b4:ba:2d:ea:e3:d3: c6:b8:ee:d5:58:35:2d:73:4b:5c:20:de:9b:11:42: 27:fc:c5:1f:be:03:04:34:69:50:78:16:85:f1:9e: 22:66:08:a8:59:cc:30:9e:09:b3:a2:f9:3b:35:5d: b8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8B:67:B1:74:28:5E:D5:4F:B5:15:31:4B:FE:AD:81:FA:F7:7C:26 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34332e3133342e302f32342d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.134.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:70:96:9e:82:b1:91:fc:85:90:65:fc:e3:73:46:e1:d9:a6: 61:95:a1:9a:2b:2a:fd:ee:bd:92:33:82:e3:06:32:b5:af:67: 1a:01:98:4a:c2:78:16:4d:4b:02:5f:1d:75:27:aa:d3:e8:4f: ac:b6:e2:62:57:6b:5f:ac:c0:4c:b6:a3:eb:81:ed:79:7a:f0: b0:32:68:6d:1d:5a:75:ed:ba:db:5d:e7:33:4b:6c:c0:23:3f: fc:af:34:3d:7d:b4:c1:d0:9d:a6:76:02:a4:38:02:46:29:0d: 69:b6:d8:62:b8:78:fa:b1:5a:53:4f:47:93:3c:e0:0c:15:89: 99:ab:cc:31:60:45:32:80:44:ba:e8:c3:18:12:41:6c:47:df: 9c:54:31:8c:b0:5c:37:7d:dc:bb:4a:b3:92:56:35:c6:3c:be: 50:7b:6e:1d:f4:25:08:5d:72:ba:1b:b0:14:5f:05:23:8a:60: b6:41:50:db:88:ec:28:a2:31:7a:cb:b8:51:06:b6:4f:f3:1f: c7:91:ab:12:2a:e9:00:f2:28:47:79:2a:48:ba:5e:01:f0:0c: 5f:f2:ca:bc:9a:bb:21:20:31:8e:c5:83:78:88:f1:a4:33:d9: be:02:0c:2b:e4:a4:25:c1:25:71:61:0d:da:fb:ae:b2:7a:9c: b6:ee:fb:37 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUGTf6+E1S9mFz7MFhi20U+WdN5+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDlaFw0yNjEyMjgwOTUwNDlaMDMxMTAvBgNV BAMTKEFFOEI2N0IxNzQyODVFRDU0RkI1MTUzMTRCRkVBRDgxRkFGNzdDMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWJMiWKs88+9n91c+sn/DiEOTb Wb2OrEVrC8FXpxuYreAgmjd5r55VCBOpOhhUa1S4Nxdh2/aAdR+TU/829tZsWpee tA+V48buqzJ4uvzr0PgVp0dWbPX8WGBGegFuL+7FEOnlz3i5vPGOKplTdc/PNOiF B/AoKUPBpdNuVEVJmnH81UNNJuWa0Ii7Dgj0Ot3u1+om3i7kKoC6FL73aFKLQ6lY 4mgmYEAj7Xaz7L5ZEB0oj1xOE7hDytR9ElFT08yo9mpLKOSYPSs0OrS6Lerj08a4 7tVYNS1zS1wg3psRQif8xR++AwQ0aVB4FoXxniJmCKhZzDCeCbOi+Ts1Xbh3AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUrotnsXQoXtVPtRUxS/6tgfr3fCYwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTMzMmUzNDMzMmUzMTMz MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA wSuGMA0GCSqGSIb3DQEBCwUAA4IBAQBKcJaegrGR/IWQZfzjc0bh2aZhlaGaKyr9 7r2SM4LjBjK1r2caAZhKwngWTUsCXx11J6rT6E+stuJiV2tfrMBMtqPrge15evCw MmhtHVp17brbXeczS2zAIz/8rzQ9fbTB0J2mdgKkOAJGKQ1ptthiuHj6sVpTT0eT POAMFYmZq8wxYEUygES66MMYEkFsR9+cVDGMsFw3fdy7SrOSVjXGPL5Qe24d9CUI XXK6G7AUXwUjimC2QVDbiOwoojF6y7hRBrZP8x/HkasSKukA8ihHeSpIul4B8Axf 8sq8mrshIDGOxYN4iPGkM9m+Agwr5KQlwSVxYQ3a+66yepy27vs3 -----END CERTIFICATE-----Generated at Mon Jan 19 14:23:11 2026 by rpki-client