This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34332e3133352e302f32342d3234203d3e20313431303339.roa File: 3139332e34332e3133352e302f32342d3234203d3e20313431303339.roa (raw, json) Hash identifier: BFKbqBTZLPhX1hTMMqxZD+M8Q0m40tONkErSCpgVzDs= Subject key identifier: 9A:EB:D1:D7:94:2F:9E:58:AE:2B:06:0D:D0:EE:83:40:84:D4:77:78 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 17EC2B78B31996E3E4C4FD932603B4C61769768E Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34332e3133352e302f32342d3234203d3e20313431303339.roa Signing time: Mon 29 Dec 2025 09:50:46 +0000 ROA not before: Mon 29 Dec 2025 09:45:46 +0000 ROA not after: Mon 28 Dec 2026 09:50:46 +0000 asID: 141039 IP address blocks: 193.43.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ec:2b:78:b3:19:96:e3:e4:c4:fd:93:26:03:b4:c6:17:69:76:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:46 2025 GMT Not After : Dec 28 09:50:46 2026 GMT Subject: CN=9AEBD1D7942F9E58AE2B060DD0EE834084D47778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:dc:bd:92:c3:90:54:09:2c:af:b8:32:76:0c: 43:c1:49:46:23:a9:52:07:c5:b3:da:07:e7:ae:54: e5:d4:2a:5b:6d:e4:65:ec:da:19:1c:80:cf:e9:37: e7:b2:ea:f1:47:bf:a8:15:0b:55:77:26:29:da:68: b1:f4:08:37:34:f9:8b:9a:31:13:14:a6:82:19:97: 6b:5a:73:60:73:df:65:76:05:aa:12:9f:a6:a2:f5: b7:a3:f5:93:58:a7:91:44:90:2f:f5:03:b2:f8:96: 93:ea:fe:7d:73:f9:f0:72:23:41:cb:0f:b6:cc:31: 52:00:6f:3c:fb:1b:8d:a7:e4:ef:fd:a1:1e:a1:45: c6:b2:44:b6:20:45:67:70:4a:b7:64:2c:79:e9:83: 30:06:91:ba:a9:cf:17:ed:fd:a2:57:83:94:78:8d: 5a:fe:4c:9b:78:16:ec:92:4b:ac:3f:64:6f:78:2e: fb:93:34:49:d8:1e:02:ab:94:62:d5:32:40:be:5b: f0:30:00:32:3b:76:a0:d9:d0:1c:e5:30:7f:eb:f0: ba:8a:16:c8:a3:7c:79:7c:ce:16:02:a3:a3:3b:bc: 78:3a:e5:84:20:c0:9f:c2:5b:3b:3e:3c:5a:fe:b6: 4d:f8:0b:9d:5d:9c:73:56:1e:08:2e:2f:78:e1:b9: 5d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EB:D1:D7:94:2F:9E:58:AE:2B:06:0D:D0:EE:83:40:84:D4:77:78 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34332e3133352e302f32342d3234203d3e20313431303339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.135.0/24 Signature Algorithm: sha256WithRSAEncryption 85:11:70:38:ac:95:9f:11:97:07:b7:0a:09:e8:e5:34:55:12: c3:52:45:0a:93:e9:52:76:2f:94:75:66:8a:de:8a:3d:36:04: 07:f2:80:cb:78:d5:76:86:a9:de:a6:05:1e:5d:b0:3e:61:a8: 35:43:7c:aa:04:5e:52:a0:96:1a:d1:e7:a5:d1:c2:36:a5:5e: 54:01:e2:fe:91:31:65:7f:a0:b2:c9:b5:6a:6e:e8:fa:ed:e8: 30:4d:48:c1:9e:32:48:2c:d2:9b:56:3b:16:6e:5a:b1:59:12: c5:42:39:d2:b6:30:c1:bc:99:93:b8:98:37:33:f6:b5:06:aa: a0:e3:af:8e:16:53:7f:c4:bd:b9:62:78:35:bc:1b:8f:51:71: 75:d5:41:6c:72:93:23:4f:7b:65:8f:4a:25:39:ca:ed:ee:fd: 23:84:62:3e:1c:3e:28:db:94:51:d4:6d:a0:7d:66:ba:f7:e5: e6:bf:a7:1e:10:7a:a0:b2:ae:9f:f4:e7:85:6e:a6:ed:20:80: 92:be:e7:0e:b0:b4:cd:e0:b4:23:1d:91:d6:8f:8e:00:a7:44: 4f:5f:12:1a:0c:3e:a5:65:bd:02:fc:44:44:51:39:ee:78:8e: 21:ff:12:28:1f:47:32:e1:67:4f:f5:1f:ef:80:2e:ef:91:c2: 45:83:75:cc -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUF+wreLMZluPkxP2TJgO0xhdpdo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDZaFw0yNjEyMjgwOTUwNDZaMDMxMTAvBgNV BAMTKDlBRUJEMUQ3OTQyRjlFNThBRTJCMDYwREQwRUU4MzQwODRENDc3NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe3L2Sw5BUCSyvuDJ2DEPBSUYj qVIHxbPaB+euVOXUKltt5GXs2hkcgM/pN+ey6vFHv6gVC1V3JinaaLH0CDc0+Yua MRMUpoIZl2tac2Bz32V2BaoSn6ai9bej9ZNYp5FEkC/1A7L4lpPq/n1z+fByI0HL D7bMMVIAbzz7G42n5O/9oR6hRcayRLYgRWdwSrdkLHnpgzAGkbqpzxft/aJXg5R4 jVr+TJt4FuySS6w/ZG94LvuTNEnYHgKrlGLVMkC+W/AwADI7dqDZ0BzlMH/r8LqK FsijfHl8zhYCo6M7vHg65YQgwJ/CWzs+PFr+tk34C51dnHNWHgguL3jhuV07AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUmuvR15QvnliuKwYN0O6DQITUd3gwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTMzMmUzNDMzMmUzMTMz MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMDMzMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADBK4cwDQYJKoZIhvcNAQELBQADggEBAIURcDislZ8Rlwe3Cgno5TRVEsNSRQqT 6VJ2L5R1Zoreij02BAfygMt41XaGqd6mBR5dsD5hqDVDfKoEXlKglhrR56XRwjal XlQB4v6RMWV/oLLJtWpu6Prt6DBNSMGeMkgs0ptWOxZuWrFZEsVCOdK2MMG8mZO4 mDcz9rUGqqDjr44WU3/EvblieDW8G49RcXXVQWxykyNPe2WPSiU5yu3u/SOEYj4c PijblFHUbaB9Zrr35ea/px4QeqCyrp/054Vupu0ggJK+5w6wtM3gtCMdkdaPjgCn RE9fEhoMPqVlvQL8RERROe54jiH/EigfRzLhZ0/1H++ALu+RwkWDdcw= -----END CERTIFICATE-----Generated at Mon Jan 19 14:26:15 2026 by rpki-client