This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3136332e33322e302f32322d3234203d3e203631333137.roa File: 3139342e3136332e33322e302f32322d3234203d3e203631333137.roa (raw, json) Hash identifier: gHnbs1L7erEgicyCB2rnB4MtHkJ+JNCHRuPNTrYCKVk= Subject key identifier: A7:A5:5E:3F:0D:2A:47:53:A4:18:86:3A:E3:F8:8B:61:9F:1C:8C:2C Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 52E7D4F01C08673158BB330F3E8D76B7752AB25D Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3136332e33322e302f32322d3234203d3e203631333137.roa Signing time: Mon 29 Dec 2025 09:50:58 +0000 ROA not before: Mon 29 Dec 2025 09:45:58 +0000 ROA not after: Mon 28 Dec 2026 09:50:58 +0000 asID: 61317 IP address blocks: 194.163.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 08:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:e7:d4:f0:1c:08:67:31:58:bb:33:0f:3e:8d:76:b7:75:2a:b2:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:58 2025 GMT Not After : Dec 28 09:50:58 2026 GMT Subject: CN=A7A55E3F0D2A4753A418863AE3F88B619F1C8C2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:79:a4:3e:93:70:42:54:af:2e:f9:41:7f: 37:fa:05:23:ce:0f:92:1e:77:34:06:3b:89:1d:39: 3e:c1:48:fe:09:94:fe:cd:8c:1d:3c:a1:32:45:1f: 2a:e7:c6:44:b2:26:4c:4c:b9:4a:96:b7:06:eb:34: 88:cb:c0:aa:c2:fb:51:78:47:58:32:60:dd:7f:59: d1:e0:1a:12:c9:3f:d9:af:32:16:87:41:4f:dc:78: a4:a3:dc:eb:05:2f:8e:c9:2b:84:42:53:44:97:19: 9f:b6:54:3e:eb:33:3f:1e:98:83:bd:db:df:35:6f: af:9d:59:59:ab:8b:36:c6:0c:f2:8f:36:52:eb:80: 71:55:0e:bb:77:c1:d3:44:4a:37:1f:1d:b4:68:67: 29:7c:53:5b:0a:a0:d8:92:21:cf:9c:3a:80:30:6a: 88:db:c7:a6:88:a1:e2:df:bf:69:64:ed:06:0b:57: b2:cb:bd:89:2e:e2:b3:44:ea:42:90:65:f5:38:e3: 8b:97:21:b5:e6:c2:91:96:ca:ef:c2:4e:1b:4e:57: e5:71:6c:24:7a:d2:b6:57:18:12:64:0c:93:46:79: 5a:84:e8:5e:db:02:b8:fb:89:87:52:d9:d9:bc:30: fd:09:1a:ce:f2:99:e5:0e:56:cb:1e:41:c9:6a:86: 69:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A5:5E:3F:0D:2A:47:53:A4:18:86:3A:E3:F8:8B:61:9F:1C:8C:2C X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3136332e33322e302f32322d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.163.32.0/22 Signature Algorithm: sha256WithRSAEncryption 51:86:25:03:30:d1:41:e1:bc:9a:9a:9d:54:c6:1b:7c:64:f6: de:c4:47:2a:d4:39:18:49:41:5c:25:a4:1d:4d:09:de:6d:e0: b3:8b:8b:af:fd:4e:f1:4a:b6:b8:92:f6:61:24:b9:ca:d7:49: a9:fc:49:98:a5:c7:1f:ce:f9:10:0e:39:55:b6:b7:da:49:7f: f1:a5:88:65:7f:52:8b:ae:f1:ba:23:4b:f3:b8:c1:03:71:eb: 0b:09:d8:4c:95:1e:16:81:3c:f7:4a:9c:6b:38:46:95:36:49: 4d:81:f9:2b:9a:84:1d:03:3a:08:cd:49:57:89:9a:55:6a:cd: 0c:72:2d:25:86:be:8c:6b:30:1c:98:ef:05:6c:aa:14:6f:4e: 62:12:46:c4:5a:9e:20:ee:7f:b9:79:9e:92:f0:63:2f:4e:ec: af:29:e6:38:d2:25:45:91:1c:bd:65:ef:a5:bf:a1:45:56:9f: f4:16:25:f5:c9:a3:4b:83:de:44:93:f3:4c:15:6b:0d:f7:2a: ed:7e:fe:2e:63:26:58:e6:4d:cd:22:11:0c:c2:dd:9b:da:42: 97:d0:75:ae:2e:84:a7:eb:9d:88:cb:b7:c5:75:51:26:4e:02: c5:08:1d:74:3a:4f:58:ae:07:28:ac:a4:1b:ce:24:81:e5:47: b4:53:04:07 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUUufU8BwIZzFYuzMPPo12t3Uqsl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NThaFw0yNjEyMjgwOTUwNThaMDMxMTAvBgNV BAMTKEE3QTU1RTNGMEQyQTQ3NTNBNDE4ODYzQUUzRjg4QjYxOUYxQzhDMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtCXmkPpNwQlSvLvlBfzf6BSPO D5IedzQGO4kdOT7BSP4JlP7NjB08oTJFHyrnxkSyJkxMuUqWtwbrNIjLwKrC+1F4 R1gyYN1/WdHgGhLJP9mvMhaHQU/ceKSj3OsFL47JK4RCU0SXGZ+2VD7rMz8emIO9 2981b6+dWVmrizbGDPKPNlLrgHFVDrt3wdNESjcfHbRoZyl8U1sKoNiSIc+cOoAw aojbx6aIoeLfv2lk7QYLV7LLvYku4rNE6kKQZfU444uXIbXmwpGWyu/CThtOV+Vx bCR60rZXGBJkDJNGeVqE6F7bArj7iYdS2dm8MP0JGs7ymeUOVsseQclqhmkHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUp6VePw0qR1OkGIY64/iLYZ8cjCwwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM0MmUzMTM2MzMyZTMz MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC wqMgMA0GCSqGSIb3DQEBCwUAA4IBAQBRhiUDMNFB4byamp1Uxht8ZPbexEcq1DkY SUFcJaQdTQnebeCzi4uv/U7xSra4kvZhJLnK10mp/EmYpccfzvkQDjlVtrfaSX/x pYhlf1KLrvG6I0vzuMEDcesLCdhMlR4WgTz3SpxrOEaVNklNgfkrmoQdAzoIzUlX iZpVas0Mci0lhr6MazAcmO8FbKoUb05iEkbEWp4g7n+5eZ6S8GMvTuyvKeY40iVF kRy9Ze+lv6FFVp/0FiX1yaNLg95Ek/NMFWsN9yrtfv4uYyZY5k3NIhEMwt2b2kKX 0HWuLoSn652Iy7fFdVEmTgLFCB10Ok9YrgcorKQbziSB5Ue0UwQH -----END CERTIFICATE-----Generated at Thu Jan 8 12:57:04 2026 by rpki-client