This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3230342e302f32322d3234203d3e20323034313730.roa File: 3139352e3137392e3230342e302f32322d3234203d3e20323034313730.roa (raw, json) Hash identifier: f6jRYEOd/kfOy+SYXPljd8/N8sh/oQazxO+gu+p7mHo= Subject key identifier: 57:65:CB:0E:08:7A:12:8D:3A:D5:E5:89:28:76:09:FB:EA:00:6C:49 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 131919746FCCFB90373FAD1CB0931E5D38628F4B Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3230342e302f32322d3234203d3e20323034313730.roa Signing time: Mon 29 Dec 2025 09:51:06 +0000 ROA not before: Mon 29 Dec 2025 09:46:06 +0000 ROA not after: Mon 28 Dec 2026 09:51:06 +0000 asID: 204170 IP address blocks: 195.179.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:19:19:74:6f:cc:fb:90:37:3f:ad:1c:b0:93:1e:5d:38:62:8f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:46:06 2025 GMT Not After : Dec 28 09:51:06 2026 GMT Subject: CN=5765CB0E087A128D3AD5E589287609FBEA006C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b6:29:09:3f:1a:78:d8:c1:1e:8c:8f:43:12: 6e:3d:2d:a1:c9:69:65:75:c1:49:c3:e6:fb:22:4c: b2:4a:13:27:f8:c2:06:93:c9:54:c9:61:0c:ec:62: c2:3d:37:0a:96:76:08:6b:d0:28:92:47:c8:34:69: 1b:c8:d6:1a:ac:8d:8e:ff:ee:e9:7a:76:cf:2e:c1: 93:2d:0b:21:f3:04:e5:fd:21:ed:a2:5e:5a:0e:9e: 8c:bd:5d:e4:85:bb:6c:63:02:cd:84:3b:e9:fd:a4: 41:95:c6:7a:11:48:cc:5c:dc:e7:1e:a3:0b:04:10: 1f:4a:43:fb:fd:33:e7:3a:69:78:8c:6e:93:df:3e: 54:e4:0c:fe:03:0e:1f:f2:5d:04:44:6d:8f:c7:bd: 04:df:22:2a:92:46:2d:c8:bb:87:00:2b:34:9e:64: a7:43:61:c8:bf:35:5d:5b:35:54:b7:e2:d1:5a:91: 82:86:a6:47:91:86:fe:49:c1:61:5e:4e:dc:6e:ab: ad:20:36:08:01:24:9b:e1:dd:42:a6:f3:e4:91:19: 9f:54:86:ff:c2:62:15:fc:45:39:4c:64:43:f1:11: 64:b1:4b:07:62:d1:66:d2:20:d4:c0:05:03:02:c1: c9:ee:3a:df:ef:9c:22:78:d3:72:b9:65:6f:25:59: 14:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:65:CB:0E:08:7A:12:8D:3A:D5:E5:89:28:76:09:FB:EA:00:6C:49 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3230342e302f32322d3234203d3e20323034313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.179.204.0/22 Signature Algorithm: sha256WithRSAEncryption 91:a5:79:f8:29:80:ea:91:d7:b4:a9:5c:70:f4:f4:cd:1e:23: 73:00:fd:d7:18:b8:d0:b2:29:55:11:ea:cb:20:99:69:86:01: 86:25:f6:ac:3d:46:ea:c8:cf:83:e3:82:22:ab:48:34:bd:f8: be:b2:3f:00:40:64:6b:18:dc:38:43:26:ca:22:11:95:93:a7: b2:58:9d:e4:ba:84:10:4f:09:a9:cf:e5:fd:9b:6b:03:8a:53: 73:38:b5:6e:6b:f0:f9:23:f7:25:e4:14:7f:89:b6:24:c0:25: 81:d7:3a:4a:3d:dd:2a:6b:15:0b:a2:1e:f1:83:1e:43:d3:c2: af:39:47:b7:7e:82:de:d8:8b:ce:04:bb:10:96:57:d2:34:72: 88:ef:11:a7:50:3f:d5:b7:e2:0b:2e:95:36:f2:4a:a3:87:80: 6e:59:3c:43:17:e7:92:d6:99:4d:d3:c4:b2:a1:3e:b4:a9:59: cf:39:2f:65:de:5f:16:d6:9f:1a:2f:90:22:13:43:64:57:20: d2:00:d1:43:45:02:2d:41:ed:f8:b2:5d:ed:63:1e:b0:bf:12: 3e:1c:3e:dd:8a:a8:ae:43:8c:94:e9:6f:b3:20:9e:4f:ff:32: c1:f8:f9:76:f4:46:03:66:22:31:27:8b:e5:8e:66:24:96:6a: 44:a7:05:ee -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUExkZdG/M+5A3P60csJMeXThij0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ2MDZaFw0yNjEyMjgwOTUxMDZaMDMxMTAvBgNV BAMTKDU3NjVDQjBFMDg3QTEyOEQzQUQ1RTU4OTI4NzYwOUZCRUEwMDZDNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDltikJPxp42MEejI9DEm49LaHJ aWV1wUnD5vsiTLJKEyf4wgaTyVTJYQzsYsI9NwqWdghr0CiSR8g0aRvI1hqsjY7/ 7ul6ds8uwZMtCyHzBOX9Ie2iXloOnoy9XeSFu2xjAs2EO+n9pEGVxnoRSMxc3Oce owsEEB9KQ/v9M+c6aXiMbpPfPlTkDP4DDh/yXQREbY/HvQTfIiqSRi3Iu4cAKzSe ZKdDYci/NV1bNVS34tFakYKGpkeRhv5JwWFeTtxuq60gNggBJJvh3UKm8+SRGZ9U hv/CYhX8RTlMZEPxEWSxSwdi0WbSINTABQMCwcnuOt/vnCJ403K5ZW8lWRSrAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUV2XLDgh6Eo061eWJKHYJ++oAbEkwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM1MmUzMTM3MzkyZTMy MzAzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDMxMzczMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAsOzzDANBgkqhkiG9w0BAQsFAAOCAQEAkaV5+CmA6pHXtKlccPT0zR4jcwD9 1xi40LIpVRHqyyCZaYYBhiX2rD1G6sjPg+OCIqtINL34vrI/AEBkaxjcOEMmyiIR lZOnslid5LqEEE8Jqc/l/ZtrA4pTczi1bmvw+SP3JeQUf4m2JMAlgdc6Sj3dKmsV C6Ie8YMeQ9PCrzlHt36C3tiLzgS7EJZX0jRyiO8Rp1A/1bfiCy6VNvJKo4eAblk8 QxfnktaZTdPEsqE+tKlZzzkvZd5fFtafGi+QIhNDZFcg0gDRQ0UCLUHt+LJd7WMe sL8SPhw+3YqorkOMlOlvsyCeT/8ywfj5dvRGA2YiMSeL5Y5mJJZqRKcF7g== -----END CERTIFICATE-----Generated at Mon Jan 19 14:27:21 2026 by rpki-client