This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e38382e38372e302f32342d3332203d3e203531313637.roa File: 3139352e38382e38372e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: 3XbsMTpoguxmrHFsUTzkg8him3mesmbgZize8S0d5s8= Subject key identifier: 95:15:D2:16:BE:63:6C:CB:15:C6:B6:DF:57:BA:69:9C:39:8E:37:25 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 6BEFD29B11FF77776C471A8F7419432DFC5E3A6A Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e38382e38372e302f32342d3332203d3e203531313637.roa Signing time: Mon 29 Dec 2025 09:50:43 +0000 ROA not before: Mon 29 Dec 2025 09:45:43 +0000 ROA not after: Mon 28 Dec 2026 09:50:43 +0000 asID: 51167 IP address blocks: 195.88.87.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ef:d2:9b:11:ff:77:77:6c:47:1a:8f:74:19:43:2d:fc:5e:3a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:43 2025 GMT Not After : Dec 28 09:50:43 2026 GMT Subject: CN=9515D216BE636CCB15C6B6DF57BA699C398E3725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:09:df:f6:9b:d9:c2:d9:8d:d7:32:d5:88:42: 18:71:aa:88:5c:e9:28:e5:96:fc:aa:ed:3e:eb:3c: e8:4d:61:11:8a:0e:88:cc:9c:a5:91:7f:0f:d9:27: a5:fe:33:ed:6f:b0:b7:e2:ae:21:d4:a6:0f:a4:67: c4:58:75:2a:7a:c3:0f:ff:e3:09:08:f1:69:3e:ec: 6a:45:e7:ad:c4:13:63:76:9e:18:84:33:43:76:51: 41:57:7c:9f:f0:eb:11:41:8d:21:e5:b1:0f:6b:26: 4b:e2:04:b8:f4:1d:27:6e:9d:bb:bc:34:08:76:44: a1:f5:fe:67:2d:2a:1e:6e:bf:6f:c4:ee:89:e4:dc: 7b:33:71:0d:21:24:9a:94:b3:57:22:a6:47:08:fa: bc:6f:17:28:a4:ad:31:ad:ce:79:0b:13:67:fd:50: 93:a7:5f:02:11:d2:9f:83:20:a6:8e:37:f6:e1:70: d8:05:7b:39:f7:b1:ad:01:29:70:71:6b:67:73:0b: 5a:1c:7b:45:b2:f6:50:38:f5:48:bb:0a:ef:0d:1d: ff:48:72:ec:18:72:00:a8:ca:e1:80:46:52:5f:63: ed:ca:7c:17:3d:ad:15:74:77:9a:2e:b9:f8:55:08: 05:67:58:6a:f3:46:df:d2:85:01:0c:07:5a:5c:76: ab:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:15:D2:16:BE:63:6C:CB:15:C6:B6:DF:57:BA:69:9C:39:8E:37:25 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e38382e38372e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.87.0/24 Signature Algorithm: sha256WithRSAEncryption 73:76:ca:e4:92:ee:e2:95:84:5f:dd:5c:b0:06:9b:79:5e:73: ba:8e:01:03:4f:09:32:6a:b6:4a:bc:90:11:e9:21:33:d2:d7: 9e:e6:f6:78:6a:48:43:28:69:59:7d:5a:28:8f:94:0f:b2:61: 7f:42:2c:8a:1f:2b:bd:26:71:92:98:ad:8e:0e:5b:ae:c5:1d: 89:ca:5a:b5:70:63:d6:d4:c5:46:bb:3c:b2:82:da:87:08:32: 23:c1:dd:df:d9:58:40:6c:ed:04:9e:c5:36:c8:5b:fa:a4:c9: 91:13:96:bc:63:17:72:5f:98:df:bb:1b:9a:bb:89:89:35:b4: 74:a7:e7:ff:a6:0e:8d:e5:79:cf:55:07:2e:e7:f1:e2:68:ea: 7e:02:5c:44:21:55:7a:ad:97:bc:21:b6:07:f5:ba:a7:9c:fd: 9b:df:c6:ba:3d:56:9e:8a:30:39:a4:39:cd:89:d2:bd:ee:38: 35:ba:74:93:b1:e3:19:38:bf:b6:45:7f:8e:f0:74:da:40:93: 13:75:52:fb:ce:73:ff:f1:92:b4:d0:87:08:59:cd:33:af:ba: 6e:1f:21:e6:d2:c0:fd:73:a7:47:dd:52:b5:f8:30:f8:53:b3: 8c:a2:59:ba:92:75:ab:d6:4b:5f:e6:49:22:68:da:31:ac:cb: e5:36:e7:44 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUa+/SmxH/d3dsRxqPdBlDLfxeOmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDNaFw0yNjEyMjgwOTUwNDNaMDMxMTAvBgNV BAMTKDk1MTVEMjE2QkU2MzZDQ0IxNUM2QjZERjU3QkE2OTlDMzk4RTM3MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpCd/2m9nC2Y3XMtWIQhhxqohc 6Sjllvyq7T7rPOhNYRGKDojMnKWRfw/ZJ6X+M+1vsLfiriHUpg+kZ8RYdSp6ww// 4wkI8Wk+7GpF563EE2N2nhiEM0N2UUFXfJ/w6xFBjSHlsQ9rJkviBLj0HSdunbu8 NAh2RKH1/mctKh5uv2/E7onk3HszcQ0hJJqUs1cipkcI+rxvFyikrTGtznkLE2f9 UJOnXwIR0p+DIKaON/bhcNgFezn3sa0BKXBxa2dzC1oce0Wy9lA49Ui7Cu8NHf9I cuwYcgCoyuGARlJfY+3KfBc9rRV0d5ouufhVCAVnWGrzRt/ShQEMB1pcdqvfAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUlRXSFr5jbMsVxrbfV7ppnDmONyUwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM1MmUzODM4MmUzODM3 MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMNY VzANBgkqhkiG9w0BAQsFAAOCAQEAc3bK5JLu4pWEX91csAabeV5zuo4BA08JMmq2 SryQEekhM9LXnub2eGpIQyhpWX1aKI+UD7Jhf0Isih8rvSZxkpitjg5brsUdicpa tXBj1tTFRrs8soLahwgyI8Hd39lYQGztBJ7FNshb+qTJkROWvGMXcl+Y37sbmruJ iTW0dKfn/6YOjeV5z1UHLufx4mjqfgJcRCFVeq2XvCG2B/W6p5z9m9/Guj1Wnoow OaQ5zYnSve44Nbp0k7HjGTi/tkV/jvB02kCTE3VS+85z//GStNCHCFnNM6+6bh8h 5tLA/XOnR91Stfgw+FOzjKJZupJ1q9ZLX+ZJImjaMazL5TbnRA== -----END CERTIFICATE-----Generated at Mon Jan 19 14:28:36 2026 by rpki-client