This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e32312e36342e302f32322d3234203d3e203437353833.roa File: 3231372e32312e36342e302f32322d3234203d3e203437353833.roa (raw, json) Hash identifier: p9t2XOw10gHK6pPIGDEpHtWN34sFxTln7KDSJo8tgF0= Subject key identifier: A5:0A:4C:F2:4A:0E:BE:0A:CF:C0:B0:3E:B9:4D:4D:6C:2A:98:77:36 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 30F172BF8B17C154310EE2D374EB21EC80A3C7DE Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e32312e36342e302f32322d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:51:01 +0000 ROA not before: Mon 29 Dec 2025 09:46:01 +0000 ROA not after: Mon 28 Dec 2026 09:51:01 +0000 asID: 47583 IP address blocks: 217.21.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f1:72:bf:8b:17:c1:54:31:0e:e2:d3:74:eb:21:ec:80:a3:c7:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:46:01 2025 GMT Not After : Dec 28 09:51:01 2026 GMT Subject: CN=A50A4CF24A0EBE0ACFC0B03EB94D4D6C2A987736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:44:10:97:48:81:4c:36:a1:0b:a5:a7:d0:15: 1d:1f:68:f5:22:55:1b:38:9c:45:ff:b3:b2:48:45: 30:ae:f8:be:ee:33:4a:5a:54:72:d0:d6:ad:f0:81: 56:6a:c2:87:20:05:6f:bf:cf:bf:30:d1:c2:24:e3: 84:93:52:a3:99:c0:fd:e6:43:ee:b2:c0:fe:af:1d: 09:79:44:f2:d2:15:5a:b4:af:18:34:b2:25:b2:8f: a2:55:0b:6e:d7:9e:a6:b4:cb:ac:62:e7:2b:4c:8a: ca:5f:27:01:e6:99:53:40:6d:7d:89:94:68:c2:00: 4e:90:a7:4c:52:ae:2f:43:f4:a9:29:4d:3a:7c:ac: b4:7d:ee:9a:c8:c4:e0:95:32:35:97:fa:9f:08:95: 0d:c6:0d:1e:d0:11:d6:b1:16:95:62:66:e8:4a:15: d8:44:f7:be:9b:93:11:ac:25:33:f9:c6:7d:79:23: 9c:5a:85:c1:d8:21:e8:24:19:60:66:94:93:0e:b8: 72:89:03:bf:47:fa:bf:69:97:b6:d4:64:96:f7:ef: c4:e6:75:ee:9e:54:59:d1:de:d0:c3:35:ce:da:f1: 5d:d0:7e:ef:94:87:e2:17:48:83:d8:39:b6:e3:fc: 7a:5a:e5:4f:b0:61:e9:2d:cc:dc:b2:62:7e:07:72: 42:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0A:4C:F2:4A:0E:BE:0A:CF:C0:B0:3E:B9:4D:4D:6C:2A:98:77:36 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e32312e36342e302f32322d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.21.64.0/22 Signature Algorithm: sha256WithRSAEncryption 76:fb:cf:25:b6:fe:75:e2:18:4a:92:ed:1f:b5:7e:85:1d:a5: e5:cc:4c:aa:25:75:e4:b7:45:15:e0:5c:37:75:e6:a5:0a:8b: 62:41:84:46:8d:74:b9:1d:5a:a7:5c:ce:bb:42:05:21:2a:4d: eb:62:f9:28:6d:20:59:56:f0:33:fc:a0:a1:fb:f8:0c:99:a0: 97:ad:f8:5f:11:b1:9a:f6:88:ef:ba:69:9a:a4:57:d4:0f:39: 19:ef:3a:5f:ef:69:bc:fa:bb:38:da:47:2b:bc:8e:1b:5c:e3: d4:d0:4d:fe:e6:0d:4d:00:da:4c:78:2c:9d:76:f6:91:98:34: cd:76:51:2d:ae:86:41:fe:4d:44:99:35:90:e1:df:32:3c:ce: 2d:70:c7:8b:75:23:65:38:0a:b4:0e:1a:77:5b:92:54:20:da: 96:25:c4:f5:52:6a:2d:fe:7d:68:4c:cb:3d:75:46:e4:bd:66: 65:df:c7:e6:9a:52:eb:10:19:0d:b9:a6:3a:04:a7:3a:f7:cc: ab:10:25:38:20:40:4b:2b:df:fb:ac:1e:4c:be:10:4f:ea:8c: 26:c5:89:07:04:fc:2a:3f:ed:fb:ab:05:20:a7:d7:56:c0:56: e8:ad:1e:84:ee:ae:c5:3b:84:ca:15:00:f1:b3:c8:64:0a:ed: 60:bb:28:7c -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUMPFyv4sXwVQxDuLTdOsh7ICjx94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ2MDFaFw0yNjEyMjgwOTUxMDFaMDMxMTAvBgNV BAMTKEE1MEE0Q0YyNEEwRUJFMEFDRkMwQjAzRUI5NEQ0RDZDMkE5ODc3MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsRBCXSIFMNqELpafQFR0faPUi VRs4nEX/s7JIRTCu+L7uM0paVHLQ1q3wgVZqwocgBW+/z78w0cIk44STUqOZwP3m Q+6ywP6vHQl5RPLSFVq0rxg0siWyj6JVC27Xnqa0y6xi5ytMispfJwHmmVNAbX2J lGjCAE6Qp0xSri9D9KkpTTp8rLR97prIxOCVMjWX+p8IlQ3GDR7QEdaxFpViZuhK FdhE976bkxGsJTP5xn15I5xahcHYIegkGWBmlJMOuHKJA79H+r9pl7bUZJb378Tm de6eVFnR3tDDNc7a8V3Qfu+Uh+IXSIPYObbj/Hpa5U+wYektzNyyYn4HckLjAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUpQpM8koOvgrPwLA+uU1NbCqYdzYwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMmUzNjM0 MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtkV QDANBgkqhkiG9w0BAQsFAAOCAQEAdvvPJbb+deIYSpLtH7V+hR2l5cxMqiV15LdF FeBcN3XmpQqLYkGERo10uR1ap1zOu0IFISpN62L5KG0gWVbwM/ygofv4DJmgl634 XxGxmvaI77ppmqRX1A85Ge86X+9pvPq7ONpHK7yOG1zj1NBN/uYNTQDaTHgsnXb2 kZg0zXZRLa6GQf5NRJk1kOHfMjzOLXDHi3UjZTgKtA4ad1uSVCDaliXE9VJqLf59 aEzLPXVG5L1mZd/H5ppS6xAZDbmmOgSnOvfMqxAlOCBASyvf+6weTL4QT+qMJsWJ BwT8Kj/t+6sFIKfXVsBW6K0ehO6uxTuEyhUA8bPIZArtYLsofA== -----END CERTIFICATE-----Generated at Mon Jan 19 14:23:18 2026 by rpki-client