This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e32312e36382e302f32322d3234203d3e203437353833.roa File: 3231372e32312e36382e302f32322d3234203d3e203437353833.roa (raw, json) Hash identifier: ira/aABkbp4u7z9gyTLLAw02h+HHVDLf4ukhRplBvkw= Subject key identifier: 12:83:05:EA:A9:82:DF:C3:E3:2D:25:84:A3:96:BF:99:9C:A6:59:22 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 23F3A4CDEAF90067CB81E600181FF933D88324B9 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e32312e36382e302f32322d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:52 +0000 ROA not before: Mon 29 Dec 2025 09:45:52 +0000 ROA not after: Mon 28 Dec 2026 09:50:52 +0000 asID: 47583 IP address blocks: 217.21.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f3:a4:cd:ea:f9:00:67:cb:81:e6:00:18:1f:f9:33:d8:83:24:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:52 2025 GMT Not After : Dec 28 09:50:52 2026 GMT Subject: CN=128305EAA982DFC3E32D2584A396BF999CA65922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:0f:87:af:ee:d3:81:8d:51:7c:b5:ce:2d: 44:13:3c:22:0b:86:43:64:c3:a5:a9:84:40:50:8c: 68:a1:f7:30:a1:0e:1f:85:5f:f4:6f:63:b0:b6:ac: 7d:87:ed:af:e5:62:87:1b:31:d6:5f:e2:0c:a5:41: 82:a8:f2:ae:ec:38:be:94:05:c3:b8:42:3d:49:23: a8:76:95:8b:c5:b6:ed:bf:a9:af:75:75:80:3b:c6: 63:f4:be:cb:e2:fc:63:50:84:48:36:06:96:3c:f0: cc:52:8a:65:22:0e:d6:66:8b:ff:1a:f9:b3:d1:fe: 95:dc:f2:e0:d9:69:13:2a:d8:3e:76:a8:31:51:8a: ce:85:e7:9a:58:4e:da:9a:e9:9c:f6:57:54:17:2d: 23:1d:f8:fe:d9:a0:72:3a:d9:be:4a:9a:b8:85:ee: b2:b1:6c:10:7e:7b:85:d2:b0:ff:cc:c0:a4:42:ca: 10:4b:95:01:e1:b8:c5:37:ed:29:c8:4c:bf:00:a8: 0f:cb:de:fa:05:91:9f:3b:c6:a7:7b:85:66:39:6b: 9b:1d:d2:eb:41:1a:bf:80:0b:5c:8c:9f:18:39:70: 19:61:98:2d:77:35:f6:13:35:fc:b8:91:fd:10:c2: 2a:93:d1:15:e8:10:0d:50:a6:33:f4:e9:a7:be:f8: 77:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:83:05:EA:A9:82:DF:C3:E3:2D:25:84:A3:96:BF:99:9C:A6:59:22 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e32312e36382e302f32322d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.21.68.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:a9:11:36:3e:31:91:54:3b:a6:79:4b:e7:c5:8d:c0:73:7b: 6e:95:ae:b6:b6:45:80:71:65:29:6d:88:fe:96:5b:76:b5:6e: ff:8c:f6:2d:2b:40:69:94:86:9e:66:59:d8:a3:8c:e2:4c:3d: d7:17:1c:d0:e9:e7:46:ff:b9:e8:f2:2e:0b:1b:a4:81:8d:79: 2e:a8:41:54:fe:35:ad:e0:27:0e:cc:c6:08:89:ab:e9:1a:f3: f9:0b:ec:d5:f5:3d:d5:24:ed:2d:83:ce:2c:aa:99:3b:15:ea: 2f:df:b7:43:4d:73:fb:c3:01:a2:02:90:15:34:0b:2f:2f:df: 02:25:af:a6:63:c8:11:23:22:29:5f:7a:da:ff:69:3c:c8:1c: 90:eb:0e:57:ee:d3:21:02:a3:e5:5a:bb:c4:c9:ef:2a:d3:10: 2b:c1:18:93:c1:9f:93:18:80:6c:bb:b4:01:e1:12:8c:cd:30: 97:1d:0a:2e:23:98:2e:e9:10:f6:35:07:2d:5a:fd:35:eb:a0: ea:d8:9a:c2:45:af:f0:ad:71:d4:ec:eb:d7:e7:6a:0a:1d:89: df:ce:41:eb:ce:b1:81:f2:82:1e:71:31:a2:fc:8d:79:64:53: 2f:21:b4:61:12:b1:cd:18:f2:c6:28:5c:c5:c2:fd:72:36:10: ed:5f:e7:72 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUI/Okzer5AGfLgeYAGB/5M9iDJLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTJaFw0yNjEyMjgwOTUwNTJaMDMxMTAvBgNV BAMTKDEyODMwNUVBQTk4MkRGQzNFMzJEMjU4NEEzOTZCRjk5OUNBNjU5MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAA+Hr+7TgY1RfLXOLUQTPCIL hkNkw6WphEBQjGih9zChDh+FX/RvY7C2rH2H7a/lYocbMdZf4gylQYKo8q7sOL6U BcO4Qj1JI6h2lYvFtu2/qa91dYA7xmP0vsvi/GNQhEg2BpY88MxSimUiDtZmi/8a +bPR/pXc8uDZaRMq2D52qDFRis6F55pYTtqa6Zz2V1QXLSMd+P7ZoHI62b5KmriF 7rKxbBB+e4XSsP/MwKRCyhBLlQHhuMU37SnITL8AqA/L3voFkZ87xqd7hWY5a5sd 0utBGr+AC1yMnxg5cBlhmC13NfYTNfy4kf0QwiqT0RXoEA1QpjP06ae++HcnAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUEoMF6qmC38PjLSWEo5a/mZymWSIwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMmUzNjM4 MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtkV RDANBgkqhkiG9w0BAQsFAAOCAQEAbKkRNj4xkVQ7pnlL58WNwHN7bpWutrZFgHFl KW2I/pZbdrVu/4z2LStAaZSGnmZZ2KOM4kw91xcc0OnnRv+56PIuCxukgY15LqhB VP41reAnDszGCImr6Rrz+Qvs1fU91STtLYPOLKqZOxXqL9+3Q01z+8MBogKQFTQL Ly/fAiWvpmPIESMiKV962v9pPMgckOsOV+7TIQKj5Vq7xMnvKtMQK8EYk8GfkxiA bLu0AeESjM0wlx0KLiOYLukQ9jUHLVr9Neug6tiawkWv8K1x1Ozr1+dqCh2J385B 686xgfKCHnExovyNeWRTLyG0YRKxzRjyxihcxcL9cjYQ7V/ncg== -----END CERTIFICATE-----Generated at Mon Jan 19 14:23:31 2026 by rpki-client