This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e32312e37322e302f32322d3234203d3e203437353833.roa File: 3231372e32312e37322e302f32322d3234203d3e203437353833.roa (raw, json) Hash identifier: mJragDYwSQmB48OaImmuYD0nspMvcNtxAwF6mLEK2g0= Subject key identifier: 39:04:6E:5F:C3:B4:8D:FB:67:E5:16:9D:9E:FB:A8:E6:BA:D5:82:C8 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 37DF150C55B17162131D9AC5D97E7F3718F16E7B Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e32312e37322e302f32322d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:33 +0000 ROA not before: Mon 29 Dec 2025 09:45:33 +0000 ROA not after: Mon 28 Dec 2026 09:50:33 +0000 asID: 47583 IP address blocks: 217.21.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:df:15:0c:55:b1:71:62:13:1d:9a:c5:d9:7e:7f:37:18:f1:6e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:33 2025 GMT Not After : Dec 28 09:50:33 2026 GMT Subject: CN=39046E5FC3B48DFB67E5169D9EFBA8E6BAD582C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:21:74:d9:1b:8f:2c:b9:f5:d8:ec:0f:07:20: ef:e2:b7:f9:03:3a:ae:c3:8c:65:53:ee:57:57:19: 43:b3:66:0e:73:0f:60:16:17:8a:de:e8:1a:f0:66: e9:a8:d0:4c:10:4f:b5:f2:ba:62:d1:f2:f0:86:a1: f6:30:be:54:b8:0c:14:4a:f2:a3:b7:f9:89:e1:bd: 4d:a5:a5:2e:85:a9:5f:02:f0:51:93:41:e3:01:f7: 63:e7:41:24:64:22:de:c7:cf:2a:84:88:5f:2e:94: 6d:e5:df:fb:05:9b:66:f9:d7:55:98:f9:e2:20:e4: 23:25:43:84:38:9c:ed:97:71:90:0b:42:21:ce:ad: e8:74:ad:01:3c:e1:1d:a0:93:cd:00:17:83:8e:1c: e4:e6:e7:bf:ba:8b:00:bb:47:6d:50:2f:66:f7:40: 68:4e:19:5b:b5:e9:bb:e8:f6:21:d3:56:8c:93:be: a1:9e:ff:4c:76:a8:c3:00:87:ed:5b:cd:87:69:c6: 29:b7:fb:e4:4b:e4:3c:ad:29:ad:47:02:6c:4a:b3: 50:24:0f:cb:34:9e:62:23:0c:c8:81:47:13:e3:97: 5c:01:89:95:ab:d9:8f:45:46:a4:7a:be:04:e7:c0: b1:90:df:1d:58:18:bf:80:5c:2e:45:2a:d0:31:76: e2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:04:6E:5F:C3:B4:8D:FB:67:E5:16:9D:9E:FB:A8:E6:BA:D5:82:C8 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e32312e37322e302f32322d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.21.72.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:be:75:4a:45:01:23:a0:a0:30:62:75:e5:ca:3f:28:d6:65: 2b:f7:7f:00:0a:60:97:13:a7:f0:8e:4e:9e:f9:44:fe:c8:7c: 66:75:5c:70:e2:a9:f7:f1:3e:9d:e6:eb:a9:cf:46:c0:a1:35: 14:3d:37:e3:80:09:aa:ce:f2:54:84:cd:f4:b7:eb:ea:13:e7: 73:0e:30:bf:70:cd:ed:9e:fc:f1:23:84:f6:b8:2d:90:4d:dc: 62:e7:08:d5:85:83:0b:fb:55:97:0c:c7:5b:9b:18:91:33:da: be:e2:c9:3d:f7:d4:22:66:52:6f:e2:53:61:ed:94:6b:c8:b2: af:b4:bf:07:8f:17:4f:b5:6d:ba:01:08:e7:ef:8d:5d:dd:35: da:0b:4b:f0:05:92:27:af:6a:77:19:32:8c:a7:33:29:9f:bc: 86:d9:b2:0a:f3:a3:dd:e1:36:46:56:19:15:8d:d5:82:06:7b: 8d:0c:4d:99:6e:56:2c:5e:a5:44:4a:39:e5:c1:dd:18:d2:55: 4a:40:c4:51:b7:de:6f:91:c4:77:57:43:5b:f4:7d:0d:bd:0e: 64:ef:20:d7:ae:65:75:bb:e1:8d:9d:3a:b9:a5:a9:74:6f:5e: ed:34:6c:12:b2:57:1f:11:60:1f:57:32:10:f2:92:eb:39:aa: 19:86:fa:d2 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUN98VDFWxcWITHZrF2X5/NxjxbnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1MzNaFw0yNjEyMjgwOTUwMzNaMDMxMTAvBgNV BAMTKDM5MDQ2RTVGQzNCNDhERkI2N0U1MTY5RDlFRkJBOEU2QkFENTgyQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwIXTZG48sufXY7A8HIO/it/kD Oq7DjGVT7ldXGUOzZg5zD2AWF4re6BrwZumo0EwQT7XyumLR8vCGofYwvlS4DBRK 8qO3+YnhvU2lpS6FqV8C8FGTQeMB92PnQSRkIt7HzyqEiF8ulG3l3/sFm2b511WY +eIg5CMlQ4Q4nO2XcZALQiHOreh0rQE84R2gk80AF4OOHOTm57+6iwC7R21QL2b3 QGhOGVu16bvo9iHTVoyTvqGe/0x2qMMAh+1bzYdpxim3++RL5DytKa1HAmxKs1Ak D8s0nmIjDMiBRxPjl1wBiZWr2Y9FRqR6vgTnwLGQ3x1YGL+AXC5FKtAxduI9AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUOQRuX8O0jftn5Radnvuo5rrVgsgwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMmUzNzMy MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtkV SDANBgkqhkiG9w0BAQsFAAOCAQEAT751SkUBI6CgMGJ15co/KNZlK/d/AApglxOn 8I5OnvlE/sh8ZnVccOKp9/E+nebrqc9GwKE1FD0344AJqs7yVITN9Lfr6hPncw4w v3DN7Z788SOE9rgtkE3cYucI1YWDC/tVlwzHW5sYkTPavuLJPffUImZSb+JTYe2U a8iyr7S/B48XT7VtugEI5++NXd012gtL8AWSJ69qdxkyjKczKZ+8htmyCvOj3eE2 RlYZFY3VggZ7jQxNmW5WLF6lREo55cHdGNJVSkDEUbfeb5HEd1dDW/R9Db0OZO8g 165ldbvhjZ06uaWpdG9e7TRsErJXHxFgH1cyEPKS6zmqGYb60g== -----END CERTIFICATE-----Generated at Mon Jan 19 14:24:11 2026 by rpki-client