This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134342e302f32322d3234203d3e20383334.roa File: 3231372e3231362e3134342e302f32322d3234203d3e20383334.roa (raw, json) Hash identifier: l5YzHdXM1HlLCKiWhNsFtCf14z1VE8mjxNcWXzKszLs= Subject key identifier: B7:17:55:CB:3D:8A:A7:B3:7C:0C:1C:4F:92:E7:33:2B:B1:90:25:E8 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 24B0B17F9633FD13DFAC55491C3770D303C6952D Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134342e302f32322d3234203d3e20383334.roa Signing time: Mon 09 Feb 2026 15:20:01 +0000 ROA not before: Mon 09 Feb 2026 15:15:01 +0000 ROA not after: Mon 08 Feb 2027 15:20:01 +0000 asID: 834 IP address blocks: 217.216.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b0:b1:7f:96:33:fd:13:df:ac:55:49:1c:37:70:d3:03:c6:95:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Feb 9 15:15:01 2026 GMT Not After : Feb 8 15:20:01 2027 GMT Subject: CN=B71755CB3D8AA7B37C0C1C4F92E7332BB19025E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b5:27:ec:90:44:6f:f5:2f:67:4f:f2:7d:fa: e0:77:4f:37:ee:f8:9b:d8:5e:ad:b6:ae:d1:ec:ff: f9:0f:b8:dc:72:cd:df:94:a1:36:63:74:27:8f:87: a9:81:22:a5:07:74:de:f0:17:10:89:b2:b2:65:68: 6a:69:c6:fb:9f:bf:fe:b1:ef:40:49:46:c9:5c:16: 36:7e:ed:09:e5:07:b6:92:8a:a0:3b:d0:b3:e5:38: 2e:53:5b:98:c7:ae:11:50:0d:55:b9:84:f6:9a:72: 5d:8f:f5:ed:19:02:92:ff:57:67:e9:2c:ee:5c:00: ee:5b:46:ad:4c:c0:62:d1:8b:83:9b:5b:9a:c9:e6: 0f:25:14:ac:fb:d3:88:85:e5:3d:36:7f:4c:ce:89: f4:69:6f:bf:c1:7b:66:97:22:a9:f2:6f:db:6d:94: 83:8d:92:8e:22:2d:79:4f:56:f1:fe:20:a3:57:16: 91:5b:ac:34:19:98:16:17:53:ac:a2:06:28:31:71: 99:39:1a:ba:6e:21:8d:24:d9:3c:1d:1a:8b:87:4a: 7a:2b:fe:61:91:b2:8d:56:8e:06:ad:ee:36:d1:97: 9d:6d:2f:a4:c1:66:fb:6e:6c:88:12:04:67:28:14: ef:83:db:81:f3:ff:18:44:f6:f1:2f:58:9c:a0:b6: b5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:17:55:CB:3D:8A:A7:B3:7C:0C:1C:4F:92:E7:33:2B:B1:90:25:E8 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134342e302f32322d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.144.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:33:ba:16:c9:4e:1d:35:8c:21:0e:93:29:d2:c6:1e:f4:7a: eb:cf:88:9d:45:c4:da:53:74:e7:3b:64:f7:2b:d1:2d:d9:61: ae:0f:87:3d:c8:03:49:83:e3:95:62:98:13:de:d7:a7:ef:81: 9c:da:42:be:13:00:40:5b:50:33:50:ef:95:81:59:8b:fb:85: 90:be:2b:76:00:7f:b9:eb:1f:14:90:28:cb:73:49:5d:2a:0b: 0c:ba:ae:0d:44:42:82:02:a8:75:9c:4e:de:3c:7e:c1:2d:39: 09:bb:14:e0:12:18:ca:ef:5e:89:04:56:49:c3:0c:c6:5d:d8: 92:08:99:90:b5:7f:02:fc:4c:eb:b6:c2:2d:05:a9:2c:7a:5e: 21:d6:31:4d:ed:16:4b:5b:e4:3f:45:6e:cb:9a:ed:50:e9:39: 81:14:34:5f:e4:6c:56:b1:28:15:dc:0e:f8:46:b7:fc:3a:53: 26:5c:3e:e0:ee:37:f7:75:d9:e8:70:65:3b:36:81:3f:6a:49: fa:4b:09:c1:7a:d8:6d:4b:d4:e9:37:6c:5e:e5:18:01:5f:b7: 85:45:cf:01:df:e3:1f:7f:76:5a:bf:79:fe:51:86:87:a6:09: 3d:53:7d:ff:a9:a2:f1:54:30:8b:cf:ab:57:ac:f9:49:0d:50: 00:56:49:b1 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUJLCxf5Yz/RPfrFVJHDdw0wPGlS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAyMDkxNTE1MDFaFw0yNzAyMDgxNTIwMDFaMDMxMTAvBgNV BAMTKEI3MTc1NUNCM0Q4QUE3QjM3QzBDMUM0RjkyRTczMzJCQjE5MDI1RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEtSfskERv9S9nT/J9+uB3Tzfu +JvYXq22rtHs//kPuNxyzd+UoTZjdCePh6mBIqUHdN7wFxCJsrJlaGppxvufv/6x 70BJRslcFjZ+7QnlB7aSiqA70LPlOC5TW5jHrhFQDVW5hPaacl2P9e0ZApL/V2fp LO5cAO5bRq1MwGLRi4ObW5rJ5g8lFKz704iF5T02f0zOifRpb7/Be2aXIqnyb9tt lIONko4iLXlPVvH+IKNXFpFbrDQZmBYXU6yiBigxcZk5GrpuIY0k2TwdGouHSnor /mGRso1Wjgat7jbRl51tL6TBZvtubIgSBGcoFO+D24Hz/xhE9vEvWJygtrXZAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUtxdVyz2Kp7N8DBxPkuczK7GQJegwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx MzQzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtnY kDANBgkqhkiG9w0BAQsFAAOCAQEAHzO6FslOHTWMIQ6TKdLGHvR668+InUXE2lN0 5ztk9yvRLdlhrg+HPcgDSYPjlWKYE97Xp++BnNpCvhMAQFtQM1DvlYFZi/uFkL4r dgB/uesfFJAoy3NJXSoLDLquDURCggKodZxO3jx+wS05CbsU4BIYyu9eiQRWScMM xl3YkgiZkLV/AvxM67bCLQWpLHpeIdYxTe0WS1vkP0Vuy5rtUOk5gRQ0X+RsVrEo FdwO+Ea3/DpTJlw+4O4393XZ6HBlOzaBP2pJ+ksJwXrYbUvU6TdsXuUYAV+3hUXP Ad/jH392Wr95/lGGh6YJPVN9/6mi8VQwi8+rV6z5SQ1QAFZJsQ== -----END CERTIFICATE-----Generated at Sat Feb 14 17:23:53 2026 by rpki-client