This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134382e302f32322d3232203d3e20323134343332.roa File: 3231372e3231362e3134382e302f32322d3232203d3e20323134343332.roa (raw, json) Hash identifier: wvdfycLrcfkzNcWZHQRY6skibEE/e+hIMWfJdoEli+A= Subject key identifier: 2D:97:C0:B4:3E:D1:3B:C5:E9:C2:F0:B7:5C:95:26:E3:B1:3F:D3:E9 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 4F9CA7394D16A887DC2DC74C74E4DAE46837A967 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134382e302f32322d3232203d3e20323134343332.roa Signing time: Thu 22 Jan 2026 19:13:21 +0000 ROA not before: Thu 22 Jan 2026 19:08:21 +0000 ROA not after: Thu 21 Jan 2027 19:13:21 +0000 asID: 214432 IP address blocks: 217.216.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:9c:a7:39:4d:16:a8:87:dc:2d:c7:4c:74:e4:da:e4:68:37:a9:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 22 19:08:21 2026 GMT Not After : Jan 21 19:13:21 2027 GMT Subject: CN=2D97C0B43ED13BC5E9C2F0B75C9526E3B13FD3E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:71:d5:1e:a0:a3:f2:55:4f:f6:14:95:a8:9c: 99:e6:2f:de:f1:a8:47:56:69:c9:d0:69:00:9d:43: 0c:28:6f:33:d8:7d:f0:e9:96:4c:3e:09:a0:52:44: 29:ed:80:96:7b:a7:57:71:db:9b:c2:03:e7:2c:f1: 45:05:95:f2:f1:d0:cb:a7:e4:6b:34:d7:a4:87:a7: 2a:27:79:32:f1:e4:53:a3:61:24:75:05:b9:24:54: 93:1f:fd:27:9e:f1:f7:f5:d1:a9:1f:80:a7:1e:9f: f4:e6:61:57:ea:9b:c8:3c:40:a7:ae:92:53:65:08: 73:86:8f:13:d2:54:a5:51:42:d1:82:e8:07:a1:17: 69:68:eb:ee:b6:fc:8d:15:95:87:68:55:c4:93:ab: 38:5a:a0:d1:8b:e0:10:5f:e2:2c:ce:9b:eb:ae:9b: 00:05:60:c8:a4:ee:bf:96:2d:9b:02:a6:78:53:1b: be:3a:63:1f:3a:cb:8c:85:08:e8:8d:18:6b:e1:10: f5:60:81:61:04:21:e4:a8:cb:30:63:b2:9b:f7:0b: 20:55:d1:a2:98:4c:10:3d:50:30:0f:a2:78:5b:f0: d5:14:03:43:0d:7d:b3:01:6c:95:b2:ce:a2:d9:04: ae:dd:57:e9:2c:43:3a:41:19:98:f0:37:38:11:1a: db:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:97:C0:B4:3E:D1:3B:C5:E9:C2:F0:B7:5C:95:26:E3:B1:3F:D3:E9 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134382e302f32322d3232203d3e20323134343332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.148.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:3a:8f:29:da:ae:b3:4a:73:41:e8:b0:b9:ae:51:a2:5e:62: d8:34:c7:16:75:5e:dd:a3:76:b7:21:7e:30:55:11:9a:50:cc: 9c:cd:ec:8a:ad:64:23:35:a4:19:8b:6c:3a:de:fb:39:4f:0d: f9:13:78:11:68:9f:f9:9a:30:cb:dc:6d:27:10:9d:72:3f:d1: d9:b7:ff:ab:36:8e:80:b5:f4:dd:d7:28:2d:ae:ce:84:02:c7: b6:5f:a7:c9:ba:31:5e:51:5f:96:fb:a9:20:1a:56:df:e3:b3: 79:c1:03:3f:00:c6:ef:b1:13:01:8c:0b:0e:38:2d:a7:93:42: 37:15:39:d6:41:c4:bc:af:ca:fa:41:15:fa:5c:d8:10:df:8c: 71:ed:37:70:e8:fa:27:e8:48:b2:4e:a5:6e:78:14:8b:bd:56: fb:59:6a:1f:ad:5e:42:97:7c:1e:f4:17:ae:58:3e:22:3e:6e: a9:81:2d:14:a4:e5:e4:7f:a3:fe:a0:14:a3:02:d0:70:26:41: 5b:02:d5:a6:13:8d:10:78:b9:69:f0:26:ca:22:09:06:71:dd: ce:e9:be:e0:d3:f2:6a:30:79:f3:fe:01:48:6e:b5:ab:eb:ab: a2:1a:ed:90:66:10:e0:db:1b:09:46:f1:16:26:8d:d7:30:c3: ff:d4:3a:be -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUT5ynOU0WqIfcLcdMdOTa5Gg3qWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMjIxOTA4MjFaFw0yNzAxMjExOTEzMjFaMDMxMTAvBgNV BAMTKDJEOTdDMEI0M0VEMTNCQzVFOUMyRjBCNzVDOTUyNkUzQjEzRkQzRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCycdUeoKPyVU/2FJWonJnmL97x qEdWacnQaQCdQwwobzPYffDplkw+CaBSRCntgJZ7p1dx25vCA+cs8UUFlfLx0Mun 5Gs016SHpyoneTLx5FOjYSR1BbkkVJMf/See8ff10akfgKcen/TmYVfqm8g8QKeu klNlCHOGjxPSVKVRQtGC6AehF2lo6+62/I0VlYdoVcSTqzhaoNGL4BBf4izOm+uu mwAFYMik7r+WLZsCpnhTG746Yx86y4yFCOiNGGvhEPVggWEEIeSoyzBjspv3CyBV 0aKYTBA9UDAPonhb8NUUA0MNfbMBbJWyzqLZBK7dV+ksQzpBGZjwNzgRGtu/AgMB AAGjggJBMIICPTAdBgNVHQ4EFgQULZfAtD7RO8XpwvC3XJUm47E/0+kwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx MzQzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzEzNDM0MzMzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAtnYlDANBgkqhkiG9w0BAQsFAAOCAQEAnzqPKdqus0pzQeiwua5Rol5i2DTH FnVe3aN2tyF+MFURmlDMnM3siq1kIzWkGYtsOt77OU8N+RN4EWif+Zowy9xtJxCd cj/R2bf/qzaOgLX03dcoLa7OhALHtl+nyboxXlFflvupIBpW3+OzecEDPwDG77ET AYwLDjgtp5NCNxU51kHEvK/K+kEV+lzYEN+Mce03cOj6J+hIsk6lbngUi71W+1lq H61eQpd8HvQXrlg+Ij5uqYEtFKTl5H+j/qAUowLQcCZBWwLVphONEHi5afAmyiIJ BnHdzum+4NPyajB58/4BSG61q+urohrtkGYQ4NsbCUbxFiaN1zDD/9Q6vg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:26:00 2026 by rpki-client