This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139322e302f32322d3234203d3e20383334.roa File: 3231372e3231362e3139322e302f32322d3234203d3e20383334.roa (raw, json) Hash identifier: 6zdNJexvhrSpWjCr8Zj6Ktw9tyZd6ERTOVN5grCNTEs= Subject key identifier: C8:51:D4:90:ED:46:09:F0:34:B7:82:2A:3F:C8:7C:05:2A:84:3E:46 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 6CF192B211316CE8A26AC4C8694F01B1F97F5975 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139322e302f32322d3234203d3e20383334.roa Signing time: Thu 08 Jan 2026 20:07:04 +0000 ROA not before: Thu 08 Jan 2026 20:02:04 +0000 ROA not after: Thu 07 Jan 2027 20:07:04 +0000 asID: 834 IP address blocks: 217.216.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f1:92:b2:11:31:6c:e8:a2:6a:c4:c8:69:4f:01:b1:f9:7f:59:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 8 20:02:04 2026 GMT Not After : Jan 7 20:07:04 2027 GMT Subject: CN=C851D490ED4609F034B7822A3FC87C052A843E46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b3:90:55:ad:8c:cb:4c:21:8b:59:a7:dc:1a: a9:2a:97:56:9d:ff:2a:d3:8d:0e:8e:0c:16:3d:5a: fa:8e:1f:8a:a8:a4:7b:82:46:62:64:3a:21:69:c9: e0:05:12:08:99:51:5c:f6:50:86:85:72:b9:43:ee: 9b:82:5f:0b:90:f0:04:11:06:b9:84:af:21:86:8e: da:26:0c:1a:50:85:53:54:42:47:a2:5d:f2:d7:e5: 0d:47:75:13:a0:b1:16:42:7c:67:b1:e0:62:7a:c0: ce:c9:ee:c9:c8:7d:a4:52:0f:87:c9:d4:01:00:0e: 01:41:93:74:b1:53:7c:77:73:44:0e:fc:33:31:ed: f6:33:4e:d0:2e:bd:4e:d9:d2:a4:ea:81:4e:b7:4e: bf:ba:32:66:42:3c:3b:1d:3b:fe:72:d5:0a:6a:18: d5:18:cd:e4:fa:e3:06:32:77:a3:c3:8b:70:da:96: aa:15:3e:d1:13:87:34:e6:fb:9e:da:d2:df:31:bf: 30:f5:9f:2a:ce:bf:39:57:21:e1:78:d0:f5:31:08: 26:2c:3f:14:12:ee:23:bd:b6:29:d1:d3:f1:86:d2: 28:ba:84:54:df:a7:bd:c6:15:ba:2f:e0:2e:cd:83: 3b:ec:c5:f7:66:74:14:d0:28:3a:e9:1d:94:ba:6b: 99:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:51:D4:90:ED:46:09:F0:34:B7:82:2A:3F:C8:7C:05:2A:84:3E:46 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139322e302f32322d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.192.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:2a:93:58:ab:6e:93:60:f0:fe:0b:1d:a9:2b:84:da:22:56: 09:7b:a7:e1:a1:58:d4:c2:4f:06:02:1d:36:76:bb:80:17:fe: f4:c4:89:2f:34:31:39:e4:84:5b:13:26:eb:49:68:e0:a6:ae: 55:f4:2a:57:96:31:28:c9:1a:65:78:f4:15:6e:ad:7b:58:d3: 49:3c:b2:e9:84:ec:d4:eb:a3:06:f4:45:fd:bc:1d:97:ef:e8: e3:c6:18:7c:3d:5c:d9:01:5f:af:93:da:cd:39:a6:48:cc:f2: 76:13:5b:94:f4:70:10:1d:db:f1:3b:99:63:9a:e9:f6:ed:0b: 90:85:ac:ef:e9:dc:59:3e:81:59:e6:f9:85:d3:ca:7e:e7:47: e1:00:89:dd:c0:c1:38:e8:de:49:cf:01:54:ba:b2:16:a4:70: bb:2d:4d:f3:1a:3e:3f:8a:a1:cd:91:55:c0:5c:d0:c3:ae:90: 6b:ba:96:8d:bb:93:da:5b:07:ec:af:68:fd:75:ff:af:c0:b7: 04:8c:cf:66:c8:7f:f0:15:08:dc:6c:ea:3b:e1:cb:38:3b:44: 76:de:9a:e3:84:22:61:56:e2:96:84:3a:29:59:3a:5a:34:c3: af:61:0b:d7:aa:60:67:f5:c4:95:9f:69:b7:3d:58:91:ce:62: ba:91:1a:1f -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUbPGSshExbOiiasTIaU8Bsfl/WXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMDgyMDAyMDRaFw0yNzAxMDcyMDA3MDRaMDMxMTAvBgNV BAMTKEM4NTFENDkwRUQ0NjA5RjAzNEI3ODIyQTNGQzg3QzA1MkE4NDNFNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYs5BVrYzLTCGLWafcGqkql1ad /yrTjQ6ODBY9WvqOH4qopHuCRmJkOiFpyeAFEgiZUVz2UIaFcrlD7puCXwuQ8AQR BrmEryGGjtomDBpQhVNUQkeiXfLX5Q1HdROgsRZCfGex4GJ6wM7J7snIfaRSD4fJ 1AEADgFBk3SxU3x3c0QO/DMx7fYzTtAuvU7Z0qTqgU63Tr+6MmZCPDsdO/5y1Qpq GNUYzeT64wYyd6PDi3DalqoVPtEThzTm+57a0t8xvzD1nyrOvzlXIeF40PUxCCYs PxQS7iO9tinR0/GG0ii6hFTfp73GFbov4C7NgzvsxfdmdBTQKDrpHZS6a5m/AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUyFHUkO1GCfA0t4IqP8h8BSqEPkYwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx MzkzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtnY wDANBgkqhkiG9w0BAQsFAAOCAQEAnCqTWKtuk2Dw/gsdqSuE2iJWCXun4aFY1MJP BgIdNna7gBf+9MSJLzQxOeSEWxMm60lo4KauVfQqV5YxKMkaZXj0FW6te1jTSTyy 6YTs1OujBvRF/bwdl+/o48YYfD1c2QFfr5PazTmmSMzydhNblPRwEB3b8TuZY5rp 9u0LkIWs7+ncWT6BWeb5hdPKfudH4QCJ3cDBOOjeSc8BVLqyFqRwuy1N8xo+P4qh zZFVwFzQw66Qa7qWjbuT2lsH7K9o/XX/r8C3BIzPZsh/8BUI3GzqO+HLODtEdt6a 44QiYVbiloQ6KVk6WjTDr2EL16pgZ/XElZ9ptz1Ykc5iupEaHw== -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:35 2026 by rpki-client