This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230382e302f32302d3234203d3e20383334.roa File: 3231372e3231362e3230382e302f32302d3234203d3e20383334.roa (raw, json) Hash identifier: SxxhSrFtYxk8g/zaF8kDpJuzpFgJ/0X2Dd9XaBy3rSU= Subject key identifier: C2:2A:06:A2:EF:DC:0E:6E:3F:D2:53:6C:C1:A8:44:BF:8F:EC:AB:45 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 3B210E03298C18FB781484E4401CE16200763681 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230382e302f32302d3234203d3e20383334.roa Signing time: Thu 08 Jan 2026 20:10:11 +0000 ROA not before: Thu 08 Jan 2026 20:05:11 +0000 ROA not after: Thu 07 Jan 2027 20:10:11 +0000 asID: 834 IP address blocks: 217.216.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:21:0e:03:29:8c:18:fb:78:14:84:e4:40:1c:e1:62:00:76:36:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 8 20:05:11 2026 GMT Not After : Jan 7 20:10:11 2027 GMT Subject: CN=C22A06A2EFDC0E6E3FD2536CC1A844BF8FECAB45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:1c:5a:8d:2f:fe:c3:86:de:d7:2a:78:18: 71:2f:38:6b:8d:fb:49:d0:98:16:cb:0f:45:93:49: 4f:48:0c:d9:4a:ed:10:7b:fe:7d:02:fe:95:5e:d3: 0c:fb:4c:cc:29:a6:51:6a:ce:a5:58:42:91:9f:1a: fa:13:19:c2:bd:8b:e2:8e:cc:ee:73:15:71:d2:1c: 86:1b:37:9b:30:77:5c:99:64:e8:44:f0:ab:97:5c: ec:c0:96:a0:29:a7:fa:52:d3:41:2c:a7:f9:b1:62: 85:b5:15:2e:0f:90:1c:71:e7:ef:67:30:c6:21:c2: e0:74:52:83:6f:6d:ba:0e:4b:74:76:ba:7d:0b:16: e9:93:8a:6f:47:58:37:61:01:45:14:c0:cc:ab:a4: a1:53:d6:4a:81:14:bf:d9:fa:83:a1:40:55:a7:d8: 28:0a:7a:62:d0:63:7d:c5:31:8a:40:4b:c7:b4:61: c4:e8:73:f4:0e:50:1e:30:fe:55:ca:37:22:86:9a: 9b:a7:55:c1:15:c3:11:3e:33:9f:fb:be:46:06:c7: 5b:65:50:80:05:d7:2c:ff:2c:94:cb:15:fd:40:4d: 8d:10:74:6f:98:bb:07:16:9a:22:ea:76:16:33:66: 63:27:3f:3b:5e:ff:bc:42:d1:b9:8b:c2:7a:9a:0a: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2A:06:A2:EF:DC:0E:6E:3F:D2:53:6C:C1:A8:44:BF:8F:EC:AB:45 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230382e302f32302d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.208.0/20 Signature Algorithm: sha256WithRSAEncryption 51:c7:ab:ea:c5:07:db:58:c5:b5:d3:2f:6c:7c:ae:b2:bf:0c: c0:34:18:61:f4:18:47:e9:e8:bd:96:8a:21:1b:11:f6:69:3a: 10:98:b0:eb:20:70:8e:c8:66:af:81:62:24:76:fc:d0:97:94: 46:20:67:6e:de:88:ad:fc:40:c5:ee:99:79:70:76:88:40:e5: 84:f9:af:25:05:00:c3:8e:f6:1e:26:0b:8b:8f:ad:82:97:40: 6f:ce:44:c0:a7:a9:52:16:33:27:d4:29:af:20:30:70:34:c6: 99:5d:a7:d0:bb:9b:e0:fb:f1:83:6c:da:00:43:35:fa:57:2d: 64:0b:21:81:31:67:59:c7:e7:17:dd:48:d5:a2:db:6e:b6:ff: f6:2e:fc:36:a0:87:78:50:03:72:af:40:a1:d7:4f:95:90:c6: 5d:87:7f:9d:03:cd:15:2f:6f:5e:84:ba:09:e8:c8:bc:f2:5d: bb:d9:f9:a8:2e:1a:d6:9c:39:de:70:d8:08:8e:97:37:53:92: 56:a9:a2:d9:8a:44:68:97:d0:f1:9e:1a:45:3a:a6:60:ca:69: 34:46:a8:0d:48:b7:1e:15:19:f0:66:d2:2a:d4:3e:85:bc:71: d5:f6:f7:e4:25:51:cd:ab:b8:c0:0b:40:a1:ac:e3:10:fb:f7: 7e:a0:4d:46 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUOyEOAymMGPt4FITkQBzhYgB2NoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMDgyMDA1MTFaFw0yNzAxMDcyMDEwMTFaMDMxMTAvBgNV BAMTKEMyMkEwNkEyRUZEQzBFNkUzRkQyNTM2Q0MxQTg0NEJGOEZFQ0FCNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLghxajS/+w4be1yp4GHEvOGuN +0nQmBbLD0WTSU9IDNlK7RB7/n0C/pVe0wz7TMwpplFqzqVYQpGfGvoTGcK9i+KO zO5zFXHSHIYbN5swd1yZZOhE8KuXXOzAlqApp/pS00Esp/mxYoW1FS4PkBxx5+9n MMYhwuB0UoNvbboOS3R2un0LFumTim9HWDdhAUUUwMyrpKFT1kqBFL/Z+oOhQFWn 2CgKemLQY33FMYpAS8e0YcToc/QOUB4w/lXKNyKGmpunVcEVwxE+M5/7vkYGx1tl UIAF1yz/LJTLFf1ATY0QdG+YuwcWmiLqdhYzZmMnPzte/7xC0bmLwnqaCl3VAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUwioGou/cDm4/0lNswahEv4/sq0UwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMy MzAzODJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNnY 0DANBgkqhkiG9w0BAQsFAAOCAQEAUcer6sUH21jFtdMvbHyusr8MwDQYYfQYR+no vZaKIRsR9mk6EJiw6yBwjshmr4FiJHb80JeURiBnbt6IrfxAxe6ZeXB2iEDlhPmv JQUAw472HiYLi4+tgpdAb85EwKepUhYzJ9QpryAwcDTGmV2n0Lub4Pvxg2zaAEM1 +lctZAshgTFnWcfnF91I1aLbbrb/9i78NqCHeFADcq9AoddPlZDGXYd/nQPNFS9v XoS6CejIvPJdu9n5qC4a1pw53nDYCI6XN1OSVqmi2YpEaJfQ8Z4aRTqmYMppNEao DUi3HhUZ8GbSKtQ+hbxx1fb35CVRzau4wAtAoazjEPv3fqBNRg== -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:36 2026 by rpki-client