This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36312e302f32342d3234203d3e20313437303439.roa File: 3231372e3231362e36312e302f32342d3234203d3e20313437303439.roa (raw, json) Hash identifier: EMFPNTZc4vJ8cUkW3ilPUGnI1lEIwxhynVnYyv7SNfE= Subject key identifier: 63:67:52:51:05:D8:ED:A6:B4:72:EA:60:38:60:98:84:DF:55:EF:13 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 0AC98467E1633561EF596D924CA106B2907E47F5 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36312e302f32342d3234203d3e20313437303439.roa Signing time: Fri 19 Dec 2025 22:46:29 +0000 ROA not before: Fri 19 Dec 2025 22:41:29 +0000 ROA not after: Fri 18 Dec 2026 22:46:29 +0000 asID: 147049 IP address blocks: 217.216.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c9:84:67:e1:63:35:61:ef:59:6d:92:4c:a1:06:b2:90:7e:47:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 19 22:41:29 2025 GMT Not After : Dec 18 22:46:29 2026 GMT Subject: CN=6367525105D8EDA6B472EA6038609884DF55EF13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1a:ab:87:86:f4:2c:8c:a0:ab:68:7b:bd:40: fc:54:57:99:69:c5:17:45:21:ed:8a:e5:d4:27:e3: 9c:53:fa:fe:91:f8:f4:04:41:08:ea:1c:32:6c:18: 8f:59:96:43:01:39:d9:68:96:22:48:2c:93:bb:21: f9:0e:17:f6:c5:94:33:c9:25:23:7a:e1:01:49:cb: 9a:9e:4b:58:5b:a5:21:0e:22:64:56:f0:6a:f1:83: c7:e0:4b:6b:3c:ca:af:24:07:cf:5c:f4:fe:f7:b4: d5:8f:de:ec:13:14:a6:76:86:1b:b5:fd:91:b0:52: 7e:e5:02:92:b8:d1:1d:e9:69:6c:f0:8b:7e:b0:9d: bf:55:a3:0d:ad:60:58:d3:1b:0f:86:5e:75:c9:dc: f2:d6:43:dd:33:01:59:d3:2a:c6:bc:01:51:4e:3e: 2f:67:32:53:dc:51:33:ff:94:31:04:1c:9b:bd:ea: d5:35:48:4b:72:cd:5d:62:f1:99:7f:b9:dd:70:fa: b9:21:da:55:e7:af:69:69:6b:53:c7:3c:17:8d:e1: 5a:c6:cb:ec:5a:2e:27:14:77:29:fc:69:86:4e:35: 6c:6b:10:9c:94:cd:1c:38:1b:fe:6b:c6:e2:90:1d: 92:f7:6c:7c:6a:79:35:9b:31:98:d5:b1:4c:a3:1d: 6d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:67:52:51:05:D8:ED:A6:B4:72:EA:60:38:60:98:84:DF:55:EF:13 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36312e302f32342d3234203d3e20313437303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.61.0/24 Signature Algorithm: sha256WithRSAEncryption 06:fe:e1:9d:64:19:4e:29:a4:be:1f:4e:c4:f2:67:05:f6:a4: ca:88:02:23:5e:15:53:53:6d:17:78:fe:af:cb:e3:60:b4:76: cc:b5:c2:58:7a:19:6a:76:1c:be:e3:33:43:e5:c5:f1:31:92: 7e:2d:9a:56:35:5b:aa:e0:b2:bf:4b:8a:60:de:8b:f3:78:c9: 9e:05:10:91:f5:d1:e6:f8:ff:7c:67:d7:ff:fc:bb:95:5d:59: 4a:41:f5:8f:b3:00:1e:42:7a:2d:0d:be:2a:6d:9c:a4:d2:8c: 2e:75:1c:0f:c4:b0:34:70:06:47:ab:5c:21:37:73:f9:82:0e: a1:53:36:be:b9:90:a1:d1:50:aa:5c:ac:4d:f6:d9:e1:ca:dd: e5:ac:b0:dc:da:06:af:8c:91:a2:a3:bf:b6:ec:b6:aa:0c:fe: 87:4a:72:a1:eb:e2:70:0b:4e:a8:29:1a:85:dd:7c:18:92:7c: 31:ba:01:45:a1:e5:7e:c4:ec:62:61:5b:e1:15:fb:94:05:0d: f6:55:ee:9e:49:26:e4:b9:3d:77:c3:e6:10:fa:f9:02:02:8b: 6c:0b:ff:13:16:21:c0:35:cb:2c:12:95:24:38:12:31:dc:9d: 67:76:c8:97:6a:6d:12:33:dd:dd:62:89:34:ac:7b:05:75:0b: 24:d8:6a:f8 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUCsmEZ+FjNWHvWW2STKEGspB+R/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMTkyMjQxMjlaFw0yNjEyMTgyMjQ2MjlaMDMxMTAvBgNV BAMTKDYzNjc1MjUxMDVEOEVEQTZCNDcyRUE2MDM4NjA5ODg0REY1NUVGMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZGquHhvQsjKCraHu9QPxUV5lp xRdFIe2K5dQn45xT+v6R+PQEQQjqHDJsGI9ZlkMBOdloliJILJO7IfkOF/bFlDPJ JSN64QFJy5qeS1hbpSEOImRW8Grxg8fgS2s8yq8kB89c9P73tNWP3uwTFKZ2hhu1 /ZGwUn7lApK40R3paWzwi36wnb9Vow2tYFjTGw+GXnXJ3PLWQ90zAVnTKsa8AVFO Pi9nMlPcUTP/lDEEHJu96tU1SEtyzV1i8Zl/ud1w+rkh2lXnr2lpa1PHPBeN4VrG y+xaLicUdyn8aYZONWxrEJyUzRw4G/5rxuKQHZL3bHxqeTWbMZjVsUyjHW23AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUY2dSUQXY7aa0cupgOGCYhN9V7xMwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTM2 MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM0Mzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADZ2D0wDQYJKoZIhvcNAQELBQADggEBAAb+4Z1kGU4ppL4fTsTyZwX2pMqIAiNe FVNTbRd4/q/L42C0dsy1wlh6GWp2HL7jM0PlxfExkn4tmlY1W6rgsr9LimDei/N4 yZ4FEJH10eb4/3xn1//8u5VdWUpB9Y+zAB5Cei0NviptnKTSjC51HA/EsDRwBker XCE3c/mCDqFTNr65kKHRUKpcrE322eHK3eWssNzaBq+MkaKjv7bstqoM/odKcqHr 4nALTqgpGoXdfBiSfDG6AUWh5X7E7GJhW+EV+5QFDfZV7p5JJuS5PXfD5hD6+QIC i2wL/xMWIcA1yywSlSQ4EjHcnWd2yJdqbRIz3d1iiTSsewV1CyTYavg= -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:31 2026 by rpki-client