This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36322e302f32342d3234203d3e203430303231.roa File: 3231372e3231362e36322e302f32342d3234203d3e203430303231.roa (raw, json) Hash identifier: mE7TOWkalM45W3HTDQzXm9TdiuXv5/kpCWfQTwO4PgA= Subject key identifier: 80:E9:8E:7E:02:76:A6:CD:BF:D3:74:FB:28:A5:BF:43:C7:97:43:D5 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 5C5EB7F7D6ACC09DD93E596FC39BC5C0D4CE983B Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36322e302f32342d3234203d3e203430303231.roa Signing time: Thu 08 Jan 2026 14:09:26 +0000 ROA not before: Thu 08 Jan 2026 14:04:26 +0000 ROA not after: Thu 07 Jan 2027 14:09:26 +0000 asID: 40021 IP address blocks: 217.216.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5e:b7:f7:d6:ac:c0:9d:d9:3e:59:6f:c3:9b:c5:c0:d4:ce:98:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 8 14:04:26 2026 GMT Not After : Jan 7 14:09:26 2027 GMT Subject: CN=80E98E7E0276A6CDBFD374FB28A5BF43C79743D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:30:ae:f8:0b:01:8c:e4:ad:85:66:52:7b:38: b5:c1:e4:eb:38:ba:d8:77:46:74:58:fa:d9:b2:a4: e3:17:ee:cd:59:e4:29:c3:d4:c3:04:59:27:4c:fb: bc:65:e1:4e:a9:75:f3:7e:37:11:42:cd:45:6e:fb: a3:e1:33:01:a0:02:e3:00:3c:25:43:5a:2a:21:d3: f9:1d:b0:ad:5d:6a:82:74:9c:0c:ea:6d:7e:f2:f3: 18:84:ca:7f:e7:a2:93:64:26:a2:9a:5a:67:85:7f: fc:aa:c5:9b:c4:71:41:a9:5d:e7:03:05:da:89:ec: 1f:93:f0:ce:75:5f:ea:a6:34:2b:93:af:17:09:d1: e4:29:45:79:07:49:ec:cf:c8:d5:51:98:93:d0:ee: 45:f0:23:f2:77:6a:f9:29:d8:c0:1c:68:8b:51:8b: 8f:0a:73:ba:5e:6a:20:9d:51:34:29:a3:3d:ae:a6: 75:e8:5a:99:c4:0d:9b:53:7e:77:8d:80:d1:c3:de: f4:71:f4:ae:2f:b1:6f:3c:af:87:40:76:b9:42:07: 91:08:14:83:3a:69:b1:2b:23:db:42:45:2d:f0:77: b6:dc:54:37:f5:7a:17:f3:33:54:0a:53:29:e5:a0: a8:c3:1a:8e:41:b1:4c:04:90:09:fa:a3:d2:46:01: 9f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E9:8E:7E:02:76:A6:CD:BF:D3:74:FB:28:A5:BF:43:C7:97:43:D5 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36322e302f32342d3234203d3e203430303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.62.0/24 Signature Algorithm: sha256WithRSAEncryption 95:22:17:72:58:a5:e8:62:04:ff:e2:9c:ac:08:79:5f:a1:cc: 90:0f:8b:ad:11:3c:97:11:80:e5:d8:7f:69:3f:b9:b1:30:b6: 66:8f:7a:02:6f:40:51:e4:1b:19:73:bd:b5:c9:64:88:61:0d: e7:27:c0:a8:11:95:7b:69:30:99:8b:e4:06:6c:e8:4c:81:73: 9f:96:e1:37:d2:17:ce:9f:72:85:86:84:f1:7e:c2:8b:23:e3: 65:cb:bc:66:c8:b7:43:19:f0:13:3e:67:dc:f9:e4:f3:82:72: 0d:ef:81:16:29:ee:7d:07:fe:61:01:a6:36:0b:04:8b:6b:4c: 9a:6a:a2:f6:7d:ff:56:6b:cc:3d:c4:4a:6a:88:1f:7b:ea:66: 44:e3:6f:ee:a6:a7:4e:09:78:8b:d1:ef:71:1a:2f:41:5d:9e: e7:21:e7:b1:f2:26:40:2e:19:92:62:94:78:5a:eb:cc:51:08: b3:14:8e:3b:36:39:04:5d:f9:38:14:7b:1f:28:56:d1:75:e6: 62:04:b0:0d:d4:9d:fc:61:fb:8e:1c:ce:62:da:15:93:82:e8: ba:d4:d8:4d:8b:7d:62:59:e7:b7:1a:14:34:31:5a:6d:d2:96: f9:e7:ca:99:54:6c:db:c2:c5:d0:f4:27:a2:2b:e3:6c:30:8d: d1:39:bc:ec -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUXF6399aswJ3ZPllvw5vFwNTOmDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMDgxNDA0MjZaFw0yNzAxMDcxNDA5MjZaMDMxMTAvBgNV BAMTKDgwRTk4RTdFMDI3NkE2Q0RCRkQzNzRGQjI4QTVCRjQzQzc5NzQzRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLMK74CwGM5K2FZlJ7OLXB5Os4 uth3RnRY+tmypOMX7s1Z5CnD1MMEWSdM+7xl4U6pdfN+NxFCzUVu+6PhMwGgAuMA PCVDWioh0/kdsK1daoJ0nAzqbX7y8xiEyn/nopNkJqKaWmeFf/yqxZvEcUGpXecD BdqJ7B+T8M51X+qmNCuTrxcJ0eQpRXkHSezPyNVRmJPQ7kXwI/J3avkp2MAcaItR i48Kc7peaiCdUTQpoz2upnXoWpnEDZtTfneNgNHD3vRx9K4vsW88r4dAdrlCB5EI FIM6abErI9tCRS3wd7bcVDf1ehfzM1QKUynloKjDGo5BsUwEkAn6o9JGAZ+lAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUgOmOfgJ2ps2/03T7KKW/Q8eXQ9UwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTM2 MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzAzMjMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 2dg+MA0GCSqGSIb3DQEBCwUAA4IBAQCVIhdyWKXoYgT/4pysCHlfocyQD4utETyX EYDl2H9pP7mxMLZmj3oCb0BR5BsZc721yWSIYQ3nJ8CoEZV7aTCZi+QGbOhMgXOf luE30hfOn3KFhoTxfsKLI+Nly7xmyLdDGfATPmfc+eTzgnIN74EWKe59B/5hAaY2 CwSLa0yaaqL2ff9Wa8w9xEpqiB976mZE42/upqdOCXiL0e9xGi9BXZ7nIeex8iZA LhmSYpR4WuvMUQizFI47NjkEXfk4FHsfKFbRdeZiBLAN1J38YfuOHM5i2hWTgui6 1NhNi31iWee3GhQ0MVpt0pb558qZVGzbwsXQ9CeiK+NsMI3RObzs -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:34 2026 by rpki-client