This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36332e302f32342d3234203d3e203430303231.roa File: 3231372e3231362e36332e302f32342d3234203d3e203430303231.roa (raw, json) Hash identifier: 8dCk4Wy5wwLGVCnUZKfaCG+GKvoPeZsU0HmLeffNPpM= Subject key identifier: B1:24:8C:E5:6F:74:C2:FE:19:1F:0E:C8:56:8F:1B:A5:30:4A:21:36 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 19CBE72EFF41CB80041857F7C440041AC158E8E4 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36332e302f32342d3234203d3e203430303231.roa Signing time: Thu 08 Jan 2026 14:09:33 +0000 ROA not before: Thu 08 Jan 2026 14:04:33 +0000 ROA not after: Thu 07 Jan 2027 14:09:33 +0000 asID: 40021 IP address blocks: 217.216.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:cb:e7:2e:ff:41:cb:80:04:18:57:f7:c4:40:04:1a:c1:58:e8:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 8 14:04:33 2026 GMT Not After : Jan 7 14:09:33 2027 GMT Subject: CN=B1248CE56F74C2FE191F0EC8568F1BA5304A2136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9a:fa:cb:97:0f:97:01:27:34:7b:db:f2:7d: 40:96:3a:43:02:19:9d:e6:38:2b:f1:bc:a9:a5:b0: 6e:41:5c:f3:93:60:97:10:ee:8d:6d:3c:33:e6:f1: da:1f:5f:18:e4:d8:eb:ef:56:7f:0a:49:19:54:e2: af:e6:58:9d:91:89:00:3e:c9:7f:ef:59:07:be:40: 48:5b:ad:e3:20:ae:ee:00:a0:85:66:62:66:32:c5: 49:de:3e:c2:03:e6:a9:14:7a:60:d2:72:bd:4d:9e: 0b:28:84:cc:c6:bc:70:4d:cb:97:b2:6c:a0:1c:1b: 65:b3:83:4b:3d:0e:a1:30:7c:bc:a8:fb:f9:e4:2e: b0:b8:83:b3:42:c0:8d:a9:ca:f1:08:90:62:73:a5: 19:19:b7:76:b0:04:57:fb:fb:b5:f0:15:65:7e:ee: 7f:1f:fb:5a:9a:49:2d:5c:2d:0f:d6:57:3f:4d:67: c7:56:39:9b:c7:28:a7:53:52:05:ae:f6:77:69:12: a8:aa:e4:4a:c8:be:34:d1:d6:fb:5e:47:3a:4e:2f: 06:6f:e0:d4:07:1f:e5:23:f8:b4:c3:25:de:03:e5: a5:50:06:5d:f4:a1:7f:85:5e:03:af:e6:99:31:20: 28:78:94:31:db:96:93:d1:d0:b2:60:f8:3e:b1:8a: 18:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:24:8C:E5:6F:74:C2:FE:19:1F:0E:C8:56:8F:1B:A5:30:4A:21:36 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36332e302f32342d3234203d3e203430303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.63.0/24 Signature Algorithm: sha256WithRSAEncryption 17:ab:f8:53:77:47:2f:a9:f0:15:1b:3c:3c:eb:39:86:a7:fa: d0:3d:40:f0:f9:1c:8a:74:7d:88:30:f2:7b:f8:b9:c5:91:9b: 4c:ec:9c:08:29:18:88:6f:45:39:88:d0:e8:d9:a6:db:08:dc: 51:65:86:0d:d1:1a:0f:6d:22:83:84:6a:17:93:e5:75:f6:12: ba:db:98:44:32:c4:92:6f:39:63:54:be:c5:26:4f:b5:6b:09: a2:40:bb:51:1d:7c:92:3a:a1:ed:c3:8b:97:94:2a:5d:1e:f1: 7f:06:fd:61:72:cb:2d:51:ae:99:ed:f5:93:f9:44:2d:0e:ee: 28:f9:6f:69:63:72:b0:64:9d:0a:60:04:ff:4f:ff:47:71:81: 42:ba:ab:c4:90:a3:4a:f2:0b:81:47:05:26:8b:05:f3:4a:74: 20:ad:e5:f3:18:a2:36:ed:c6:32:03:bd:61:ec:54:96:95:cb: 9a:05:6e:25:e1:22:2c:24:0c:14:20:c5:26:fa:f3:b0:8d:c4: d8:e0:29:46:f9:97:47:a7:9e:3a:8b:ce:37:75:ee:92:a7:7d: 03:28:ae:e6:bc:3a:4d:d5:d3:cd:53:52:1d:3b:32:96:e2:b7: d6:2e:d9:35:a5:38:d8:d3:c0:e6:9a:9f:e4:9f:78:de:fc:0d: f6:b0:a1:65 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUGcvnLv9By4AEGFf3xEAEGsFY6OQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMDgxNDA0MzNaFw0yNzAxMDcxNDA5MzNaMDMxMTAvBgNV BAMTKEIxMjQ4Q0U1NkY3NEMyRkUxOTFGMEVDODU2OEYxQkE1MzA0QTIxMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJmvrLlw+XASc0e9vyfUCWOkMC GZ3mOCvxvKmlsG5BXPOTYJcQ7o1tPDPm8dofXxjk2OvvVn8KSRlU4q/mWJ2RiQA+ yX/vWQe+QEhbreMgru4AoIVmYmYyxUnePsID5qkUemDScr1NngsohMzGvHBNy5ey bKAcG2Wzg0s9DqEwfLyo+/nkLrC4g7NCwI2pyvEIkGJzpRkZt3awBFf7+7XwFWV+ 7n8f+1qaSS1cLQ/WVz9NZ8dWOZvHKKdTUgWu9ndpEqiq5ErIvjTR1vteRzpOLwZv 4NQHH+Uj+LTDJd4D5aVQBl30oX+FXgOv5pkxICh4lDHblpPR0LJg+D6xihjTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUsSSM5W90wv4ZHw7IVo8bpTBKITYwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTM2 MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzAzMjMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 2dg/MA0GCSqGSIb3DQEBCwUAA4IBAQAXq/hTd0cvqfAVGzw86zmGp/rQPUDw+RyK dH2IMPJ7+LnFkZtM7JwIKRiIb0U5iNDo2abbCNxRZYYN0RoPbSKDhGoXk+V19hK6 25hEMsSSbzljVL7FJk+1awmiQLtRHXySOqHtw4uXlCpdHvF/Bv1hcsstUa6Z7fWT +UQtDu4o+W9pY3KwZJ0KYAT/T/9HcYFCuqvEkKNK8guBRwUmiwXzSnQgreXzGKI2 7cYyA71h7FSWlcuaBW4l4SIsJAwUIMUm+vOwjcTY4ClG+ZdHp546i843de6Sp30D KK7mvDpN1dPNU1IdOzKW4rfWLtk1pTjY08Dmmp/kn3je/A32sKFl -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:34 2026 by rpki-client