This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234322e302f32342d3234203d3e20383334.roa File: 3231372e3231372e3234322e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: MMyAz1XYQZLfDmMb43CQKGkuoTXOJ2TTiMcCrBV67S8= Subject key identifier: 70:5E:F5:A3:52:67:45:0F:BD:50:09:54:C3:DA:34:A3:E8:89:3A:21 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 22BE8843553B6BB7400F6E1E9E9CFBE7AD2CE0EE Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234322e302f32342d3234203d3e20383334.roa Signing time: Mon 12 Jan 2026 11:37:39 +0000 ROA not before: Mon 12 Jan 2026 11:32:39 +0000 ROA not after: Mon 11 Jan 2027 11:37:39 +0000 asID: 834 IP address blocks: 217.217.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:be:88:43:55:3b:6b:b7:40:0f:6e:1e:9e:9c:fb:e7:ad:2c:e0:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 12 11:32:39 2026 GMT Not After : Jan 11 11:37:39 2027 GMT Subject: CN=705EF5A35267450FBD500954C3DA34A3E8893A21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:63:f3:6b:fb:d0:f2:d4:20:5f:3f:e4:80:42: 21:f8:5a:75:b5:61:88:be:be:c9:ef:2f:6e:31:f2: ad:86:a8:99:8c:0a:89:4c:1b:59:73:6f:fa:af:e1: 8d:bb:0a:27:08:f3:3f:d5:85:79:9d:ec:d3:76:ea: 51:6d:6f:89:75:42:93:c7:00:cb:f9:f2:19:68:c8: c6:05:e0:1f:fa:6c:62:2d:f0:4e:cf:93:bf:43:46: fa:e8:79:a9:af:8f:40:7b:86:83:b2:a4:47:0b:94: 00:dd:05:be:75:57:42:09:bd:87:94:eb:71:4b:ea: 4a:36:81:56:14:c3:40:d1:83:7f:2b:37:7e:ae:5c: 7f:98:23:e7:75:d8:fa:0a:bf:64:f6:ce:db:7f:71: 6c:99:43:44:53:3e:29:68:78:1d:12:2a:1d:e7:a4: 70:b9:0a:cf:5b:3b:10:65:6b:a3:68:e9:54:fc:e4: 3a:13:18:f3:b3:51:ac:94:e7:00:b5:0c:e8:fc:44: 6d:7b:b1:e7:5a:8f:f9:26:44:13:9b:97:fa:34:dc: 19:d6:5f:6f:39:aa:cd:be:c3:64:ef:00:4e:fc:07: e2:d1:c2:d8:ba:19:d4:ff:f5:35:56:33:95:0d:fd: d6:a3:fc:9b:c8:1d:7e:8a:8d:a1:38:54:eb:99:39: ec:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5E:F5:A3:52:67:45:0F:BD:50:09:54:C3:DA:34:A3:E8:89:3A:21 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234322e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.217.242.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:5a:70:d7:f0:65:ad:7e:70:37:c2:ce:b6:51:fa:b6:5a:26: 41:30:78:44:20:58:a2:05:af:a0:54:24:83:f2:d0:d1:e9:32: 91:8a:cc:04:9b:40:94:3a:b7:e6:ab:80:f1:c9:ed:d2:ae:4d: 1f:34:cb:8d:9e:4b:ee:e6:91:29:f0:94:c4:18:5d:98:9c:be: b7:c6:b8:62:78:35:9d:d8:eb:06:74:2b:c7:37:26:d4:16:49: 07:ee:db:f1:be:71:f7:1a:00:be:cd:e1:d2:61:65:17:b1:c8: dc:5e:f5:65:14:95:00:7f:d1:fd:c6:2e:fc:7e:8f:21:37:bc: 58:55:f3:83:d0:9c:4c:a1:7d:a1:72:96:83:7c:69:e9:c1:9f: 09:9c:5d:a5:20:cb:6b:35:32:3b:94:ef:5f:d2:c9:f6:b4:fc: 3f:09:a0:80:93:14:09:ca:a3:b2:98:45:29:17:13:e4:6f:90: 89:e3:40:d7:ed:da:93:ba:27:d7:c0:92:d6:e6:47:29:d3:c1: 1c:f3:e9:b1:6a:02:34:dd:dd:c5:db:1d:b0:0e:84:9c:44:23: 59:53:76:6d:9f:d8:52:52:61:7a:f8:6f:c3:b8:9f:d3:db:0e: a9:ee:bc:8e:06:eb:bd:bd:4a:1b:63:0c:69:cf:ca:1d:dc:c2: d5:01:b9:65 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUIr6IQ1U7a7dAD24enpz7560s4O4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMTIxMTMyMzlaFw0yNzAxMTExMTM3MzlaMDMxMTAvBgNV BAMTKDcwNUVGNUEzNTI2NzQ1MEZCRDUwMDk1NEMzREEzNEEzRTg4OTNBMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaY/Nr+9Dy1CBfP+SAQiH4WnW1 YYi+vsnvL24x8q2GqJmMColMG1lzb/qv4Y27CicI8z/VhXmd7NN26lFtb4l1QpPH AMv58hloyMYF4B/6bGIt8E7Pk79DRvroeamvj0B7hoOypEcLlADdBb51V0IJvYeU 63FL6ko2gVYUw0DRg38rN36uXH+YI+d12PoKv2T2ztt/cWyZQ0RTPiloeB0SKh3n pHC5Cs9bOxBla6No6VT85DoTGPOzUayU5wC1DOj8RG17sedaj/kmRBObl/o03BnW X285qs2+w2TvAE78B+LRwti6GdT/9TVWM5UN/daj/JvIHX6KjaE4VOuZOeyvAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUcF71o1JnRQ+9UAlUw9o0o+iJOiEwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy MzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANnZ 8jANBgkqhkiG9w0BAQsFAAOCAQEAjFpw1/BlrX5wN8LOtlH6tlomQTB4RCBYogWv oFQkg/LQ0ekykYrMBJtAlDq35quA8cnt0q5NHzTLjZ5L7uaRKfCUxBhdmJy+t8a4 Yng1ndjrBnQrxzcm1BZJB+7b8b5x9xoAvs3h0mFlF7HI3F71ZRSVAH/R/cYu/H6P ITe8WFXzg9CcTKF9oXKWg3xp6cGfCZxdpSDLazUyO5TvX9LJ9rT8PwmggJMUCcqj sphFKRcT5G+QieNA1+3ak7on18CS1uZHKdPBHPPpsWoCNN3dxdsdsA6EnEQjWVN2 bZ/YUlJhevhvw7if09sOqe68jgbrvb1KG2MMac/KHdzC1QG5ZQ== -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:35 2026 by rpki-client