This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e36342e302f32342d3234203d3e203432373038.roa File: 33312e3138372e36342e302f32342d3234203d3e203432373038.roa (raw, json) Hash identifier: U/xvTagt7L1f/7YCjc5QiQXC4HqB43pdUHVMLKgghq8= Subject key identifier: 4D:A0:F3:DE:A6:BD:D0:5A:7A:D7:4B:53:22:52:9F:C2:B7:D7:CB:F0 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 78A517B0C06A9D7BC2BCA43FE0FF82C21613BAA2 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e36342e302f32342d3234203d3e203432373038.roa Signing time: Mon 29 Dec 2025 09:50:38 +0000 ROA not before: Mon 29 Dec 2025 09:45:38 +0000 ROA not after: Mon 28 Dec 2026 09:50:38 +0000 asID: 42708 IP address blocks: 31.187.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a5:17:b0:c0:6a:9d:7b:c2:bc:a4:3f:e0:ff:82:c2:16:13:ba:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:38 2025 GMT Not After : Dec 28 09:50:38 2026 GMT Subject: CN=4DA0F3DEA6BDD05A7AD74B5322529FC2B7D7CBF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:44:42:31:7c:89:73:e1:6e:8c:f1:26:5c:81: f0:ae:04:2f:d6:b8:a3:6e:d0:b2:01:aa:66:2c:c7: da:39:9e:ae:f4:b9:e6:df:39:78:e5:23:58:68:a7: c0:7b:6d:17:74:e7:30:7a:eb:66:cf:2f:f7:7d:d3: 98:b4:6a:4a:dd:2d:fa:e8:30:1e:1d:a3:c6:fa:b7: 81:54:48:00:e1:6a:b6:8e:81:d1:56:11:df:99:6a: b4:c6:62:9d:84:4b:3d:09:ad:16:ca:42:84:13:46: 64:31:11:c0:d1:97:50:28:64:35:d4:fe:61:87:ec: 63:6d:95:d1:32:dc:3d:a5:04:1f:a3:b9:2a:7a:49: 0a:8d:f5:89:27:97:21:d4:89:53:66:f6:be:c9:9b: 6c:a8:f9:82:b3:85:73:1a:12:39:65:2a:b0:a0:d5: 89:8e:6a:e2:2b:d9:91:d4:36:cd:cd:5a:a4:aa:e6: ed:c8:f7:85:0c:40:27:6f:79:aa:53:25:66:dd:03: 75:8b:a5:34:02:ef:7a:0a:cf:ef:eb:e6:ea:95:35: b3:92:1d:b0:b4:1e:c5:7c:36:a2:b7:b7:03:fa:38: a7:1b:f0:03:f0:0a:fb:d8:ce:46:0c:cf:a4:c0:d1: 88:aa:ac:13:05:ed:56:75:64:3f:91:89:a4:ec:42: 54:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A0:F3:DE:A6:BD:D0:5A:7A:D7:4B:53:22:52:9F:C2:B7:D7:CB:F0 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e36342e302f32342d3234203d3e203432373038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.187.64.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:ac:10:34:f6:f1:16:8c:2c:a7:da:af:26:5d:9c:b1:fc:51: 3d:46:14:33:d6:0f:e8:04:35:ca:4d:a0:72:ac:15:1b:c4:44: 73:de:45:85:18:88:75:7c:81:d5:f4:3b:60:13:50:96:62:da: 2d:5b:de:41:b4:49:25:2a:c9:8c:77:dc:8d:06:96:10:cf:b6: 9a:a3:77:8b:6a:33:97:5b:f7:45:a6:ad:e5:8c:0f:6d:bf:c3: 87:d2:c9:01:6d:1e:7e:81:95:90:7b:56:d2:6c:d6:65:2d:84: 87:2e:e9:74:ec:be:85:8d:9e:e4:35:25:07:2f:14:07:4e:24: 4a:40:ce:74:71:ee:c5:8e:85:f4:85:de:db:b7:d2:8f:2f:44: 46:98:38:b9:f1:06:56:03:2c:fb:d0:23:b5:a1:27:1f:60:34: 7b:83:7c:5c:65:10:d2:1f:29:5c:6d:d8:6c:1a:13:9c:1c:bc: 06:23:a1:53:4f:c2:4f:eb:eb:85:d0:5f:22:fd:de:ac:ae:3e: 7a:6c:81:58:9d:49:58:96:c6:84:77:c0:aa:21:2e:ba:74:c6: 1f:48:87:39:8d:b8:43:70:9d:03:76:87:23:78:2a:8b:34:8f: b8:96:11:25:d8:50:e2:1f:6d:31:18:aa:ab:f7:96:f2:97:76: 03:a7:8f:cf -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUeKUXsMBqnXvCvKQ/4P+CwhYTuqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1MzhaFw0yNjEyMjgwOTUwMzhaMDMxMTAvBgNV BAMTKDREQTBGM0RFQTZCREQwNUE3QUQ3NEI1MzIyNTI5RkMyQjdEN0NCRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpREIxfIlz4W6M8SZcgfCuBC/W uKNu0LIBqmYsx9o5nq70uebfOXjlI1hop8B7bRd05zB662bPL/d905i0akrdLfro MB4do8b6t4FUSADharaOgdFWEd+ZarTGYp2ESz0JrRbKQoQTRmQxEcDRl1AoZDXU /mGH7GNtldEy3D2lBB+juSp6SQqN9YknlyHUiVNm9r7Jm2yo+YKzhXMaEjllKrCg 1YmOauIr2ZHUNs3NWqSq5u3I94UMQCdveapTJWbdA3WLpTQC73oKz+/r5uqVNbOS HbC0HsV8NqK3twP6OKcb8APwCvvYzkYMz6TA0YiqrBMF7VZ1ZD+RiaTsQlQ5AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUTaDz3qa90Fp610tTIlKfwrfXy/AwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzMTJlMzEzODM3MmUzNjM0 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMjM3MzAzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB+7 QDANBgkqhkiG9w0BAQsFAAOCAQEAXawQNPbxFowsp9qvJl2csfxRPUYUM9YP6AQ1 yk2gcqwVG8REc95FhRiIdXyB1fQ7YBNQlmLaLVveQbRJJSrJjHfcjQaWEM+2mqN3 i2ozl1v3Raat5YwPbb/Dh9LJAW0efoGVkHtW0mzWZS2Ehy7pdOy+hY2e5DUlBy8U B04kSkDOdHHuxY6F9IXe27fSjy9ERpg4ufEGVgMs+9AjtaEnH2A0e4N8XGUQ0h8p XG3YbBoTnBy8BiOhU0/CT+vrhdBfIv3erK4+emyBWJ1JWJbGhHfAqiEuunTGH0iH OY24Q3CdA3aHI3gqizSPuJYRJdhQ4h9tMRiqq/eW8pd2A6ePzw== -----END CERTIFICATE-----Generated at Mon Jan 19 14:24:16 2026 by rpki-client