This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37352e302f32342d3234203d3e203437353833.roa File: 33312e3138372e37352e302f32342d3234203d3e203437353833.roa (raw, json) Hash identifier: 8UusqkT3CsSgA4+vGbfWYe2MGTxuVPhzOWSA9p0GqYI= Subject key identifier: 4F:3A:7C:76:7D:5C:C3:58:3E:07:E9:3B:4C:39:89:ED:04:A1:2E:91 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 04B38C36CE155BDD764A67A5D7B0275CA231BE48 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37352e302f32342d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:53 +0000 ROA not before: Mon 29 Dec 2025 09:45:53 +0000 ROA not after: Mon 28 Dec 2026 09:50:53 +0000 asID: 47583 IP address blocks: 31.187.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b3:8c:36:ce:15:5b:dd:76:4a:67:a5:d7:b0:27:5c:a2:31:be:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:53 2025 GMT Not After : Dec 28 09:50:53 2026 GMT Subject: CN=4F3A7C767D5CC3583E07E93B4C3989ED04A12E91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:86:b1:87:15:4d:cb:eb:f8:de:af:c3:d5:32: 68:2e:04:49:05:be:ce:78:41:ff:f9:26:6f:b6:32: e6:3e:6f:e7:b5:90:4d:5f:44:d6:80:f2:4d:e6:45: 00:3d:d3:fb:12:4a:5d:e9:0c:12:6f:81:fb:48:64: ea:c9:ca:f0:d9:4a:f7:3f:29:22:65:c1:83:08:e7: ef:4f:c0:4a:67:1e:0a:47:74:a6:b5:7e:5c:8e:4e: 0e:e9:61:ba:6d:ac:2a:8f:46:f8:bf:e9:c3:e7:0d: a9:14:f0:b4:f4:6f:c5:70:7e:05:96:dc:9b:38:ea: 8f:7f:16:a1:a5:79:23:21:8f:1a:73:36:b8:c5:8c: 1f:08:9e:0b:76:2b:6d:cd:7f:d9:b9:ba:08:a7:90: 2a:d0:27:e2:82:94:d2:74:15:49:44:1f:ce:bb:8f: e2:06:d5:08:de:17:09:36:1a:39:51:3a:cc:a8:fd: 13:3b:b6:a5:26:2f:cb:01:a0:fc:40:13:0b:05:20: 19:0f:26:26:81:6c:c3:6a:10:82:58:87:5d:91:9f: 4a:66:0e:00:89:b3:f6:63:e8:2d:de:48:b2:51:65: 23:91:2f:1d:04:5c:14:43:17:52:4e:e2:fb:47:ef: d1:2c:17:c7:7e:fd:0f:08:e7:5f:86:39:b7:90:36: 91:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3A:7C:76:7D:5C:C3:58:3E:07:E9:3B:4C:39:89:ED:04:A1:2E:91 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37352e302f32342d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.187.75.0/24 Signature Algorithm: sha256WithRSAEncryption 93:d7:9d:04:81:b8:a9:29:17:46:a9:b5:e1:86:1f:df:0e:3d: 27:96:09:1b:2d:22:77:72:d1:7b:fc:25:c5:cf:fe:c1:58:84: 5a:a1:c7:b9:df:32:1f:e1:2d:34:75:9b:9a:cf:98:87:55:af: c2:f4:45:b3:5e:f4:cb:02:67:5a:c0:6d:09:94:4c:79:f7:3d: 70:cc:1f:c8:cf:75:d3:f5:a3:e3:c0:73:1c:11:98:99:58:e9: cf:8e:a2:fc:91:14:ca:35:0f:41:5c:59:dd:e1:77:b4:66:4c: 0b:c0:71:b8:83:6e:10:c6:78:8e:e4:8a:8a:ad:95:b1:2d:7c: 73:f0:b8:47:45:42:aa:8f:53:2c:6c:53:9a:4e:f5:ce:88:58: 7d:3b:da:7f:75:d4:28:5a:2d:40:eb:b0:f4:da:5e:02:e8:b9: 8e:80:55:44:3b:c1:a7:bd:75:89:b9:21:8a:57:15:46:f6:55: 87:2a:88:09:58:93:1c:5a:27:68:91:fe:4f:fc:15:fb:f9:02: 0f:85:94:bd:ce:68:c1:b6:79:38:1b:db:85:06:a3:80:a2:9a: 71:59:66:10:41:54:6d:58:2e:cc:ab:a5:e8:5c:c0:07:de:3f: fb:bd:31:f9:c0:b6:21:5e:80:9f:b9:a5:ce:68:1c:4b:c2:4d: 0d:c0:b6:91 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUBLOMNs4VW912Smel17AnXKIxvkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTNaFw0yNjEyMjgwOTUwNTNaMDMxMTAvBgNV BAMTKDRGM0E3Qzc2N0Q1Q0MzNTgzRTA3RTkzQjRDMzk4OUVEMDRBMTJFOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdhrGHFU3L6/jer8PVMmguBEkF vs54Qf/5Jm+2MuY+b+e1kE1fRNaA8k3mRQA90/sSSl3pDBJvgftIZOrJyvDZSvc/ KSJlwYMI5+9PwEpnHgpHdKa1flyOTg7pYbptrCqPRvi/6cPnDakU8LT0b8VwfgWW 3Js46o9/FqGleSMhjxpzNrjFjB8Ingt2K23Nf9m5uginkCrQJ+KClNJ0FUlEH867 j+IG1QjeFwk2GjlROsyo/RM7tqUmL8sBoPxAEwsFIBkPJiaBbMNqEIJYh12Rn0pm DgCJs/Zj6C3eSLJRZSORLx0EXBRDF1JO4vtH79EsF8d+/Q8I51+GObeQNpF7AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUTzp8dn1cw1g+B+k7TDmJ7QShLpEwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzMTJlMzEzODM3MmUzNzM1 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB+7 SzANBgkqhkiG9w0BAQsFAAOCAQEAk9edBIG4qSkXRqm14YYf3w49J5YJGy0id3LR e/wlxc/+wViEWqHHud8yH+EtNHWbms+Yh1WvwvRFs170ywJnWsBtCZRMefc9cMwf yM910/Wj48BzHBGYmVjpz46i/JEUyjUPQVxZ3eF3tGZMC8BxuINuEMZ4juSKiq2V sS18c/C4R0VCqo9TLGxTmk71zohYfTvaf3XUKFotQOuw9NpeAui5joBVRDvBp711 ibkhilcVRvZVhyqICViTHFonaJH+T/wV+/kCD4WUvc5owbZ5OBvbhQajgKKacVlm EEFUbVguzKul6FzAB94/+70x+cC2IV6An7mlzmgcS8JNDcC2kQ== -----END CERTIFICATE-----Generated at Mon Jan 19 14:24:13 2026 by rpki-client