This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37382e302f32342d3234203d3e20313336373837.roa File: 33312e3138372e37382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: Kph37L/riEYrzKaMKDWBZ5kPpFpL7C19b/9PQFCSoTc= Subject key identifier: 34:D1:71:96:50:96:80:AF:98:75:01:27:47:A6:30:C1:7B:F4:49:6F Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 7DEFEAC679B0E42C6B665BED5D6A261A2C803402 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37382e302f32342d3234203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:51:05 +0000 ROA not before: Mon 29 Dec 2025 09:46:05 +0000 ROA not after: Mon 28 Dec 2026 09:51:05 +0000 asID: 136787 IP address blocks: 31.187.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ef:ea:c6:79:b0:e4:2c:6b:66:5b:ed:5d:6a:26:1a:2c:80:34:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:46:05 2025 GMT Not After : Dec 28 09:51:05 2026 GMT Subject: CN=34D17196509680AF9875012747A630C17BF4496F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:be:36:1d:a1:62:3d:8e:f1:f5:04:c2:0c:44: c7:c7:20:e5:bb:25:54:8c:4b:ec:49:ea:3d:93:69: 81:00:2b:f4:09:be:0d:b5:9b:f9:1a:49:ae:9a:8a: a6:25:66:31:be:1e:89:15:ac:36:27:2a:52:82:ad: 15:13:74:d4:0e:32:6f:83:db:f3:0f:9d:fe:7c:e3: ab:be:bc:c7:4f:c2:46:be:c1:10:b7:51:86:19:9d: 4e:2a:85:be:59:7e:66:31:f6:5d:9e:ef:fa:7e:46: 93:46:47:47:a9:3b:52:db:b5:be:9b:41:f4:b8:34: ff:b2:41:df:a3:02:66:fb:5a:15:15:a8:6c:05:9a: 1f:42:65:5d:f7:4c:da:0d:cb:e5:b3:1b:e6:d1:e3: c8:26:39:1b:4a:d4:83:bd:51:9d:c7:4b:b9:d1:35: 52:1a:a6:78:c3:77:1a:1b:a5:6c:28:0c:e9:3e:22: 17:58:26:25:d5:f6:31:d1:2e:bd:be:2f:24:80:99: b4:50:54:7b:6a:a0:4e:31:54:a5:d6:e3:af:43:35: 8b:e1:32:3a:46:4c:7b:5d:bb:5b:68:ee:ad:b5:51: 50:e3:90:9f:92:d6:fe:7d:ae:06:31:dc:20:9c:53: c9:ab:7c:24:ce:14:1d:a8:bd:3a:a5:c5:0b:aa:6e: ea:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D1:71:96:50:96:80:AF:98:75:01:27:47:A6:30:C1:7B:F4:49:6F X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.187.78.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:eb:dc:a4:9b:04:ba:bd:0b:49:1d:17:79:5e:c6:30:b8:33: fd:3f:82:82:f4:85:26:56:0f:0d:d9:a9:ab:d2:c2:b1:6d:d5: 32:75:41:e0:28:37:56:20:e9:23:86:bd:7f:51:90:61:46:87: d9:b2:6d:e6:92:87:f9:5f:28:42:f8:54:33:2e:c6:50:db:07: bd:76:a1:18:99:99:3f:e5:42:91:7b:76:2f:cc:9a:6e:7f:60: 05:1d:9d:de:72:ee:e4:1d:d2:ab:44:59:0a:69:6a:55:bd:54: e0:67:ef:73:33:10:3a:60:b8:ba:41:df:dc:a1:f3:7e:8c:ca: 00:e8:20:81:64:c1:b7:8f:fa:46:55:49:c6:d9:f1:7d:b9:89: b4:c2:16:fa:a7:69:54:5d:df:c5:79:d4:56:7a:cf:c0:3f:22: 0e:8e:72:92:cb:9e:31:4d:8b:d7:18:0f:2c:71:0d:d6:47:d9: b5:08:82:2e:21:8e:ee:21:de:d8:43:27:fa:8d:57:ce:6f:4b: 2e:fe:67:90:82:92:9f:be:c8:ed:b6:17:20:7b:cf:07:3e:97: ed:8f:6a:3d:5c:d5:ec:58:a4:f7:cc:af:74:75:41:83:65:fb: 8d:66:42:12:f9:76:09:4c:a4:52:47:67:09:2f:93:62:4c:6e: 0c:2e:64:d9 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUfe/qxnmw5CxrZlvtXWomGiyANAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ2MDVaFw0yNjEyMjgwOTUxMDVaMDMxMTAvBgNV BAMTKDM0RDE3MTk2NTA5NjgwQUY5ODc1MDEyNzQ3QTYzMEMxN0JGNDQ5NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUvjYdoWI9jvH1BMIMRMfHIOW7 JVSMS+xJ6j2TaYEAK/QJvg21m/kaSa6aiqYlZjG+HokVrDYnKlKCrRUTdNQOMm+D 2/MPnf5846u+vMdPwka+wRC3UYYZnU4qhb5ZfmYx9l2e7/p+RpNGR0epO1Lbtb6b QfS4NP+yQd+jAmb7WhUVqGwFmh9CZV33TNoNy+WzG+bR48gmORtK1IO9UZ3HS7nR NVIapnjDdxobpWwoDOk+IhdYJiXV9jHRLr2+LySAmbRQVHtqoE4xVKXW469DNYvh MjpGTHtdu1to7q21UVDjkJ+S1v59rgYx3CCcU8mrfCTOFB2ovTqlxQuqbuoXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUNNFxllCWgK+YdQEnR6YwwXv0SW8wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzMTJlMzEzODM3MmUzNzM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA H7tOMA0GCSqGSIb3DQEBCwUAA4IBAQAe69ykmwS6vQtJHRd5XsYwuDP9P4KC9IUm Vg8N2amr0sKxbdUydUHgKDdWIOkjhr1/UZBhRofZsm3mkof5XyhC+FQzLsZQ2we9 dqEYmZk/5UKRe3YvzJpuf2AFHZ3ecu7kHdKrRFkKaWpVvVTgZ+9zMxA6YLi6Qd/c ofN+jMoA6CCBZMG3j/pGVUnG2fF9uYm0whb6p2lUXd/FedRWes/APyIOjnKSy54x TYvXGA8scQ3WR9m1CIIuIY7uId7YQyf6jVfOb0su/meQgpKfvsjtthcge88HPpft j2o9XNXsWKT3zK90dUGDZfuNZkIS+XYJTKRSR2cJL5NiTG4MLmTZ -----END CERTIFICATE-----Generated at Mon Jan 19 14:25:51 2026 by rpki-client