This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e33302e302f32342d3234203d3e203432373038.roa File: 33312e3232302e33302e302f32342d3234203d3e203432373038.roa (raw, json) Hash identifier: /rXgGU99Rj3PhyfYSIeDYJfEsvf2LhB7fjnYIzCgRc8= Subject key identifier: F9:98:84:FC:A3:E9:78:B7:A1:F9:EC:5A:20:BB:41:AA:3C:EC:61:D2 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 6A94AC48BDEB9E798A743C7746A9E8E159D9FC7A Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e33302e302f32342d3234203d3e203432373038.roa Signing time: Mon 29 Dec 2025 09:50:57 +0000 ROA not before: Mon 29 Dec 2025 09:45:57 +0000 ROA not after: Mon 28 Dec 2026 09:50:57 +0000 asID: 42708 IP address blocks: 31.220.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:94:ac:48:bd:eb:9e:79:8a:74:3c:77:46:a9:e8:e1:59:d9:fc:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:57 2025 GMT Not After : Dec 28 09:50:57 2026 GMT Subject: CN=F99884FCA3E978B7A1F9EC5A20BB41AA3CEC61D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:19:21:9c:15:fe:47:02:b2:51:d2:08:3d:b1: 12:3d:af:c9:b5:04:30:b5:6f:bb:bf:4a:50:34:f4: 62:b7:2c:6c:78:f7:26:7e:59:b3:6c:62:ab:d9:f0: e9:d0:2f:cd:af:f0:49:95:ab:bc:20:58:e5:eb:91: 27:d7:9a:83:94:8d:d1:8e:e0:a4:0d:a5:c8:3b:f3: 21:c8:1f:c8:6a:37:cc:f1:13:8b:72:99:3d:c6:66: a9:ec:ca:0d:db:46:50:35:76:5e:ff:d8:65:3c:b3: 73:d4:d5:fd:d3:d0:9a:59:4a:12:9f:ec:f1:c0:b0: a0:b2:c0:da:f7:7f:28:e8:59:7e:c3:33:df:44:af: 81:ee:15:ce:dc:5b:d5:56:13:be:a0:c0:aa:d6:86: ce:85:2f:b1:61:f2:79:c8:04:d6:1a:1e:56:a3:55: bf:6e:1e:36:d3:b3:45:f9:94:0a:91:d4:00:ff:f5: 2e:c4:a3:a0:81:cf:d6:4b:f3:ad:d0:70:f0:b4:04: 76:e7:36:8f:9b:5d:da:78:70:77:9f:43:c6:d9:6c: ee:76:cc:11:86:1f:e2:64:1f:73:a7:63:68:88:3e: ae:be:54:d9:fa:7f:87:b1:2c:05:6b:74:c5:22:a7: b9:e5:e9:d0:2c:04:0a:fc:18:06:f6:3b:18:8f:5f: 7f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:98:84:FC:A3:E9:78:B7:A1:F9:EC:5A:20:BB:41:AA:3C:EC:61:D2 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e33302e302f32342d3234203d3e203432373038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.30.0/24 Signature Algorithm: sha256WithRSAEncryption 59:ce:b9:dd:28:5f:66:ed:fa:4d:95:43:39:00:20:66:33:79: 27:8d:9b:59:8e:80:30:ff:ab:76:75:c5:39:da:70:71:b9:c9: 1f:ac:20:56:2b:c9:b8:b3:fb:7c:ef:dc:9d:6d:0b:3f:51:e7: d0:fc:a5:45:41:df:18:63:10:cb:de:73:71:4a:63:01:a9:5b: 99:ce:7b:05:3f:7a:40:9e:20:64:84:aa:8d:88:91:68:f5:19: 57:60:0c:aa:9b:c0:7a:a7:fd:b7:a9:29:da:76:5d:46:8f:0a: f0:7e:ff:c9:76:ba:73:34:09:ec:f6:04:36:83:f2:7c:06:c0: bd:ee:aa:89:71:88:fd:5e:6c:bc:b1:79:14:70:27:4f:82:1e: 3d:69:cb:f8:8f:31:5c:03:d8:c6:1a:62:c5:f5:ad:47:55:64: 93:41:9c:6d:72:46:70:12:ed:5c:f3:9f:e3:7a:fb:d1:e8:5d: fa:1f:2d:2d:bb:14:82:e9:60:b9:b6:c2:b1:4e:22:6e:c1:fe: 1f:f2:1f:0d:6f:50:5f:13:b9:96:12:dc:25:a6:45:19:3e:c0: 72:fe:6b:a0:ae:f4:fe:e3:c3:fa:80:41:fb:9b:bf:d2:87:29: 95:74:f0:af:7a:fd:26:a0:43:15:78:38:db:6c:55:d1:27:82: 82:c5:6b:f1 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUapSsSL3rnnmKdDx3Rqno4VnZ/HowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTdaFw0yNjEyMjgwOTUwNTdaMDMxMTAvBgNV BAMTKEY5OTg4NEZDQTNFOTc4QjdBMUY5RUM1QTIwQkI0MUFBM0NFQzYxRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcGSGcFf5HArJR0gg9sRI9r8m1 BDC1b7u/SlA09GK3LGx49yZ+WbNsYqvZ8OnQL82v8EmVq7wgWOXrkSfXmoOUjdGO 4KQNpcg78yHIH8hqN8zxE4tymT3GZqnsyg3bRlA1dl7/2GU8s3PU1f3T0JpZShKf 7PHAsKCywNr3fyjoWX7DM99Er4HuFc7cW9VWE76gwKrWhs6FL7Fh8nnIBNYaHlaj Vb9uHjbTs0X5lAqR1AD/9S7Eo6CBz9ZL863QcPC0BHbnNo+bXdp4cHefQ8bZbO52 zBGGH+JkH3OnY2iIPq6+VNn6f4exLAVrdMUip7nl6dAsBAr8GAb2OxiPX3+fAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU+ZiE/KPpeLeh+exaILtBqjzsYdIwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzMTJlMzIzMjMwMmUzMzMw MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMjM3MzAzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB/c HjANBgkqhkiG9w0BAQsFAAOCAQEAWc653ShfZu36TZVDOQAgZjN5J42bWY6AMP+r dnXFOdpwcbnJH6wgVivJuLP7fO/cnW0LP1Hn0PylRUHfGGMQy95zcUpjAalbmc57 BT96QJ4gZISqjYiRaPUZV2AMqpvAeqf9t6kp2nZdRo8K8H7/yXa6czQJ7PYENoPy fAbAve6qiXGI/V5svLF5FHAnT4IePWnL+I8xXAPYxhpixfWtR1Vkk0GcbXJGcBLt XPOf43r70ehd+h8tLbsUgulgubbCsU4ibsH+H/IfDW9QXxO5lhLcJaZFGT7Acv5r oK70/uPD+oBB+5u/0ocplXTwr3r9JqBDFXg422xV0SeCgsVr8Q== -----END CERTIFICATE-----Generated at Mon Jan 19 14:23:29 2026 by rpki-client