This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e342e302f32342d3234203d3e203432373038.roa File: 33312e3232302e342e302f32342d3234203d3e203432373038.roa (raw, json) Hash identifier: ZeQ1q3zZTMnp+PtbT70zGyzgyNaZysieSXKZUeU1dqI= Subject key identifier: B7:2B:92:E9:9D:1A:4D:E3:21:F8:29:C4:7D:60:CA:86:41:23:EC:13 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 12A109B9AC9AF43A14C4A5B15F63205DEB0009 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e342e302f32342d3234203d3e203432373038.roa Signing time: Mon 29 Dec 2025 09:50:58 +0000 ROA not before: Mon 29 Dec 2025 09:45:58 +0000 ROA not after: Mon 28 Dec 2026 09:50:58 +0000 asID: 42708 IP address blocks: 31.220.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a1:09:b9:ac:9a:f4:3a:14:c4:a5:b1:5f:63:20:5d:eb:00:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:58 2025 GMT Not After : Dec 28 09:50:58 2026 GMT Subject: CN=B72B92E99D1A4DE321F829C47D60CA864123EC13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a2:6e:4d:11:49:39:6a:cb:0b:ea:e6:93:42: 7e:d4:ea:e1:a7:a8:59:f4:7e:bf:d2:b2:f8:1b:ae: 01:e0:5c:20:d1:53:58:bd:be:e1:75:f6:20:87:01: 02:15:3c:0b:56:e3:ce:7e:73:b6:d0:dd:9f:89:e3: 9b:b6:6d:79:39:d8:f6:40:9a:6e:e5:21:22:00:32: 74:27:c2:4f:42:b5:47:3d:3f:9e:0b:27:1a:1d:bd: 18:17:34:85:d5:09:a6:59:cf:69:4c:20:6d:a6:1c: 47:d2:4a:f9:5a:1b:b5:01:2c:87:4d:16:1e:39:f9: bf:46:1a:59:42:4d:aa:9c:29:6e:db:74:57:af:e2: 29:a1:5d:36:55:6e:9e:fb:70:b1:de:09:c1:dc:54: 60:5e:9d:8b:df:45:c4:11:fe:74:77:b7:0d:2a:ef: e3:f4:f7:75:9e:e4:f4:fd:9e:ca:a3:bb:20:e1:a1: d4:29:da:32:9c:83:11:dd:40:0c:7c:f8:3e:ea:4f: 24:50:f4:dc:95:2a:51:d6:be:e2:8f:58:d2:cc:6e: 32:1d:bf:79:42:96:bf:5e:53:28:df:ca:73:ae:b8: 3d:23:1e:9c:39:a0:f6:16:0d:50:3b:1b:19:1f:55: 06:2b:76:29:44:37:7f:13:24:05:e5:9b:3c:12:cd: 41:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2B:92:E9:9D:1A:4D:E3:21:F8:29:C4:7D:60:CA:86:41:23:EC:13 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e342e302f32342d3234203d3e203432373038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.4.0/24 Signature Algorithm: sha256WithRSAEncryption 54:26:78:27:15:ef:81:34:7d:0c:10:4a:39:91:90:03:f4:76: 90:01:11:e4:df:49:7c:6c:5f:81:b4:42:f6:8d:8b:a1:fb:64: 6b:f1:5f:10:4c:7e:1d:83:10:98:46:cc:1a:6a:6c:f2:cf:bf: d0:bb:72:ea:7b:d1:16:d7:49:9b:29:14:24:ae:a8:69:d7:71: 40:5f:32:f5:26:75:23:e6:0b:08:db:d9:e8:c0:b8:0b:62:fc: 67:1e:be:0e:71:6e:5c:49:e5:10:a6:b3:0e:a6:69:d0:15:50: 9a:c1:ab:b9:b7:af:96:e7:81:76:6f:3d:e1:7e:de:ba:3a:d0: 7e:7f:1a:35:2f:f3:35:77:0f:f4:75:d8:4c:e7:33:58:09:1e: 64:7b:85:6b:9c:95:5d:59:9b:9e:0b:a4:68:cf:4e:c2:88:1d: 3e:60:c5:8f:39:74:b7:3d:28:dc:86:37:7c:ef:71:9e:d3:21: 0a:40:4b:d0:6a:65:72:5c:36:cc:6c:ce:38:fe:65:37:bb:7a: 03:fa:80:57:7b:ca:ec:bf:8f:0d:d6:75:99:53:c4:92:8f:5d: be:3c:a3:cf:9e:cc:39:f2:d0:c1:c3:44:29:60:7a:0c:ea:89: 1d:6c:c8:d5:4f:98:05:20:18:0f:fb:24:d6:65:55:d1:a9:e9: 8a:5e:f5:cb -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgITEqEJuaya9DoUxKWxX2MgXesACTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhhYjJkY2MxNjljOTVmMmIxNGRmMzFkZDI0YTFmNjcwMzRl YTc3NzljMB4XDTI1MTIyOTA5NDU1OFoXDTI2MTIyODA5NTA1OFowMzExMC8GA1UE AxMoQjcyQjkyRTk5RDFBNERFMzIxRjgyOUM0N0Q2MENBODY0MTIzRUMxMzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJyibk0RSTlqywvq5pNCftTq4aeo WfR+v9Ky+BuuAeBcINFTWL2+4XX2IIcBAhU8C1bjzn5zttDdn4njm7ZteTnY9kCa buUhIgAydCfCT0K1Rz0/ngsnGh29GBc0hdUJplnPaUwgbaYcR9JK+VobtQEsh00W Hjn5v0YaWUJNqpwpbtt0V6/iKaFdNlVunvtwsd4JwdxUYF6di99FxBH+dHe3DSrv 4/T3dZ7k9P2eyqO7IOGh1CnaMpyDEd1ADHz4PupPJFD03JUqUda+4o9Y0sxuMh2/ eUKWv15TKN/Kc664PSMenDmg9hYNUDsbGR9VBit2KUQ3fxMkBeWbPBLNQTECAwEA AaOCAjkwggI1MB0GA1UdDgQWBBS3K5LpnRpN4yH4KcR9YMqGQSPsEzAfBgNVHSME GDAWgBSrLcwWnJXysU3zHdJKH2cDTqd3nDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS9mZTM3MDhhMC02N2Q1LTRhYzItYWJjNC1hMzMyNTkwYjk5 YWYvNC9BQjJEQ0MxNjlDOTVGMkIxNERGMzFERDI0QTFGNjcwMzRFQTc3NzlDLmNy bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcXkzTUZweVY4ckZOOHgzU1NoOW5BMDZu ZDV3LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mZTM3MDhhMC02 N2Q1LTRhYzItYWJjNC1hMzMyNTkwYjk5YWYvNC8zMzMxMmUzMjMyMzAyZTM0MmUz MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMjM3MzAzOC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB/cBDAN BgkqhkiG9w0BAQsFAAOCAQEAVCZ4JxXvgTR9DBBKOZGQA/R2kAER5N9JfGxfgbRC 9o2Loftka/FfEEx+HYMQmEbMGmps8s+/0Lty6nvRFtdJmykUJK6oaddxQF8y9SZ1 I+YLCNvZ6MC4C2L8Zx6+DnFuXEnlEKazDqZp0BVQmsGrubevlueBdm894X7eujrQ fn8aNS/zNXcP9HXYTOczWAkeZHuFa5yVXVmbngukaM9OwogdPmDFjzl0tz0o3IY3 fO9xntMhCkBL0Gplclw2zGzOOP5lN7t6A/qAV3vK7L+PDdZ1mVPEko9dvjyjz57M OfLQwcNEKWB6DOqJHWzI1U+YBSAYD/sk1mVV0anpil71yw== -----END CERTIFICATE-----Generated at Mon Jan 19 14:23:18 2026 by rpki-client