This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34322e302f32342d3234203d3e203432373038.roa File: 33312e3232302e34322e302f32342d3234203d3e203432373038.roa (raw, json) Hash identifier: GTLSHzfZj4Gqp+TqCcBXDsyrP9X1F6ScwqqOKm2BNzo= Subject key identifier: E8:3A:6C:62:BF:C9:63:ED:27:BE:79:3F:0F:8D:2A:5D:91:7E:1C:30 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 2E3582FC4634152E0620626F73817315135F170F Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34322e302f32342d3234203d3e203432373038.roa Signing time: Mon 29 Dec 2025 09:50:58 +0000 ROA not before: Mon 29 Dec 2025 09:45:58 +0000 ROA not after: Mon 28 Dec 2026 09:50:58 +0000 asID: 42708 IP address blocks: 31.220.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:35:82:fc:46:34:15:2e:06:20:62:6f:73:81:73:15:13:5f:17:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:58 2025 GMT Not After : Dec 28 09:50:58 2026 GMT Subject: CN=E83A6C62BFC963ED27BE793F0F8D2A5D917E1C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:28:98:ba:39:0d:df:9b:73:bc:67:54:64:be: 47:03:84:99:34:e1:07:39:22:d0:9b:e1:d6:0a:f6: 60:8a:a8:8d:a1:0b:34:57:25:f7:1c:76:e1:90:1f: 5c:e6:54:a0:12:b9:4a:e4:ea:b8:32:39:02:24:74: e4:34:39:e4:39:ef:ee:68:59:22:03:26:d1:d5:fb: 51:b8:0e:ce:6e:8a:1b:e0:d7:1c:5c:93:eb:f5:39: a2:1b:05:10:a7:c7:34:15:ec:60:ad:a8:57:f2:75: a0:18:67:6d:03:06:6c:9e:9f:54:c2:0d:fa:77:ec: 22:d3:e7:9d:8c:1d:54:0a:93:17:26:fe:45:32:06: ab:fd:01:d9:e5:44:80:3f:aa:e8:69:a6:60:39:16: fe:dd:ee:7a:fe:03:d7:63:73:09:91:d4:33:b4:c7: 92:28:15:45:db:4d:27:e7:a7:15:71:55:1a:24:09: bc:95:e9:e9:3a:5c:ee:c7:ed:1c:6e:9c:bf:4e:82: 79:78:0b:0c:e0:d1:1e:88:4d:ec:a7:f7:7a:74:c0: 02:57:bd:85:9a:f1:9a:43:f8:e9:2e:30:13:4b:56: e4:ab:69:63:27:90:48:16:5d:c3:dc:4c:de:1f:1d: fb:15:68:bb:8c:95:4b:84:42:6c:f9:42:0d:8f:02: 19:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3A:6C:62:BF:C9:63:ED:27:BE:79:3F:0F:8D:2A:5D:91:7E:1C:30 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34322e302f32342d3234203d3e203432373038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.42.0/24 Signature Algorithm: sha256WithRSAEncryption 48:40:ba:17:e3:1d:1f:e9:5e:6a:87:51:e4:05:40:30:c5:ac: f3:9c:c4:07:71:ad:5a:83:08:cb:5d:24:5b:2b:e1:26:20:a9: 6b:be:ca:00:76:96:f7:63:15:8d:02:a8:9b:e9:91:e1:80:cd: c9:e7:61:14:83:ad:c7:6b:40:44:f4:12:84:a3:78:3b:d7:ea: c1:01:92:16:29:f9:ac:6a:a7:95:fd:a4:84:71:82:07:15:99: 0b:56:74:e5:26:db:fc:e5:31:20:3f:51:91:9d:b4:8e:78:12: f2:68:ec:fa:00:11:f7:98:18:a7:95:42:90:1f:3b:82:59:f1: a2:44:30:5c:8a:9f:04:c4:1f:63:e6:9e:f1:f2:b3:ba:5b:01: 92:97:1f:59:0b:43:2f:f1:10:8a:ac:30:8b:d9:b4:0f:ab:83: 78:78:0b:7e:72:13:2e:2e:7f:1c:b0:2c:23:3a:70:cb:06:58: 22:ca:52:d7:8a:72:fc:1c:31:b3:af:24:4a:92:b0:96:af:2a: 8a:31:eb:c4:31:09:5c:95:f8:54:8e:a6:be:3e:2a:eb:07:4a: 0b:4f:67:62:07:c8:dd:97:2a:84:7d:77:cd:46:76:12:27:1b: 28:08:13:d5:20:ab:be:2c:65:27:26:5b:e6:80:61:2a:82:b6: 55:83:7a:e8 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIULjWC/EY0FS4GIGJvc4FzFRNfFw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NThaFw0yNjEyMjgwOTUwNThaMDMxMTAvBgNV BAMTKEU4M0E2QzYyQkZDOTYzRUQyN0JFNzkzRjBGOEQyQTVEOTE3RTFDMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZKJi6OQ3fm3O8Z1RkvkcDhJk0 4Qc5ItCb4dYK9mCKqI2hCzRXJfccduGQH1zmVKASuUrk6rgyOQIkdOQ0OeQ57+5o WSIDJtHV+1G4Ds5uihvg1xxck+v1OaIbBRCnxzQV7GCtqFfydaAYZ20DBmyen1TC Dfp37CLT552MHVQKkxcm/kUyBqv9AdnlRIA/quhppmA5Fv7d7nr+A9djcwmR1DO0 x5IoFUXbTSfnpxVxVRokCbyV6ek6XO7H7RxunL9Ognl4Cwzg0R6ITeyn93p0wAJX vYWa8ZpD+OkuMBNLVuSraWMnkEgWXcPcTN4fHfsVaLuMlUuEQmz5Qg2PAhmLAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU6DpsYr/JY+0nvnk/D40qXZF+HDAwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzMTJlMzIzMjMwMmUzNDMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMjM3MzAzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB/c KjANBgkqhkiG9w0BAQsFAAOCAQEASEC6F+MdH+leaodR5AVAMMWs85zEB3GtWoMI y10kWyvhJiCpa77KAHaW92MVjQKom+mR4YDNyedhFIOtx2tARPQShKN4O9fqwQGS Fin5rGqnlf2khHGCBxWZC1Z05Sbb/OUxID9RkZ20jngS8mjs+gAR95gYp5VCkB87 glnxokQwXIqfBMQfY+ae8fKzulsBkpcfWQtDL/EQiqwwi9m0D6uDeHgLfnITLi5/ HLAsIzpwywZYIspS14py/Bwxs68kSpKwlq8qijHrxDEJXJX4VI6mvj4q6wdKC09n YgfI3ZcqhH13zUZ2EicbKAgT1SCrvixlJyZb5oBhKoK2VYN66A== -----END CERTIFICATE-----Generated at Mon Jan 19 14:24:17 2026 by rpki-client