This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34322e302f32342d3234203d3e203633343733.roa File: 33312e3232302e34322e302f32342d3234203d3e203633343733.roa (raw, json) Hash identifier: 70s+y480/QOn9k/QoWuEjl3ibBo/aRxysoOjIjcsONA= Subject key identifier: B3:FB:A0:AA:42:D8:26:FF:04:2E:9F:36:4E:AD:DD:84:78:AB:7C:72 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 1A2C60A181919B9177EB1E412F52E1C3D238A119 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34322e302f32342d3234203d3e203633343733.roa Signing time: Mon 29 Dec 2025 09:50:54 +0000 ROA not before: Mon 29 Dec 2025 09:45:54 +0000 ROA not after: Mon 28 Dec 2026 09:50:54 +0000 asID: 63473 IP address blocks: 31.220.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:2c:60:a1:81:91:9b:91:77:eb:1e:41:2f:52:e1:c3:d2:38:a1:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:54 2025 GMT Not After : Dec 28 09:50:54 2026 GMT Subject: CN=B3FBA0AA42D826FF042E9F364EADDD8478AB7C72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:02:a0:8c:d3:00:c1:5d:ad:2c:24:79:90:36: 9b:2e:9d:e6:11:8b:fa:7f:7d:70:a7:bd:8f:f7:8d: d3:46:d7:d2:b9:ff:ae:d4:52:16:6d:2a:c4:47:80: 40:a9:00:46:84:c7:99:62:63:d9:a8:62:64:83:6c: c8:9d:39:03:34:fb:34:52:14:65:79:86:74:16:eb: 0f:5f:55:d5:42:87:f5:dd:ee:dd:dc:24:ca:a0:5e: e0:b1:e2:97:b3:5b:5c:66:04:57:5d:c2:72:61:e4: 50:ca:7e:19:ab:87:c7:41:71:38:fa:aa:41:90:8a: 3e:89:09:f3:bf:d4:78:8c:73:4c:b7:65:d8:e8:cf: 78:a9:c0:1a:6a:08:f0:97:b2:d5:ad:ab:fe:01:37: 10:bb:06:36:40:9c:56:38:fa:4d:27:54:f6:75:ce: 88:1a:ad:04:0a:6f:01:c1:0e:96:93:7a:b1:2a:28: 60:3a:c0:bc:b4:8a:07:ed:66:ac:4d:f3:bd:4d:3a: dd:c3:bb:d1:97:bf:d1:80:84:bb:a2:a6:5f:aa:c0: 8d:58:d1:06:8b:f6:e3:08:fe:69:f7:25:94:26:39: b8:d2:f7:22:b7:c6:f6:b3:d2:7d:2d:9f:1f:fa:5e: 2d:4c:88:69:05:87:55:8a:51:6e:23:dc:71:b2:3b: 1b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FB:A0:AA:42:D8:26:FF:04:2E:9F:36:4E:AD:DD:84:78:AB:7C:72 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34322e302f32342d3234203d3e203633343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.42.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:3c:63:b2:c4:d9:58:02:23:a3:f7:09:e3:f5:c6:0a:56:ea: b2:11:3a:0f:c7:53:0a:61:6e:b1:0c:f8:1a:33:95:3e:93:bd: 7b:ea:ad:de:6e:ec:f4:06:e3:19:cc:aa:dd:6f:2b:a1:ce:3e: c4:d3:86:b9:d1:78:10:09:df:7c:de:90:29:bd:da:a9:cc:81: 3b:0c:b8:d5:a3:4a:3f:2b:7f:26:da:d9:ae:c0:a4:1f:67:67: 18:1c:d0:10:f7:6b:d8:89:9f:16:57:73:1b:ec:6c:02:e0:79: 77:cb:7d:a5:6a:01:7c:0f:1e:a6:f2:e5:25:fb:3b:97:67:22: 55:25:4b:1c:b4:6c:9a:30:43:89:5e:46:1c:43:50:b9:02:8c: f4:06:9d:24:6f:e5:ff:fc:ef:a8:7e:b9:ed:c7:4e:85:f2:7f: 6a:7e:36:c2:09:3e:df:8e:5c:4a:b7:18:32:39:5e:83:93:7a: 5d:85:66:b8:98:a5:19:5c:d3:51:f8:ff:0f:5d:83:9a:cd:f3: 5a:1c:23:c0:1a:01:f0:e7:82:21:ba:db:55:17:b3:07:65:18: 77:d5:8e:76:d6:cd:ef:d4:ce:c9:cd:d5:cb:2e:db:81:db:13: 77:ab:6d:4d:d1:0e:35:46:e0:95:62:44:a9:fb:47:48:27:06: 8f:64:45:f5 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUGixgoYGRm5F36x5BL1Lhw9I4oRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTRaFw0yNjEyMjgwOTUwNTRaMDMxMTAvBgNV BAMTKEIzRkJBMEFBNDJEODI2RkYwNDJFOUYzNjRFQURERDg0NzhBQjdDNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaAqCM0wDBXa0sJHmQNpsuneYR i/p/fXCnvY/3jdNG19K5/67UUhZtKsRHgECpAEaEx5liY9moYmSDbMidOQM0+zRS FGV5hnQW6w9fVdVCh/Xd7t3cJMqgXuCx4pezW1xmBFddwnJh5FDKfhmrh8dBcTj6 qkGQij6JCfO/1HiMc0y3Zdjoz3ipwBpqCPCXstWtq/4BNxC7BjZAnFY4+k0nVPZ1 zogarQQKbwHBDpaTerEqKGA6wLy0igftZqxN871NOt3Du9GXv9GAhLuipl+qwI1Y 0QaL9uMI/mn3JZQmObjS9yK3xvaz0n0tnx/6Xi1MiGkFh1WKUW4j3HGyOxslAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUs/ugqkLYJv8ELp82Tq3dhHirfHIwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzMTJlMzIzMjMwMmUzNDMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM0MzczMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB/c KjANBgkqhkiG9w0BAQsFAAOCAQEAjjxjssTZWAIjo/cJ4/XGClbqshE6D8dTCmFu sQz4GjOVPpO9e+qt3m7s9AbjGcyq3W8roc4+xNOGudF4EAnffN6QKb3aqcyBOwy4 1aNKPyt/JtrZrsCkH2dnGBzQEPdr2ImfFldzG+xsAuB5d8t9pWoBfA8epvLlJfs7 l2ciVSVLHLRsmjBDiV5GHENQuQKM9AadJG/l//zvqH657cdOhfJ/an42wgk+345c SrcYMjleg5N6XYVmuJilGVzTUfj/D12Dms3zWhwjwBoB8OeCIbrbVRezB2UYd9WO dtbN79TOyc3Vyy7bgdsTd6ttTdEONUbglWJEqftHSCcGj2RF9Q== -----END CERTIFICATE-----Generated at Mon Jan 19 14:23:33 2026 by rpki-client