This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e362e302f32342d3234203d3e203437353833.roa File: 33312e3232302e362e302f32342d3234203d3e203437353833.roa (raw, json) Hash identifier: ARhzNUZf9jxXL047DYgmmHqL9OyZDwlH22AQ/byIGPA= Subject key identifier: 86:11:A4:F5:C8:D3:5D:1E:98:0F:7D:30:41:02:BD:C6:AA:07:B4:92 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 621647760AF51671D1DAC6BAD12FA4B92D41F3FF Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e362e302f32342d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:52 +0000 ROA not before: Mon 29 Dec 2025 09:45:52 +0000 ROA not after: Mon 28 Dec 2026 09:50:52 +0000 asID: 47583 IP address blocks: 31.220.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:16:47:76:0a:f5:16:71:d1:da:c6:ba:d1:2f:a4:b9:2d:41:f3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:52 2025 GMT Not After : Dec 28 09:50:52 2026 GMT Subject: CN=8611A4F5C8D35D1E980F7D304102BDC6AA07B492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3e:f4:e1:e1:c7:fc:cf:54:79:0d:b9:8b:00: 21:22:6a:0f:07:80:f6:c8:81:c3:2d:da:8f:b1:bf: 6e:d0:a8:06:87:68:9a:cb:20:17:2c:d7:a8:08:fa: 62:87:59:f4:b1:6c:d4:70:9f:23:0c:2c:2d:1a:c9: a0:a0:bf:2e:79:87:6e:70:86:b6:26:13:31:38:63: 52:a4:b4:6c:b9:10:86:f5:9a:db:bc:66:32:9c:d4: b3:97:4e:ad:a4:de:4e:3f:a1:ff:d4:2e:34:56:dc: 8c:bc:9c:47:df:53:6f:76:e0:bc:b0:a0:72:47:d2: 46:d2:26:61:92:a8:10:20:d6:3a:5e:6a:dd:ef:4f: 55:b1:8c:74:da:47:74:b0:18:20:ae:cc:d8:a3:93: 16:fa:4c:7d:07:87:cf:99:56:1d:2c:6d:fe:ec:e9: b0:6d:b8:45:d8:45:1e:e4:b8:01:8d:88:e9:5f:ce: ad:24:63:97:2d:03:57:be:de:28:15:dc:eb:66:3e: bb:50:a7:55:82:73:82:a8:eb:5f:a7:8d:bf:29:74: 3f:7e:a2:a5:81:1f:9c:ce:71:aa:6d:79:65:67:a2: 85:6b:9e:1c:13:b3:d9:a4:8c:e4:91:3b:f7:03:2c: f6:10:22:44:fe:a8:77:95:6b:44:bb:89:58:6c:e3: e1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:11:A4:F5:C8:D3:5D:1E:98:0F:7D:30:41:02:BD:C6:AA:07:B4:92 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e362e302f32342d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.6.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:c9:1d:5e:78:2b:dd:dc:ee:61:ab:9c:c3:d3:14:0d:f8:bc: d1:ff:d0:b8:ce:c7:cd:ae:b3:7b:34:4d:e3:4d:ee:f1:7d:a1: 51:b3:f7:7f:e8:a4:e7:94:6c:d1:94:70:f2:82:a6:c4:3b:ed: 52:b1:54:dc:79:c2:87:f8:6b:c8:01:78:02:2a:83:11:c5:38: 9b:fd:7e:86:cc:c7:95:da:ca:9f:05:c6:8f:6e:2d:6c:06:a2: 46:db:9d:f3:15:fa:8a:cc:3c:62:5f:f7:3b:52:8c:9e:60:66: 0f:2a:dc:03:78:16:f9:f0:cf:13:eb:93:fe:18:ec:8c:f0:49: f9:b3:e6:44:fd:83:62:df:99:de:46:dd:60:2a:ef:d1:dd:a2: 8c:0e:96:5c:f5:ae:c9:04:97:8d:37:b7:d5:81:0b:02:04:94: 3c:81:68:fe:2d:3b:7d:9a:86:43:8e:8d:3f:36:0c:fe:fc:93: 69:0b:b7:46:6c:82:73:d8:f3:4e:63:6f:ab:f5:93:3d:ce:2f: d3:ee:84:5b:c6:16:66:4a:7d:bd:a3:e9:3b:74:e4:57:0e:b8: 2d:a3:e8:3c:44:07:30:9d:5e:85:b7:1c:c0:dc:22:43:23:a5: 1d:a1:0b:4b:6a:c5:4b:53:7c:36:ff:c6:0f:9f:9b:67:45:78: ab:af:12:77 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUYhZHdgr1FnHR2sa60S+kuS1B8/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTJaFw0yNjEyMjgwOTUwNTJaMDMxMTAvBgNV BAMTKDg2MTFBNEY1QzhEMzVEMUU5ODBGN0QzMDQxMDJCREM2QUEwN0I0OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6PvTh4cf8z1R5DbmLACEiag8H gPbIgcMt2o+xv27QqAaHaJrLIBcs16gI+mKHWfSxbNRwnyMMLC0ayaCgvy55h25w hrYmEzE4Y1KktGy5EIb1mtu8ZjKc1LOXTq2k3k4/of/ULjRW3Iy8nEffU2924Lyw oHJH0kbSJmGSqBAg1jpeat3vT1WxjHTaR3SwGCCuzNijkxb6TH0Hh8+ZVh0sbf7s 6bBtuEXYRR7kuAGNiOlfzq0kY5ctA1e+3igV3OtmPrtQp1WCc4Ko61+njb8pdD9+ oqWBH5zOcapteWVnooVrnhwTs9mkjOSRO/cDLPYQIkT+qHeVa0S7iVhs4+F5AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUhhGk9cjTXR6YD30wQQK9xqoHtJIwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzMTJlMzIzMjMwMmUzNjJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAf3AYw DQYJKoZIhvcNAQELBQADggEBAEzJHV54K93c7mGrnMPTFA34vNH/0LjOx82us3s0 TeNN7vF9oVGz93/opOeUbNGUcPKCpsQ77VKxVNx5wof4a8gBeAIqgxHFOJv9fobM x5Xayp8Fxo9uLWwGokbbnfMV+orMPGJf9ztSjJ5gZg8q3AN4FvnwzxPrk/4Y7Izw Sfmz5kT9g2Lfmd5G3WAq79HdoowOllz1rskEl403t9WBCwIElDyBaP4tO32ahkOO jT82DP78k2kLt0ZsgnPY805jb6v1kz3OL9PuhFvGFmZKfb2j6Tt05FcOuC2j6DxE BzCdXoW3HMDcIkMjpR2hC0tqxUtTfDb/xg+fm2dFeKuvEnc= -----END CERTIFICATE-----Generated at Mon Jan 19 14:23:21 2026 by rpki-client