This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e38302e302f32312d3332203d3e203531313637.roa File: 33312e3232302e38302e302f32312d3332203d3e203531313637.roa (raw, json) Hash identifier: JXjPSg9eiR7aD6zcxBzDhW0UAZgfQO5ijACdwg3HohA= Subject key identifier: 6F:6D:56:59:51:3B:7F:E5:69:0A:2F:1C:03:44:77:22:0E:35:A6:58 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 38080D04F4B1C2E7A64CB3BE56C76307841C68E0 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e38302e302f32312d3332203d3e203531313637.roa Signing time: Mon 29 Dec 2025 09:51:04 +0000 ROA not before: Mon 29 Dec 2025 09:46:04 +0000 ROA not after: Mon 28 Dec 2026 09:51:04 +0000 asID: 51167 IP address blocks: 31.220.80.0/21 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:08:0d:04:f4:b1:c2:e7:a6:4c:b3:be:56:c7:63:07:84:1c:68:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:46:04 2025 GMT Not After : Dec 28 09:51:04 2026 GMT Subject: CN=6F6D5659513B7FE5690A2F1C034477220E35A658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:ef:4b:f5:31:d9:2e:b4:8a:6f:f7:0e:1a: 22:41:44:a6:1d:2c:b4:bb:cf:3f:0d:00:92:e1:50: f2:65:13:61:76:98:0b:58:9d:9a:99:7d:e5:b7:d2: 59:d1:a2:b9:9f:a8:35:d4:23:12:a5:00:70:a3:c5: 78:86:12:07:1d:3e:59:9b:a3:c3:35:b8:c2:48:59: db:42:3a:a2:c3:f1:4a:ed:90:7d:67:c7:5b:52:25: cf:9e:96:a4:6a:33:76:8d:4a:45:62:15:44:3d:f5: d0:0c:30:eb:3a:a4:8a:d6:65:d7:51:22:af:99:0f: 6b:c4:70:9c:3c:db:a4:f1:a0:cf:80:96:84:1b:d3: 34:82:3c:e9:40:7c:9d:26:4c:be:1e:57:49:b8:21: 1a:91:5d:4f:65:f4:b2:e7:5c:02:0e:fb:8a:57:22: 6e:a8:8b:45:a0:2f:86:2a:97:e0:93:59:83:88:99: f9:17:c0:09:bd:20:f2:85:09:eb:28:71:de:59:f8: 87:ad:42:5b:d5:f1:53:bc:b1:aa:97:58:59:40:8d: 2d:29:fd:4c:67:c1:99:43:73:28:92:91:ba:b1:5f: 2d:4c:80:4c:ce:f3:bf:d2:03:fc:ab:03:48:38:3a: dc:8a:99:9c:76:3b:0b:ce:99:01:54:83:5d:bb:d8: 07:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6D:56:59:51:3B:7F:E5:69:0A:2F:1C:03:44:77:22:0E:35:A6:58 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e38302e302f32312d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.80.0/21 Signature Algorithm: sha256WithRSAEncryption 1d:63:67:4e:40:18:45:d1:0c:d6:1d:bd:13:a3:8b:c2:bb:28: 82:f2:08:78:dc:fa:e8:e1:10:21:66:3c:23:da:3e:6f:cb:74: fa:ac:58:53:47:b6:70:70:86:f2:14:ff:51:d6:84:4b:ba:52: a2:ae:15:e7:bc:3b:cb:b3:3e:9b:33:9a:20:38:49:ca:2d:0c: e7:49:bb:c3:6f:b9:0a:0d:f8:bd:9e:f0:00:8b:63:f7:15:8d: 04:14:87:d8:4e:d8:3d:78:79:d2:d5:38:58:aa:16:8f:62:3a: d4:21:ed:69:66:46:fd:31:20:53:c6:cc:06:59:2f:68:70:e1: 05:32:46:93:26:c1:91:1f:da:79:2e:4a:71:69:e5:31:2e:c7: 90:cf:bd:2f:3b:47:14:8e:b3:f5:5f:5f:61:21:a8:c3:e7:82: 16:fa:6b:ff:37:6a:45:3d:aa:45:39:f7:53:0a:97:b2:2f:91: d1:03:bb:36:7a:a1:81:20:b0:41:d7:ce:05:ff:2e:0c:29:85: a6:08:b4:a0:07:5a:f2:00:45:be:df:25:6c:bf:0e:9b:22:4f: a1:d4:b1:57:91:8d:d6:82:62:26:bc:34:de:68:67:14:1a:c1: fe:81:c1:b3:23:71:b5:b2:c1:6e:e5:d3:b2:dc:04:9b:67:b9: 60:ec:19:39 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUOAgNBPSxwuemTLO+VsdjB4QcaOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ2MDRaFw0yNjEyMjgwOTUxMDRaMDMxMTAvBgNV BAMTKDZGNkQ1NjU5NTEzQjdGRTU2OTBBMkYxQzAzNDQ3NzIyMEUzNUE2NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpDe9L9THZLrSKb/cOGiJBRKYd LLS7zz8NAJLhUPJlE2F2mAtYnZqZfeW30lnRormfqDXUIxKlAHCjxXiGEgcdPlmb o8M1uMJIWdtCOqLD8UrtkH1nx1tSJc+elqRqM3aNSkViFUQ99dAMMOs6pIrWZddR Iq+ZD2vEcJw826TxoM+AloQb0zSCPOlAfJ0mTL4eV0m4IRqRXU9l9LLnXAIO+4pX Im6oi0WgL4Yql+CTWYOImfkXwAm9IPKFCesocd5Z+IetQlvV8VO8saqXWFlAjS0p /UxnwZlDcyiSkbqxXy1MgEzO87/SA/yrA0g4OtyKmZx2OwvOmQFUg1272AdvAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUb21WWVE7f+VpCi8cA0R3Ig41plgwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzMTJlMzIzMjMwMmUzODMw MmUzMDJmMzIzMTJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAx/c UDANBgkqhkiG9w0BAQsFAAOCAQEAHWNnTkAYRdEM1h29E6OLwrsogvIIeNz66OEQ IWY8I9o+b8t0+qxYU0e2cHCG8hT/UdaES7pSoq4V57w7y7M+mzOaIDhJyi0M50m7 w2+5Cg34vZ7wAItj9xWNBBSH2E7YPXh50tU4WKoWj2I61CHtaWZG/TEgU8bMBlkv aHDhBTJGkybBkR/aeS5KcWnlMS7HkM+9LztHFI6z9V9fYSGow+eCFvpr/zdqRT2q RTn3UwqXsi+R0QO7NnqhgSCwQdfOBf8uDCmFpgi0oAda8gBFvt8lbL8OmyJPodSx V5GN1oJiJrw03mhnFBrB/oHBsyNxtbLBbuXTstwEm2e5YOwZOQ== -----END CERTIFICATE-----Generated at Mon Jan 19 14:28:36 2026 by rpki-client