This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33372e31362e38392e302f32342d3234203d3e20323035363539.roa File: 33372e31362e38392e302f32342d3234203d3e20323035363539.roa (raw, json) Hash identifier: anMvtB/QLrZHe89lkGfjrH91zFQQqy/a++at7qvgJcE= Subject key identifier: FF:38:30:0A:C6:53:EE:B3:CB:2F:EA:2B:D7:C9:EB:D7:EC:59:6B:CC Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 35C97535BF4F286D0BBEC249F4A7B3778729BA1C Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33372e31362e38392e302f32342d3234203d3e20323035363539.roa Signing time: Wed 24 Dec 2025 10:03:47 +0000 ROA not before: Wed 24 Dec 2025 09:58:47 +0000 ROA not after: Wed 23 Dec 2026 10:03:47 +0000 asID: 205659 IP address blocks: 37.16.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c9:75:35:bf:4f:28:6d:0b:be:c2:49:f4:a7:b3:77:87:29:ba:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 24 09:58:47 2025 GMT Not After : Dec 23 10:03:47 2026 GMT Subject: CN=FF38300AC653EEB3CB2FEA2BD7C9EBD7EC596BCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ad:a7:ca:f1:0e:bd:41:91:0c:d1:fa:82:0b: 14:b3:da:b0:85:79:44:13:ab:87:19:33:9b:5e:26: 79:ae:0c:8a:2b:88:54:51:5d:fa:d9:84:75:a7:9a: a3:3b:89:51:02:5a:c7:72:2f:22:7d:c5:41:c5:cd: ef:86:d1:c5:5f:fd:13:d7:d5:ec:19:28:c0:02:64: f6:39:c4:c1:4a:32:f0:09:4b:c4:9c:6e:b4:1a:a2: 84:44:63:10:77:c8:c7:be:aa:94:b5:43:bb:ba:f9: ed:fd:3f:67:56:c3:ee:a2:17:10:4b:cf:65:86:22: 1b:89:54:14:cc:a8:ad:ad:48:6c:0a:eb:08:ab:62: 3a:ef:b0:b3:fa:24:3e:32:cd:84:63:e0:ba:2f:bf: 42:7d:cb:fd:aa:13:b5:aa:ef:c9:41:2e:c6:b5:40: d8:26:8f:05:b3:ea:f1:ed:cd:02:b0:49:18:c6:e4: c6:43:6e:0f:27:fa:d4:59:42:ae:12:ab:5a:9d:4e: b7:95:46:c5:4b:61:1a:c2:41:1b:9a:87:76:60:d8: e0:31:45:26:06:70:1f:4e:ac:4c:2c:e8:b9:a7:3c: e1:7f:fd:b7:1a:8e:fc:34:18:fe:f3:db:01:01:d9: 40:ca:89:18:dc:ca:2e:6b:e8:30:c9:5c:e9:17:f1: a7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:38:30:0A:C6:53:EE:B3:CB:2F:EA:2B:D7:C9:EB:D7:EC:59:6B:CC X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33372e31362e38392e302f32342d3234203d3e20323035363539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.16.89.0/24 Signature Algorithm: sha256WithRSAEncryption 40:71:45:67:0e:0f:ab:d9:eb:91:4d:cf:19:1d:d2:3e:df:b6: 1d:4a:98:29:42:99:0d:a7:a3:de:87:75:e0:fc:be:93:10:2a: 81:56:18:7c:bb:ce:66:eb:77:ae:b3:59:00:14:f6:e7:eb:d5: 16:f4:20:b1:63:4c:52:46:b4:ba:4e:98:4e:fb:30:2a:70:26: 79:39:99:f9:20:35:00:e9:11:e0:d5:f8:9b:9a:e4:b2:c1:54: 44:7d:19:22:5a:c7:23:24:89:69:46:a7:09:16:37:84:af:ef: 42:29:24:f1:69:51:bd:0c:d3:f9:f4:db:f6:43:9c:8b:6a:95: 3c:9b:38:ba:7d:a1:e3:c1:fa:a0:6c:39:28:0f:c0:46:b2:d5: ce:24:db:bf:a0:04:72:fb:46:79:20:a8:03:3b:ab:2f:5e:94: f9:fa:6f:bb:b5:80:df:76:45:3d:13:98:c2:72:0f:d7:07:8b: f6:cc:f4:2a:29:3d:fd:94:07:a3:04:ae:f5:3c:6b:c4:bc:b3: 86:f3:07:46:b1:41:03:a1:47:1f:77:33:08:41:6a:e6:1c:ac: 53:0f:8b:5f:c4:d5:10:22:3c:6a:97:48:6c:61:dc:5e:1d:f8: 18:ab:04:36:65:46:02:aa:57:60:6d:bb:de:e6:65:17:e5:09: 92:d8:8a:0a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUNcl1Nb9PKG0LvsJJ9Kezd4cpuhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjQwOTU4NDdaFw0yNjEyMjMxMDAzNDdaMDMxMTAvBgNV BAMTKEZGMzgzMDBBQzY1M0VFQjNDQjJGRUEyQkQ3QzlFQkQ3RUM1OTZCQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkrafK8Q69QZEM0fqCCxSz2rCF eUQTq4cZM5teJnmuDIoriFRRXfrZhHWnmqM7iVECWsdyLyJ9xUHFze+G0cVf/RPX 1ewZKMACZPY5xMFKMvAJS8ScbrQaooREYxB3yMe+qpS1Q7u6+e39P2dWw+6iFxBL z2WGIhuJVBTMqK2tSGwK6wirYjrvsLP6JD4yzYRj4Lovv0J9y/2qE7Wq78lBLsa1 QNgmjwWz6vHtzQKwSRjG5MZDbg8n+tRZQq4Sq1qdTreVRsVLYRrCQRuah3Zg2OAx RSYGcB9OrEws6LmnPOF//bcajvw0GP7z2wEB2UDKiRjcyi5r6DDJXOkX8afdAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU/zgwCsZT7rPLL+or18nr1+xZa8wwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzNzJlMzEzNjJlMzgzOTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNTM2MzUzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACUQ WTANBgkqhkiG9w0BAQsFAAOCAQEAQHFFZw4Pq9nrkU3PGR3SPt+2HUqYKUKZDaej 3od14Py+kxAqgVYYfLvOZut3rrNZABT25+vVFvQgsWNMUka0uk6YTvswKnAmeTmZ +SA1AOkR4NX4m5rkssFURH0ZIlrHIySJaUanCRY3hK/vQikk8WlRvQzT+fTb9kOc i2qVPJs4un2h48H6oGw5KA/ARrLVziTbv6AEcvtGeSCoAzurL16U+fpvu7WA33ZF PROYwnIP1weL9sz0Kik9/ZQHowSu9TxrxLyzhvMHRrFBA6FHH3czCEFq5hysUw+L X8TVECI8apdIbGHcXh34GKsENmVGAqpXYG273uZlF+UJktiKCg== -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:36 2026 by rpki-client