This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39332e3130302e302f32322d3234203d3e203437353833.roa File: 34352e39332e3130302e302f32322d3234203d3e203437353833.roa (raw, json) Hash identifier: nWWcAzh25kt2Wso5dh0LlnL94PsBtABRiTSxWrgawtQ= Subject key identifier: AF:2C:5C:E9:AD:DF:9E:D3:03:B7:93:6D:39:F9:40:E2:7A:D0:CE:B4 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 517AA751EB0EDFDFE33E048AE1C775612F41758B Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39332e3130302e302f32322d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:34 +0000 ROA not before: Mon 29 Dec 2025 09:45:34 +0000 ROA not after: Mon 28 Dec 2026 09:50:34 +0000 asID: 47583 IP address blocks: 45.93.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:7a:a7:51:eb:0e:df:df:e3:3e:04:8a:e1:c7:75:61:2f:41:75:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:34 2025 GMT Not After : Dec 28 09:50:34 2026 GMT Subject: CN=AF2C5CE9ADDF9ED303B7936D39F940E27AD0CEB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d2:a7:30:37:d0:48:5c:45:aa:0b:b8:0d:d9: b5:40:92:13:76:6d:54:7a:b5:dd:48:54:e2:69:b3: 1c:86:3c:6c:33:95:a8:c4:71:8d:98:c3:72:b2:12: d7:8c:8c:24:36:4c:87:9c:01:38:bf:09:9d:be:29: 0b:46:8b:4d:27:81:86:7e:de:1b:91:d3:ac:1b:fc: 22:33:69:0a:b4:c2:6f:7c:01:fc:b0:bb:d2:b7:53: 05:d5:e5:cf:20:b1:5d:ee:3b:d9:8b:e1:32:ab:cf: 70:25:d9:70:05:da:a0:73:0a:e6:64:15:7c:55:f8: 18:0a:61:81:f1:3f:b3:24:38:ac:7d:18:83:73:d1: 68:e9:a6:9e:78:26:5d:45:75:9d:e5:89:35:02:07: 9b:cc:5e:a1:69:e6:84:d2:bb:0b:67:de:69:31:1c: 3c:c7:33:cf:ea:c2:20:75:f6:76:b2:2c:7f:9d:91: 0b:7b:ec:36:e6:45:ad:0a:23:2a:a8:ef:77:d5:de: 13:00:59:df:80:8d:e4:f4:f8:76:cf:98:1f:38:b1: a2:e5:ae:82:90:0e:ec:6a:aa:88:f2:cf:37:d4:e4: 62:d7:99:45:fa:24:db:76:b8:06:62:a8:86:c6:7f: bc:06:61:ed:4c:51:1c:ea:1f:0e:b0:f8:b0:fa:21: 6a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2C:5C:E9:AD:DF:9E:D3:03:B7:93:6D:39:F9:40:E2:7A:D0:CE:B4 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39332e3130302e302f32322d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.100.0/22 Signature Algorithm: sha256WithRSAEncryption 37:6e:5e:b8:00:7e:12:9c:ce:00:6b:22:25:48:44:ac:fa:c5: ec:0e:4b:45:df:b0:7c:a2:22:3b:e3:a7:2c:de:22:1d:8e:c2: c5:73:33:56:7d:34:82:be:ac:d1:23:5d:5a:19:50:88:51:a8: 57:1d:4a:c7:a5:63:30:37:23:34:eb:0e:34:ff:d4:5a:e7:ed: 0a:e1:ff:6e:02:25:03:bf:c6:a2:43:7f:f8:e2:34:19:5e:27: 00:b3:ae:fa:91:fa:55:e9:a4:37:2b:78:06:06:d9:62:a1:15: 6d:24:fe:80:8a:cc:7d:de:e4:af:93:3c:45:17:68:c5:f8:c0: 2f:f2:7e:8e:20:41:ef:82:8f:e8:02:e0:40:f4:30:da:0c:ed: 33:cb:29:e9:f3:b9:08:49:9d:f8:d1:12:dc:ae:84:5b:1d:18: 30:91:f4:19:74:f4:e4:64:a2:a0:a6:47:ec:f1:0a:2c:c2:fe: c3:f2:aa:ee:eb:05:b2:be:9c:47:4f:0d:e9:2f:d8:ea:1c:62: 58:55:a7:de:b1:8c:b4:38:e3:ee:5a:fe:e9:45:91:79:bf:06: 09:ad:b8:6c:69:5f:1f:da:f1:30:04:98:ab:1c:5f:3f:74:b1: 04:32:68:f1:a9:86:86:33:e8:6b:2c:fd:11:da:5e:b9:6b:3a: 8f:9d:3c:4f -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUUXqnUesO39/jPgSK4cd1YS9BdYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1MzRaFw0yNjEyMjgwOTUwMzRaMDMxMTAvBgNV BAMTKEFGMkM1Q0U5QURERjlFRDMwM0I3OTM2RDM5Rjk0MEUyN0FEMENFQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb0qcwN9BIXEWqC7gN2bVAkhN2 bVR6td1IVOJpsxyGPGwzlajEcY2Yw3KyEteMjCQ2TIecATi/CZ2+KQtGi00ngYZ+ 3huR06wb/CIzaQq0wm98Afywu9K3UwXV5c8gsV3uO9mL4TKrz3Al2XAF2qBzCuZk FXxV+BgKYYHxP7MkOKx9GINz0Wjppp54Jl1FdZ3liTUCB5vMXqFp5oTSuwtn3mkx HDzHM8/qwiB19nayLH+dkQt77DbmRa0KIyqo73fV3hMAWd+AjeT0+HbPmB84saLl roKQDuxqqojyzzfU5GLXmUX6JNt2uAZiqIbGf7wGYe1MURzqHw6w+LD6IWqnAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUryxc6a3fntMDt5NtOflA4nrQzrQwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzkzMzJlMzEzMDMw MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1d ZDANBgkqhkiG9w0BAQsFAAOCAQEAN25euAB+EpzOAGsiJUhErPrF7A5LRd+wfKIi O+OnLN4iHY7CxXMzVn00gr6s0SNdWhlQiFGoVx1Kx6VjMDcjNOsONP/UWuftCuH/ bgIlA7/GokN/+OI0GV4nALOu+pH6VemkNyt4BgbZYqEVbST+gIrMfd7kr5M8RRdo xfjAL/J+jiBB74KP6ALgQPQw2gztM8sp6fO5CEmd+NES3K6EWx0YMJH0GXT05GSi oKZH7PEKLML+w/Kq7usFsr6cR08N6S/Y6hxiWFWn3rGMtDjj7lr+6UWReb8GCa24 bGlfH9rxMASYqxxfP3SxBDJo8amGhjPoayz9EdpeuWs6j508Tw== -----END CERTIFICATE-----Generated at Mon Jan 19 14:23:33 2026 by rpki-client