This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/352e3130342e38342e302f32322d3332203d3e20313431393935.roa File: 352e3130342e38342e302f32322d3332203d3e20313431393935.roa (raw, json) Hash identifier: 2AmBAihmDcfmcvSPafuytGnSRQUj8DJXgCLTmnjZ24E= Subject key identifier: 3D:C0:97:47:F9:5D:C8:40:E8:1B:D4:38:8B:5D:D7:DB:B9:C8:0F:2B Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 37BF3BDD508E1A6D73058D03D39C28735757F337 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/352e3130342e38342e302f32322d3332203d3e20313431393935.roa Signing time: Fri 02 Jan 2026 09:51:10 +0000 ROA not before: Fri 02 Jan 2026 09:46:10 +0000 ROA not after: Fri 01 Jan 2027 09:51:10 +0000 asID: 141995 IP address blocks: 5.104.84.0/22 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:bf:3b:dd:50:8e:1a:6d:73:05:8d:03:d3:9c:28:73:57:57:f3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 2 09:46:10 2026 GMT Not After : Jan 1 09:51:10 2027 GMT Subject: CN=3DC09747F95DC840E81BD4388B5DD7DBB9C80F2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6a:26:d9:bd:3c:89:18:45:84:b8:f9:58:72: 81:2a:57:b0:e9:ef:40:a2:4e:06:ea:af:bb:9a:c8: 79:c5:c4:2a:25:dc:e6:81:40:7e:73:19:6e:0e:c3: 58:56:91:9c:89:40:60:51:5f:ad:da:4f:ba:d8:c0: 43:b1:da:6f:ec:03:f9:e6:92:6f:6f:38:3e:fa:42: d4:06:47:58:90:24:d6:cd:e9:2e:3a:3c:3b:dd:db: 08:e1:01:3a:31:fd:5b:a3:5e:17:91:04:52:80:74: 63:8e:26:b2:b3:e9:59:9f:56:db:ff:b3:07:13:ad: fa:c0:3f:a7:1e:d4:7b:bc:05:0d:15:77:99:6d:ca: 7b:9e:26:6e:56:3e:5f:38:24:39:98:d6:18:43:4e: 8e:29:44:3a:c5:67:23:17:0c:1b:7e:28:c8:1e:70: 95:90:a6:16:d1:d5:2d:75:fd:c8:85:29:68:70:fd: ea:3b:c8:eb:c5:0e:81:78:71:f8:ec:de:0e:2f:c9: 46:e9:93:75:59:56:57:6a:1f:e9:6b:ac:15:c6:68: 2f:1b:c3:cb:78:1b:8e:5b:fc:92:4d:86:31:78:e6: 8e:c0:a0:cc:18:12:78:6f:50:98:37:4b:19:d8:e5: 25:b2:c7:57:e1:a5:31:fb:05:5e:4f:0a:c6:0d:44: 60:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C0:97:47:F9:5D:C8:40:E8:1B:D4:38:8B:5D:D7:DB:B9:C8:0F:2B X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/352e3130342e38342e302f32322d3332203d3e20313431393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.84.0/22 Signature Algorithm: sha256WithRSAEncryption 66:5f:cf:81:11:2c:bf:9c:69:5e:0f:a1:f1:46:da:03:4d:08: 2b:65:82:49:a1:fa:06:8e:83:d4:03:8b:b9:39:ef:98:a9:21: 23:7b:86:3b:62:75:71:43:80:bd:88:d4:1b:6b:f5:3f:90:87: c2:63:5b:77:fd:37:d3:66:4f:31:57:bc:ff:0c:f4:97:90:38: 8a:2e:7b:15:39:54:08:c5:2b:f5:51:b4:db:81:89:2c:eb:db: d7:8c:d8:01:ec:83:a3:1a:0b:dc:fa:78:d1:66:82:57:77:a4: b6:5e:9b:f3:1e:6a:8e:c2:92:60:54:5d:b8:12:5c:8b:f9:e9: f3:07:67:e6:0c:fc:7b:18:09:e0:a6:0e:2a:48:33:2a:81:b0: 84:b8:07:5b:56:60:28:18:d5:07:a8:3e:aa:a7:f3:c6:02:c3: 16:92:18:09:82:2b:82:9a:a0:d2:b8:c7:38:20:44:3f:58:4c: e1:16:29:27:41:e8:bf:07:19:ce:29:8c:9f:06:40:c3:a0:79: 39:f8:f2:b6:d0:23:98:8c:b7:2b:69:d8:6d:41:87:99:e8:7e: 96:28:66:b8:c4:b9:92:17:01:0c:67:d5:83:09:a5:f6:01:9f: 50:2a:fb:e0:c8:66:0f:75:66:3e:87:fe:e5:53:30:73:51:2f: 58:07:f1:8a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUN7873VCOGm1zBY0D05woc1dX8zcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMDIwOTQ2MTBaFw0yNzAxMDEwOTUxMTBaMDMxMTAvBgNV BAMTKDNEQzA5NzQ3Rjk1REM4NDBFODFCRDQzODhCNUREN0RCQjlDODBGMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiaibZvTyJGEWEuPlYcoEqV7Dp 70CiTgbqr7uayHnFxCol3OaBQH5zGW4Ow1hWkZyJQGBRX63aT7rYwEOx2m/sA/nm km9vOD76QtQGR1iQJNbN6S46PDvd2wjhATox/VujXheRBFKAdGOOJrKz6VmfVtv/ swcTrfrAP6ce1Hu8BQ0Vd5ltynueJm5WPl84JDmY1hhDTo4pRDrFZyMXDBt+KMge cJWQphbR1S11/ciFKWhw/eo7yOvFDoF4cfjs3g4vyUbpk3VZVldqH+lrrBXGaC8b w8t4G45b/JJNhjF45o7AoMwYEnhvUJg3SxnY5SWyx1fhpTH7BV5PCsYNRGBpAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUPcCXR/ldyEDoG9Q4i13X27nIDyswHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzUyZTMxMzAzNDJlMzgzNDJl MzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMxMzQzMTM5MzkzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgVo VDANBgkqhkiG9w0BAQsFAAOCAQEAZl/PgREsv5xpXg+h8UbaA00IK2WCSaH6Bo6D 1AOLuTnvmKkhI3uGO2J1cUOAvYjUG2v1P5CHwmNbd/0302ZPMVe8/wz0l5A4ii57 FTlUCMUr9VG024GJLOvb14zYAeyDoxoL3Pp40WaCV3ektl6b8x5qjsKSYFRduBJc i/np8wdn5gz8exgJ4KYOKkgzKoGwhLgHW1ZgKBjVB6g+qqfzxgLDFpIYCYIrgpqg 0rjHOCBEP1hM4RYpJ0HovwcZzimMnwZAw6B5OfjyttAjmIy3K2nYbUGHmeh+lihm uMS5khcBDGfVgwml9gGfUCr74MhmD3VmPof+5VMwc1EvWAfxig== -----END CERTIFICATE-----Generated at Mon Jan 19 14:25:55 2026 by rpki-client