This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36312e302f32342d3234203d3e20313336373837.roa File: 39332e3131342e36312e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: XjNSrgJ5QGhjCyOdE5BQZIQVp8aABJta1GC0rrU4i0Q= Subject key identifier: 2F:ED:9F:46:74:D7:2F:10:59:5B:F9:0C:AF:35:D9:C0:C5:9E:16:24 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 2A1313EAB282C9E3153CB84006A75AEF6EAD7624 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36312e302f32342d3234203d3e20313336373837.roa Signing time: Fri 26 Dec 2025 13:50:21 +0000 ROA not before: Fri 26 Dec 2025 13:45:21 +0000 ROA not after: Fri 25 Dec 2026 13:50:21 +0000 asID: 136787 IP address blocks: 93.114.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:13:13:ea:b2:82:c9:e3:15:3c:b8:40:06:a7:5a:ef:6e:ad:76:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 26 13:45:21 2025 GMT Not After : Dec 25 13:50:21 2026 GMT Subject: CN=2FED9F4674D72F10595BF90CAF35D9C0C59E1624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6f:61:e3:bf:87:5d:45:09:35:64:28:5b:57: 89:c2:b1:8f:a9:c4:90:57:4d:9f:ed:e3:a1:54:46: 00:64:75:1b:a4:f3:fd:ad:0f:98:58:ec:c5:a8:34: d1:a8:32:96:88:e0:a4:ee:ed:38:07:73:e1:16:36: b3:86:4d:0d:33:c1:53:4b:9f:35:aa:dc:0e:9c:c6: 52:8d:b0:b0:81:47:ce:2c:49:90:b6:e4:5a:01:55: 72:46:bf:f1:1b:e4:0b:a8:d2:36:d3:2e:4a:cd:0c: 2a:c3:93:97:44:8d:09:84:86:46:96:f1:93:b3:fc: 4c:16:f4:3b:a1:11:c7:e2:d9:18:14:da:8f:d2:6e: 7f:35:ce:2a:ca:a8:86:1b:d5:39:4c:47:4a:a5:6d: 3d:c4:51:ac:89:1e:4c:ae:38:4d:aa:bf:7f:a0:42: a3:06:c2:63:71:2d:05:6e:cf:c6:46:cf:30:cf:27: 7d:a4:74:08:b2:19:37:4a:ce:93:f9:a3:a4:2f:15: 0f:80:ac:3b:88:13:7f:ab:88:87:88:42:e4:13:8f: 2c:cc:3f:2c:86:ae:44:50:b6:ac:e5:ce:84:4e:fa: f3:68:7c:ce:98:da:ee:3d:3e:52:58:52:4f:84:0d: 29:cf:57:86:26:bb:05:e1:f2:01:77:d7:67:2d:da: d1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:ED:9F:46:74:D7:2F:10:59:5B:F9:0C:AF:35:D9:C0:C5:9E:16:24 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36312e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.114.61.0/24 Signature Algorithm: sha256WithRSAEncryption 00:41:c1:1c:41:cf:f9:aa:f1:10:1a:8a:d3:d4:17:b2:ba:68: 4d:60:38:0d:46:b3:25:63:87:04:84:8d:21:8f:a9:d1:ad:d6: 67:6f:e7:31:c7:b3:d8:bb:2f:f8:8d:ce:93:d6:4a:9c:7a:0f: d3:df:3d:0d:26:16:8c:9a:ea:91:d5:25:1b:fe:74:44:c6:a7: e7:73:88:0a:b3:10:00:dc:7c:cd:81:12:1f:03:8d:5d:01:91: c2:7d:d2:bf:6a:8d:46:b4:20:68:8b:5f:82:12:6c:6c:ce:8e: eb:87:d3:6b:69:39:e1:3f:01:4b:88:00:a5:81:81:e1:d7:b6: 93:ba:59:a4:a0:f2:d2:bf:da:93:95:38:59:5c:e5:2e:a1:36: 11:8e:8e:1e:01:f5:91:7c:16:b9:c8:64:ca:03:4d:fe:2b:56: 23:62:1b:87:5d:54:8d:b9:57:e9:0b:90:56:3c:3d:6e:0d:81: 1c:8c:99:af:91:df:00:6c:5b:d7:70:ae:58:ed:ac:f4:6b:0c: 26:64:41:50:c8:5f:58:1c:b8:42:ce:14:a5:26:48:97:b9:1c: 8a:6d:75:00:78:21:a1:9d:5b:44:37:d1:84:11:ef:c8:70:5f: 12:4f:7b:e1:c4:1e:f4:a4:df:33:58:ac:4a:8e:10:5c:22:a0: f3:62:4b:d6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUKhMT6rKCyeMVPLhABqda726tdiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjYxMzQ1MjFaFw0yNjEyMjUxMzUwMjFaMDMxMTAvBgNV BAMTKDJGRUQ5RjQ2NzRENzJGMTA1OTVCRjkwQ0FGMzVEOUMwQzU5RTE2MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeb2Hjv4ddRQk1ZChbV4nCsY+p xJBXTZ/t46FURgBkdRuk8/2tD5hY7MWoNNGoMpaI4KTu7TgHc+EWNrOGTQ0zwVNL nzWq3A6cxlKNsLCBR84sSZC25FoBVXJGv/Eb5Auo0jbTLkrNDCrDk5dEjQmEhkaW 8ZOz/EwW9DuhEcfi2RgU2o/Sbn81zirKqIYb1TlMR0qlbT3EUayJHkyuOE2qv3+g QqMGwmNxLQVuz8ZGzzDPJ32kdAiyGTdKzpP5o6QvFQ+ArDuIE3+riIeIQuQTjyzM PyyGrkRQtqzlzoRO+vNofM6Y2u49PlJYUk+EDSnPV4YmuwXh8gF312ct2tGXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUL+2fRnTXLxBZW/kMrzXZwMWeFiQwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzMzJlMzEzMTM0MmUzNjMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA XXI9MA0GCSqGSIb3DQEBCwUAA4IBAQAAQcEcQc/5qvEQGorT1BeyumhNYDgNRrMl Y4cEhI0hj6nRrdZnb+cxx7PYuy/4jc6T1kqceg/T3z0NJhaMmuqR1SUb/nRExqfn c4gKsxAA3HzNgRIfA41dAZHCfdK/ao1GtCBoi1+CEmxszo7rh9NraTnhPwFLiACl gYHh17aTulmkoPLSv9qTlThZXOUuoTYRjo4eAfWRfBa5yGTKA03+K1YjYhuHXVSN uVfpC5BWPD1uDYEcjJmvkd8AbFvXcK5Y7az0awwmZEFQyF9YHLhCzhSlJkiXuRyK bXUAeCGhnVtEN9GEEe/IcF8ST3vhxB70pN8zWKxKjhBcIqDzYkvW -----END CERTIFICATE-----Generated at Mon Jan 19 14:23:11 2026 by rpki-client