This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3139392e39362e302f32302d3332203d3e203531313637.roa File: 3130392e3139392e39362e302f32302d3332203d3e203531313637.roa (raw, json) Hash identifier: /273vq5TEY+CdwzLBphKBfKP8NxLrXkZlxTFdKTY+eA= Subject key identifier: 8D:CC:B4:16:5C:69:80:AE:3F:A3:B6:14:79:C1:30:46:1C:51:3C:49 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 6632848C16688BA50997CBF9F0B9A059ECCA45CA Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3139392e39362e302f32302d3332203d3e203531313637.roa Signing time: Wed 17 Dec 2025 12:50:18 +0000 ROA not before: Wed 17 Dec 2025 12:45:18 +0000 ROA not after: Wed 16 Dec 2026 12:50:18 +0000 asID: 51167 IP address blocks: 109.199.96.0/20 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:32:84:8c:16:68:8b:a5:09:97:cb:f9:f0:b9:a0:59:ec:ca:45:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 17 12:45:18 2025 GMT Not After : Dec 16 12:50:18 2026 GMT Subject: CN=8DCCB4165C6980AE3FA3B61479C130461C513C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:64:e0:8b:92:4c:26:9e:fc:92:d1:67:e9:90: 0b:26:35:19:0c:54:fe:8c:c2:4f:fe:7c:27:d2:40: d1:64:ec:a8:2c:6f:ad:48:37:eb:a1:16:5b:49:0a: 5c:e2:d3:c5:5a:a0:63:79:8c:34:4e:db:c5:ad:55: 80:c2:af:4e:1e:82:32:a4:f7:f8:85:ff:95:8d:f7: 9f:a7:c6:80:40:6d:f4:e4:fa:d8:a4:08:8c:3f:a5: 92:48:93:59:e7:eb:e7:1d:6b:93:c4:f9:83:25:77: 26:23:fc:01:3e:3d:fe:6a:68:6c:c5:87:71:7f:5e: b6:fb:2a:85:0d:e5:b7:a1:7d:7b:f2:81:7c:80:69: a3:bc:b7:cc:7b:fc:ab:40:c7:a3:bf:ea:6e:91:4b: 18:98:3c:b2:83:84:96:f3:d3:89:d2:b2:bf:dc:57: 8f:28:78:2e:2b:97:34:67:13:e0:63:f2:b0:61:25: b8:3c:82:42:d0:57:7c:23:fa:41:e3:f9:cc:79:e9: 0c:fe:39:ec:5f:f5:84:73:7b:26:79:ac:a9:e5:b9: 4f:86:af:34:0c:29:f5:fc:7b:4f:39:de:b8:ac:3d: a0:04:b4:ec:ef:71:1f:35:99:6f:7d:8a:cc:cb:49: 02:ae:cc:1b:93:7e:b8:ef:ac:ea:e7:64:85:78:ab: 20:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CC:B4:16:5C:69:80:AE:3F:A3:B6:14:79:C1:30:46:1C:51:3C:49 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3139392e39362e302f32302d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.199.96.0/20 Signature Algorithm: sha256WithRSAEncryption 52:72:f1:d3:13:99:69:54:18:5d:57:db:85:01:49:fa:23:20: 60:58:25:0a:2f:f0:0d:83:10:1b:9c:db:10:03:e0:56:ba:ca: c4:eb:9a:cf:4a:81:e7:71:b5:2a:70:e4:c1:e7:c7:e7:0e:f7: 7d:7b:d6:0e:d8:6f:74:d3:19:5f:4d:7a:c8:6b:93:a7:c2:cd: ad:a8:da:84:89:16:f6:f9:8b:86:24:67:e8:e1:6f:2b:34:be: f8:e0:ab:be:94:2f:bc:e8:84:5e:e6:6c:8d:c2:c7:83:f4:d1: 3b:18:88:1f:93:c0:40:94:fe:c1:89:3c:a0:87:09:af:67:02: c5:1d:f6:71:67:98:f7:2f:f8:d2:a2:bd:63:f3:12:f5:be:9c: f0:22:24:8a:a6:2c:a7:81:97:72:82:8a:c8:f9:22:5f:80:b9: ef:0e:88:77:99:76:ce:ff:7d:1a:e0:a6:36:b4:ce:d3:78:a8: 2d:f6:5a:5a:3f:7b:82:4e:af:d7:fb:5c:65:eb:96:f2:95:bb: 7e:0e:0f:b8:2f:cc:03:5d:8b:bb:4b:bc:3d:a9:99:87:f8:29: e5:cf:a1:dd:d7:f0:5d:1d:db:bf:a4:eb:62:02:6b:a2:19:32: 17:a5:b7:f8:91:5d:95:22:66:0b:6d:a2:66:f0:e7:34:76:72: cd:e9:a4:91 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUZjKEjBZoi6UJl8v58LmgWezKRcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMTcxMjQ1MThaFw0yNjEyMTYxMjUwMThaMDMxMTAvBgNV BAMTKDhEQ0NCNDE2NUM2OTgwQUUzRkEzQjYxNDc5QzEzMDQ2MUM1MTNDNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZOCLkkwmnvyS0WfpkAsmNRkM VP6Mwk/+fCfSQNFk7Kgsb61IN+uhFltJClzi08VaoGN5jDRO28WtVYDCr04egjKk 9/iF/5WN95+nxoBAbfTk+tikCIw/pZJIk1nn6+cda5PE+YMldyYj/AE+Pf5qaGzF h3F/Xrb7KoUN5behfXvygXyAaaO8t8x7/KtAx6O/6m6RSxiYPLKDhJbz04nSsr/c V48oeC4rlzRnE+Bj8rBhJbg8gkLQV3wj+kHj+cx56Qz+Oexf9YRzeyZ5rKnluU+G rzQMKfX8e0853risPaAEtOzvcR81mW99iszLSQKuzBuTfrjvrOrnZIV4qyAXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUjcy0FlxpgK4/o7YUecEwRhxRPEkwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzMDM5MmUzMTM5MzkyZTM5 MzYyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE bcdgMA0GCSqGSIb3DQEBCwUAA4IBAQBScvHTE5lpVBhdV9uFAUn6IyBgWCUKL/AN gxAbnNsQA+BWusrE65rPSoHncbUqcOTB58fnDvd9e9YO2G900xlfTXrIa5Onws2t qNqEiRb2+YuGJGfo4W8rNL744Ku+lC+86IRe5myNwseD9NE7GIgfk8BAlP7BiTyg hwmvZwLFHfZxZ5j3L/jSor1j8xL1vpzwIiSKpiyngZdygorI+SJfgLnvDoh3mXbO /30a4KY2tM7TeKgt9lpaP3uCTq/X+1xl65bylbt+Dg+4L8wDXYu7S7w9qZmH+Cnl z6Hd1/BdHdu/pOtiAmuiGTIXpbf4kV2VImYLbaJm8Oc0dnLN6aSR -----END CERTIFICATE-----Generated at Fri Dec 19 21:23:07 2025 by rpki-client