This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e34302e3230342e302f32322d3234203d3e2035363530.roa File: 3136392e34302e3230342e302f32322d3234203d3e2035363530.roa (raw, json) Hash identifier: lv+D0gKFKezB6tKPNuWzAenAkwsHLFJ8ghMea8b4Bic= Subject key identifier: 60:A9:5E:29:99:7A:CC:50:47:D8:1E:81:D2:7B:68:57:8A:1E:0C:F2 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 4DC814AEC3074F2546640F494C08CEFE07D156F0 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e34302e3230342e302f32322d3234203d3e2035363530.roa Signing time: Fri 19 Dec 2025 21:26:33 +0000 ROA not before: Fri 19 Dec 2025 21:21:33 +0000 ROA not after: Fri 18 Dec 2026 21:26:33 +0000 asID: 5650 IP address blocks: 169.40.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c8:14:ae:c3:07:4f:25:46:64:0f:49:4c:08:ce:fe:07:d1:56:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 19 21:21:33 2025 GMT Not After : Dec 18 21:26:33 2026 GMT Subject: CN=60A95E29997ACC5047D81E81D27B68578A1E0CF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:df:0f:3d:34:ed:04:c9:f5:15:6a:b8:29:31: 27:48:4a:1e:bf:aa:c4:42:16:b4:ac:67:83:df:7c: 41:dc:73:85:2d:52:51:85:d1:c8:8e:39:8a:15:1e: 6a:b4:56:fa:bd:17:da:47:bc:36:9e:4f:82:56:52: bf:60:09:be:97:9e:ad:17:99:77:1e:85:8c:fb:dc: 78:47:33:e5:06:78:ea:e2:d5:e9:52:d5:d8:34:0f: e6:a9:3f:eb:d4:2f:90:60:6e:01:b0:10:ea:e7:0d: 5d:e2:09:f9:c0:9f:21:d8:c1:fa:80:27:a4:29:ae: cd:67:e6:56:d3:42:40:6f:33:2a:7c:23:5e:01:3c: c9:89:60:3a:bc:fc:cd:9c:a0:96:d1:5b:d0:5b:b0: 8a:22:eb:21:4e:39:33:a7:6e:d5:cc:7f:8e:2a:b4: 14:03:e5:5d:79:d1:2a:5c:2a:6f:7a:3d:42:77:28: 03:03:54:db:80:10:8f:bd:9c:5e:ee:39:7d:38:89: c2:d6:2b:e3:ac:1b:76:60:3f:59:80:a5:86:b3:1d: 37:12:8c:a0:86:4e:c6:e1:e2:d2:8f:be:70:b9:af: 7a:25:d5:4b:f3:30:2e:bc:c6:bc:7f:40:49:2f:06: 36:2f:16:71:a6:cb:92:e3:73:04:49:1a:c3:ab:ff: 3e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A9:5E:29:99:7A:CC:50:47:D8:1E:81:D2:7B:68:57:8A:1E:0C:F2 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e34302e3230342e302f32322d3234203d3e2035363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.204.0/22 Signature Algorithm: sha256WithRSAEncryption 61:1d:44:7c:2c:29:05:f8:0e:6c:66:ac:2d:91:1e:87:2d:a2: 87:62:81:5b:c0:72:11:f3:08:95:42:88:b8:31:96:fb:01:38: 5a:d1:1b:7d:00:00:64:6f:e6:68:58:11:09:34:c9:08:71:0d: d6:18:2d:c8:9a:ca:c6:0c:f7:d7:c9:9f:25:d9:37:e2:38:e3: 33:26:0f:c4:78:84:09:68:9b:1c:c6:08:f8:1e:de:a7:1e:58: da:57:cc:45:49:fd:8a:4d:be:90:d9:a8:38:ff:4d:c0:09:2e: 58:5e:6d:b6:0c:13:17:3f:ae:a7:98:af:25:49:d2:81:c1:27: df:30:e6:77:f1:76:ec:36:ae:84:12:58:69:0c:9c:c4:8d:07: 3c:ee:c5:51:28:b7:9d:10:d7:0c:92:9a:d7:3a:63:37:15:13: 8a:c9:11:9c:29:9c:de:3a:3c:b2:bd:11:9b:f8:72:14:69:d2: 53:9f:b8:8d:55:5c:4c:6e:2b:9c:38:b1:3c:e2:ff:3e:ce:7c: 51:8b:fd:c0:8d:b5:38:32:e4:14:c2:8b:d5:be:3b:42:5c:9f: 3f:40:00:bf:e1:7f:e1:a4:5b:8d:fa:6b:c1:3a:c1:ce:6b:0a: 2c:51:4f:95:6e:64:82:5f:96:33:15:1b:4e:ea:30:f0:e3:d7: fe:30:d4:24 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUTcgUrsMHTyVGZA9JTAjO/gfRVvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMTkyMTIxMzNaFw0yNjEyMTgyMTI2MzNaMDMxMTAvBgNV BAMTKDYwQTk1RTI5OTk3QUNDNTA0N0Q4MUU4MUQyN0I2ODU3OEExRTBDRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo3w89NO0EyfUVargpMSdISh6/ qsRCFrSsZ4PffEHcc4UtUlGF0ciOOYoVHmq0Vvq9F9pHvDaeT4JWUr9gCb6Xnq0X mXcehYz73HhHM+UGeOri1elS1dg0D+apP+vUL5BgbgGwEOrnDV3iCfnAnyHYwfqA J6Qprs1n5lbTQkBvMyp8I14BPMmJYDq8/M2coJbRW9BbsIoi6yFOOTOnbtXMf44q tBQD5V150SpcKm96PUJ3KAMDVNuAEI+9nF7uOX04icLWK+OsG3ZgP1mApYazHTcS jKCGTsbh4tKPvnC5r3ol1UvzMC68xrx/QEkvBjYvFnGmy5LjcwRJGsOr/z6jAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUYKleKZl6zFBH2B6B0ntoV4oeDPIwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNjM5MmUzNDMwMmUzMjMw MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTM2MzUzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqko zDANBgkqhkiG9w0BAQsFAAOCAQEAYR1EfCwpBfgObGasLZEehy2ih2KBW8ByEfMI lUKIuDGW+wE4WtEbfQAAZG/maFgRCTTJCHEN1hgtyJrKxgz318mfJdk34jjjMyYP xHiECWibHMYI+B7epx5Y2lfMRUn9ik2+kNmoOP9NwAkuWF5ttgwTFz+up5ivJUnS gcEn3zDmd/F27DauhBJYaQycxI0HPO7FUSi3nRDXDJKa1zpjNxUTiskRnCmc3jo8 sr0Rm/hyFGnSU5+4jVVcTG4rnDixPOL/Ps58UYv9wI21ODLkFMKL1b47QlyfP0AA v+F/4aRbjfprwTrBzmsKLFFPlW5kgl+WMxUbTuow8OPX/jDUJA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:32:55 2025 by rpki-client