This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3231382e312e302f32342d3234203d3e20323134313535.roa File: 39312e3231382e312e302f32342d3234203d3e20323134313535.roa (raw, json) Hash identifier: eRYEO70iO3CCdDEUzWyzb2wMTABsOnijMgLiCsFvVzI= Subject key identifier: DA:14:30:48:84:48:36:78:31:03:2C:B3:E9:AE:90:83:49:B8:67:48 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 452958095C8F94050033399F0F164CE17ED894B8 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3231382e312e302f32342d3234203d3e20323134313535.roa Signing time: Mon 15 Dec 2025 14:50:17 +0000 ROA not before: Mon 15 Dec 2025 14:45:17 +0000 ROA not after: Mon 14 Dec 2026 14:50:17 +0000 asID: 214155 IP address blocks: 91.218.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:29:58:09:5c:8f:94:05:00:33:39:9f:0f:16:4c:e1:7e:d8:94:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 15 14:45:17 2025 GMT Not After : Dec 14 14:50:17 2026 GMT Subject: CN=DA1430488448367831032CB3E9AE908349B86748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:77:8b:8a:0e:e6:40:1c:28:29:a6:f8:eb:a7: 86:d7:c2:be:56:a2:d4:5c:05:32:d4:5b:d2:8e:7b: e3:07:b3:fc:29:3f:9b:d6:ed:25:de:a2:8b:84:91: 43:e0:fc:91:ad:be:2c:5e:65:c3:7c:1e:ce:95:c3: fd:74:78:f2:4c:66:9d:b8:8d:5f:30:4a:1e:f0:18: f7:8b:f3:20:eb:9d:06:d1:54:03:c6:05:49:4d:1f: 95:61:cd:38:44:ea:95:f3:07:63:73:b6:00:cd:c1: e2:38:c0:39:e0:41:75:c3:a2:b2:60:8a:24:f3:95: d5:7f:0d:44:12:62:26:37:98:8c:0f:7d:fb:01:17: 90:34:b2:df:fa:f1:4d:da:c8:98:1c:6f:f6:ea:1a: af:c5:4d:0f:18:cd:89:ee:e2:73:ff:66:d2:40:97: 84:e1:ea:6d:f2:44:c9:86:97:2c:c1:8d:96:04:da: 8b:4a:69:2b:d9:c5:43:48:76:75:d4:a0:21:f6:e6: ea:44:36:28:04:9a:a1:6b:a1:09:52:b0:5f:40:68: d6:da:ae:fd:53:df:33:57:96:c7:71:88:60:f7:11: 10:96:a4:16:18:9d:d9:4a:b4:76:fe:aa:ba:ca:c7: 3e:4e:ad:4a:77:de:2d:28:cd:f0:42:07:f3:c5:44: 75:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:14:30:48:84:48:36:78:31:03:2C:B3:E9:AE:90:83:49:B8:67:48 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3231382e312e302f32342d3234203d3e20323134313535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.218.1.0/24 Signature Algorithm: sha256WithRSAEncryption 07:91:f2:49:6e:76:c1:67:61:49:0c:e2:07:78:9d:9b:b4:24: 23:24:49:c2:d9:12:e7:dc:e4:54:4b:0f:c6:f0:fd:4a:ea:76: 31:99:18:0b:c9:cc:48:88:eb:bb:82:19:5b:c9:bd:86:f5:54: b6:1a:a9:2e:0e:17:21:bb:28:27:68:3b:41:e1:24:84:82:43: 25:29:38:12:b4:f5:ef:aa:bb:3f:89:81:34:1b:a2:0a:41:03: f9:48:a3:46:9c:b6:2e:3a:60:1a:5f:24:b9:83:0d:7f:b7:45: 71:50:38:51:c0:28:83:a2:bf:dd:27:f9:dd:c4:5c:53:79:c7: 94:40:c5:f7:1b:69:da:78:b3:70:a6:f3:0e:a7:0a:c7:26:e2: 77:dd:49:d2:fc:c0:3c:7f:c0:6f:da:bc:e6:df:2e:e6:d2:d1: 6a:32:a8:aa:b7:79:28:a4:67:6d:74:da:a1:41:e6:54:a6:55: 34:e0:a7:76:ea:09:29:bd:bf:7e:5e:e6:86:30:ba:d5:8d:4d: 92:83:e8:03:d3:df:82:81:8c:02:f8:89:7c:e7:79:46:e0:d5: 5f:20:1c:f3:ec:86:54:ef:9d:49:a5:90:3d:a6:b3:58:b1:44: 29:7f:52:17:2f:de:fb:31:7c:6d:87:21:7c:2c:22:f3:09:1f: 33:b5:35:7a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIURSlYCVyPlAUAMzmfDxZM4X7YlLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMTUxNDQ1MTdaFw0yNjEyMTQxNDUwMTdaMDMxMTAvBgNV BAMTKERBMTQzMDQ4ODQ0ODM2NzgzMTAzMkNCM0U5QUU5MDgzNDlCODY3NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9d4uKDuZAHCgppvjrp4bXwr5W otRcBTLUW9KOe+MHs/wpP5vW7SXeoouEkUPg/JGtvixeZcN8Hs6Vw/10ePJMZp24 jV8wSh7wGPeL8yDrnQbRVAPGBUlNH5VhzThE6pXzB2NztgDNweI4wDngQXXDorJg iiTzldV/DUQSYiY3mIwPffsBF5A0st/68U3ayJgcb/bqGq/FTQ8YzYnu4nP/ZtJA l4Th6m3yRMmGlyzBjZYE2otKaSvZxUNIdnXUoCH25upENigEmqFroQlSsF9AaNba rv1T3zNXlsdxiGD3ERCWpBYYndlKtHb+qrrKxz5OrUp33i0ozfBCB/PFRHV5AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU2hQwSIRINngxAyyz6a6Qg0m4Z0gwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzMTJlMzIzMTM4MmUzMTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDMxMzUzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFva ATANBgkqhkiG9w0BAQsFAAOCAQEAB5HySW52wWdhSQziB3idm7QkIyRJwtkS59zk VEsPxvD9Sup2MZkYC8nMSIjru4IZW8m9hvVUthqpLg4XIbsoJ2g7QeEkhIJDJSk4 ErT176q7P4mBNBuiCkED+UijRpy2LjpgGl8kuYMNf7dFcVA4UcAog6K/3Sf53cRc U3nHlEDF9xtp2nizcKbzDqcKxybid91J0vzAPH/Ab9q85t8u5tLRajKoqrd5KKRn bXTaoUHmVKZVNOCnduoJKb2/fl7mhjC61Y1NkoPoA9PfgoGMAviJfOd5RuDVXyAc 8+yGVO+dSaWQPaazWLFEKX9SFy/e+zF8bYchfCwi8wkfM7U1eg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:35:13 2025 by rpki-client