This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33322e302f32342d3234203d3e20323039333336.roa File: 3231322e37342e33322e302f32342d3234203d3e20323039333336.roa (raw, json) Hash identifier: FH6FqDXFQ/WAQOta0zaRvwGtWt4jNqdlI61tpxRU34g= Subject key identifier: E7:96:1D:AD:07:3E:E9:6A:6E:8A:E1:36:C2:97:5F:A0:9C:7F:40:1A Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 79141CB96E8BBD6A74C4F9F47CA002EC06F3770D Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33322e302f32342d3234203d3e20323039333336.roa Signing time: Wed 12 Nov 2025 15:03:59 +0000 ROA not before: Wed 12 Nov 2025 14:58:59 +0000 ROA not after: Wed 11 Nov 2026 15:03:59 +0000 asID: 209336 IP address blocks: 212.74.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:14:1c:b9:6e:8b:bd:6a:74:c4:f9:f4:7c:a0:02:ec:06:f3:77:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 12 14:58:59 2025 GMT Not After : Nov 11 15:03:59 2026 GMT Subject: CN=E7961DAD073EE96A6E8AE136C2975FA09C7F401A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4c:08:e7:66:f9:be:22:cf:c0:6b:e4:10:35: 11:08:e5:7d:b0:cc:8c:8e:6b:49:b1:8b:67:db:3a: 3e:9f:84:4a:01:78:20:3b:9b:b0:1c:9b:c6:39:38: db:25:66:31:c8:3b:05:63:ab:1f:29:7b:40:36:7f: 71:8d:f6:7f:5a:c9:10:50:68:be:4a:68:c2:cc:a7: d7:db:b8:0d:9c:d7:0f:0e:f1:95:c3:b6:b9:94:59: 7a:e3:ea:f9:d6:c1:ad:2b:04:b1:8e:8d:36:16:8e: 35:27:a3:0f:0a:cb:bc:21:0b:a3:e6:af:16:91:0a: 56:42:76:ae:c8:79:dc:05:d5:85:31:75:92:d6:bb: 77:2c:21:0d:de:3e:d2:6f:5d:2f:b9:48:37:51:63: 9b:d7:a4:86:0f:a0:10:42:89:e2:43:89:48:92:7d: 7f:c4:4e:ab:fa:36:60:85:6e:d8:ba:71:78:16:64: 31:cd:02:67:c0:00:c6:90:28:20:9c:7a:30:21:d8: 8b:83:15:f9:69:bd:68:d0:83:71:7a:5a:2d:e8:e8: 44:3c:bb:e2:df:07:68:fc:8f:e3:a9:3f:aa:1a:ab: 68:03:85:b6:16:f8:2e:bb:94:3f:c9:c8:4d:06:9e: f8:61:c0:cd:d3:21:26:f5:1d:68:62:fa:b6:a0:52: 54:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:96:1D:AD:07:3E:E9:6A:6E:8A:E1:36:C2:97:5F:A0:9C:7F:40:1A X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33322e302f32342d3234203d3e20323039333336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.32.0/24 Signature Algorithm: sha256WithRSAEncryption c4:e5:2d:d8:17:82:f8:96:85:ab:57:a5:fd:f7:b5:44:4d:51: aa:5a:f9:4a:8d:ef:a0:94:97:fd:c1:8f:e8:28:39:23:20:c3: 63:27:40:38:d9:77:77:63:90:07:fd:95:43:28:d4:40:31:c8: 02:7b:21:0d:b6:74:e3:b9:1f:26:1f:84:88:ca:13:0a:b0:66: 45:8d:0a:81:fa:a5:8d:80:93:fa:e3:b3:da:d0:1a:e1:97:d4: 39:0e:e8:90:19:22:fe:02:19:e5:2e:25:11:70:15:1f:30:21: af:35:99:39:e8:5c:ff:10:61:9d:f4:70:7d:88:31:0d:71:04: f2:b7:86:47:3b:5a:d4:9e:b9:7a:9e:d2:df:04:a3:5f:50:e6: 36:4d:80:bd:10:70:4e:a6:20:4c:d8:78:f9:88:d6:1d:09:fc: ed:86:28:5d:02:39:45:75:04:7a:8e:1c:c1:3a:a3:64:03:0b: 17:7a:a9:94:bb:02:62:92:8d:b0:37:f0:8f:6b:61:37:61:e6: ec:f0:b3:76:59:a1:1e:df:9f:21:80:f9:e4:88:8d:dd:fc:45: ee:d7:44:94:3b:68:e3:37:bf:fa:43:07:28:79:0b:71:86:15: 2a:d7:b7:70:12:91:6b:26:38:39:2c:c8:e6:f7:4c:01:d1:8b: 62:95:4e:b5 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUeRQcuW6LvWp0xPn0fKAC7Abzdw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTIxNDU4NTlaFw0yNjExMTExNTAzNTlaMDMxMTAvBgNV BAMTKEU3OTYxREFEMDczRUU5NkE2RThBRTEzNkMyOTc1RkEwOUM3RjQwMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVTAjnZvm+Is/Aa+QQNREI5X2w zIyOa0mxi2fbOj6fhEoBeCA7m7Acm8Y5ONslZjHIOwVjqx8pe0A2f3GN9n9ayRBQ aL5KaMLMp9fbuA2c1w8O8ZXDtrmUWXrj6vnWwa0rBLGOjTYWjjUnow8Ky7whC6Pm rxaRClZCdq7IedwF1YUxdZLWu3csIQ3ePtJvXS+5SDdRY5vXpIYPoBBCieJDiUiS fX/ETqv6NmCFbti6cXgWZDHNAmfAAMaQKCCcejAh2IuDFflpvWjQg3F6Wi3o6EQ8 u+LfB2j8j+OpP6oaq2gDhbYW+C67lD/JyE0GnvhhwM3TISb1HWhi+ragUlQFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU55YdrQc+6WpuiuE2wpdfoJx/QBowHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzMzMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM5MzMzMzM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 1EogMA0GCSqGSIb3DQEBCwUAA4IBAQDE5S3YF4L4loWrV6X997VETVGqWvlKje+g lJf9wY/oKDkjIMNjJ0A42Xd3Y5AH/ZVDKNRAMcgCeyENtnTjuR8mH4SIyhMKsGZF jQqB+qWNgJP647Pa0Brhl9Q5DuiQGSL+AhnlLiURcBUfMCGvNZk56Fz/EGGd9HB9 iDENcQTyt4ZHO1rUnrl6ntLfBKNfUOY2TYC9EHBOpiBM2Hj5iNYdCfzthihdAjlF dQR6jhzBOqNkAwsXeqmUuwJiko2wN/CPa2E3Yebs8LN2WaEe358hgPnkiI3d/EXu 10SUO2jjN7/6QwcoeQtxhhUq17dwEpFrJjg5LMjm90wB0YtilU61 -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:48 2025 by rpki-client