This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33342e302f32342d3234203d3e20323035383836.roa File: 3231322e37342e33342e302f32342d3234203d3e20323035383836.roa (raw, json) Hash identifier: zdBl2MreUW7PfA24XlLpiDTC6G+xxiUpvRgXqSV13PE= Subject key identifier: EA:78:01:00:FF:B4:69:9F:67:C2:BB:27:22:76:62:74:54:65:0A:C2 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 7397242E0B9ED2B2F6E4E21008FEDD5ABD8F2529 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33342e302f32342d3234203d3e20323035383836.roa Signing time: Thu 13 Nov 2025 07:12:38 +0000 ROA not before: Thu 13 Nov 2025 07:07:38 +0000 ROA not after: Thu 12 Nov 2026 07:12:38 +0000 asID: 205886 IP address blocks: 212.74.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:97:24:2e:0b:9e:d2:b2:f6:e4:e2:10:08:fe:dd:5a:bd:8f:25:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 13 07:07:38 2025 GMT Not After : Nov 12 07:12:38 2026 GMT Subject: CN=EA780100FFB4699F67C2BB272276627454650AC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ee:1d:03:0f:8a:0c:57:f3:3a:0a:64:1b:72: 22:79:93:61:bd:5f:35:e0:a0:76:cf:ea:2d:b5:52: 29:72:93:83:76:39:4f:67:88:7c:bf:7e:8e:10:65: 1a:b5:d8:b6:9f:b2:21:d5:22:16:3b:46:78:d1:08: 53:53:28:45:dc:f7:e3:55:9e:3e:20:66:19:cd:1c: a2:a2:18:b3:a6:8a:ed:7b:0f:ca:cf:4b:e6:51:a0: 0f:63:d6:61:28:e8:62:cd:29:17:d2:50:7c:79:5b: 80:05:14:00:78:77:41:32:ad:b2:47:04:6e:00:30: 8d:1d:15:af:df:51:b7:63:9e:cc:73:d2:4a:f0:15: 8a:6c:ae:56:1c:73:da:5c:cd:ce:b3:ee:0e:88:ed: 6b:5d:2d:64:22:51:19:20:6c:27:a9:ea:c8:65:d2: 8e:1c:ad:ad:ec:12:62:71:3a:96:8f:7a:60:bb:6d: b6:37:0f:f6:9f:6a:a4:75:df:57:e0:ce:e2:87:e1: 6d:44:88:05:1d:2d:f6:37:30:8e:05:13:27:88:5f: 3d:56:16:de:65:27:12:a7:e0:95:54:ff:35:2d:c4: 60:9b:5b:dd:73:6b:0e:3a:74:eb:1a:db:5a:8a:d6: 38:b9:4b:c6:4e:40:56:5e:33:52:e1:35:fa:79:26: 91:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:78:01:00:FF:B4:69:9F:67:C2:BB:27:22:76:62:74:54:65:0A:C2 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33342e302f32342d3234203d3e20323035383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.34.0/24 Signature Algorithm: sha256WithRSAEncryption c3:3e:6c:40:5d:2d:ad:0c:05:6e:00:a5:66:65:03:09:9c:0a: 77:2e:09:eb:b5:56:88:78:94:2c:eb:89:29:e4:c5:23:d5:a0: 13:ed:9f:d2:38:71:a9:a0:0c:48:5b:1d:a5:41:47:99:7c:9a: dd:ed:5e:d5:00:ca:48:15:cd:d8:49:0d:0d:69:bd:82:4e:87: 09:e0:65:6e:49:c4:e4:cc:c8:e9:51:91:a4:f8:67:05:98:d3: 7e:06:76:9f:7d:b3:1f:ff:75:fa:67:16:0e:75:b8:ec:26:52: 1d:05:92:61:0a:5a:a8:d2:a9:21:1f:15:7b:a7:c3:87:be:1e: f9:f6:a8:60:da:3d:d5:e0:c3:70:f6:b5:c3:ec:60:fd:f6:a0: d2:cf:f0:81:48:da:f8:c6:62:9b:db:dc:1f:60:37:d2:e8:1b: f7:69:08:52:29:68:8b:5c:a0:f7:f6:3e:56:28:73:5d:c8:36: 9e:77:03:c6:7f:da:64:ac:98:e1:1a:12:fc:06:f0:4d:48:a6: 50:60:68:68:f3:60:00:00:02:40:4e:99:41:21:17:78:c9:55: ba:ed:ec:46:41:79:03:67:c4:37:63:0b:0e:6d:62:d8:fa:ca: 6a:7d:72:ab:28:46:4f:4f:b4:26:d3:5f:87:b9:26:2c:90:3f: 78:1e:f4:fe -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUc5ckLgue0rL25OIQCP7dWr2PJSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTMwNzA3MzhaFw0yNjExMTIwNzEyMzhaMDMxMTAvBgNV BAMTKEVBNzgwMTAwRkZCNDY5OUY2N0MyQkIyNzIyNzY2Mjc0NTQ2NTBBQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO7h0DD4oMV/M6CmQbciJ5k2G9 XzXgoHbP6i21Uilyk4N2OU9niHy/fo4QZRq12LafsiHVIhY7RnjRCFNTKEXc9+NV nj4gZhnNHKKiGLOmiu17D8rPS+ZRoA9j1mEo6GLNKRfSUHx5W4AFFAB4d0EyrbJH BG4AMI0dFa/fUbdjnsxz0krwFYpsrlYcc9pczc6z7g6I7WtdLWQiURkgbCep6shl 0o4cra3sEmJxOpaPemC7bbY3D/afaqR131fgzuKH4W1EiAUdLfY3MI4FEyeIXz1W Ft5lJxKn4JVU/zUtxGCbW91zaw46dOsa21qK1ji5S8ZOQFZeM1LhNfp5JpFXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU6ngBAP+0aZ9nwrsnInZidFRlCsIwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzMzM0 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM1MzgzODM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 1EoiMA0GCSqGSIb3DQEBCwUAA4IBAQDDPmxAXS2tDAVuAKVmZQMJnAp3LgnrtVaI eJQs64kp5MUj1aAT7Z/SOHGpoAxIWx2lQUeZfJrd7V7VAMpIFc3YSQ0Nab2CTocJ 4GVuScTkzMjpUZGk+GcFmNN+BnaffbMf/3X6ZxYOdbjsJlIdBZJhClqo0qkhHxV7 p8OHvh759qhg2j3V4MNw9rXD7GD99qDSz/CBSNr4xmKb29wfYDfS6Bv3aQhSKWiL XKD39j5WKHNdyDaedwPGf9pkrJjhGhL8BvBNSKZQYGho82AAAAJATplBIRd4yVW6 7exGQXkDZ8Q3YwsObWLY+spqfXKrKEZPT7Qm01+HuSYskD94HvT+ -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:48 2025 by rpki-client