This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33342e302f32342d3234203d3e203235313938.roa File: 3231322e37342e33342e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: u+CJFixb/TfQTFiPUcv8M19i1454ALxa1B6lNbpI3Ek= Subject key identifier: B7:A5:43:27:3F:95:98:77:31:B5:F5:5D:4A:5B:4E:1C:89:DF:EA:93 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 63CC0C706C7FC5DFDB798AF0CF414A7F4AE5C45D Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33342e302f32342d3234203d3e203235313938.roa Signing time: Mon 17 Nov 2025 04:24:44 +0000 ROA not before: Mon 17 Nov 2025 04:19:44 +0000 ROA not after: Mon 16 Nov 2026 04:24:44 +0000 asID: 25198 IP address blocks: 212.74.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:cc:0c:70:6c:7f:c5:df:db:79:8a:f0:cf:41:4a:7f:4a:e5:c4:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 17 04:19:44 2025 GMT Not After : Nov 16 04:24:44 2026 GMT Subject: CN=B7A543273F95987731B5F55D4A5B4E1C89DFEA93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6e:69:2f:10:6d:65:cb:d5:04:cb:f6:7f:4c: b0:65:9c:5e:cc:37:de:be:15:1a:a3:ab:66:c9:f5: a2:03:ce:c4:04:bf:19:54:1d:1e:59:a0:4c:53:04: 82:bc:35:bf:0f:6e:ec:a2:1d:75:aa:95:9a:01:0e: b1:3b:70:32:2f:d5:37:0b:05:30:78:46:b6:1e:68: a0:52:2d:66:73:17:79:37:4c:fa:c1:ea:c0:ac:64: 72:1b:a1:6a:a3:46:5d:df:47:48:a4:04:55:13:92: 71:52:9e:09:56:40:90:8a:ca:ca:6b:7f:07:d9:a7: 73:e7:56:0b:59:e3:3f:f0:c2:2d:42:30:6e:47:2e: 49:e9:20:6e:c8:17:52:02:7a:88:d0:fd:41:de:2b: 11:37:75:60:d4:3c:db:79:aa:eb:31:32:be:07:d0: 95:6d:91:a4:29:7f:f3:d2:65:45:09:29:28:06:e9: 47:eb:ae:20:43:9b:e7:28:97:b9:3c:48:31:1f:f5: be:19:bb:3a:bf:1b:ff:6a:e2:9f:57:24:eb:8c:3a: b9:ea:3f:21:70:3b:6d:80:2d:e1:e0:00:db:07:08: 0f:47:17:7f:ac:ec:8e:ff:c4:58:92:23:7d:57:a9: 0a:d3:92:d0:94:7f:15:9e:d0:34:99:f9:5c:aa:cf: eb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A5:43:27:3F:95:98:77:31:B5:F5:5D:4A:5B:4E:1C:89:DF:EA:93 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33342e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.34.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:ae:0b:da:43:d9:07:29:ce:ad:62:33:70:21:8d:92:0a:ad: c1:8d:a0:51:fa:60:8d:c5:f1:95:50:55:4d:45:7b:5d:33:af: a5:dc:17:d4:7e:83:85:dc:b4:d2:af:88:3a:61:82:9b:03:5b: be:55:42:2e:14:b7:56:70:7e:3d:c0:e4:d7:8d:d1:33:d3:b9: 73:27:78:05:76:4d:36:26:cd:ed:7e:36:2d:2f:20:42:93:7d: 35:96:cf:be:00:b8:a9:c5:52:3c:6e:10:44:ba:2f:13:2e:a5: 1c:57:5e:3c:96:f8:b9:c1:12:2c:1b:f6:a7:b8:00:8c:2f:76: d2:c5:a1:b7:c8:61:e0:16:2c:39:ef:f9:9f:c3:77:01:ac:49: 7a:1c:71:74:c8:e2:91:80:c5:e0:3f:5d:35:da:72:10:f0:e7: a0:7e:a2:8f:6c:84:17:ad:3f:9d:9b:e6:ff:a5:8f:16:21:cd: 36:9a:d1:b6:35:7c:ff:e3:8d:9a:40:8b:48:47:cc:0a:5e:e9: 65:9b:60:34:38:a3:44:9e:d4:42:35:e6:fe:bd:f2:b6:4e:da: 7a:97:7c:e1:13:cc:df:00:18:43:36:66:b3:37:0e:ba:d5:40: 24:bc:05:29:c8:b7:cb:aa:c3:53:44:86:91:b4:e8:9b:3c:67: 8f:65:63:ed -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUY8wMcGx/xd/beYrwz0FKf0rlxF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTcwNDE5NDRaFw0yNjExMTYwNDI0NDRaMDMxMTAvBgNV BAMTKEI3QTU0MzI3M0Y5NTk4NzczMUI1RjU1RDRBNUI0RTFDODlERkVBOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5bmkvEG1ly9UEy/Z/TLBlnF7M N96+FRqjq2bJ9aIDzsQEvxlUHR5ZoExTBIK8Nb8PbuyiHXWqlZoBDrE7cDIv1TcL BTB4RrYeaKBSLWZzF3k3TPrB6sCsZHIboWqjRl3fR0ikBFUTknFSnglWQJCKyspr fwfZp3PnVgtZ4z/wwi1CMG5HLknpIG7IF1ICeojQ/UHeKxE3dWDUPNt5qusxMr4H 0JVtkaQpf/PSZUUJKSgG6UfrriBDm+col7k8SDEf9b4Zuzq/G/9q4p9XJOuMOrnq PyFwO22ALeHgANsHCA9HF3+s7I7/xFiSI31XqQrTktCUfxWe0DSZ+Vyqz+vtAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUt6VDJz+VmHcxtfVdSltOHInf6pMwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzMzM0 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNTMxMzkzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRK IjANBgkqhkiG9w0BAQsFAAOCAQEAbq4L2kPZBynOrWIzcCGNkgqtwY2gUfpgjcXx lVBVTUV7XTOvpdwX1H6Dhdy00q+IOmGCmwNbvlVCLhS3VnB+PcDk143RM9O5cyd4 BXZNNibN7X42LS8gQpN9NZbPvgC4qcVSPG4QRLovEy6lHFdePJb4ucESLBv2p7gA jC920sWht8hh4BYsOe/5n8N3AaxJehxxdMjikYDF4D9dNdpyEPDnoH6ij2yEF60/ nZvm/6WPFiHNNprRtjV8/+ONmkCLSEfMCl7pZZtgNDijRJ7UQjXm/r3ytk7aepd8 4RPM3wAYQzZmszcOutVAJLwFKci3y6rDU0SGkbTomzxnj2Vj7Q== -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:50 2025 by rpki-client