This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33352e302f32342d3234203d3e20323035383836.roa File: 3231322e37342e33352e302f32342d3234203d3e20323035383836.roa (raw, json) Hash identifier: J4GVIkO6TSYEbQLOirEiQ148hJHkKGgqVur53LKHR+M= Subject key identifier: 40:1C:48:2B:4B:E3:89:16:B0:D0:37:41:48:3C:A6:B3:AE:E5:FA:D8 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 016FD8ADC2873708C691AB7A30AE8847CB6EBDC2 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33352e302f32342d3234203d3e20323035383836.roa Signing time: Sat 15 Nov 2025 08:43:29 +0000 ROA not before: Sat 15 Nov 2025 08:38:29 +0000 ROA not after: Sat 14 Nov 2026 08:43:29 +0000 asID: 205886 IP address blocks: 212.74.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:6f:d8:ad:c2:87:37:08:c6:91:ab:7a:30:ae:88:47:cb:6e:bd:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 15 08:38:29 2025 GMT Not After : Nov 14 08:43:29 2026 GMT Subject: CN=401C482B4BE38916B0D03741483CA6B3AEE5FAD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3a:43:a3:05:c9:fc:2d:5d:a9:46:c8:a9:81: 11:04:1b:08:af:0e:3e:04:3f:f0:a0:42:c4:28:f6: 9a:10:c2:5c:f0:81:78:c5:9c:5a:57:76:29:44:95: 57:87:14:43:57:9f:d2:de:f9:15:97:8d:0a:23:ae: e1:2e:5d:50:d9:f9:18:9d:ed:58:9e:22:66:ee:c2: 6b:78:8f:e4:b9:49:41:6b:8d:cc:0d:69:f0:9b:0c: 3d:df:54:bb:27:b5:c2:dd:99:94:91:1a:a0:5b:d5: ce:90:5b:c9:ad:ec:c4:88:db:aa:4c:ec:fe:93:00: 3f:56:42:66:e0:21:15:d3:20:c3:ed:ed:e5:47:a5: 3a:e4:76:60:12:75:4f:37:f8:1f:8f:e1:e0:8f:8e: c5:1f:5f:1b:af:2a:df:b5:0e:50:b8:11:15:76:b8: e2:b0:ff:5c:01:9e:22:c7:12:ec:cb:4d:21:7d:79: 10:fa:3e:03:90:7a:76:ff:e7:54:c2:ea:62:88:da: f3:eb:d6:1b:e0:8c:8b:04:1c:87:39:2e:5c:b3:6c: 03:cb:73:4a:5c:92:7b:11:f9:a5:35:7c:35:ef:d2: cb:39:0a:3a:9e:1b:7a:99:f7:89:48:06:57:e8:ad: 16:49:7c:54:5f:6d:61:d9:a8:cb:d1:fb:99:96:ac: f6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1C:48:2B:4B:E3:89:16:B0:D0:37:41:48:3C:A6:B3:AE:E5:FA:D8 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33352e302f32342d3234203d3e20323035383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.35.0/24 Signature Algorithm: sha256WithRSAEncryption d2:18:31:78:5d:c6:83:99:81:ef:5f:3c:db:52:5a:bf:61:08: d3:b7:8d:0a:e0:7a:c6:c6:e5:cf:ab:15:03:22:c3:91:8c:5e: 96:0e:13:22:9d:c4:bb:52:b1:38:b8:6d:54:91:a5:b1:32:3c: 7c:ea:ce:ea:01:ea:92:24:0d:93:ef:5d:62:0d:6e:4e:e6:31: b6:15:69:02:b3:c6:52:ef:17:0d:26:d4:0e:48:96:9d:42:b6: 87:19:5d:05:61:7d:1c:0f:4d:35:93:82:82:09:67:ee:ec:f3: 50:21:ba:82:e1:f5:32:34:dd:a4:28:a9:c7:85:2d:eb:ba:ef: 05:c3:eb:a2:48:ed:39:4d:87:c9:36:5a:fe:53:8f:25:1a:20: 6c:f2:c6:f2:8b:27:fd:81:81:2f:b8:f4:cb:a6:54:61:56:c0: 43:7c:31:16:41:4d:64:0e:5e:d9:f1:0a:9f:15:8a:26:ed:99: c2:af:6d:4e:7b:62:6e:18:1a:c3:f9:9d:ce:71:ef:98:40:3a: 47:f0:c2:01:41:8d:2d:04:ff:c5:29:a4:22:d5:5e:ba:b5:31: 64:93:99:b1:a7:59:f1:76:8d:83:76:9f:78:e1:4f:5f:1a:f8: 37:70:bd:05:ee:c7:62:a3:39:43:7a:fa:4d:bf:07:a7:17:cc: 94:de:46:c1 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUAW/YrcKHNwjGkat6MK6IR8tuvcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTUwODM4MjlaFw0yNjExMTQwODQzMjlaMDMxMTAvBgNV BAMTKDQwMUM0ODJCNEJFMzg5MTZCMEQwMzc0MTQ4M0NBNkIzQUVFNUZBRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVOkOjBcn8LV2pRsipgREEGwiv Dj4EP/CgQsQo9poQwlzwgXjFnFpXdilElVeHFENXn9Le+RWXjQojruEuXVDZ+Rid 7VieImbuwmt4j+S5SUFrjcwNafCbDD3fVLsntcLdmZSRGqBb1c6QW8mt7MSI26pM 7P6TAD9WQmbgIRXTIMPt7eVHpTrkdmASdU83+B+P4eCPjsUfXxuvKt+1DlC4ERV2 uOKw/1wBniLHEuzLTSF9eRD6PgOQenb/51TC6mKI2vPr1hvgjIsEHIc5LlyzbAPL c0pcknsR+aU1fDXv0ss5CjqeG3qZ94lIBlforRZJfFRfbWHZqMvR+5mWrPaVAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUQBxIK0vjiRaw0DdBSDyms67l+tgwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzMzM1 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM1MzgzODM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 1EojMA0GCSqGSIb3DQEBCwUAA4IBAQDSGDF4XcaDmYHvXzzbUlq/YQjTt40K4HrG xuXPqxUDIsORjF6WDhMincS7UrE4uG1UkaWxMjx86s7qAeqSJA2T711iDW5O5jG2 FWkCs8ZS7xcNJtQOSJadQraHGV0FYX0cD001k4KCCWfu7PNQIbqC4fUyNN2kKKnH hS3ruu8Fw+uiSO05TYfJNlr+U48lGiBs8sbyiyf9gYEvuPTLplRhVsBDfDEWQU1k Dl7Z8QqfFYom7ZnCr21Oe2JuGBrD+Z3Oce+YQDpH8MIBQY0tBP/FKaQi1V66tTFk k5mxp1nxdo2Ddp944U9fGvg3cL0F7sdiozlDevpNvwenF8yU3kbB -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:47 2025 by rpki-client