This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33362e302f32332d3234203d3e2034373636.roa File: 3231322e37342e33362e302f32332d3234203d3e2034373636.roa (raw, json) Hash identifier: +qRI5JDodbfFjoj/U6c37sePKQA9L/nQjiMHpoPan0k= Subject key identifier: 99:A3:EE:CA:53:EE:2C:15:22:42:C1:67:59:21:8E:E6:82:F0:A9:64 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: CFAC202D22C38F6A89F75BC9D2000A4F34760E Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33362e302f32332d3234203d3e2034373636.roa Signing time: Wed 19 Nov 2025 09:13:50 +0000 ROA not before: Wed 19 Nov 2025 09:08:50 +0000 ROA not after: Wed 18 Nov 2026 09:13:50 +0000 asID: 4766 IP address blocks: 212.74.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: cf:ac:20:2d:22:c3:8f:6a:89:f7:5b:c9:d2:00:0a:4f:34:76:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 19 09:08:50 2025 GMT Not After : Nov 18 09:13:50 2026 GMT Subject: CN=99A3EECA53EE2C152242C16759218EE682F0A964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ae:a6:d9:65:c2:24:24:9c:04:07:e9:f0:55: a0:5a:6c:e7:30:7b:24:fa:1a:76:f7:ee:8b:4c:9b: 22:57:a1:4b:e2:51:b8:06:b2:8a:74:16:3d:32:a2: 21:19:99:57:82:e0:7b:ae:ee:af:f3:73:07:57:9a: 48:e2:33:a5:35:ea:a9:de:7f:39:79:00:a7:88:0e: 6f:55:5d:7e:e8:ff:d7:0f:f7:c1:c9:29:49:d8:0e: 55:40:6b:c9:78:d3:dd:6b:52:0c:ec:2b:cc:16:e4: 82:7a:34:1d:71:bc:f7:09:34:47:a4:21:89:8e:dd: 37:a7:59:81:b8:68:9c:40:02:16:f4:f2:b3:b8:42: e7:61:15:75:32:22:c8:e5:95:c5:5a:1a:6a:75:17: 86:a6:72:33:2d:4f:fc:71:a8:e6:c4:13:15:3c:b0: a7:cd:0d:fd:e8:fc:39:d6:3f:bb:ef:2b:7a:52:02: a8:b5:a6:7e:b9:c8:84:47:c8:6e:35:27:4f:9e:e9: 71:30:17:3b:2f:3b:77:5d:62:33:e5:6d:04:2e:d0: 40:4f:d8:9e:b3:23:15:ab:2a:c9:9e:1c:54:e1:ca: d4:10:4b:23:1d:2b:3d:36:9a:41:65:10:26:4f:95: 20:ee:e5:e4:e8:c3:8d:cd:25:8a:5d:51:22:17:64: 33:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A3:EE:CA:53:EE:2C:15:22:42:C1:67:59:21:8E:E6:82:F0:A9:64 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33362e302f32332d3234203d3e2034373636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.36.0/23 Signature Algorithm: sha256WithRSAEncryption aa:59:c2:c3:cf:bd:ac:a1:86:de:f1:31:e1:35:61:a4:04:95: 6c:f6:a4:70:3f:15:92:d8:50:ab:11:f8:30:8b:a6:19:d1:2a: 93:ad:62:0e:16:c2:ca:6c:f5:a5:ec:eb:e6:57:e7:46:e7:e5: 0a:67:e1:c6:e4:8f:31:5b:97:31:8f:b2:e9:1d:05:57:4c:01: 8d:9d:60:b0:a2:1f:55:0b:28:72:ac:d8:a7:a8:ea:58:54:19: 98:7f:04:cd:18:bb:15:75:07:4a:8f:ca:0c:e7:95:90:f6:d0: 3b:86:00:3e:ff:4c:db:99:f4:99:27:ee:d9:24:4e:7d:88:e6: cb:e4:0b:9d:8b:cb:f7:c4:60:6b:aa:e6:65:30:1a:fa:20:8f: 52:81:3a:db:9a:19:81:c5:ee:7a:41:9e:bc:42:da:ba:a7:e7: 1a:79:f8:f0:de:22:69:63:1f:ef:9d:92:78:a8:e3:1c:e3:bb: 7b:a4:68:e4:a3:96:1e:08:45:c4:90:35:5e:2c:b8:cf:85:92: b8:a6:da:68:3a:14:02:23:6f:0e:f2:b4:28:4d:8d:0a:dc:90: 16:b1:90:ee:ce:3f:54:11:44:6c:ca:6d:49:59:bb:3a:ed:34: 56:eb:de:02:7e:cd:6d:93:95:ae:90:a3:12:ea:87:7e:67:d9: 62:24:4e:85 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUAM+sIC0iw49qifdbydIACk80dg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTkwOTA4NTBaFw0yNjExMTgwOTEzNTBaMDMxMTAvBgNV BAMTKDk5QTNFRUNBNTNFRTJDMTUyMjQyQzE2NzU5MjE4RUU2ODJGMEE5NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmrqbZZcIkJJwEB+nwVaBabOcw eyT6Gnb37otMmyJXoUviUbgGsop0Fj0yoiEZmVeC4Huu7q/zcwdXmkjiM6U16qne fzl5AKeIDm9VXX7o/9cP98HJKUnYDlVAa8l4091rUgzsK8wW5IJ6NB1xvPcJNEek IYmO3TenWYG4aJxAAhb08rO4QudhFXUyIsjllcVaGmp1F4amcjMtT/xxqObEExU8 sKfNDf3o/DnWP7vvK3pSAqi1pn65yIRHyG41J0+e6XEwFzsvO3ddYjPlbQQu0EBP 2J6zIxWrKsmeHFThytQQSyMdKz02mkFlECZPlSDu5eTow43NJYpdUSIXZDPvAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUmaPuylPuLBUiQsFnWSGO5oLwqWQwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzMzM2 MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzQzNzM2MzYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHUSiQw DQYJKoZIhvcNAQELBQADggEBAKpZwsPPvayhht7xMeE1YaQElWz2pHA/FZLYUKsR +DCLphnRKpOtYg4Wwsps9aXs6+ZX50bn5Qpn4cbkjzFblzGPsukdBVdMAY2dYLCi H1ULKHKs2Keo6lhUGZh/BM0YuxV1B0qPygznlZD20DuGAD7/TNuZ9Jkn7tkkTn2I 5svkC52Ly/fEYGuq5mUwGvogj1KBOtuaGYHF7npBnrxC2rqn5xp5+PDeImljH++d knio4xzju3ukaOSjlh4IRcSQNV4suM+Fkrim2mg6FAIjbw7ytChNjQrckBaxkO7O P1QRRGzKbUlZuzrtNFbr3gJ+zW2Tla6QoxLqh35n2WIkToU= -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:41 2025 by rpki-client