This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33382e302f32332d3234203d3e20383334.roa File: 3231322e37342e33382e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: tbG9527WbTHnWwxz9Yd2tbsmD4sMWr9sPpLCOTleDso= Subject key identifier: E4:DA:31:5C:49:D6:DF:4B:6C:5D:EE:EF:D4:47:CF:E1:79:B1:DA:C0 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 62B3E08706518401889772951D280153970A4C0D Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33382e302f32332d3234203d3e20383334.roa Signing time: Wed 19 Nov 2025 09:15:17 +0000 ROA not before: Wed 19 Nov 2025 09:10:17 +0000 ROA not after: Wed 18 Nov 2026 09:15:17 +0000 asID: 834 IP address blocks: 212.74.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b3:e0:87:06:51:84:01:88:97:72:95:1d:28:01:53:97:0a:4c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 19 09:10:17 2025 GMT Not After : Nov 18 09:15:17 2026 GMT Subject: CN=E4DA315C49D6DF4B6C5DEEEFD447CFE179B1DAC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:56:ee:18:8c:7b:68:81:ef:e8:9a:4a:b5:ab: b5:e0:06:16:ae:ff:16:e7:60:2a:fb:cb:9b:24:43: 55:dd:5a:6e:be:dd:27:5c:6a:48:91:92:69:8c:96: 93:4c:82:2f:ad:c6:b1:72:95:48:89:3f:80:44:53: b2:88:e0:c7:a3:23:a9:84:81:d0:6f:72:0a:52:65: 9e:76:86:26:33:c1:bd:f1:bc:b1:cc:3b:16:88:b2: 62:43:f5:af:d2:a4:fb:e3:10:53:34:f7:57:bc:56: 9f:5d:93:b0:97:f5:3e:e1:16:cf:5a:8b:19:79:6b: 4f:e4:6c:15:b2:ee:dd:4e:43:bc:63:df:87:fb:a2: 76:6f:5a:01:04:60:87:27:3b:42:ee:c3:10:7c:01: a1:8b:9c:c7:9c:25:cb:90:cd:aa:40:b0:47:66:1a: d0:8a:19:29:51:30:3e:bb:95:18:c5:ae:6e:08:65: 88:b7:45:06:9c:08:38:8a:64:f2:dd:5e:a1:29:b4: 8d:a3:85:54:23:07:a7:92:6b:3d:84:cf:30:7f:20: b3:bc:75:77:ae:be:6d:f0:84:8e:3f:8c:9b:ac:1a: b1:8a:42:47:58:6a:e7:94:df:a2:98:fe:be:c2:47: d6:1b:7f:6e:2e:f0:2e:24:15:2f:b4:09:1d:ce:a5: 8d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DA:31:5C:49:D6:DF:4B:6C:5D:EE:EF:D4:47:CF:E1:79:B1:DA:C0 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33382e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.38.0/23 Signature Algorithm: sha256WithRSAEncryption 97:e6:59:83:19:f3:50:82:36:54:59:b2:1c:71:e3:f3:24:12: d6:7a:a0:c1:cb:f4:14:0e:58:58:31:03:68:4f:27:f7:ee:b4: ea:74:1c:68:08:cb:aa:ec:d7:4a:d9:aa:fd:5d:d1:62:1e:ac: 55:d2:48:52:c1:fd:6e:4c:60:d8:07:6a:52:e6:04:ca:e9:85: 38:6a:df:36:cd:71:4a:3f:c3:9f:34:a2:a1:fa:fc:9f:99:5e: 3f:38:70:a0:f5:6f:49:c8:1b:42:c8:e6:4b:c7:b0:e8:d6:43: cf:db:ad:9a:80:31:bf:34:90:f3:d7:d9:9b:05:57:9f:ac:1a: 57:76:e4:41:4d:19:60:bb:8a:f1:dc:26:fb:5b:93:b6:83:80: f7:61:5a:50:90:23:81:08:1a:9c:51:af:14:2f:36:b6:c0:31: 2e:46:76:d8:56:54:3c:66:49:0c:72:de:27:9c:83:be:22:eb: 45:77:f6:81:83:f7:d4:fe:f9:4d:7d:09:a0:79:c1:4f:03:60: 90:c4:a2:01:2f:21:a1:52:30:8a:9d:f9:d0:76:d5:ef:e8:b8: 22:72:68:6e:64:93:95:43:71:72:e2:92:e3:a2:1c:6a:be:c2: 75:df:7e:26:f7:f6:14:b0:eb:9c:26:c5:39:5b:f0:64:f2:47: 32:13:e3:a0 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUYrPghwZRhAGIl3KVHSgBU5cKTA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTkwOTEwMTdaFw0yNjExMTgwOTE1MTdaMDMxMTAvBgNV BAMTKEU0REEzMTVDNDlENkRGNEI2QzVERUVFRkQ0NDdDRkUxNzlCMURBQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVu4YjHtoge/omkq1q7XgBhau /xbnYCr7y5skQ1XdWm6+3SdcakiRkmmMlpNMgi+txrFylUiJP4BEU7KI4MejI6mE gdBvcgpSZZ52hiYzwb3xvLHMOxaIsmJD9a/SpPvjEFM091e8Vp9dk7CX9T7hFs9a ixl5a0/kbBWy7t1OQ7xj34f7onZvWgEEYIcnO0LuwxB8AaGLnMecJcuQzapAsEdm GtCKGSlRMD67lRjFrm4IZYi3RQacCDiKZPLdXqEptI2jhVQjB6eSaz2EzzB/ILO8 dXeuvm3whI4/jJusGrGKQkdYaueU36KY/r7CR9Ybf24u8C4kFS+0CR3OpY1fAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU5NoxXEnW30tsXe7v1EfP4Xmx2sAwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzMzM4 MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1EomMA0G CSqGSIb3DQEBCwUAA4IBAQCX5lmDGfNQgjZUWbIccePzJBLWeqDBy/QUDlhYMQNo Tyf37rTqdBxoCMuq7NdK2ar9XdFiHqxV0khSwf1uTGDYB2pS5gTK6YU4at82zXFK P8OfNKKh+vyfmV4/OHCg9W9JyBtCyOZLx7Do1kPP262agDG/NJDz19mbBVefrBpX duRBTRlgu4rx3Cb7W5O2g4D3YVpQkCOBCBqcUa8ULza2wDEuRnbYVlQ8ZkkMct4n nIO+IutFd/aBg/fU/vlNfQmgecFPA2CQxKIBLyGhUjCKnfnQdtXv6LgicmhuZJOV Q3Fy4pLjohxqvsJ1334m9/YUsOucJsU5W/Bk8kcyE+Og -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:41 2025 by rpki-client