This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33382e302f32342d3234203d3e203137343937.roa File: 3231322e37342e33382e302f32342d3234203d3e203137343937.roa (raw, json) Hash identifier: QYrNyGQJCvPFmJ8ng19O09Yr+0Dt1E4hDvsQNkd0vus= Subject key identifier: 8F:5E:63:26:CF:DA:EB:B3:B8:4C:08:B9:89:C5:9C:0F:20:94:6C:B5 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 3E1E0DE4E153F2C5B80E1017FE103E10DB394C2D Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33382e302f32342d3234203d3e203137343937.roa Signing time: Mon 08 Dec 2025 10:16:53 +0000 ROA not before: Mon 08 Dec 2025 10:11:53 +0000 ROA not after: Mon 07 Dec 2026 10:16:53 +0000 asID: 17497 IP address blocks: 212.74.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:1e:0d:e4:e1:53:f2:c5:b8:0e:10:17:fe:10:3e:10:db:39:4c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Dec 8 10:11:53 2025 GMT Not After : Dec 7 10:16:53 2026 GMT Subject: CN=8F5E6326CFDAEBB3B84C08B989C59C0F20946CB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:a5:6d:fd:23:5e:b5:2d:a8:b0:da:71:13: 48:c0:80:ba:09:1a:ad:2a:a3:01:83:db:e0:84:ea: ce:05:0f:cb:11:d1:4c:f9:ea:ae:2f:81:1f:6d:23: c3:88:2c:99:30:18:e2:b1:59:eb:0b:42:68:ff:52: 15:99:2b:a3:04:5e:2e:5a:9d:37:63:40:97:40:c8: 3a:70:f0:cb:36:1e:7c:f9:88:0e:e4:e5:ce:bf:46: 69:d1:9a:70:24:6d:69:86:ef:e0:54:04:b8:fe:c6: db:26:f7:60:38:df:8e:73:77:c4:73:70:8b:1c:43: 44:49:a8:16:44:2b:74:4f:05:55:ff:d3:fc:99:39: ce:36:d7:fb:e1:5b:8b:62:cc:2c:c3:0e:20:bf:b9: df:af:be:7d:9e:d8:de:dd:bd:94:4f:cf:f3:b5:d0: cc:a9:65:ff:f2:27:0b:76:dd:46:ea:cb:66:dd:95: bf:67:a2:e2:d6:8e:62:c8:37:7c:6b:2c:10:1a:68: 56:38:1f:7f:a9:32:50:1e:4e:cd:a4:8d:07:17:ad: af:00:d7:5d:05:dd:8e:67:03:e1:d0:70:2c:06:d3: 49:84:35:2e:e3:20:1a:92:fd:b9:08:2a:b6:5a:ef: d0:61:5c:20:b0:b7:81:18:bd:f8:c8:e4:aa:55:31: 24:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5E:63:26:CF:DA:EB:B3:B8:4C:08:B9:89:C5:9C:0F:20:94:6C:B5 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33382e302f32342d3234203d3e203137343937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.38.0/24 Signature Algorithm: sha256WithRSAEncryption bb:81:11:42:74:6f:48:4a:a9:47:b8:82:d2:46:89:51:a4:3b: bd:39:0b:32:ff:89:c5:e7:ac:e5:65:f6:25:6f:af:2a:d0:2c: 77:ec:34:2f:bb:e7:dc:2e:ab:16:20:d9:7e:f4:08:4e:f7:06: 35:fb:73:79:26:af:c8:85:a6:65:27:7f:63:81:94:62:72:da: c4:ed:8e:5e:ad:e3:d4:e8:da:13:bd:95:8b:d3:bd:58:b0:9c: aa:3e:9e:ff:32:0e:db:5a:fb:d7:a3:4e:e4:8c:82:20:20:50: d7:9f:07:72:fb:91:81:43:c3:22:47:43:7e:92:37:84:c3:66: 57:81:6d:4d:b7:34:79:3a:93:8a:c2:0e:64:52:bd:e5:9a:9c: ab:2d:fd:4f:9f:a9:3a:69:1a:01:d4:bc:fc:84:48:b8:c3:d8: fa:67:d4:7b:a4:e5:42:7e:f5:c9:1f:e4:e4:37:90:62:5a:d3: b0:93:09:a5:88:85:6c:26:86:09:fc:d8:b0:07:9b:f0:c9:16: d2:d1:28:78:ab:e6:73:9a:97:ab:2c:fc:9a:cb:76:2a:6a:c0: e7:46:72:92:80:57:7f:9a:54:c8:40:18:33:e2:70:b2:bb:81: 61:dc:5d:6e:d5:99:dc:fe:b1:8c:9a:66:4b:61:47:93:c2:56: cb:68:1b:24 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUPh4N5OFT8sW4DhAX/hA+ENs5TC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTEyMDgxMDExNTNaFw0yNjEyMDcxMDE2NTNaMDMxMTAvBgNV BAMTKDhGNUU2MzI2Q0ZEQUVCQjNCODRDMDhCOTg5QzU5QzBGMjA5NDZDQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzn6Vt/SNetS2osNpxE0jAgLoJ Gq0qowGD2+CE6s4FD8sR0Uz56q4vgR9tI8OILJkwGOKxWesLQmj/UhWZK6MEXi5a nTdjQJdAyDpw8Ms2Hnz5iA7k5c6/RmnRmnAkbWmG7+BUBLj+xtsm92A4345zd8Rz cIscQ0RJqBZEK3RPBVX/0/yZOc421/vhW4tizCzDDiC/ud+vvn2e2N7dvZRPz/O1 0MypZf/yJwt23Ubqy2bdlb9nouLWjmLIN3xrLBAaaFY4H3+pMlAeTs2kjQcXra8A 110F3Y5nA+HQcCwG00mENS7jIBqS/bkIKrZa79BhXCCwt4EYvfjI5KpVMSRVAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUj15jJs/a67O4TAi5icWcDyCUbLUwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzMzM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM0MzkzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRK JjANBgkqhkiG9w0BAQsFAAOCAQEAu4ERQnRvSEqpR7iC0kaJUaQ7vTkLMv+Jxees 5WX2JW+vKtAsd+w0L7vn3C6rFiDZfvQITvcGNftzeSavyIWmZSd/Y4GUYnLaxO2O Xq3j1OjaE72Vi9O9WLCcqj6e/zIO21r716NO5IyCICBQ158HcvuRgUPDIkdDfpI3 hMNmV4FtTbc0eTqTisIOZFK95Zqcqy39T5+pOmkaAdS8/IRIuMPY+mfUe6TlQn71 yR/k5DeQYlrTsJMJpYiFbCaGCfzYsAeb8MkW0tEoeKvmc5qXqyz8mst2KmrA50Zy koBXf5pUyEAYM+JwsruBYdxdbtWZ3P6xjJpmS2FHk8JWy2gbJA== -----END CERTIFICATE-----Generated at Wed Dec 10 07:52:44 2025 by rpki-client