This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33382e302f32342d3234203d3e20393834.roa File: 3231322e37342e33382e302f32342d3234203d3e20393834.roa (raw, json) Hash identifier: i/qaRqcQrH23A2cBmckTcvR2Zo08PDS2giMWYoT9VLs= Subject key identifier: 7A:AD:BD:95:B5:41:18:87:5F:80:FE:8D:5C:32:B6:C8:B2:03:C0:E1 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 4B73B60B3486C4CBDD29A91DA3FE9855BA848402 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33382e302f32342d3234203d3e20393834.roa Signing time: Sun 21 Dec 2025 13:31:12 +0000 ROA not before: Sun 21 Dec 2025 13:26:12 +0000 ROA not after: Sun 20 Dec 2026 13:31:12 +0000 asID: 984 IP address blocks: 212.74.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 17:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:73:b6:0b:34:86:c4:cb:dd:29:a9:1d:a3:fe:98:55:ba:84:84:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Dec 21 13:26:12 2025 GMT Not After : Dec 20 13:31:12 2026 GMT Subject: CN=7AADBD95B54118875F80FE8D5C32B6C8B203C0E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:cc:75:ad:38:8a:dc:15:31:64:fe:ec:06:61: fe:62:4a:55:35:fc:d7:76:39:f1:de:fc:09:2e:f6: 10:da:e6:d1:97:87:91:e6:0d:04:b0:89:ef:c0:0c: e8:55:63:9b:40:86:71:eb:c7:28:33:83:dd:b1:d0: b6:fc:aa:d5:a7:4c:b5:00:45:4a:4d:4b:b8:55:ec: 8e:de:60:19:dd:97:64:ba:b9:2a:c9:b8:62:ce:33: b6:5d:83:ff:6f:f5:28:34:59:24:46:11:17:c3:d7: 7c:a4:95:85:ac:b8:09:3c:c5:e8:02:87:4f:9f:f9: 1e:9f:ed:42:a4:5d:df:61:fb:92:ef:fa:e6:cd:77: 33:da:c8:0b:0f:36:33:a7:05:64:3e:cd:11:38:71: dd:a8:cb:fc:75:b6:ba:94:f6:b2:03:01:9f:bb:73: f7:43:f2:22:6a:f7:20:b1:e4:64:b1:47:3a:f3:aa: 09:84:1d:5d:b5:3f:c6:dd:01:2e:04:7a:90:0b:92: 1c:32:44:05:1a:1c:cb:53:6e:1e:77:51:1d:21:c7: 0b:fc:90:d0:b3:00:93:c5:9a:49:cf:41:ba:62:cb: 15:0f:55:27:5b:a7:fc:aa:84:3e:21:e9:f5:66:e5: b5:11:4b:8a:1c:c4:69:e7:47:97:8f:c9:a8:53:b4: c7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AD:BD:95:B5:41:18:87:5F:80:FE:8D:5C:32:B6:C8:B2:03:C0:E1 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33382e302f32342d3234203d3e20393834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.38.0/24 Signature Algorithm: sha256WithRSAEncryption 26:0b:21:d6:cd:bc:a9:d1:84:f6:0d:d2:aa:60:54:9a:7a:39: d8:13:e9:3d:d1:46:35:78:83:4a:93:24:1f:c0:f2:c2:4f:b8: 4a:01:eb:0c:95:74:4a:e9:54:b7:4c:0f:4a:0d:ed:f0:90:a3: be:cf:47:10:05:29:58:59:f6:26:e4:d7:03:34:10:9a:22:c7: be:e8:59:05:86:07:34:e1:a2:22:98:75:78:d0:91:09:76:8a: 61:b8:a9:00:30:77:ad:bc:4d:16:62:15:b5:57:11:cf:37:3a: 04:b3:33:e6:64:8f:f4:8e:ee:46:89:55:50:9a:3e:41:15:43: 56:fc:69:77:29:d7:8d:37:87:9d:c8:2f:7a:2a:30:a0:f2:f1: 9e:87:73:fc:f7:e9:cf:42:ef:8e:a3:13:10:c6:4b:1a:a0:75: 63:8c:53:6e:c9:a5:1a:ee:f1:87:4a:a3:c6:55:e1:ea:cf:2a: f4:01:48:c1:f8:89:0e:61:80:49:3a:06:84:96:22:68:94:61: 24:a7:8d:51:e3:c8:6a:d1:38:26:a0:a8:4e:c6:a8:5f:ad:2c: 4d:9d:21:4b:93:3a:69:b9:00:33:79:84:54:aa:06:b9:7d:2d: ea:d9:fc:74:a1:21:79:2b:cf:ac:9c:3b:e0:41:67:04:e9:e2: 2f:53:0a:9e -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUS3O2CzSGxMvdKakdo/6YVbqEhAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTEyMjExMzI2MTJaFw0yNjEyMjAxMzMxMTJaMDMxMTAvBgNV BAMTKDdBQURCRDk1QjU0MTE4ODc1RjgwRkU4RDVDMzJCNkM4QjIwM0MwRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkzHWtOIrcFTFk/uwGYf5iSlU1 /Nd2OfHe/Aku9hDa5tGXh5HmDQSwie/ADOhVY5tAhnHrxygzg92x0Lb8qtWnTLUA RUpNS7hV7I7eYBndl2S6uSrJuGLOM7Zdg/9v9Sg0WSRGERfD13yklYWsuAk8xegC h0+f+R6f7UKkXd9h+5Lv+ubNdzPayAsPNjOnBWQ+zRE4cd2oy/x1trqU9rIDAZ+7 c/dD8iJq9yCx5GSxRzrzqgmEHV21P8bdAS4EepALkhwyRAUaHMtTbh53UR0hxwv8 kNCzAJPFmknPQbpiyxUPVSdbp/yqhD4h6fVm5bURS4ocxGnnR5ePyahTtMctAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUeq29lbVBGIdfgP6NXDK2yLIDwOEwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzMzM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzODM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EomMA0G CSqGSIb3DQEBCwUAA4IBAQAmCyHWzbyp0YT2DdKqYFSaejnYE+k90UY1eINKkyQf wPLCT7hKAesMlXRK6VS3TA9KDe3wkKO+z0cQBSlYWfYm5NcDNBCaIse+6FkFhgc0 4aIimHV40JEJdophuKkAMHetvE0WYhW1VxHPNzoEszPmZI/0ju5GiVVQmj5BFUNW /Gl3KdeNN4edyC96KjCg8vGeh3P89+nPQu+OoxMQxksaoHVjjFNuyaUa7vGHSqPG VeHqzyr0AUjB+IkOYYBJOgaEliJolGEkp41R48hq0TgmoKhOxqhfrSxNnSFLkzpp uQAzeYRUqga5fS3q2fx0oSF5K8+snDvgQWcE6eIvUwqe -----END CERTIFICATE-----Generated at Sun Jan 18 04:27:10 2026 by rpki-client