This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33392e302f32342d3234203d3e20383334.roa File: 3231322e37342e33392e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: TErNuCdfHQhoAILA4l/UAjn2kTbrQHTLOi04dJ1xl1U= Subject key identifier: B3:0C:03:0C:C3:E9:D1:30:90:BA:BE:5E:8E:D5:DF:49:30:42:AA:5C Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 18C94EA8CDC29D54020B0D963A970E64B5C18EC8 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33392e302f32342d3234203d3e20383334.roa Signing time: Mon 08 Dec 2025 10:19:12 +0000 ROA not before: Mon 08 Dec 2025 10:14:12 +0000 ROA not after: Mon 07 Dec 2026 10:19:12 +0000 asID: 834 IP address blocks: 212.74.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:c9:4e:a8:cd:c2:9d:54:02:0b:0d:96:3a:97:0e:64:b5:c1:8e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Dec 8 10:14:12 2025 GMT Not After : Dec 7 10:19:12 2026 GMT Subject: CN=B30C030CC3E9D13090BABE5E8ED5DF493042AA5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fb:35:66:81:15:5e:d2:5a:f5:37:45:43:ea: 75:c5:e1:35:a7:e9:e0:53:45:8d:6a:6d:b5:fe:24: cf:ee:13:9c:2e:39:7e:4f:41:49:b2:da:6a:96:92: cb:92:12:4c:20:9d:cc:5f:77:e4:4d:44:77:ad:2e: d4:72:28:33:6c:a2:f1:6c:cf:7c:f2:99:e8:db:e5: 16:34:9e:a4:3a:e2:3d:17:0c:dc:b1:c0:c2:2d:41: 29:df:c0:f8:a3:53:cd:cb:8a:da:41:71:35:d8:5d: 55:cd:2d:bf:85:20:22:bc:24:a8:ab:4d:1c:6d:96: 97:f5:41:3a:d0:f5:7c:6d:25:8c:b8:b9:77:78:55: a2:c7:35:a3:ad:5c:24:f3:f3:4a:56:b9:b6:a9:03: 49:6f:58:37:18:b4:0b:14:15:bb:dd:03:62:f9:7e: f2:8a:e4:56:9e:73:b1:e5:35:b5:de:f4:54:17:bc: 4d:62:ce:c9:1f:19:c5:da:43:c7:fc:01:a3:57:94: 81:c0:9e:ab:cf:25:b0:3a:6c:5f:50:39:62:3f:c5: 72:2d:e2:40:5f:4a:0c:50:cd:c8:5e:f1:7e:85:09: 09:0f:78:70:32:ed:1a:07:53:6c:50:17:e4:b0:ed: 9b:37:18:c9:cc:d2:bc:97:df:73:dd:ad:53:c2:c0: bb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0C:03:0C:C3:E9:D1:30:90:BA:BE:5E:8E:D5:DF:49:30:42:AA:5C X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33392e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.39.0/24 Signature Algorithm: sha256WithRSAEncryption d2:4e:2a:86:1c:5e:24:b0:3c:6b:86:09:6b:4d:cd:ee:b0:90: f8:9e:2e:c3:55:97:11:7f:92:aa:72:6f:01:15:30:0b:ec:ce: f3:52:78:cb:5c:f5:29:1b:8d:47:46:b0:ff:03:4f:28:e4:ba: a8:10:25:6e:72:74:a5:b6:15:2c:c8:11:23:7d:27:19:19:6a: ee:ae:7d:e5:0e:bd:07:4e:35:59:ad:f5:1f:ab:15:4f:a6:f6: b8:9a:94:40:ba:02:ca:18:43:4b:2c:7d:ee:0b:65:f1:29:4f: 19:ad:f3:33:0d:00:bf:f3:c3:cd:93:f9:84:04:a7:ba:b7:a8: 52:79:a5:ed:63:07:e6:cd:09:ad:b3:c1:bb:6e:7d:19:31:6a: 2f:a3:6c:a7:e7:eb:20:37:7d:12:c8:40:c4:2f:26:ba:25:b3: 0f:fb:46:eb:4f:59:9b:97:49:a8:77:b6:d8:79:3d:87:48:0a: 26:a2:13:29:0e:63:82:53:6c:d3:4b:ee:d5:72:bf:de:56:ce: e6:86:2f:4a:e3:55:f0:fd:9d:a6:78:32:02:ea:c3:e6:5a:23: 9e:b0:17:a7:5f:e8:9f:69:32:e7:0f:17:04:a7:bc:93:e0:f3: 33:d5:26:49:1f:4f:dd:9a:61:65:08:18:e2:73:41:9a:b0:be: a1:50:17:9b -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUGMlOqM3CnVQCCw2WOpcOZLXBjsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTEyMDgxMDE0MTJaFw0yNjEyMDcxMDE5MTJaMDMxMTAvBgNV BAMTKEIzMEMwMzBDQzNFOUQxMzA5MEJBQkU1RThFRDVERjQ5MzA0MkFBNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK+zVmgRVe0lr1N0VD6nXF4TWn 6eBTRY1qbbX+JM/uE5wuOX5PQUmy2mqWksuSEkwgncxfd+RNRHetLtRyKDNsovFs z3zymejb5RY0nqQ64j0XDNyxwMItQSnfwPijU83LitpBcTXYXVXNLb+FICK8JKir TRxtlpf1QTrQ9XxtJYy4uXd4VaLHNaOtXCTz80pWubapA0lvWDcYtAsUFbvdA2L5 fvKK5Faec7HlNbXe9FQXvE1izskfGcXaQ8f8AaNXlIHAnqvPJbA6bF9QOWI/xXIt 4kBfSgxQzche8X6FCQkPeHAy7RoHU2xQF+Sw7Zs3GMnM0ryX33PdrVPCwLulAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUswwDDMPp0TCQur5ejtXfSTBCqlwwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzMzM5 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EonMA0G CSqGSIb3DQEBCwUAA4IBAQDSTiqGHF4ksDxrhglrTc3usJD4ni7DVZcRf5Kqcm8B FTAL7M7zUnjLXPUpG41HRrD/A08o5LqoECVucnSlthUsyBEjfScZGWrurn3lDr0H TjVZrfUfqxVPpva4mpRAugLKGENLLH3uC2XxKU8ZrfMzDQC/88PNk/mEBKe6t6hS eaXtYwfmzQmts8G7bn0ZMWovo2yn5+sgN30SyEDELya6JbMP+0brT1mbl0mod7bY eT2HSAomohMpDmOCU2zTS+7Vcr/eVs7mhi9K41Xw/Z2meDIC6sPmWiOesBenX+if aTLnDxcEp7yT4PMz1SZJH0/dmmFlCBjic0GasL6hUBeb -----END CERTIFICATE-----Generated at Mon Dec 15 23:28:02 2025 by rpki-client