This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34302e302f32322d3234203d3e20383334.roa File: 3231322e37342e34302e302f32322d3234203d3e20383334.roa (raw, json) Hash identifier: 2AymSG1obDI5Lgxi2X9WGKfsJG40XOBhT+TMpBznMVg= Subject key identifier: B8:D9:ED:D4:97:AB:91:8E:CB:AF:83:26:FB:F5:14:E7:33:B3:C8:E7 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 0950A95838716598C1001154EBB9A2DAFE0058C2 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34302e302f32322d3234203d3e20383334.roa Signing time: Fri 14 Nov 2025 10:25:31 +0000 ROA not before: Fri 14 Nov 2025 10:20:31 +0000 ROA not after: Fri 13 Nov 2026 10:25:31 +0000 asID: 834 IP address blocks: 212.74.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:50:a9:58:38:71:65:98:c1:00:11:54:eb:b9:a2:da:fe:00:58:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 14 10:20:31 2025 GMT Not After : Nov 13 10:25:31 2026 GMT Subject: CN=B8D9EDD497AB918ECBAF8326FBF514E733B3C8E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c2:2b:ba:4f:f7:e5:b2:e8:d4:5d:54:52:d5: 8d:21:2c:65:2d:06:da:eb:a5:0d:bd:f6:a2:f7:13: f8:07:73:a2:49:0a:e7:ab:19:37:b0:92:b8:0f:7f: f8:49:66:9d:37:4b:14:97:ff:7f:5b:77:63:c0:33: 89:0b:7e:2c:c9:70:c1:55:74:da:81:91:a9:9b:e5: 29:0a:f1:e4:67:0c:26:69:59:9b:df:bc:7a:3d:88: 35:f4:05:1a:79:0c:f4:35:79:86:ce:dc:de:af:82: 86:b4:7d:0d:84:93:63:de:d7:29:e7:cd:ac:61:43: 28:fc:64:a3:eb:70:6e:98:0d:8c:37:44:52:b5:4a: 2f:00:f5:92:2b:0b:2b:3c:c8:7b:c0:83:91:58:23: 95:3d:8a:ba:78:20:e7:10:1c:bb:47:06:9c:d7:9c: fd:52:21:c2:5a:4d:a8:5a:d8:83:3c:fe:1c:7d:96: 0c:8f:35:b5:31:db:20:54:8c:a0:27:67:48:cf:db: 5e:29:d0:af:05:0f:8d:96:a9:cf:14:cc:35:4d:77: ea:58:18:df:5e:ce:75:25:1f:d7:4e:c9:79:6b:dc: a8:f9:1c:c9:43:46:9a:fc:a2:ce:3e:09:58:57:7f: 06:af:cf:b0:2c:b7:c8:39:73:22:f8:ad:f7:96:ac: a0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D9:ED:D4:97:AB:91:8E:CB:AF:83:26:FB:F5:14:E7:33:B3:C8:E7 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34302e302f32322d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.40.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:b1:8e:b6:ce:0c:44:9c:33:ad:b8:f0:c8:40:27:12:9b:16: e1:3f:c5:1a:f2:24:7c:37:a4:bd:0d:7a:c2:46:67:01:e8:b2: c5:7b:64:15:ed:52:c1:cc:fc:6f:98:ae:86:26:e3:f5:4f:c5: 46:76:51:f1:a5:2d:b8:38:b7:d0:92:31:d0:d0:e0:5a:91:90: 66:f1:dc:5f:f6:0a:66:25:ff:c1:d2:49:4a:a0:6d:95:0d:ec: 66:1e:d0:6d:34:52:4b:9a:ad:98:7d:9d:4c:ab:aa:ad:05:a8: a7:24:42:3a:10:a0:fc:dc:f0:0c:d6:6d:47:0c:d7:a6:07:c4: 2e:b0:73:b6:52:6c:1b:5e:15:48:07:ec:69:81:b8:3c:d6:fe: 21:35:a5:72:06:84:54:05:3d:86:c8:b3:d7:d3:7b:36:eb:6e: a1:37:c4:fd:21:64:32:b9:59:72:84:f7:5d:34:52:46:6c:58: 10:81:50:6e:10:58:bd:3d:de:23:21:ed:5a:80:ad:1b:d5:a7: 5a:28:f3:8c:ab:00:a4:2a:b0:80:34:b1:95:5a:98:a2:13:3a: b5:dd:80:1b:42:0e:f8:bd:f6:56:ce:c6:76:b8:97:4d:76:00: a1:bd:0d:90:0b:0f:68:2d:bb:bf:3f:bd:3b:fd:ec:36:7a:b7: 1c:1d:c5:b8 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUCVCpWDhxZZjBABFU67mi2v4AWMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTQxMDIwMzFaFw0yNjExMTMxMDI1MzFaMDMxMTAvBgNV BAMTKEI4RDlFREQ0OTdBQjkxOEVDQkFGODMyNkZCRjUxNEU3MzNCM0M4RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDewiu6T/flsujUXVRS1Y0hLGUt BtrrpQ299qL3E/gHc6JJCuerGTewkrgPf/hJZp03SxSX/39bd2PAM4kLfizJcMFV dNqBkamb5SkK8eRnDCZpWZvfvHo9iDX0BRp5DPQ1eYbO3N6vgoa0fQ2Ek2Pe1ynn zaxhQyj8ZKPrcG6YDYw3RFK1Si8A9ZIrCys8yHvAg5FYI5U9irp4IOcQHLtHBpzX nP1SIcJaTaha2IM8/hx9lgyPNbUx2yBUjKAnZ0jP214p0K8FD42Wqc8UzDVNd+pY GN9eznUlH9dOyXlr3Kj5HMlDRpr8os4+CVhXfwavz7Ast8g5cyL4rfeWrKDVAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUuNnt1JerkY7Lr4Mm+/UU5zOzyOcwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNDMw MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1EooMA0G CSqGSIb3DQEBCwUAA4IBAQCcsY62zgxEnDOtuPDIQCcSmxbhP8Ua8iR8N6S9DXrC RmcB6LLFe2QV7VLBzPxvmK6GJuP1T8VGdlHxpS24OLfQkjHQ0OBakZBm8dxf9gpm Jf/B0klKoG2VDexmHtBtNFJLmq2YfZ1Mq6qtBainJEI6EKD83PAM1m1HDNemB8Qu sHO2UmwbXhVIB+xpgbg81v4hNaVyBoRUBT2GyLPX03s2626hN8T9IWQyuVlyhPdd NFJGbFgQgVBuEFi9Pd4jIe1agK0b1adaKPOMqwCkKrCANLGVWpiiEzq13YAbQg74 vfZWzsZ2uJdNdgChvQ2QCw9oLbu/P707/ew2erccHcW4 -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:43 2025 by rpki-client