This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34302e302f32332d3234203d3e20383334.roa File: 3231322e37342e34302e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: 60Q6kai3DL4OM0He9EQCHNNPJEIcNXfwVlwwfRWChBo= Subject key identifier: 42:90:35:B0:5F:44:4A:24:D2:87:10:F1:26:3D:FB:A7:1E:28:17:66 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 4DFE076FD337BF6C354A7A17077FD3865DB02802 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34302e302f32332d3234203d3e20383334.roa Signing time: Fri 12 Dec 2025 06:50:52 +0000 ROA not before: Fri 12 Dec 2025 06:45:52 +0000 ROA not after: Fri 11 Dec 2026 06:50:52 +0000 asID: 834 IP address blocks: 212.74.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:fe:07:6f:d3:37:bf:6c:35:4a:7a:17:07:7f:d3:86:5d:b0:28:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Dec 12 06:45:52 2025 GMT Not After : Dec 11 06:50:52 2026 GMT Subject: CN=429035B05F444A24D28710F1263DFBA71E281766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0d:57:f9:df:8c:3d:cc:09:d7:7b:69:42:3e: d5:9e:38:be:b3:af:34:33:6c:33:f5:23:19:b8:e0: 60:5c:17:64:ed:29:b1:98:ba:45:9b:af:8e:95:dc: 02:8a:11:7c:96:2b:e8:ee:df:c2:7b:e5:2d:9a:6f: 1f:be:89:8f:e3:ee:79:d2:2f:40:7b:3d:e6:3b:71: 0d:22:fb:e4:61:96:2d:34:a8:a9:17:31:c8:6d:98: ab:e5:00:32:00:e9:e2:59:3d:22:16:63:94:65:65: a2:5d:cc:91:b6:b4:5e:00:ed:f6:2e:85:f8:70:2b: ee:35:14:f2:4e:84:91:ba:0d:3a:8b:ff:02:a6:61: 98:62:59:b3:95:83:6c:f5:91:d1:09:02:24:83:c2: f2:78:13:2f:b3:eb:b9:96:bc:d9:ca:0d:2d:95:a5: d7:0c:0f:dc:5f:bb:fd:18:51:79:b1:f6:e5:91:74: 4e:5e:94:d4:27:87:15:48:c4:5b:a6:0a:bc:99:28: bd:cd:ed:fc:1d:57:02:a2:05:7e:06:75:50:d8:ad: 3e:63:79:ee:99:34:26:69:60:fb:20:0c:d0:39:0e: 43:bf:85:b4:25:17:82:2a:96:cd:af:df:bd:5a:a2: 12:ac:00:61:e6:51:6a:3e:b8:61:f1:60:d2:6b:c6: 42:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:90:35:B0:5F:44:4A:24:D2:87:10:F1:26:3D:FB:A7:1E:28:17:66 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34302e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.40.0/23 Signature Algorithm: sha256WithRSAEncryption 07:eb:ab:68:fd:f7:8c:51:90:5c:79:9e:ce:f6:58:89:cb:09: 0a:72:33:27:26:b5:e0:37:4b:39:70:5b:bb:a3:fb:58:d2:76: 87:f9:78:44:53:10:e9:ba:f5:53:01:6a:24:6a:22:04:3d:54: bf:9e:2c:0e:56:51:5c:bf:1b:bd:f3:79:05:4d:c1:16:f4:ef: e3:a6:b7:ed:52:0d:e9:fc:5b:c8:03:e4:f2:a0:36:98:19:45: a7:c8:e4:17:3e:46:77:db:9b:13:3e:59:44:8e:d6:7c:2e:b2: 5f:2e:e9:8f:8c:50:59:c9:27:a0:e9:aa:0a:ab:3b:3d:ba:ab: 16:68:0b:ec:1b:ab:57:ed:20:02:cf:d3:66:71:47:50:f9:43: 97:ea:32:35:82:24:7c:13:63:73:15:53:90:ca:a8:6b:d7:ad: 99:9e:5e:f4:01:bc:09:12:7c:ad:c4:71:20:55:3d:aa:32:9f: 28:ed:45:5a:c0:03:c9:a7:43:0f:da:65:b4:6b:57:91:e4:b2: 22:1e:18:39:f9:e2:68:75:00:02:a4:45:a2:84:39:ff:5e:24: f5:9f:ef:6e:b5:ce:a9:2d:47:a8:d5:08:a3:2d:6c:a0:86:93: 0a:27:34:b4:56:d5:ef:79:95:83:94:d3:a1:50:17:fb:49:71: ad:6a:e2:96 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUTf4Hb9M3v2w1SnoXB3/Thl2wKAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTEyMTIwNjQ1NTJaFw0yNjEyMTEwNjUwNTJaMDMxMTAvBgNV BAMTKDQyOTAzNUIwNUY0NDRBMjREMjg3MTBGMTI2M0RGQkE3MUUyODE3NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcDVf534w9zAnXe2lCPtWeOL6z rzQzbDP1Ixm44GBcF2TtKbGYukWbr46V3AKKEXyWK+ju38J75S2abx++iY/j7nnS L0B7PeY7cQ0i++Rhli00qKkXMchtmKvlADIA6eJZPSIWY5RlZaJdzJG2tF4A7fYu hfhwK+41FPJOhJG6DTqL/wKmYZhiWbOVg2z1kdEJAiSDwvJ4Ey+z67mWvNnKDS2V pdcMD9xfu/0YUXmx9uWRdE5elNQnhxVIxFumCryZKL3N7fwdVwKiBX4GdVDYrT5j ee6ZNCZpYPsgDNA5DkO/hbQlF4Iqls2v371aohKsAGHmUWo+uGHxYNJrxkKxAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUQpA1sF9ESiTShxDxJj37px4oF2YwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNDMw MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1EooMA0G CSqGSIb3DQEBCwUAA4IBAQAH66to/feMUZBceZ7O9liJywkKcjMnJrXgN0s5cFu7 o/tY0naH+XhEUxDpuvVTAWokaiIEPVS/niwOVlFcvxu983kFTcEW9O/jprftUg3p /FvIA+TyoDaYGUWnyOQXPkZ325sTPllEjtZ8LrJfLumPjFBZySeg6aoKqzs9uqsW aAvsG6tX7SACz9NmcUdQ+UOX6jI1giR8E2NzFVOQyqhr162Znl70AbwJEnytxHEg VT2qMp8o7UVawAPJp0MP2mW0a1eR5LIiHhg5+eJodQACpEWihDn/XiT1n+9utc6p LUeo1QijLWyghpMKJzS0VtXveZWDlNOhUBf7SXGtauKW -----END CERTIFICATE-----Generated at Mon Dec 15 23:28:00 2025 by rpki-client