This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34322e302f32342d3234203d3e203633313939.roa File: 3231322e37342e34322e302f32342d3234203d3e203633313939.roa (raw, json) Hash identifier: PVz9YVZusx+1b5fb1K/vFIYrWyV6GgBrvs/6rRp7xss= Subject key identifier: 76:21:93:7A:00:F4:09:B7:0C:91:F8:C6:F1:DA:B6:AE:8E:CD:24:9F Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 4F137138E256646D5C27784CD65967D9D25A6345 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34322e302f32342d3234203d3e203633313939.roa Signing time: Fri 12 Dec 2025 06:48:12 +0000 ROA not before: Fri 12 Dec 2025 06:43:12 +0000 ROA not after: Fri 11 Dec 2026 06:48:12 +0000 asID: 63199 IP address blocks: 212.74.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 17:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:13:71:38:e2:56:64:6d:5c:27:78:4c:d6:59:67:d9:d2:5a:63:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Dec 12 06:43:12 2025 GMT Not After : Dec 11 06:48:12 2026 GMT Subject: CN=7621937A00F409B70C91F8C6F1DAB6AE8ECD249F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:41:76:b5:da:58:27:c0:41:a3:d6:d5:10:5e: a2:4e:bb:9c:d2:13:b1:36:4e:67:3b:c0:aa:0f:0c: 30:2a:75:b6:2c:4f:3d:8c:28:3e:0b:fb:fa:f0:38: b6:ea:2f:b2:25:46:47:20:d6:c5:54:29:4a:07:e0: 4b:83:22:69:23:0c:5e:11:6c:42:b7:7c:7c:2a:e3: 92:7a:e4:84:29:01:d6:fe:d3:5e:26:3b:a8:b7:8a: 96:67:d2:91:f5:79:27:eb:67:47:4e:8c:a5:7f:b7: 41:4a:52:7a:44:04:4e:87:bc:22:47:ee:13:e3:fa: 65:70:19:4d:0f:84:1b:5f:f6:84:7e:76:25:02:5a: 51:3b:c8:40:5a:e1:fe:17:5f:19:f6:14:19:a4:05: a0:40:f4:14:8b:4f:56:e2:e5:d7:d6:e2:b5:c8:76: 72:c5:12:b0:65:5a:a3:d6:d1:f0:26:ef:65:65:9b: f1:e7:b0:a6:96:2e:ac:24:4d:b0:4b:c5:d9:9c:f0: 13:34:cf:11:63:87:e9:1a:e1:d7:68:35:91:31:bc: 88:2b:66:84:30:67:28:64:10:4c:41:9d:7d:12:bb: 6f:db:3c:b9:62:41:f1:00:00:1f:b0:fe:5d:a5:f9: f1:f3:f9:77:3e:1d:78:f1:ab:6b:55:e3:0a:dd:d2: 5d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:21:93:7A:00:F4:09:B7:0C:91:F8:C6:F1:DA:B6:AE:8E:CD:24:9F X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34322e302f32342d3234203d3e203633313939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.42.0/24 Signature Algorithm: sha256WithRSAEncryption 78:a9:11:b0:a8:06:1b:df:6b:7a:9f:da:34:5b:1a:16:bf:01: fb:3f:47:b0:de:83:5b:ab:2d:c5:a0:26:d6:51:87:8e:7e:9e: b2:ba:fd:36:66:bb:94:54:e6:cb:64:6a:ee:36:6e:79:74:7e: 27:46:d8:48:a9:9a:b4:27:1c:32:49:12:de:ac:4d:f2:db:4f: a7:43:87:ab:0a:96:1d:70:fd:b4:63:a8:10:bb:6c:50:0b:f3: ce:5d:ca:e5:f7:d8:52:db:84:ff:e2:7f:d0:09:06:81:6d:aa: 15:63:f8:21:88:50:d3:e6:f4:01:25:23:d3:5c:40:51:68:49: 38:2f:af:ce:00:5a:00:63:21:26:33:f1:64:38:b7:bd:d7:6f: 4e:c2:31:fe:76:71:00:33:c2:78:ec:95:36:5f:a6:97:76:c9: 3d:82:2f:5e:fe:c3:25:ba:d9:c2:68:f8:85:f8:30:37:78:3e: fb:17:44:f2:11:fa:3d:d6:bf:62:f9:0d:e7:ad:34:d6:71:0b: d8:71:be:4a:9f:45:96:d1:18:40:70:d9:0e:e3:bf:28:42:cf: 56:cc:d9:90:59:bc:17:a1:ca:7d:bb:c0:52:e6:e0:75:a6:40: 9f:b2:ca:0a:25:3a:8b:f4:62:9c:b3:f8:25:55:49:22:0b:82: e9:bb:4a:cc -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUTxNxOOJWZG1cJ3hM1lln2dJaY0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTEyMTIwNjQzMTJaFw0yNjEyMTEwNjQ4MTJaMDMxMTAvBgNV BAMTKDc2MjE5MzdBMDBGNDA5QjcwQzkxRjhDNkYxREFCNkFFOEVDRDI0OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOQXa12lgnwEGj1tUQXqJOu5zS E7E2Tmc7wKoPDDAqdbYsTz2MKD4L+/rwOLbqL7IlRkcg1sVUKUoH4EuDImkjDF4R bEK3fHwq45J65IQpAdb+014mO6i3ipZn0pH1eSfrZ0dOjKV/t0FKUnpEBE6HvCJH 7hPj+mVwGU0PhBtf9oR+diUCWlE7yEBa4f4XXxn2FBmkBaBA9BSLT1bi5dfW4rXI dnLFErBlWqPW0fAm72Vlm/HnsKaWLqwkTbBLxdmc8BM0zxFjh+ka4ddoNZExvIgr ZoQwZyhkEExBnX0Su2/bPLliQfEAAB+w/l2l+fHz+Xc+HXjxq2tV4wrd0l2TAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUdiGTegD0CbcMkfjG8dq2ro7NJJ8wHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNDMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzMxMzkzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRK KjANBgkqhkiG9w0BAQsFAAOCAQEAeKkRsKgGG99rep/aNFsaFr8B+z9HsN6DW6st xaAm1lGHjn6esrr9Nma7lFTmy2Rq7jZueXR+J0bYSKmatCccMkkS3qxN8ttPp0OH qwqWHXD9tGOoELtsUAvzzl3K5ffYUtuE/+J/0AkGgW2qFWP4IYhQ0+b0ASUj01xA UWhJOC+vzgBaAGMhJjPxZDi3vddvTsIx/nZxADPCeOyVNl+ml3bJPYIvXv7DJbrZ wmj4hfgwN3g++xdE8hH6Pda/YvkN56001nEL2HG+Sp9FltEYQHDZDuO/KELPVszZ kFm8F6HKfbvAUubgdaZAn7LKCiU6i/RinLP4JVVJIguC6btKzA== -----END CERTIFICATE-----Generated at Sun Jan 18 06:40:56 2026 by rpki-client