This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34332e302f32342d3234203d3e20383334.roa File: 3231322e37342e34332e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: PxEEEhkpVySYnEeGGBL8lVLgHZeq2O9RYUhl0kWxSk0= Subject key identifier: 7F:6E:D4:B7:B8:FB:FA:16:B6:70:92:1A:96:AA:4B:22:57:CA:94:83 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 10A26554453B9E4C48F82AA92D1C117D83C6C395 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34332e302f32342d3234203d3e20383334.roa Signing time: Fri 12 Dec 2025 06:50:52 +0000 ROA not before: Fri 12 Dec 2025 06:45:52 +0000 ROA not after: Fri 11 Dec 2026 06:50:52 +0000 asID: 834 IP address blocks: 212.74.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a2:65:54:45:3b:9e:4c:48:f8:2a:a9:2d:1c:11:7d:83:c6:c3:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Dec 12 06:45:52 2025 GMT Not After : Dec 11 06:50:52 2026 GMT Subject: CN=7F6ED4B7B8FBFA16B670921A96AA4B2257CA9483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:57:2f:56:59:d4:b2:90:50:d2:1a:35:78:bb: 9b:9c:23:87:fd:bd:1b:86:d0:5f:ae:9b:e6:a7:b7: d6:c3:a8:a7:3a:e5:7d:cc:a5:32:67:02:1c:10:da: 0c:fc:93:4d:e7:2b:32:3b:42:3b:3d:fd:9c:0a:f9: 08:80:ef:74:93:b0:3a:02:89:a1:c6:b1:73:36:58: 04:73:0f:66:68:cd:9a:f9:e6:04:ca:3b:67:c6:d4: fb:98:df:6a:a7:20:72:e5:c4:1a:a9:93:0c:ee:f2: 95:55:2d:b0:49:9e:1a:b5:f8:85:c6:1b:f5:b5:08: 5c:f6:ef:61:97:3b:a6:6f:15:b3:15:65:d1:24:af: 71:f6:8f:e4:1b:46:66:ab:e6:d9:12:66:8d:f2:19: 82:ad:84:cd:85:a2:1d:4d:1f:02:54:7a:0b:84:97: ce:d1:d2:d8:37:65:ef:2e:53:e2:c7:dc:9c:ad:a9: a0:6b:24:af:a9:07:ff:24:30:87:6e:73:0d:63:df: 1b:f5:b7:87:90:f7:5e:9b:01:a0:ba:0f:dc:8a:52: 57:21:62:6a:14:ff:0a:99:37:24:57:27:21:4c:16: 15:1f:fc:05:51:f1:73:d6:cd:51:94:89:5b:14:01: 44:a8:4c:ca:8b:e6:a0:38:c8:94:39:be:93:a1:8c: eb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6E:D4:B7:B8:FB:FA:16:B6:70:92:1A:96:AA:4B:22:57:CA:94:83 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34332e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.43.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:40:ca:9e:74:61:e8:31:95:3a:18:bb:8b:46:2e:60:2b:d1: f5:79:5c:05:53:78:ee:bb:5c:30:12:98:3b:d8:3c:f2:3b:b7: 28:ed:75:1e:70:43:bd:6b:e7:e5:ba:c5:b0:79:ee:35:ca:68: 23:5a:3b:94:43:99:e2:db:31:12:5d:f9:6e:9f:ac:83:87:a5: 2d:17:7c:04:2d:57:83:5b:40:4e:44:2a:37:53:14:cf:ff:56: 59:df:d7:53:b8:80:a8:18:55:64:6e:89:63:12:f9:23:1f:3e: 5c:f0:f5:02:24:e3:ac:aa:2c:08:02:d4:c8:ea:4f:9f:a4:54: 80:30:21:f7:a5:55:f1:b2:11:ce:d3:c7:ee:1b:8c:d5:9d:e0: 1d:0d:0f:8f:41:33:97:9e:fb:f1:bc:25:29:11:89:b1:2f:ff: 0f:a9:9c:53:14:a9:2c:f0:b1:6a:7c:67:bf:f4:e2:af:c2:26: 51:80:f9:ce:77:9f:44:54:72:9f:1c:10:b3:0e:3b:86:7d:81: b1:04:6e:ae:b5:86:0d:83:4b:65:47:4c:8d:bc:1f:ee:83:76: d9:f2:44:1e:38:c5:76:9d:ab:32:10:22:19:77:9c:fa:ef:ed: 34:14:54:a6:e1:7e:27:54:33:40:62:a6:dc:6c:48:05:02:96: 34:19:d9:54 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUEKJlVEU7nkxI+CqpLRwRfYPGw5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTEyMTIwNjQ1NTJaFw0yNjEyMTEwNjUwNTJaMDMxMTAvBgNV BAMTKDdGNkVENEI3QjhGQkZBMTZCNjcwOTIxQTk2QUE0QjIyNTdDQTk0ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOVy9WWdSykFDSGjV4u5ucI4f9 vRuG0F+um+ant9bDqKc65X3MpTJnAhwQ2gz8k03nKzI7Qjs9/ZwK+QiA73STsDoC iaHGsXM2WARzD2ZozZr55gTKO2fG1PuY32qnIHLlxBqpkwzu8pVVLbBJnhq1+IXG G/W1CFz272GXO6ZvFbMVZdEkr3H2j+QbRmar5tkSZo3yGYKthM2Foh1NHwJUeguE l87R0tg3Ze8uU+LH3JytqaBrJK+pB/8kMIducw1j3xv1t4eQ916bAaC6D9yKUlch YmoU/wqZNyRXJyFMFhUf/AVR8XPWzVGUiVsUAUSoTMqL5qA4yJQ5vpOhjOunAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUf27Ut7j7+ha2cJIalqpLIlfKlIMwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNDMz MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EorMA0G CSqGSIb3DQEBCwUAA4IBAQBrQMqedGHoMZU6GLuLRi5gK9H1eVwFU3juu1wwEpg7 2DzyO7co7XUecEO9a+flusWwee41ymgjWjuUQ5ni2zESXflun6yDh6UtF3wELVeD W0BORCo3UxTP/1ZZ39dTuICoGFVkboljEvkjHz5c8PUCJOOsqiwIAtTI6k+fpFSA MCH3pVXxshHO08fuG4zVneAdDQ+PQTOXnvvxvCUpEYmxL/8PqZxTFKks8LFqfGe/ 9OKvwiZRgPnOd59EVHKfHBCzDjuGfYGxBG6utYYNg0tlR0yNvB/ug3bZ8kQeOMV2 nasyECIZd5z67+00FFSm4X4nVDNAYqbcbEgFApY0GdlU -----END CERTIFICATE-----Generated at Mon Dec 15 23:28:02 2025 by rpki-client