This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34342e302f32332d3234203d3e20383334.roa File: 3231322e37342e34342e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: JzssRFw4LSgndSl0fuLw+ESi/HTgSpnBiMzqJOlTHDc= Subject key identifier: D8:FC:09:5D:0B:43:F8:EC:92:0A:66:F3:FE:1D:70:A7:9E:F6:0C:78 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 020C9776070E0001EA50211714B7626744FD07BF Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34342e302f32332d3234203d3e20383334.roa Signing time: Fri 14 Nov 2025 10:25:31 +0000 ROA not before: Fri 14 Nov 2025 10:20:31 +0000 ROA not after: Fri 13 Nov 2026 10:25:31 +0000 asID: 834 IP address blocks: 212.74.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:0c:97:76:07:0e:00:01:ea:50:21:17:14:b7:62:67:44:fd:07:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 14 10:20:31 2025 GMT Not After : Nov 13 10:25:31 2026 GMT Subject: CN=D8FC095D0B43F8EC920A66F3FE1D70A79EF60C78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b7:70:bb:20:cd:af:97:82:d4:0a:36:a9:99: 47:c0:f5:13:4c:57:c5:b8:7e:89:ff:0d:c6:06:98: b1:ad:a4:d9:9d:a1:10:36:47:9a:4a:5d:19:0a:d9: 32:ac:8b:d4:6e:8d:cf:6c:cf:00:9a:ed:1a:5a:03: 1f:6e:67:d1:c1:65:73:87:ea:e3:d3:15:cf:6e:28: 78:a3:1f:cf:9c:d6:48:be:b3:7e:b6:99:86:c4:0b: ec:80:b0:a8:fc:95:69:0b:40:40:28:41:7f:c9:60: c8:82:4e:f6:cf:b4:9c:4a:23:36:4b:bf:33:79:e0: 25:75:36:ef:3b:b9:18:7a:e8:5a:cd:73:3c:22:e1: d8:55:a9:02:13:4d:10:d9:ea:80:db:6b:28:e8:56: 36:e1:30:d1:e8:f2:a7:4b:28:e6:77:ad:75:c1:07: 9b:3e:78:3b:89:49:6a:c8:60:11:7a:8a:5c:b2:6f: 2e:f4:11:55:16:81:ba:a4:b3:72:bf:29:c9:ab:ab: 5d:34:c3:83:8b:5e:51:a7:22:ce:c2:0c:a6:c3:d1: af:96:b3:17:9a:aa:0c:45:b3:c6:8f:2c:3d:95:58: 13:5a:7a:9f:0e:e8:b9:36:5b:53:75:3f:7c:05:79: 6c:0f:09:94:79:22:52:aa:58:67:83:25:a3:30:49: 1d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FC:09:5D:0B:43:F8:EC:92:0A:66:F3:FE:1D:70:A7:9E:F6:0C:78 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34342e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.44.0/23 Signature Algorithm: sha256WithRSAEncryption d2:ca:ae:fa:ec:0b:e7:f1:e2:62:49:c1:8b:fb:f7:56:5a:7c: e2:5b:15:a4:85:80:3c:9f:a9:bf:c1:f0:52:b0:60:9c:7f:87: f2:0b:fd:4f:0b:9f:50:6b:76:65:3f:8e:c0:0f:a4:8b:33:6c: f3:16:7f:7f:c2:98:d1:ea:a8:f3:b0:53:5e:94:c4:d4:3f:c1: 98:b4:68:64:e3:c6:8f:97:67:2e:8a:84:a5:18:a7:f7:f3:79: 4b:47:d4:d2:22:16:05:04:93:79:48:c7:1c:de:6e:c9:78:c6: e3:8e:85:88:ea:bb:8c:79:63:c0:b2:09:98:37:35:a2:35:a8: ed:d1:d9:8b:a3:9c:3d:2c:7e:04:c6:10:f1:83:00:84:30:cc: 1d:64:5d:34:4e:69:dd:02:36:0c:8c:d6:18:87:28:37:43:35: 70:90:a6:79:5e:80:85:2f:0c:7f:98:9d:86:03:3b:29:ab:cc: 77:fe:c9:bc:02:d2:16:03:bd:49:15:23:ad:b0:a8:6d:b7:a7: 75:47:e8:52:11:65:33:ba:7b:03:c5:b8:ff:92:4a:b5:da:8d: 21:19:c0:6e:99:7d:38:a3:29:60:04:97:fa:07:3c:cf:aa:41: df:c3:8a:ea:b7:af:39:b5:9f:2d:e6:ce:eb:88:46:ca:fe:c4: 1f:be:d6:45 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUAgyXdgcOAAHqUCEXFLdiZ0T9B78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTQxMDIwMzFaFw0yNjExMTMxMDI1MzFaMDMxMTAvBgNV BAMTKEQ4RkMwOTVEMEI0M0Y4RUM5MjBBNjZGM0ZFMUQ3MEE3OUVGNjBDNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLt3C7IM2vl4LUCjapmUfA9RNM V8W4fon/DcYGmLGtpNmdoRA2R5pKXRkK2TKsi9Rujc9szwCa7RpaAx9uZ9HBZXOH 6uPTFc9uKHijH8+c1ki+s362mYbEC+yAsKj8lWkLQEAoQX/JYMiCTvbPtJxKIzZL vzN54CV1Nu87uRh66FrNczwi4dhVqQITTRDZ6oDbayjoVjbhMNHo8qdLKOZ3rXXB B5s+eDuJSWrIYBF6ilyyby70EVUWgbqks3K/Kcmrq100w4OLXlGnIs7CDKbD0a+W sxeaqgxFs8aPLD2VWBNaep8O6Lk2W1N1P3wFeWwPCZR5IlKqWGeDJaMwSR1lAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU2PwJXQtD+OySCmbz/h1wp572DHgwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNDM0 MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1EosMA0G CSqGSIb3DQEBCwUAA4IBAQDSyq767Avn8eJiScGL+/dWWnziWxWkhYA8n6m/wfBS sGCcf4fyC/1PC59Qa3ZlP47AD6SLM2zzFn9/wpjR6qjzsFNelMTUP8GYtGhk48aP l2cuioSlGKf383lLR9TSIhYFBJN5SMcc3m7JeMbjjoWI6ruMeWPAsgmYNzWiNajt 0dmLo5w9LH4ExhDxgwCEMMwdZF00TmndAjYMjNYYhyg3QzVwkKZ5XoCFLwx/mJ2G Azspq8x3/sm8AtIWA71JFSOtsKhtt6d1R+hSEWUzunsDxbj/kkq12o0hGcBumX04 oylgBJf6BzzPqkHfw4rqt685tZ8t5s7riEbK/sQfvtZF -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:44 2025 by rpki-client