This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34362e302f32342d3234203d3e20383334.roa File: 3231322e37342e34362e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: KfJI73ZD+uvgJ48Ob17/ZJXQ7VzBwmqCLnEln/1uBVY= Subject key identifier: 4E:A3:DE:86:B8:91:1B:B7:CA:F9:8D:D0:EA:DC:DE:F7:21:5F:82:57 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 0B8890EB7A12BAD96291B36B0553E6505BB43840 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34362e302f32342d3234203d3e20383334.roa Signing time: Fri 14 Nov 2025 10:25:31 +0000 ROA not before: Fri 14 Nov 2025 10:20:31 +0000 ROA not after: Fri 13 Nov 2026 10:25:31 +0000 asID: 834 IP address blocks: 212.74.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:88:90:eb:7a:12:ba:d9:62:91:b3:6b:05:53:e6:50:5b:b4:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 14 10:20:31 2025 GMT Not After : Nov 13 10:25:31 2026 GMT Subject: CN=4EA3DE86B8911BB7CAF98DD0EADCDEF7215F8257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c7:a3:3d:e1:d7:e3:e9:4d:82:b4:a6:b1:a6: f1:93:89:22:c0:62:61:32:82:3d:6f:22:44:8e:45: f4:3a:cd:d8:48:21:60:14:3b:76:69:51:d5:ae:53: d6:dd:a3:51:9d:5f:05:c8:e9:bb:52:fc:31:f5:c5: 38:0c:f5:15:dd:4f:9e:a4:c0:b8:5f:73:8e:92:09: 27:2f:07:c6:46:11:9b:1e:25:ae:2f:64:39:b8:3d: d3:72:0d:5d:a6:c1:b8:d0:45:dc:fb:3e:92:90:30: 53:cf:d0:26:99:38:39:8e:e9:aa:50:29:e9:c7:f7: e2:15:33:ab:ed:7e:2d:c8:c4:02:6f:b6:9e:34:bb: 10:de:b3:c6:c9:5d:38:6b:72:01:c3:1b:c4:7b:65: 13:8e:85:72:9e:b5:97:4f:ad:3f:83:aa:6f:19:8f: 2c:84:f7:f7:51:8c:fc:79:11:fe:8e:00:7c:c0:84: 88:16:b7:6b:f9:c8:04:f1:89:fd:66:3e:d7:10:db: 81:d4:c2:fc:89:60:bb:6b:f6:0e:da:78:00:b8:3c: 24:dc:d5:f6:a5:d6:7a:f2:7f:a4:bc:0e:68:a2:6b: fd:86:82:65:4f:65:50:76:88:a2:14:f5:6b:6d:96: d3:00:81:bc:a9:6a:3f:d1:a9:86:8c:7b:c4:f2:2f: d2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A3:DE:86:B8:91:1B:B7:CA:F9:8D:D0:EA:DC:DE:F7:21:5F:82:57 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34362e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.46.0/24 Signature Algorithm: sha256WithRSAEncryption 13:13:33:ec:af:00:f4:7a:25:f3:fb:77:2c:97:79:b8:61:1b: be:77:a4:63:e5:44:1d:5d:75:e9:74:81:f3:d2:c1:61:95:45: 83:df:74:5f:0c:29:2e:f5:5c:f5:2c:14:cf:45:33:ff:87:75: ad:63:1b:c1:9d:56:bc:c3:89:45:2a:72:83:86:53:1a:6a:e7: ff:74:c9:fc:a1:7c:a4:69:9f:63:c2:16:96:d7:0d:49:81:3d: 26:8c:33:f4:6d:70:56:1f:91:07:ba:bd:34:52:c2:68:63:72: 78:61:ea:21:0b:d5:c8:14:49:26:6c:fb:a2:2c:33:72:df:94: 4b:e6:3a:6b:77:d1:26:a0:18:fb:58:b5:b4:2b:b0:0e:bc:89: a5:4e:d1:75:3b:90:ec:70:8e:3c:03:1f:31:1c:d0:44:07:5d: e4:66:ff:2a:f0:24:b8:d2:26:55:27:e8:02:25:67:52:82:ca: 8a:9d:d4:05:ae:48:c5:3e:9a:97:67:6c:a1:71:15:a4:fb:d7: f1:8a:d3:b7:c9:70:f5:46:93:07:a0:b6:7e:59:8d:ae:31:45: 48:9a:ae:ee:2f:d2:f4:47:8d:59:d2:45:c6:bc:68:c2:e1:6a: 6e:38:06:f6:b8:e9:3f:06:6d:42:08:21:03:56:d0:bd:78:f6: ab:05:be:6f -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUC4iQ63oSutlikbNrBVPmUFu0OEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTQxMDIwMzFaFw0yNjExMTMxMDI1MzFaMDMxMTAvBgNV BAMTKDRFQTNERTg2Qjg5MTFCQjdDQUY5OEREMEVBRENERUY3MjE1RjgyNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnx6M94dfj6U2CtKaxpvGTiSLA YmEygj1vIkSORfQ6zdhIIWAUO3ZpUdWuU9bdo1GdXwXI6btS/DH1xTgM9RXdT56k wLhfc46SCScvB8ZGEZseJa4vZDm4PdNyDV2mwbjQRdz7PpKQMFPP0CaZODmO6apQ KenH9+IVM6vtfi3IxAJvtp40uxDes8bJXThrcgHDG8R7ZROOhXKetZdPrT+Dqm8Z jyyE9/dRjPx5Ef6OAHzAhIgWt2v5yATxif1mPtcQ24HUwvyJYLtr9g7aeAC4PCTc 1fal1nryf6S8Dmiia/2GgmVPZVB2iKIU9WttltMAgbypaj/RqYaMe8TyL9JHAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUTqPehriRG7fK+Y3Q6tze9yFfglcwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNDM2 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EouMA0G CSqGSIb3DQEBCwUAA4IBAQATEzPsrwD0eiXz+3csl3m4YRu+d6Rj5UQdXXXpdIHz 0sFhlUWD33RfDCku9Vz1LBTPRTP/h3WtYxvBnVa8w4lFKnKDhlMaauf/dMn8oXyk aZ9jwhaW1w1JgT0mjDP0bXBWH5EHur00UsJoY3J4YeohC9XIFEkmbPuiLDNy35RL 5jprd9EmoBj7WLW0K7AOvImlTtF1O5DscI48Ax8xHNBEB13kZv8q8CS40iZVJ+gC JWdSgsqKndQFrkjFPpqXZ2yhcRWk+9fxitO3yXD1RpMHoLZ+WY2uMUVImq7uL9L0 R41Z0kXGvGjC4WpuOAb2uOk/Bm1CCCEDVtC9eParBb5v -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:44 2025 by rpki-client