This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34382e302f32312d3234203d3e20383334.roa File: 3231322e37342e34382e302f32312d3234203d3e20383334.roa (raw, json) Hash identifier: Td+J869St+dhm4LWIAGWNXZmf3uOkE9PSOXuPVKIF3U= Subject key identifier: D6:B1:6F:EE:E6:69:D4:63:FA:E3:4D:70:59:8A:78:B8:6E:D6:65:05 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 7F057EAD88AF17B332612CFD6318B323C6AF25F7 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34382e302f32312d3234203d3e20383334.roa Signing time: Thu 13 Nov 2025 10:01:44 +0000 ROA not before: Thu 13 Nov 2025 09:56:44 +0000 ROA not after: Thu 12 Nov 2026 10:01:44 +0000 asID: 834 IP address blocks: 212.74.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:05:7e:ad:88:af:17:b3:32:61:2c:fd:63:18:b3:23:c6:af:25:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 13 09:56:44 2025 GMT Not After : Nov 12 10:01:44 2026 GMT Subject: CN=D6B16FEEE669D463FAE34D70598A78B86ED66505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a1:8b:6a:69:56:63:bd:42:7f:f1:b9:58:77: d4:54:6f:cc:d2:73:22:de:3b:00:41:e3:20:0b:94: e5:fc:04:ce:4f:b6:36:84:f8:47:d2:10:8a:88:22: c6:9d:21:6a:a6:b0:f7:44:e9:3f:1e:9e:3f:bd:f1: 66:10:83:3d:42:d4:9e:a2:6e:5f:22:ce:51:57:94: fd:8e:63:4e:c8:ed:38:03:c3:58:f1:51:99:4a:fd: 5a:c3:7e:8a:89:63:79:9d:db:40:fb:2e:f1:6c:40: 48:a3:73:08:0c:64:90:9b:b4:5a:b9:18:d3:61:7a: 61:c5:3a:07:4b:d2:30:e2:54:c8:82:57:11:c1:86: f0:d9:6a:af:e5:b8:f1:4f:f3:42:0e:c1:9c:a8:a6: ac:74:9b:da:e1:b1:06:ec:16:66:4f:2b:55:33:82: 64:c6:19:c5:ab:45:64:22:ed:db:60:41:c9:86:90: d2:95:43:18:c3:f7:30:a8:a2:f4:c0:a6:b2:d4:83: 4d:75:a2:b9:27:a1:f5:10:f3:cd:cd:94:5a:0d:b3: 28:56:9c:de:1e:02:33:1e:98:be:49:1d:a9:a7:14: 0c:61:f6:f4:a2:33:7a:41:69:78:ef:75:20:6d:dc: 1c:2f:71:da:70:38:09:a8:fb:cb:a0:cc:56:fa:1d: 77:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B1:6F:EE:E6:69:D4:63:FA:E3:4D:70:59:8A:78:B8:6E:D6:65:05 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34382e302f32312d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.48.0/21 Signature Algorithm: sha256WithRSAEncryption 8b:26:4b:5f:ae:82:a6:10:93:d3:7c:65:0b:d3:41:29:a6:4b: 70:b9:7d:8b:94:c2:50:7f:7c:ed:24:cd:05:10:81:37:b8:5f: 4b:be:69:d2:ec:cb:a8:07:06:6b:b5:d8:5e:ff:e2:ea:ab:d7: ca:0b:6d:ea:f3:3a:65:8a:b7:48:a8:17:09:5b:8a:55:24:b2: 7f:c9:28:6b:f5:a6:cf:74:0b:d9:e6:10:5d:8f:b6:74:62:df: 95:27:58:40:d1:45:34:c4:3e:a5:84:f5:38:1c:f6:0c:89:33: 95:3c:4d:d1:ce:ea:72:ed:8d:f3:99:e2:dd:a5:57:dc:57:63: 81:28:59:89:94:4a:fc:0c:b6:92:e9:c9:5c:64:e8:06:26:bb: 1d:2c:c1:b5:03:f8:f0:79:8c:20:58:fa:23:16:70:71:59:7d: d7:1c:9f:4b:51:8d:ee:6e:2c:d0:fb:9e:b2:e3:d7:43:d5:8c: 1b:ba:54:47:53:12:a4:ed:aa:ed:f9:e9:af:97:ed:ae:a7:1e: bf:33:61:a8:e9:d4:60:ee:77:11:1e:fb:72:f6:1b:88:2c:28: ec:88:b9:d3:8c:42:8e:b1:2b:6c:89:f7:ca:1c:57:79:c8:2c: 8a:35:f7:5c:28:33:78:34:d8:5c:d9:2b:13:21:8c:59:a2:54: 6c:63:5b:b7 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUfwV+rYivF7MyYSz9YxizI8avJfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTMwOTU2NDRaFw0yNjExMTIxMDAxNDRaMDMxMTAvBgNV BAMTKEQ2QjE2RkVFRTY2OUQ0NjNGQUUzNEQ3MDU5OEE3OEI4NkVENjY1MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFoYtqaVZjvUJ/8blYd9RUb8zS cyLeOwBB4yALlOX8BM5PtjaE+EfSEIqIIsadIWqmsPdE6T8enj+98WYQgz1C1J6i bl8izlFXlP2OY07I7TgDw1jxUZlK/VrDfoqJY3md20D7LvFsQEijcwgMZJCbtFq5 GNNhemHFOgdL0jDiVMiCVxHBhvDZaq/luPFP80IOwZyopqx0m9rhsQbsFmZPK1Uz gmTGGcWrRWQi7dtgQcmGkNKVQxjD9zCoovTAprLUg011orknofUQ883NlFoNsyhW nN4eAjMemL5JHamnFAxh9vSiM3pBaXjvdSBt3BwvcdpwOAmo+8ugzFb6HXf/AgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU1rFv7uZp1GP6401wWYp4uG7WZQUwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNDM4 MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1EowMA0G CSqGSIb3DQEBCwUAA4IBAQCLJktfroKmEJPTfGUL00EppktwuX2LlMJQf3ztJM0F EIE3uF9LvmnS7MuoBwZrtdhe/+Lqq9fKC23q8zplirdIqBcJW4pVJLJ/yShr9abP dAvZ5hBdj7Z0Yt+VJ1hA0UU0xD6lhPU4HPYMiTOVPE3Rzupy7Y3zmeLdpVfcV2OB KFmJlEr8DLaS6clcZOgGJrsdLMG1A/jweYwgWPojFnBxWX3XHJ9LUY3ubizQ+56y 49dD1YwbulRHUxKk7art+emvl+2upx6/M2Go6dRg7ncRHvty9huILCjsiLnTjEKO sStsiffKHFd5yCyKNfdcKDN4NNhc2SsTIYxZolRsY1u3 -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:44 2025 by rpki-client