This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35362e302f32322d3234203d3e20383334.roa File: 3231322e37342e35362e302f32322d3234203d3e20383334.roa (raw, json) Hash identifier: jWFWXkgGEzDyFbGzdlWX2LXoJglHkjfmQtBe6VTHs1U= Subject key identifier: E3:6B:F7:06:13:0C:FB:4D:C4:9F:6E:B5:C2:EB:87:CC:F2:45:AC:8C Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 37C89866BB81B0F7423992517856476FC2094F49 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35362e302f32322d3234203d3e20383334.roa Signing time: Thu 13 Nov 2025 10:01:44 +0000 ROA not before: Thu 13 Nov 2025 09:56:44 +0000 ROA not after: Thu 12 Nov 2026 10:01:44 +0000 asID: 834 IP address blocks: 212.74.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c8:98:66:bb:81:b0:f7:42:39:92:51:78:56:47:6f:c2:09:4f:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 13 09:56:44 2025 GMT Not After : Nov 12 10:01:44 2026 GMT Subject: CN=E36BF706130CFB4DC49F6EB5C2EB87CCF245AC8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:3c:56:7f:c8:f9:ba:ab:6e:fa:42:ed:4f: f3:b8:c5:45:cd:a3:46:b1:43:e8:97:ca:ec:40:43: 2b:ec:ea:8f:f8:7e:d9:a0:24:b8:20:58:b6:c8:cb: ed:8b:89:b6:9c:88:ef:2f:0f:95:b8:2e:33:f0:cd: 93:a5:cc:1f:bd:ae:ee:21:a5:32:77:d0:8b:22:82: 87:bc:b2:ac:a7:a0:a8:85:0d:d8:b3:c7:db:3f:eb: 16:13:d7:c5:ec:f4:7d:f0:e2:46:4f:14:82:5c:18: 95:e2:94:98:c8:40:c2:d5:21:72:4d:3a:43:aa:e2: cb:94:89:d1:79:bd:a9:e1:ec:48:36:fb:c8:6c:47: 17:9f:58:c4:77:41:f5:63:e3:02:48:42:dd:4d:e2: bf:94:7a:13:f2:a6:37:3a:27:55:1b:38:f2:17:6d: 1c:96:f5:62:2a:ab:fd:a1:8e:b7:50:0c:6b:8b:96: 71:3a:5f:c0:bf:a9:81:4f:d3:65:de:40:83:53:0b: e8:36:28:d5:72:6e:83:31:2f:d1:6c:40:9e:00:ff: 22:41:c2:da:95:d1:18:aa:68:71:81:ff:20:2a:71: a6:72:c1:cd:c7:fd:91:bc:b4:91:6d:94:d7:7d:d4: 2c:47:0e:27:1d:eb:3b:d8:82:5c:c1:82:e4:7d:9d: 04:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6B:F7:06:13:0C:FB:4D:C4:9F:6E:B5:C2:EB:87:CC:F2:45:AC:8C X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35362e302f32322d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.56.0/22 Signature Algorithm: sha256WithRSAEncryption a9:e7:b2:d3:b3:e2:c8:5b:e8:28:7e:1d:4b:80:f5:51:46:35: 94:c5:ee:e8:b1:62:22:73:82:bf:6f:cc:f2:32:9e:75:72:f5: 54:23:c9:34:8e:90:1a:d1:9d:46:2d:5b:f2:33:2c:41:70:12: 44:e0:ec:b7:22:4f:41:e5:ff:1c:1f:80:00:11:44:37:ae:3b: 33:2c:ba:48:11:cc:14:1f:57:f2:00:3d:37:69:d0:ca:b0:c9: ca:32:ca:5f:e1:28:a2:ce:1e:d9:dd:76:07:5a:9b:61:9c:38: 43:c0:de:b5:ff:df:db:ed:8e:63:8b:57:51:d1:2a:80:19:11: 1f:55:ff:0a:44:e5:6e:2b:70:6a:3b:bd:ab:7e:6e:1c:55:9a: 21:bf:63:0d:e2:eb:ca:97:d0:7a:38:eb:6d:78:e6:70:32:34: 1a:69:07:61:ed:be:09:ec:89:57:f8:3f:7c:96:dc:54:1a:ef: 5b:86:f4:e7:0c:10:36:3b:ac:ba:c3:76:1c:6f:e8:27:5d:0c: 1b:cb:56:0b:b4:a2:31:a6:1d:32:8d:ed:34:c0:06:f0:62:61: 89:70:b2:47:8f:d5:40:0c:17:7a:ef:bf:e2:1f:8b:4f:ff:dd: e1:c0:7f:34:0e:59:65:72:48:d2:f0:9e:59:84:71:11:a2:e9: e6:5c:5e:4c -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUN8iYZruBsPdCOZJReFZHb8IJT0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTMwOTU2NDRaFw0yNjExMTIxMDAxNDRaMDMxMTAvBgNV BAMTKEUzNkJGNzA2MTMwQ0ZCNERDNDlGNkVCNUMyRUI4N0NDRjI0NUFDOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vDxWf8j5uqtu+kLtT/O4xUXN o0axQ+iXyuxAQyvs6o/4ftmgJLggWLbIy+2LibaciO8vD5W4LjPwzZOlzB+9ru4h pTJ30Isigoe8sqynoKiFDdizx9s/6xYT18Xs9H3w4kZPFIJcGJXilJjIQMLVIXJN OkOq4suUidF5vanh7Eg2+8hsRxefWMR3QfVj4wJIQt1N4r+UehPypjc6J1UbOPIX bRyW9WIqq/2hjrdQDGuLlnE6X8C/qYFP02XeQINTC+g2KNVyboMxL9FsQJ4A/yJB wtqV0RiqaHGB/yAqcaZywc3H/ZG8tJFtlNd91CxHDicd6zvYglzBguR9nQRdAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU42v3BhMM+03En261wuuHzPJFrIwwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNTM2 MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1Eo4MA0G CSqGSIb3DQEBCwUAA4IBAQCp57LTs+LIW+gofh1LgPVRRjWUxe7osWIic4K/b8zy Mp51cvVUI8k0jpAa0Z1GLVvyMyxBcBJE4Oy3Ik9B5f8cH4AAEUQ3rjszLLpIEcwU H1fyAD03adDKsMnKMspf4Siizh7Z3XYHWpthnDhDwN61/9/b7Y5ji1dR0SqAGREf Vf8KROVuK3BqO72rfm4cVZohv2MN4uvKl9B6OOtteOZwMjQaaQdh7b4J7IlX+D98 ltxUGu9bhvTnDBA2O6y6w3Ycb+gnXQwby1YLtKIxph0yje00wAbwYmGJcLJHj9VA DBd677/iH4tP/93hwH80DlllckjS8J5ZhHERounmXF5M -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:42 2025 by rpki-client