This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e36302e302f32342d3234203d3e203136323736.roa File: 3231322e37342e36302e302f32342d3234203d3e203136323736.roa (raw, json) Hash identifier: LfsfjRYplHNXIuKxg8KjUxNxR2TAxr0H5Pi7YQ3PchE= Subject key identifier: BF:B8:8A:D3:49:C0:35:FA:46:3F:C1:AC:76:02:E0:CF:FE:7A:7C:AD Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 4AA50F5E2FD6197EC021D8817DDBD61154ED2D56 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e36302e302f32342d3234203d3e203136323736.roa Signing time: Thu 13 Nov 2025 10:01:03 +0000 ROA not before: Thu 13 Nov 2025 09:56:03 +0000 ROA not after: Thu 12 Nov 2026 10:01:03 +0000 asID: 16276 IP address blocks: 212.74.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a5:0f:5e:2f:d6:19:7e:c0:21:d8:81:7d:db:d6:11:54:ed:2d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 13 09:56:03 2025 GMT Not After : Nov 12 10:01:03 2026 GMT Subject: CN=BFB88AD349C035FA463FC1AC7602E0CFFE7A7CAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f3:02:eb:89:89:ef:44:c6:93:d6:bc:63:1d: cb:59:8c:87:ae:3d:00:35:a4:2b:37:3e:35:4b:25: 3d:e2:67:3e:14:92:92:40:a3:a7:b6:18:5f:09:fe: 07:5c:cf:8d:8f:b1:a9:75:ef:9d:68:f7:f6:59:32: a4:56:0b:a9:86:df:9e:0e:42:15:48:8b:b9:e7:9a: 3b:99:de:b4:67:03:ca:24:2b:01:6e:c5:f6:fd:50: f9:d5:30:fa:f1:98:0c:f7:a6:4e:8b:25:4a:f6:6d: 5e:f9:45:50:c2:4f:ca:2e:f2:7c:cc:50:80:92:24: 08:cf:17:6f:d4:ea:62:27:b1:af:88:b5:20:99:4d: 9b:70:66:7b:60:3d:7a:3e:a5:d7:7b:8b:5e:dc:8e: 61:2d:7f:af:83:65:a1:27:33:49:4c:65:f7:1d:69: d7:9f:a3:6f:c0:79:b1:93:df:6f:7c:34:c9:d6:fc: 1b:21:9b:9f:5d:f0:dc:6a:9d:a0:44:36:3d:ea:1a: 70:c5:a1:69:41:8b:b6:f5:31:a0:ef:ba:9d:c7:00: 38:54:33:75:db:dc:2d:b2:08:fd:b8:bc:12:34:47: f5:b7:e9:a3:f1:84:21:78:5c:3e:94:87:0c:72:b6: 90:b7:51:32:c8:bc:67:b3:24:d0:6f:63:f5:ff:5c: b9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B8:8A:D3:49:C0:35:FA:46:3F:C1:AC:76:02:E0:CF:FE:7A:7C:AD X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e36302e302f32342d3234203d3e203136323736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.60.0/24 Signature Algorithm: sha256WithRSAEncryption 67:1f:d3:5a:0a:b2:24:ab:94:b6:c9:6b:11:2d:32:92:37:6f: a5:34:3f:8d:84:c0:d9:93:8f:1d:78:db:bc:19:58:84:9a:99: 9f:06:4e:1b:f1:4a:44:44:7b:ec:ee:78:d0:63:8e:4b:92:22: 2d:30:96:25:40:6c:f8:7c:39:a4:f0:ee:ba:1f:c6:b8:9c:b8: 2b:c7:06:55:e5:a5:51:5b:31:1a:9d:e9:06:8d:ef:80:3e:da: f5:f8:ac:aa:30:6d:db:c1:c1:00:10:32:42:88:dd:9c:dc:fe: a7:e1:1a:33:ec:2d:91:01:a7:bc:60:00:17:03:c4:00:1b:48: 1b:04:88:82:e5:1c:e0:66:20:68:7f:31:c2:9a:29:a0:9f:d2: c8:b2:0f:fc:35:c4:ef:e7:5f:e6:a3:e8:3d:56:a8:26:dc:eb: 23:2d:cc:65:19:4e:3f:8a:f3:0b:de:37:9b:8b:26:60:3e:05: e2:21:e8:e4:1b:d3:2d:c7:13:09:50:21:c6:95:3d:c7:02:7c: c2:e6:17:2f:0c:eb:52:71:3d:61:e2:5a:ca:61:cd:a8:0a:7c: 09:f4:08:03:11:dd:6e:5d:c3:d3:67:d6:d9:f8:81:86:9b:2d: 34:d0:8a:c8:2d:8f:7f:97:8e:13:d2:43:17:a2:1f:15:ec:92: 17:00:a9:bb -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUSqUPXi/WGX7AIdiBfdvWEVTtLVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTMwOTU2MDNaFw0yNjExMTIxMDAxMDNaMDMxMTAvBgNV BAMTKEJGQjg4QUQzNDlDMDM1RkE0NjNGQzFBQzc2MDJFMENGRkU3QTdDQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa8wLriYnvRMaT1rxjHctZjIeu PQA1pCs3PjVLJT3iZz4UkpJAo6e2GF8J/gdcz42Psal1751o9/ZZMqRWC6mG354O QhVIi7nnmjuZ3rRnA8okKwFuxfb9UPnVMPrxmAz3pk6LJUr2bV75RVDCT8ou8nzM UICSJAjPF2/U6mInsa+ItSCZTZtwZntgPXo+pdd7i17cjmEtf6+DZaEnM0lMZfcd adefo2/AebGT3298NMnW/Bshm59d8NxqnaBENj3qGnDFoWlBi7b1MaDvup3HADhU M3Xb3C2yCP24vBI0R/W36aPxhCF4XD6UhwxytpC3UTLIvGezJNBvY/X/XLlzAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUv7iK00nANfpGP8GsdgLgz/56fK0wHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNjMw MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNjMyMzczNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRK PDANBgkqhkiG9w0BAQsFAAOCAQEAZx/TWgqyJKuUtslrES0ykjdvpTQ/jYTA2ZOP HXjbvBlYhJqZnwZOG/FKRER77O540GOOS5IiLTCWJUBs+Hw5pPDuuh/GuJy4K8cG VeWlUVsxGp3pBo3vgD7a9fisqjBt28HBABAyQojdnNz+p+EaM+wtkQGnvGAAFwPE ABtIGwSIguUc4GYgaH8xwpopoJ/SyLIP/DXE7+df5qPoPVaoJtzrIy3MZRlOP4rz C943m4smYD4F4iHo5BvTLccTCVAhxpU9xwJ8wuYXLwzrUnE9YeJaymHNqAp8CfQI AxHdbl3D02fW2fiBhpstNNCKyC2Pf5eOE9JDF6IfFeySFwCpuw== -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:48 2025 by rpki-client