This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e36312e302f32342d3234203d3e20383334.roa File: 3231322e37342e36312e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: rat/LL5/H+FNdHGzcg4DPrBChUJGwGzC1U4ONNItvRU= Subject key identifier: 4B:4D:AB:06:5C:DD:25:48:F6:39:26:15:35:A0:2C:6A:C5:BD:B9:44 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 10DBF1F81BFFF713BDD87B17A31AD3AC51E50954 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e36312e302f32342d3234203d3e20383334.roa Signing time: Thu 13 Nov 2025 10:01:44 +0000 ROA not before: Thu 13 Nov 2025 09:56:44 +0000 ROA not after: Thu 12 Nov 2026 10:01:44 +0000 asID: 834 IP address blocks: 212.74.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:db:f1:f8:1b:ff:f7:13:bd:d8:7b:17:a3:1a:d3:ac:51:e5:09:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 13 09:56:44 2025 GMT Not After : Nov 12 10:01:44 2026 GMT Subject: CN=4B4DAB065CDD2548F639261535A02C6AC5BDB944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d2:fb:cf:5c:d5:44:e0:77:b7:dd:e5:48:d6: e3:2c:86:90:82:fb:a2:1c:16:a9:e4:47:63:b1:4e: 28:cb:9f:c3:1c:d1:cc:7a:31:e3:b5:ca:ed:fa:8d: 41:16:96:41:eb:31:27:29:6d:b4:13:f4:26:45:b3: 18:08:2d:b0:37:e8:35:60:12:d4:d1:d8:9c:f2:e9: 8b:71:25:d5:68:4b:90:1b:3a:e0:1e:74:f8:17:b9: 73:dc:49:b3:32:79:ad:c6:00:cd:11:b3:4f:5e:e3: 07:24:23:3a:7d:5a:57:31:2e:bc:35:bd:2f:42:1b: 72:fc:71:86:1f:7e:1f:92:c3:26:fd:7a:5d:6f:4e: 1e:57:e5:01:c3:d8:f0:22:47:df:f1:35:0d:b5:9f: a6:bc:26:75:76:e5:4d:bc:95:90:47:c7:be:4d:61: 2d:7b:fa:d3:27:a1:f8:59:7e:52:92:8c:3c:01:46: 8e:70:20:3f:4e:b0:e6:13:d4:b8:ab:fd:17:99:5a: 95:9f:a4:12:88:38:24:44:8e:ea:22:5e:2f:86:0b: 1e:3d:ce:fb:29:63:d1:4a:35:7b:48:7c:57:45:e2: da:89:f6:7d:f7:4c:31:b4:fd:bd:90:7b:f7:ba:10: 02:c9:19:21:e5:46:d3:1a:a4:27:ee:7a:01:7a:aa: dc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4D:AB:06:5C:DD:25:48:F6:39:26:15:35:A0:2C:6A:C5:BD:B9:44 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e36312e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.61.0/24 Signature Algorithm: sha256WithRSAEncryption d8:cb:ac:d2:27:da:6f:cd:6c:c4:54:a2:fb:92:de:24:56:24: 8e:b8:1d:00:7f:50:8f:cb:2e:a5:6d:6f:e6:24:2b:46:60:d7: 2a:2d:9d:9e:46:d0:34:7f:1e:04:27:53:2e:f2:dd:26:c5:5a: 62:e9:fa:72:c8:60:16:b1:3b:db:6a:0b:69:e1:2c:98:4e:dd: 43:85:87:1c:8a:b8:df:96:7a:5c:a8:b5:ec:f7:c7:80:65:a7: fd:98:4c:72:60:35:f1:38:09:6a:11:ec:05:76:26:11:33:bd: 7f:30:81:d7:07:38:4c:66:47:5e:bd:8a:03:13:0a:f7:78:d2: 5d:21:37:0a:47:8c:10:1a:3d:0c:0c:bf:03:4b:4f:38:10:b4: 5b:52:8d:3f:d4:df:40:83:17:f1:b8:42:fe:92:89:14:48:6e: 7f:af:48:55:88:ca:73:aa:ce:c1:4f:71:b0:9b:07:72:f8:ba: 3f:ee:3f:4e:19:81:cb:fa:4e:6b:1d:d8:67:20:75:15:4b:2c: 6a:84:60:33:ce:6d:b2:17:e1:31:3b:35:f6:b9:0f:e3:d8:30: a7:af:0f:80:17:1c:64:31:03:b4:67:a0:2b:f4:38:f4:7e:b7: 73:e4:d1:74:13:39:67:f5:67:fe:44:9b:a1:60:05:6d:4e:c4: 94:ec:1c:14 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUENvx+Bv/9xO92HsXoxrTrFHlCVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTMwOTU2NDRaFw0yNjExMTIxMDAxNDRaMDMxMTAvBgNV BAMTKDRCNERBQjA2NUNERDI1NDhGNjM5MjYxNTM1QTAyQzZBQzVCREI5NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC60vvPXNVE4He33eVI1uMshpCC +6IcFqnkR2OxTijLn8Mc0cx6MeO1yu36jUEWlkHrMScpbbQT9CZFsxgILbA36DVg EtTR2Jzy6YtxJdVoS5AbOuAedPgXuXPcSbMyea3GAM0Rs09e4wckIzp9WlcxLrw1 vS9CG3L8cYYffh+Swyb9el1vTh5X5QHD2PAiR9/xNQ21n6a8JnV25U28lZBHx75N YS17+tMnofhZflKSjDwBRo5wID9OsOYT1Lir/ReZWpWfpBKIOCREjuoiXi+GCx49 zvspY9FKNXtIfFdF4tqJ9n33TDG0/b2Qe/e6EALJGSHlRtMapCfuegF6qtzJAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUS02rBlzdJUj2OSYVNaAsasW9uUQwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNjMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Eo9MA0G CSqGSIb3DQEBCwUAA4IBAQDYy6zSJ9pvzWzEVKL7kt4kViSOuB0Af1CPyy6lbW/m JCtGYNcqLZ2eRtA0fx4EJ1Mu8t0mxVpi6fpyyGAWsTvbagtp4SyYTt1DhYccirjf lnpcqLXs98eAZaf9mExyYDXxOAlqEewFdiYRM71/MIHXBzhMZkdevYoDEwr3eNJd ITcKR4wQGj0MDL8DS084ELRbUo0/1N9AgxfxuEL+kokUSG5/r0hViMpzqs7BT3Gw mwdy+Lo/7j9OGYHL+k5rHdhnIHUVSyxqhGAzzm2yF+ExOzX2uQ/j2DCnrw+AFxxk MQO0Z6Ar9Dj0frdz5NF0Ezln9Wf+RJuhYAVtTsSU7BwU -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:43 2025 by rpki-client