This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/3230362e35332e302e302f32342d3234203d3e20323038393135.roa File: 3230362e35332e302e302f32342d3234203d3e20323038393135.roa (raw, json) Hash identifier: WAuGwGix52TOMRQkik+jyE1rcWEn8673KCYGvlhnhXY= Subject key identifier: 7F:08:5B:76:26:58:ED:AA:2E:8A:43:B5:3E:F2:41:45:1E:75:A9:BE Certificate issuer: /CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Certificate serial: 22A7AF43B27145005CE797F033F8D36B1D439C2B Authority key identifier: AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/3230362e35332e302e302f32342d3234203d3e20323038393135.roa Signing time: Sat 15 Nov 2025 18:32:06 +0000 ROA not before: Sat 15 Nov 2025 18:27:06 +0000 ROA not after: Sat 14 Nov 2026 18:32:06 +0000 asID: 208915 IP address blocks: 206.53.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a7:af:43:b2:71:45:00:5c:e7:97:f0:33:f8:d3:6b:1d:43:9c:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Validity Not Before: Nov 15 18:27:06 2025 GMT Not After : Nov 14 18:32:06 2026 GMT Subject: CN=7F085B762658EDAA2E8A43B53EF241451E75A9BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a4:53:63:fc:f8:53:0a:ee:22:82:e9:51:e6: c1:94:b3:f4:30:da:ac:4f:c8:8c:89:0b:00:ca:fe: a5:e3:02:96:6d:87:f2:44:c0:ae:69:13:cf:ec:e8: 9a:df:7b:81:99:f0:54:33:28:aa:9b:16:ab:75:ec: 76:20:22:a9:f5:dc:be:fb:8c:c5:93:bc:67:78:62: 00:fd:40:b8:81:f9:80:43:b2:2d:72:b8:20:a7:53: ab:0f:2f:a2:59:45:df:e8:ba:30:ad:ca:54:78:93: c8:99:f2:70:81:84:76:94:df:50:c6:10:24:87:45: e8:de:d4:4f:e2:65:98:f8:99:1b:dd:39:9f:ca:b2: b1:ff:29:4b:76:50:d9:2e:a7:40:7d:bc:a1:b0:ad: da:3e:54:3e:fa:77:93:0e:09:4d:93:6b:c8:2e:a8: 61:0d:be:91:65:96:75:48:be:5d:72:f4:11:67:67: 0b:82:3b:6f:ed:b8:68:63:27:4b:14:98:15:7e:fc: 49:29:20:68:17:72:b0:da:92:9d:01:74:63:5d:7b: fc:6c:a0:08:99:d6:a3:e0:d9:55:c1:c3:ac:81:cb: f9:b8:1d:30:9f:62:e8:fe:2f:64:a1:80:bc:c9:c7: d7:d6:39:d4:ba:4f:b8:19:ce:4c:df:6a:17:a5:1c: de:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:08:5B:76:26:58:ED:AA:2E:8A:43:B5:3E:F2:41:45:1E:75:A9:BE X509v3 Authority Key Identifier: keyid:AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/3230362e35332e302e302f32342d3234203d3e20323038393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.53.0.0/24 Signature Algorithm: sha256WithRSAEncryption 12:fa:4d:37:0c:a7:b8:28:c1:4a:ac:18:c4:f5:1b:b3:dd:ae: 9a:36:32:5f:e7:34:4b:c6:ed:8f:58:c6:f4:56:74:bc:bb:d3: 0f:bb:04:6a:99:b7:6b:93:38:d3:8d:ee:4b:35:d5:f6:0d:38: 1d:8a:50:4a:b9:b4:de:69:f8:46:ff:b8:9c:c7:d7:05:b5:fa: e8:5e:1d:68:4d:04:0a:ab:8d:70:71:c9:94:f0:13:fb:f8:bc: b5:30:f7:55:d4:d9:51:f0:f1:3b:3b:b6:b7:32:f7:09:cf:2d: fc:aa:17:aa:4c:2f:e7:cb:4d:9f:ab:25:e5:be:a6:84:1f:23: b3:05:a1:8c:48:36:0c:bf:8e:56:e8:84:75:3a:28:69:39:80: 2c:1b:68:1e:b5:b5:ec:fd:2c:8f:74:62:a9:48:43:3f:99:4f: 26:d0:c2:87:58:ba:77:28:dc:c1:53:99:b0:a9:08:6f:5b:40: 11:84:93:de:05:4f:67:86:e3:4c:46:36:53:11:91:5a:8d:c6: e1:3f:b4:e5:a7:27:a3:35:90:cc:78:2a:cb:0b:1b:6d:de:1e: dc:23:ff:65:72:ae:4b:b2:1c:cc:83:96:1d:c5:24:6b:33:6c: 39:30:4c:c8:c9:ee:2e:ad:f4:e7:dd:a8:22:4c:aa:9b:3b:84: c9:4e:de:6c -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUIqevQ7JxRQBc55fwM/jTax1DnCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0Ex QTI4QjMyNDAeFw0yNTExMTUxODI3MDZaFw0yNjExMTQxODMyMDZaMDMxMTAvBgNV BAMTKDdGMDg1Qjc2MjY1OEVEQUEyRThBNDNCNTNFRjI0MTQ1MUU3NUE5QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClpFNj/PhTCu4igulR5sGUs/Qw 2qxPyIyJCwDK/qXjApZth/JEwK5pE8/s6Jrfe4GZ8FQzKKqbFqt17HYgIqn13L77 jMWTvGd4YgD9QLiB+YBDsi1yuCCnU6sPL6JZRd/oujCtylR4k8iZ8nCBhHaU31DG ECSHReje1E/iZZj4mRvdOZ/KsrH/KUt2UNkup0B9vKGwrdo+VD76d5MOCU2Ta8gu qGENvpFllnVIvl1y9BFnZwuCO2/tuGhjJ0sUmBV+/EkpIGgXcrDakp0BdGNde/xs oAiZ1qPg2VXBw6yBy/m4HTCfYuj+L2ShgLzJx9fWOdS6T7gZzkzfahelHN5RAgMB AAGjggJrMIICZzAdBgNVHQ4EFgQUfwhbdiZY7aouikO1PvJBRR51qb4wHwYDVR0j BBgwFoAUrH+bwwwEs6I2vfikMIaeyhoosyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAtZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5 MTE2LzEvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4QjMyNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4 QjMyNC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAt ZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5MTE2LzEvMzIzMDM2MmUzNTMzMmUzMDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzODM5MzEzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAM41 ADANBgkqhkiG9w0BAQsFAAOCAQEAEvpNNwynuCjBSqwYxPUbs92umjYyX+c0S8bt j1jG9FZ0vLvTD7sEapm3a5M4043uSzXV9g04HYpQSrm03mn4Rv+4nMfXBbX66F4d aE0ECquNcHHJlPAT+/i8tTD3VdTZUfDxOzu2tzL3Cc8t/KoXqkwv58tNn6sl5b6m hB8jswWhjEg2DL+OVuiEdTooaTmALBtoHrW17P0sj3RiqUhDP5lPJtDCh1i6dyjc wVOZsKkIb1tAEYST3gVPZ4bjTEY2UxGRWo3G4T+05acnozWQzHgqywsbbd4e3CP/ ZXKuS7IczIOWHcUkazNsOTBMyMnuLq30592oIkyqmzuEyU7ebA== -----END CERTIFICATE-----Generated at Sat Nov 22 21:57:58 2025 by rpki-client