This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36352e302f32342d3234203d3e20323035383836.roa File: 3231332e3133392e36352e302f32342d3234203d3e20323035383836.roa (raw, json) Hash identifier: TLjNf6jdRZO58fxugLhMHgmUmrBaMgZk1lVvehOQHy0= Subject key identifier: 27:AC:A5:C5:A3:3D:81:3A:3A:11:A9:B3:AB:C3:21:75:7E:EA:CD:DE Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e Certificate serial: 4B6243F53ECF073C1D79F77044DD3A1F4948A75E Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36352e302f32342d3234203d3e20323035383836.roa Signing time: Wed 05 Nov 2025 05:34:17 +0000 ROA not before: Wed 05 Nov 2025 05:29:17 +0000 ROA not after: Wed 04 Nov 2026 05:34:17 +0000 asID: 205886 IP address blocks: 213.139.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:62:43:f5:3e:cf:07:3c:1d:79:f7:70:44:dd:3a:1f:49:48:a7:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e Validity Not Before: Nov 5 05:29:17 2025 GMT Not After : Nov 4 05:34:17 2026 GMT Subject: CN=27ACA5C5A33D813A3A11A9B3ABC321757EEACDDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:32:79:0e:fc:2e:32:ef:4e:01:d1:25:ad:7f: 66:09:e9:f9:4c:00:6f:22:3c:c7:3a:60:c5:ee:0e: ff:93:7a:ed:87:8f:45:dc:6b:fd:ae:94:8a:6c:19: 53:38:50:66:b3:05:54:19:21:fd:01:e6:23:49:14: cf:81:5a:b0:76:46:1f:e5:8a:f3:01:c7:01:28:c1: 47:1d:93:4c:1b:b4:73:6b:cd:7f:67:28:58:4d:10: 32:aa:de:08:2c:5c:9b:70:19:bc:38:85:d1:ea:f7: 63:b3:b3:1b:dd:27:79:60:4c:a8:fa:f4:12:ea:dc: 57:c2:ee:35:58:68:de:9e:46:e4:8e:ee:ac:13:70: 3a:a4:0a:47:76:a8:69:bf:0f:f9:e7:c1:b1:53:53: 18:50:cc:5a:8c:98:9f:f8:47:1e:e2:5d:bb:0b:c3: a4:a6:b2:ca:cc:f0:91:a5:fc:86:92:c5:44:cc:43: 4f:1c:f6:0d:0c:51:b0:f4:59:69:4a:dc:1e:b2:c0: 1d:7f:65:4b:a7:26:22:e8:32:24:9c:63:76:ad:4f: ab:98:a4:0f:72:59:ce:f8:09:8f:b1:3e:76:85:d9: 70:9f:a0:28:72:f5:5e:fb:51:e5:51:44:84:0a:fd: 95:63:5f:5a:3e:60:28:6f:75:79:15:88:b9:f5:81: 9e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AC:A5:C5:A3:3D:81:3A:3A:11:A9:B3:AB:C3:21:75:7E:EA:CD:DE X509v3 Authority Key Identifier: keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36352e302f32342d3234203d3e20323035383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.139.65.0/24 Signature Algorithm: sha256WithRSAEncryption 35:c9:78:10:fd:10:d8:c7:dc:ce:46:29:a8:3c:e4:16:94:34: 9e:8e:85:75:5e:90:cf:87:03:20:bb:c3:4c:07:f2:ae:63:2c: 89:99:7a:72:16:11:0a:65:23:1c:a9:99:d4:07:2e:6f:9f:a8: 85:c7:c5:b2:a9:31:a3:28:d3:f9:64:7c:ca:9e:d2:89:d3:65: ed:a9:62:48:6f:d3:44:70:10:0a:b0:b4:f3:e9:49:d1:64:83: 85:79:be:26:44:a8:e3:2d:58:21:3a:16:38:1e:47:68:6b:80: 9a:2a:fc:69:69:c2:14:4e:ec:ae:77:c2:96:1f:03:c9:7e:21: 5e:ba:ad:11:30:d3:45:b0:56:cd:11:0f:84:75:d1:d1:a5:58: 74:61:37:5b:36:4b:d9:88:fc:22:b8:3b:48:33:8b:3b:95:20: 35:39:98:7e:b4:5f:83:55:54:69:6f:6d:9c:17:f3:d5:db:11: 0b:25:b6:30:6f:43:60:9c:c2:44:6e:ed:d9:df:a1:0a:69:97: 8e:0e:af:2b:37:65:eb:7a:1e:01:9f:6c:bf:d4:a4:2a:b0:fd: b4:43:94:44:f2:c6:3b:5c:f0:0c:d3:1c:75:45:45:16:5a:1b: d0:51:0c:23:d1:8d:40:42:fb:92:55:b2:eb:55:7a:8c:8e:3e: 48:ff:45:dc -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUS2JD9T7PBzwdefdwRN06H0lIp14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk NDhjN2QzZTAeFw0yNTExMDUwNTI5MTdaFw0yNjExMDQwNTM0MTdaMDMxMTAvBgNV BAMTKDI3QUNBNUM1QTMzRDgxM0EzQTExQTlCM0FCQzMyMTc1N0VFQUNEREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3MnkO/C4y704B0SWtf2YJ6flM AG8iPMc6YMXuDv+Teu2Hj0Xca/2ulIpsGVM4UGazBVQZIf0B5iNJFM+BWrB2Rh/l ivMBxwEowUcdk0wbtHNrzX9nKFhNEDKq3ggsXJtwGbw4hdHq92OzsxvdJ3lgTKj6 9BLq3FfC7jVYaN6eRuSO7qwTcDqkCkd2qGm/D/nnwbFTUxhQzFqMmJ/4Rx7iXbsL w6SmssrM8JGl/IaSxUTMQ08c9g0MUbD0WWlK3B6ywB1/ZUunJiLoMiScY3atT6uY pA9yWc74CY+xPnaF2XCfoChy9V77UeVRRIQK/ZVjX1o+YChvdXkViLn1gZ5NAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUJ6ylxaM9gTo6Eamzq8MhdX7qzd4wHwYDVR0j BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT TWZUNC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM2 MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzUzODM4MzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADVi0EwDQYJKoZIhvcNAQELBQADggEBADXJeBD9ENjH3M5GKag85BaUNJ6OhXVe kM+HAyC7w0wH8q5jLImZenIWEQplIxypmdQHLm+fqIXHxbKpMaMo0/lkfMqe0onT Ze2pYkhv00RwEAqwtPPpSdFkg4V5viZEqOMtWCE6FjgeR2hrgJoq/GlpwhRO7K53 wpYfA8l+IV66rREw00WwVs0RD4R10dGlWHRhN1s2S9mI/CK4O0gzizuVIDU5mH60 X4NVVGlvbZwX89XbEQsltjBvQ2CcwkRu7dnfoQppl44Orys3Zet6HgGfbL/UpCqw /bRDlETyxjtc8AzTHHVFRRZaG9BRDCPRjUBC+5JVsutVeoyOPkj/Rdw= -----END CERTIFICATE-----Generated at Sat Dec 6 10:52:18 2025 by rpki-client