This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132312e302f32342d3234203d3e203633313939.roa File: 3231332e3135372e3132312e302f32342d3234203d3e203633313939.roa (raw, json) Hash identifier: dfTQeycU3bCp9xP/UQaKaAmwMbvByiZ/89C4YDPwYlY= Subject key identifier: 9F:BD:59:4B:31:5F:45:54:BD:0A:04:CE:AB:7C:EE:A9:E8:CD:2D:91 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 07C07B3A401D3CFA3692DF945FF1E4CFD875E9ED Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132312e302f32342d3234203d3e203633313939.roa Signing time: Mon 17 Nov 2025 09:49:06 +0000 ROA not before: Mon 17 Nov 2025 09:44:06 +0000 ROA not after: Mon 16 Nov 2026 09:49:06 +0000 asID: 63199 IP address blocks: 213.157.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c0:7b:3a:40:1d:3c:fa:36:92:df:94:5f:f1:e4:cf:d8:75:e9:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Nov 17 09:44:06 2025 GMT Not After : Nov 16 09:49:06 2026 GMT Subject: CN=9FBD594B315F4554BD0A04CEAB7CEEA9E8CD2D91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:75:49:e6:0c:ff:a3:85:ab:50:46:26:bd:cf: 03:3e:09:d3:67:f9:34:a1:56:32:79:c3:19:5d:c6: b6:f9:0c:d4:08:7c:00:18:bf:82:47:40:a2:cd:10: c8:46:ca:d5:14:79:f2:1d:0a:d5:a7:33:e4:0d:2a: b7:f9:bc:00:c9:a7:17:c6:57:64:28:84:5c:d0:ed: 60:d8:a2:24:7b:32:e4:d0:28:31:56:2d:0f:cf:99: b8:96:0f:a4:91:c4:46:ba:46:3b:31:24:56:85:b3: 2d:bb:f8:e1:1c:47:65:a1:6a:0c:01:a6:1e:66:f8: f4:cc:fd:04:6b:61:84:0d:72:25:f8:a4:2f:0e:0a: c3:c4:98:37:79:ee:5c:35:de:d7:79:2b:81:12:b6: 1e:c2:8f:d1:b8:aa:0c:09:32:0b:15:39:5f:02:72: 67:12:f0:07:4b:bc:72:dc:03:17:78:37:7e:42:16: 33:80:49:66:80:21:97:24:cd:7c:4e:7b:a8:20:60: 20:ba:d0:96:02:9c:d7:40:b4:3f:f8:a4:df:3e:d6: 77:b2:9c:20:41:25:24:ec:c0:13:e1:5f:c2:be:11: a0:3c:10:6d:05:7e:b5:d2:b8:0e:36:a7:79:bb:1e: f9:5d:0b:22:b3:73:bd:b1:8b:44:cb:cc:b3:af:3a: 38:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BD:59:4B:31:5F:45:54:BD:0A:04:CE:AB:7C:EE:A9:E8:CD:2D:91 X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132312e302f32342d3234203d3e203633313939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.157.121.0/24 Signature Algorithm: sha256WithRSAEncryption 86:77:47:8d:0f:64:6a:0b:7e:30:e8:ab:4d:16:cd:30:71:35: d8:5c:d8:ef:0a:f3:36:56:72:34:f8:d1:52:2c:23:68:8f:9b: 06:09:2a:dd:45:fe:40:85:06:a9:94:11:aa:bb:43:65:ed:1a: 11:8c:05:a8:90:1c:f7:93:34:69:62:5c:de:d0:70:6f:4f:ca: 64:6c:ff:76:50:ff:22:37:c4:4a:c2:dc:7c:3d:39:41:d4:df: bd:a6:51:25:28:b4:cd:01:53:62:4e:21:55:45:c6:4b:08:2f: 95:98:07:02:48:3e:88:79:3a:ac:a5:7b:a6:53:33:d5:95:0a: 76:96:ed:31:ca:b9:ea:47:4e:de:53:b1:eb:f8:01:ea:be:08: bd:b0:b5:19:b5:99:ce:1e:1f:0c:07:c2:e2:9c:54:f4:bb:9b: f8:2d:69:97:d4:82:e8:cd:fb:79:96:cb:de:28:72:ba:ce:38: 17:8e:81:38:1b:88:6c:5b:6c:22:dd:de:f0:e2:f9:b4:9c:ca: 1a:d8:aa:87:95:c6:dc:75:23:67:ad:65:5b:25:93:b2:fc:2c: 4d:95:ee:4b:f7:99:13:3c:77:92:da:aa:03:54:69:55:f7:4a: 00:ae:9b:18:58:7e:21:74:6c:e4:e1:95:df:b9:f1:ce:c8:2f: ed:e2:c8:6e -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUB8B7OkAdPPo2kt+UX/Hkz9h16e0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNTExMTcwOTQ0MDZaFw0yNjExMTYwOTQ5MDZaMDMxMTAvBgNV BAMTKDlGQkQ1OTRCMzE1RjQ1NTRCRDBBMDRDRUFCN0NFRUE5RThDRDJEOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfdUnmDP+jhatQRia9zwM+CdNn +TShVjJ5wxldxrb5DNQIfAAYv4JHQKLNEMhGytUUefIdCtWnM+QNKrf5vADJpxfG V2QohFzQ7WDYoiR7MuTQKDFWLQ/PmbiWD6SRxEa6RjsxJFaFsy27+OEcR2WhagwB ph5m+PTM/QRrYYQNciX4pC8OCsPEmDd57lw13td5K4ESth7Cj9G4qgwJMgsVOV8C cmcS8AdLvHLcAxd4N35CFjOASWaAIZckzXxOe6ggYCC60JYCnNdAtD/4pN8+1ney nCBBJSTswBPhX8K+EaA8EG0FfrXSuA42p3m7HvldCyKzc72xi0TLzLOvOjhzAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUn71ZSzFfRVS9CgTOq3zuqejNLZEwHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUt MGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJiZTI1LzAvMzIzMTMzMmUzMTM1MzcyZTMx MzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzMzMTM5Mzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADVnXkwDQYJKoZIhvcNAQELBQADggEBAIZ3R40PZGoLfjDoq00WzTBxNdhc2O8K 8zZWcjT40VIsI2iPmwYJKt1F/kCFBqmUEaq7Q2XtGhGMBaiQHPeTNGliXN7QcG9P ymRs/3ZQ/yI3xErC3Hw9OUHU372mUSUotM0BU2JOIVVFxksIL5WYBwJIPoh5Oqyl e6ZTM9WVCnaW7THKuepHTt5Tsev4Aeq+CL2wtRm1mc4eHwwHwuKcVPS7m/gtaZfU gujN+3mWy94ocrrOOBeOgTgbiGxbbCLd3vDi+bScyhrYqoeVxtx1I2etZVslk7L8 LE2V7kv3mRM8d5LaqgNUaVX3SgCumxhYfiF0bOThld+58c7IL+3iyG4= -----END CERTIFICATE-----Generated at Fri Dec 5 12:23:24 2025 by rpki-client