This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132332e302f32342d3234203d3e203235313938.roa File: 3231332e3135372e3132332e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: V87tDHJfEWPvC2C8BO/oDFyDQW6yLu4jA4a47My2iC0= Subject key identifier: 83:4A:CC:91:36:8C:FC:B8:63:E5:BE:4F:B9:24:E0:AE:AD:84:A4:F4 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 4BA3597C92C82F45E9AD06428B86632673C1BAC7 Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132332e302f32342d3234203d3e203235313938.roa Signing time: Sat 22 Nov 2025 07:51:12 +0000 ROA not before: Sat 22 Nov 2025 07:46:12 +0000 ROA not after: Sat 21 Nov 2026 07:51:12 +0000 asID: 25198 IP address blocks: 213.157.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a3:59:7c:92:c8:2f:45:e9:ad:06:42:8b:86:63:26:73:c1:ba:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Nov 22 07:46:12 2025 GMT Not After : Nov 21 07:51:12 2026 GMT Subject: CN=834ACC91368CFCB863E5BE4FB924E0AEAD84A4F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1d:00:15:ce:eb:93:9e:c4:94:f9:46:e3:af: 3b:a5:30:b7:cc:48:12:c1:6f:88:eb:d0:34:07:16: 4e:21:af:e0:13:ff:35:5d:bd:db:0f:f0:9e:87:86: 2a:6e:55:a3:75:47:0b:cc:3f:12:4d:82:af:c7:7c: f4:ea:9d:d5:cc:d6:33:b3:dc:14:0c:8a:9e:fc:64: 48:a9:99:e5:c1:83:65:14:eb:1d:db:af:27:2b:54: 11:f2:fc:7a:37:1a:e4:71:a8:97:28:06:da:ce:88: 9e:7b:83:dd:ef:08:85:e6:00:90:b4:ee:ce:48:eb: 6e:c9:bd:d1:0d:16:32:8f:a1:fe:9d:94:e7:d6:6e: d6:8c:f0:83:c2:91:f9:d2:f8:90:9b:cc:5b:91:4f: be:32:2e:54:8f:90:f2:24:3c:ac:69:1d:11:fa:15: 47:89:57:f1:8b:9f:65:91:b1:6d:46:c8:92:d1:11: 70:a6:26:49:50:27:8d:41:ba:51:ef:d1:8f:2d:8d: 8b:0a:f5:05:ae:ea:49:b3:a5:6b:57:c0:87:ed:72: 44:74:3c:e8:1e:e0:22:90:eb:a4:06:13:e9:77:bf: f7:8d:e8:6b:89:79:61:cf:bb:9e:81:3d:8a:09:77: 95:f4:3f:32:d8:97:14:35:39:9a:a3:c7:2f:6c:99: 95:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4A:CC:91:36:8C:FC:B8:63:E5:BE:4F:B9:24:E0:AE:AD:84:A4:F4 X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132332e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.157.123.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:7f:7a:4d:83:1e:58:1f:3d:5b:d3:63:85:a7:4d:df:7c:68: c7:9f:39:85:2f:5e:6f:90:24:d6:52:f0:c9:f9:dc:ed:57:89: 47:36:cc:71:1d:1a:46:c0:cd:95:66:28:7d:97:a2:fc:3a:b4: 64:9a:9c:c2:bc:f2:af:26:1f:90:47:f5:85:ba:11:28:96:83: 53:13:5b:2a:5d:4d:fa:0b:6a:63:27:56:d7:32:76:61:88:3d: 19:b4:08:19:cd:19:4b:af:cf:32:a9:6d:04:21:e3:05:d0:2a: 27:03:09:a3:eb:c4:0c:ef:72:b7:e4:af:4c:1a:d5:e5:cc:e1: a1:d5:32:b6:34:a9:77:78:d8:0b:11:dc:03:3c:23:e3:98:f4: 21:a2:71:88:06:d5:1f:fd:30:ff:39:f0:f1:06:28:fb:13:b6: 10:37:f5:60:0d:8c:e9:91:eb:ea:85:d7:c2:3a:e3:83:ee:20: 7b:dc:19:a9:f5:84:b7:16:12:05:a2:52:69:87:07:57:9f:71: 85:04:4e:0f:6b:f3:ec:54:0d:76:6f:f1:d7:8d:6f:e6:36:93: 00:7c:b8:b5:53:15:18:5c:51:07:d9:bb:60:32:2e:a3:3c:13: ce:d7:4f:5b:21:13:22:1f:79:d4:06:d5:d1:fe:bd:0b:52:f4: 95:42:2e:d6 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUS6NZfJLIL0XprQZCi4ZjJnPBuscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNTExMjIwNzQ2MTJaFw0yNjExMjEwNzUxMTJaMDMxMTAvBgNV BAMTKDgzNEFDQzkxMzY4Q0ZDQjg2M0U1QkU0RkI5MjRFMEFFQUQ4NEE0RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmHQAVzuuTnsSU+UbjrzulMLfM SBLBb4jr0DQHFk4hr+AT/zVdvdsP8J6HhipuVaN1RwvMPxJNgq/HfPTqndXM1jOz 3BQMip78ZEipmeXBg2UU6x3brycrVBHy/Ho3GuRxqJcoBtrOiJ57g93vCIXmAJC0 7s5I627JvdENFjKPof6dlOfWbtaM8IPCkfnS+JCbzFuRT74yLlSPkPIkPKxpHRH6 FUeJV/GLn2WRsW1GyJLREXCmJklQJ41BulHv0Y8tjYsK9QWu6kmzpWtXwIftckR0 POge4CKQ66QGE+l3v/eN6GuJeWHPu56BPYoJd5X0PzLYlxQ1OZqjxy9smZX1AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUg0rMkTaM/Lhj5b5PuSTgrq2EpPQwHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUt MGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJiZTI1LzAvMzIzMTMzMmUzMTM1MzcyZTMx MzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzUzMTM5Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADVnXswDQYJKoZIhvcNAQELBQADggEBAAp/ek2DHlgfPVvTY4WnTd98aMefOYUv Xm+QJNZS8Mn53O1XiUc2zHEdGkbAzZVmKH2Xovw6tGSanMK88q8mH5BH9YW6ESiW g1MTWypdTfoLamMnVtcydmGIPRm0CBnNGUuvzzKpbQQh4wXQKicDCaPrxAzvcrfk r0wa1eXM4aHVMrY0qXd42AsR3AM8I+OY9CGicYgG1R/9MP858PEGKPsTthA39WAN jOmR6+qF18I644PuIHvcGan1hLcWEgWiUmmHB1efcYUETg9r8+xUDXZv8deNb+Y2 kwB8uLVTFRhcUQfZu2AyLqM8E87XT1shEyIfedQG1dH+vQtS9JVCLtY= -----END CERTIFICATE-----Generated at Fri Dec 5 09:26:59 2025 by rpki-client