This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e2039333034.roa File: 3130392e3131302e3136302e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: gCyEu0tV2agfF8ZUSiKw/2WsTr/xZK+ICizKGoT/lOc= Subject key identifier: 85:EE:7F:8A:83:99:65:D7:18:51:FF:62:11:83:D9:F7:7C:80:27:72 Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Certificate serial: 4AA1E7B6A90D830312CD0493416D6327CDC74026 Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e2039333034.roa Signing time: Wed 19 Nov 2025 09:28:25 +0000 ROA not before: Wed 19 Nov 2025 09:23:25 +0000 ROA not after: Wed 18 Nov 2026 09:28:25 +0000 asID: 9304 IP address blocks: 109.110.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 23:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a1:e7:b6:a9:0d:83:03:12:cd:04:93:41:6d:63:27:cd:c7:40:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Validity Not Before: Nov 19 09:23:25 2025 GMT Not After : Nov 18 09:28:25 2026 GMT Subject: CN=85EE7F8A839965D71851FF621183D9F77C802772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:2e:de:89:a6:3e:32:56:7e:d9:6d:96:ef: 91:b4:1a:66:51:d0:36:c5:23:77:fb:71:98:11:a9: 3b:44:d9:c3:c9:57:1e:61:5c:c6:b2:8f:f0:da:8b: 0a:d2:2d:b3:65:48:7e:6a:ca:e4:29:7b:73:aa:a0: 7a:72:31:e4:cd:80:47:76:50:0e:d5:8f:b7:2f:14: 7f:29:cf:29:21:1e:8e:80:d9:14:d8:7e:b5:bd:00: 29:20:15:10:4f:2d:47:65:f7:0f:79:e1:5f:0c:eb: f4:91:c5:e1:06:e7:15:cd:e5:71:b8:9c:51:d6:a6: 86:45:ca:c0:14:21:56:08:e3:ba:c3:30:58:af:0d: c9:2a:0b:41:77:a4:c3:0f:d8:80:02:9b:78:d1:30: f8:76:6d:89:11:91:33:4f:85:4c:28:dc:43:c2:30: 1a:c9:56:51:a8:46:9d:3a:e5:bc:46:7f:a7:a0:b7: 8e:1e:a0:fd:b8:59:f8:4c:0c:a6:d2:fb:25:df:2a: d5:03:f4:34:66:0c:76:ab:88:ab:a0:6e:aa:71:e2: b6:4a:f2:57:94:83:1a:1d:c9:e3:03:13:99:d4:15: 5c:bf:79:7a:d4:be:0c:a9:b4:2f:b7:9d:3b:ef:0c: 56:8b:d0:2c:b7:9c:1e:60:4c:1d:24:e4:c9:53:3b: 54:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EE:7F:8A:83:99:65:D7:18:51:FF:62:11:83:D9:F7:7C:80:27:72 X509v3 Authority Key Identifier: keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.110.160.0/24 Signature Algorithm: sha256WithRSAEncryption 15:33:0a:1e:00:98:e8:66:b7:c8:67:32:21:13:89:b8:c9:f4: ab:1f:b4:59:27:a3:c1:99:35:66:c8:4a:53:09:82:df:f9:c0: a9:21:ea:d9:2f:3e:fb:80:82:bf:ce:04:04:07:07:e1:70:c3: 64:03:e7:37:b3:ad:66:5f:b6:31:8d:ff:ff:34:b4:5c:52:9c: 48:9e:f0:c5:5a:ac:b2:c8:25:8c:cf:6e:82:e5:e1:d0:e5:01: 0e:90:55:ed:91:c7:43:e0:d4:69:78:27:e9:32:96:5a:3b:55: da:0c:3e:36:23:71:a1:c4:c7:86:64:4f:2d:bf:a5:3b:b4:37: 52:68:3e:c5:b6:00:21:ef:73:64:67:cf:e6:49:a5:aa:6b:26: c0:87:04:06:15:ea:6f:4e:65:9e:55:1b:da:eb:6c:7d:bb:fd: 4a:a7:29:1d:6b:81:63:65:ed:12:4e:95:54:c6:73:b8:78:21: 86:71:b3:f6:9c:5d:e8:b5:87:7a:22:bd:d4:88:a6:78:68:49: 45:33:d8:85:93:1e:53:39:32:67:dd:39:1c:df:30:f7:0f:b1: 43:e2:f4:54:d7:ca:0e:d5:34:7f:7a:7e:08:75:a1:80:08:14: 6d:2a:0e:50:9c:06:9b:9b:70:a2:c8:c6:e4:c9:24:c8:4b:7f: 0f:7a:31:29 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUSqHntqkNgwMSzQSTQW1jJ83HQCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl ODZlMGVmYzAeFw0yNTExMTkwOTIzMjVaFw0yNjExMTgwOTI4MjVaMDMxMTAvBgNV BAMTKDg1RUU3RjhBODM5OTY1RDcxODUxRkY2MjExODNEOUY3N0M4MDI3NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC97y7eiaY+MlZ+2W2W75G0GmZR 0DbFI3f7cZgRqTtE2cPJVx5hXMayj/DaiwrSLbNlSH5qyuQpe3OqoHpyMeTNgEd2 UA7Vj7cvFH8pzykhHo6A2RTYfrW9ACkgFRBPLUdl9w954V8M6/SRxeEG5xXN5XG4 nFHWpoZFysAUIVYI47rDMFivDckqC0F3pMMP2IACm3jRMPh2bYkRkTNPhUwo3EPC MBrJVlGoRp065bxGf6egt44eoP24WfhMDKbS+yXfKtUD9DRmDHariKugbqpx4rZK 8leUgxodyeMDE5nUFVy/eXrUvgyptC+3nTvvDFaL0Cy3nB5gTB0k5MlTO1QHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUhe5/ioOZZdcYUf9iEYPZ93yAJ3IwHwYDVR0j BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo dUR2dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx MzYzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA bW6gMA0GCSqGSIb3DQEBCwUAA4IBAQAVMwoeAJjoZrfIZzIhE4m4yfSrH7RZJ6PB mTVmyEpTCYLf+cCpIerZLz77gIK/zgQEBwfhcMNkA+c3s61mX7Yxjf//NLRcUpxI nvDFWqyyyCWMz26C5eHQ5QEOkFXtkcdD4NRpeCfpMpZaO1XaDD42I3GhxMeGZE8t v6U7tDdSaD7FtgAh73NkZ8/mSaWqaybAhwQGFepvTmWeVRva62x9u/1Kpykda4Fj Ze0STpVUxnO4eCGGcbP2nF3otYd6Ir3UiKZ4aElFM9iFkx5TOTJn3Tkc3zD3D7FD 4vRU18oO1TR/en4IdaGACBRtKg5QnAabm3CiyMbkySTIS38PejEp -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:37 2025 by rpki-client