This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136312e302f32342d3234203d3e20383334.roa File: 3130392e3131302e3136312e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: Egir4q//39aBhASnKDvbH9p88BE1eyGTr73lFihtXzQ= Subject key identifier: 49:5F:F8:B8:11:1A:AB:B4:CA:AA:F5:B3:CE:A2:82:41:2D:AB:20:EC Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Certificate serial: 2FEF4DA77937B735FAB931EA56EC870C49C79E84 Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136312e302f32342d3234203d3e20383334.roa Signing time: Mon 15 Dec 2025 00:11:04 +0000 ROA not before: Mon 15 Dec 2025 00:06:04 +0000 ROA not after: Mon 14 Dec 2026 00:11:04 +0000 asID: 834 IP address blocks: 109.110.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ef:4d:a7:79:37:b7:35:fa:b9:31:ea:56:ec:87:0c:49:c7:9e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Validity Not Before: Dec 15 00:06:04 2025 GMT Not After : Dec 14 00:11:04 2026 GMT Subject: CN=495FF8B8111AABB4CAAAF5B3CEA282412DAB20EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0c:55:b6:ab:19:cb:4d:bc:72:a7:c4:d6:44: 52:3f:85:32:aa:ba:dc:e4:8a:f6:6f:fb:36:63:ee: 78:8e:7c:d5:e8:19:26:4b:3f:58:d5:f5:16:3c:f8: 70:25:5d:aa:e7:50:35:5f:d5:78:e4:8c:e6:ac:c7: e2:8b:70:28:de:b4:60:ca:b6:04:59:3f:a3:bc:67: 3a:59:80:99:40:d6:4a:21:bb:92:5d:1f:9d:f0:b8: 0d:29:67:59:62:8d:2f:9f:ed:83:40:28:ca:46:91: a3:2f:ab:f1:e5:64:40:e1:f6:57:26:7c:ce:1d:3d: e4:ec:b1:a9:f2:5e:e4:35:21:e3:73:90:1a:d8:a4: 9d:60:aa:b4:f8:56:86:a1:53:d0:9b:b7:41:ff:b3: 03:c0:d4:46:e8:5f:e1:4b:4c:06:c6:1a:e5:d9:c3: fa:0c:5b:65:04:0f:2f:0e:db:f3:ad:6f:78:5f:04: 66:37:6e:ff:93:a7:f1:1f:99:cb:9d:10:54:71:24: bb:fb:fd:05:d8:a1:85:24:3f:fb:df:a5:35:c0:b4: 83:ae:bd:24:6a:d5:2c:ab:fa:aa:94:aa:5b:6d:30: 1f:c1:01:50:16:a2:aa:ad:93:16:c0:9e:32:a1:e8: ca:86:4a:d1:9a:d1:35:20:a9:e5:20:50:95:0e:64: 99:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5F:F8:B8:11:1A:AB:B4:CA:AA:F5:B3:CE:A2:82:41:2D:AB:20:EC X509v3 Authority Key Identifier: keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136312e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.110.161.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:5c:a3:d8:39:cb:1e:bc:58:22:6f:96:b9:ca:b3:42:6d:58: 53:f6:a2:56:b8:e6:c2:4c:9a:04:eb:ed:32:e2:a8:c8:ba:aa: 2d:98:ae:e7:40:e7:d4:e1:4a:54:fc:8b:e7:45:d9:68:20:42: 52:c6:a4:2f:54:be:8d:8d:af:b9:e1:0d:d9:d8:4c:45:df:09: c0:7f:47:ff:e0:24:8e:5a:c7:1b:35:ac:af:aa:cb:9f:5d:f1: 79:dd:24:4b:ad:11:0f:9f:54:ac:8d:41:29:b2:bd:87:f1:0d: ac:b1:38:17:e2:d2:0c:0f:c0:93:57:6e:99:87:bf:44:65:19: 70:a1:df:bc:55:fb:a2:7c:39:9f:87:20:3c:1e:b8:79:14:e9: bb:92:2e:42:ea:8f:94:ea:f5:25:b9:c7:a9:77:bc:27:9b:17: d1:03:90:cd:d2:01:7b:88:b5:4e:e2:78:df:0a:22:d0:ef:ec: 99:68:7b:8a:7a:36:c7:d1:de:69:4b:54:ed:e0:29:ea:d9:71: d0:1a:2f:d9:32:67:ac:b1:3d:22:2c:5a:a3:c5:be:1c:64:ea: 36:de:24:b4:d4:45:7d:77:2b:cb:0d:45:b1:3b:f5:f5:46:5e: ae:4f:79:9d:be:d9:d9:03:b3:a8:22:ec:2d:31:9b:e2:e3:ce: d5:e9:39:68 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUL+9Np3k3tzX6uTHqVuyHDEnHnoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl ODZlMGVmYzAeFw0yNTEyMTUwMDA2MDRaFw0yNjEyMTQwMDExMDRaMDMxMTAvBgNV BAMTKDQ5NUZGOEI4MTExQUFCQjRDQUFBRjVCM0NFQTI4MjQxMkRBQjIwRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1DFW2qxnLTbxyp8TWRFI/hTKq utzkivZv+zZj7niOfNXoGSZLP1jV9RY8+HAlXarnUDVf1XjkjOasx+KLcCjetGDK tgRZP6O8ZzpZgJlA1kohu5JdH53wuA0pZ1lijS+f7YNAKMpGkaMvq/HlZEDh9lcm fM4dPeTssanyXuQ1IeNzkBrYpJ1gqrT4VoahU9Cbt0H/swPA1EboX+FLTAbGGuXZ w/oMW2UEDy8O2/Otb3hfBGY3bv+Tp/EfmcudEFRxJLv7/QXYoYUkP/vfpTXAtIOu vSRq1Syr+qqUqlttMB/BAVAWoqqtkxbAnjKh6MqGStGa0TUgqeUgUJUOZJlhAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUSV/4uBEaq7TKqvWzzqKCQS2rIOwwHwYDVR0j BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo dUR2dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx MzYzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1u oTANBgkqhkiG9w0BAQsFAAOCAQEAWlyj2DnLHrxYIm+WucqzQm1YU/aiVrjmwkya BOvtMuKoyLqqLZiu50Dn1OFKVPyL50XZaCBCUsakL1S+jY2vueEN2dhMRd8JwH9H /+AkjlrHGzWsr6rLn13xed0kS60RD59UrI1BKbK9h/ENrLE4F+LSDA/Ak1dumYe/ RGUZcKHfvFX7onw5n4cgPB64eRTpu5IuQuqPlOr1JbnHqXe8J5sX0QOQzdIBe4i1 TuJ43woi0O/smWh7ino2x9HeaUtU7eAp6tlx0Bov2TJnrLE9Iixao8W+HGTqNt4k tNRFfXcryw1FsTv19UZerk95nb7Z2QOzqCLsLTGb4uPO1ek5aA== -----END CERTIFICATE-----Generated at Mon Dec 15 23:26:58 2025 by rpki-client