This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137302e302f32342d3234203d3e20323134363737.roa File: 3130392e3131302e3137302e302f32342d3234203d3e20323134363737.roa (raw, json) Hash identifier: rRwAzw4mw0AV9jGQTIpUTzfMTCtDCK+G3r0fNH1B/wQ= Subject key identifier: CB:50:9B:9A:3C:BE:B1:03:2D:A9:88:79:1A:B6:4D:B6:E7:17:E6:50 Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Certificate serial: 53B1D34EB2FA76EDC6D0FD1B350E095465ABADB7 Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137302e302f32342d3234203d3e20323134363737.roa Signing time: Sun 16 Nov 2025 09:56:12 +0000 ROA not before: Sun 16 Nov 2025 09:51:12 +0000 ROA not after: Sun 15 Nov 2026 09:56:12 +0000 asID: 214677 IP address blocks: 109.110.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 18:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b1:d3:4e:b2:fa:76:ed:c6:d0:fd:1b:35:0e:09:54:65:ab:ad:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Validity Not Before: Nov 16 09:51:12 2025 GMT Not After : Nov 15 09:56:12 2026 GMT Subject: CN=CB509B9A3CBEB1032DA988791AB64DB6E717E650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:da:b2:e1:f3:9f:4a:9a:c2:f7:45:11:42:50: 2a:8f:a3:03:30:3d:e4:e9:49:80:a0:bc:f5:6f:9b: 4f:b7:30:4e:64:41:09:e2:b4:1a:e6:db:48:51:b2: cd:72:cf:dc:15:f5:12:c8:b0:3f:17:56:c1:9d:48: 5b:36:64:c1:0b:92:9f:c3:1c:cf:36:d3:77:f7:75: 33:87:85:d5:f7:d7:7c:05:28:ef:4d:e2:a8:d2:5c: ee:cf:36:73:f4:39:e9:71:02:1d:1c:02:81:65:81: 81:de:14:84:e8:45:8c:5f:76:c8:74:61:87:32:5b: 87:ff:ed:16:78:cc:b1:53:df:09:05:ef:9c:15:28: 93:c1:b9:79:dd:a4:bf:a0:c6:e1:b5:02:07:bb:52: 0c:ce:2a:76:99:41:e0:fd:0b:5a:43:b1:96:70:62: 4d:58:74:ae:06:9c:85:cd:9d:c5:0b:51:04:ff:60: 6d:bb:24:26:cf:2c:ed:6e:c9:95:ec:38:4a:73:04: 08:8c:da:07:2e:39:2a:79:d4:88:d0:f1:3e:09:cb: fd:33:ad:92:90:bf:21:ad:ab:9f:18:e8:57:13:6c: b4:3f:c0:ef:fb:e4:e9:9a:f6:5f:36:54:19:70:da: e8:94:aa:57:f9:ed:da:60:69:e1:48:da:e8:df:c9: 20:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:50:9B:9A:3C:BE:B1:03:2D:A9:88:79:1A:B6:4D:B6:E7:17:E6:50 X509v3 Authority Key Identifier: keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137302e302f32342d3234203d3e20323134363737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.110.170.0/24 Signature Algorithm: sha256WithRSAEncryption 34:22:d7:af:b2:cf:f4:5b:8a:ee:f0:44:b2:fe:cf:80:9b:7c: 75:31:57:82:89:c7:04:b4:3f:21:2c:06:3b:1c:cb:fd:0a:f8: 68:83:04:34:f6:14:22:4d:76:a0:d0:08:de:a2:70:77:d5:7a: 61:50:60:9c:46:e8:db:79:ef:ce:7a:af:69:6c:a4:a6:c7:9e: bf:3b:ba:d5:ed:6f:b1:12:6a:44:eb:32:4a:30:97:7e:79:b4: e7:e9:e1:c6:eb:fc:4f:b9:e5:ef:2e:45:bc:13:0d:12:cc:5a: a0:d2:1f:55:9a:52:87:1f:8a:81:4c:1b:f6:d4:36:0f:ff:d6: ae:45:0a:09:e7:aa:eb:53:86:c5:5d:e0:58:72:ae:bb:c5:e3: 0d:4e:53:24:2d:99:40:38:bb:27:6c:e7:18:31:70:e3:dd:a4: f4:16:ca:2d:65:9d:7b:17:d7:15:6a:28:12:40:c8:8b:bd:e5: 3d:6f:4e:a6:60:c9:56:39:2c:b2:3c:1b:c8:09:55:be:6c:ee: 2b:5a:dd:20:48:36:f5:60:15:be:e8:b4:41:a8:97:e8:5c:47: 00:dc:82:d2:5d:33:ba:d8:43:66:1d:c6:d3:b3:04:30:6b:a8: 3b:db:13:3c:90:8d:3f:81:1c:9a:6b:1e:81:da:d3:64:13:a9: 99:07:0d:0d -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUU7HTTrL6du3G0P0bNQ4JVGWrrbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl ODZlMGVmYzAeFw0yNTExMTYwOTUxMTJaFw0yNjExMTUwOTU2MTJaMDMxMTAvBgNV BAMTKENCNTA5QjlBM0NCRUIxMDMyREE5ODg3OTFBQjY0REI2RTcxN0U2NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC32rLh859KmsL3RRFCUCqPowMw PeTpSYCgvPVvm0+3ME5kQQnitBrm20hRss1yz9wV9RLIsD8XVsGdSFs2ZMELkp/D HM8203f3dTOHhdX313wFKO9N4qjSXO7PNnP0OelxAh0cAoFlgYHeFIToRYxfdsh0 YYcyW4f/7RZ4zLFT3wkF75wVKJPBuXndpL+gxuG1Age7UgzOKnaZQeD9C1pDsZZw Yk1YdK4GnIXNncULUQT/YG27JCbPLO1uyZXsOEpzBAiM2gcuOSp51IjQ8T4Jy/0z rZKQvyGtq58Y6FcTbLQ/wO/75Oma9l82VBlw2uiUqlf57dpgaeFI2ujfySDXAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUy1Cbmjy+sQMtqYh5GrZNtucX5lAwHwYDVR0j BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo dUR2dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx MzczMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDM2MzczNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAG1uqjANBgkqhkiG9w0BAQsFAAOCAQEANCLXr7LP9FuK7vBEsv7PgJt8dTFX gonHBLQ/ISwGOxzL/Qr4aIMENPYUIk12oNAI3qJwd9V6YVBgnEbo23nvznqvaWyk pseevzu61e1vsRJqROsySjCXfnm05+nhxuv8T7nl7y5FvBMNEsxaoNIfVZpShx+K gUwb9tQ2D//WrkUKCeeq61OGxV3gWHKuu8XjDU5TJC2ZQDi7J2znGDFw492k9BbK LWWdexfXFWooEkDIi73lPW9OpmDJVjkssjwbyAlVvmzuK1rdIEg29WAVvui0QaiX 6FxHANyC0l0zuthDZh3G07MEMGuoO9sTPJCNP4EcmmsegdrTZBOpmQcNDQ== -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:20 2025 by rpki-client