This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e20323039333336.roa File: 3130392e3131302e3137312e302f32342d3234203d3e20323039333336.roa (raw, json) Hash identifier: eqGFBt4NjcmIyJoiUTDufIVr4log+Lj9Go5Wbwqraqs= Subject key identifier: C5:3F:98:E0:DF:C7:28:A2:05:97:D5:D2:C1:1C:84:2C:5D:4C:1F:09 Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Certificate serial: 0CC96E5ACA2177216565F75DCC2832A65ECA3555 Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e20323039333336.roa Signing time: Tue 09 Dec 2025 15:26:00 +0000 ROA not before: Tue 09 Dec 2025 15:21:00 +0000 ROA not after: Tue 08 Dec 2026 15:26:00 +0000 asID: 209336 IP address blocks: 109.110.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c9:6e:5a:ca:21:77:21:65:65:f7:5d:cc:28:32:a6:5e:ca:35:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Validity Not Before: Dec 9 15:21:00 2025 GMT Not After : Dec 8 15:26:00 2026 GMT Subject: CN=C53F98E0DFC728A20597D5D2C11C842C5D4C1F09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:34:f6:34:43:78:ed:2e:98:2e:c1:4b:b0:7a: b2:2f:f7:1a:51:41:89:f7:11:d0:86:a9:44:26:25: ea:04:87:42:88:03:d9:04:cc:fb:1c:b9:1a:1d:be: b4:df:68:27:c9:44:17:14:8f:a5:e8:44:45:b6:31: bd:87:63:6e:5a:ea:4e:95:e3:23:63:57:51:fe:36: 50:31:69:fd:ce:be:29:6f:f8:1b:a4:5f:94:a7:3d: d5:59:d3:97:e1:25:b6:8b:8e:7a:a9:d5:ab:0d:83: 37:d7:12:b4:66:89:17:48:57:9c:7b:85:f8:7b:22: 32:5b:18:95:35:0e:92:15:94:d6:b5:9e:a2:98:ae: 13:ac:b3:09:9b:4d:61:1e:18:60:66:6c:87:db:9a: af:99:c7:a2:cf:d0:e2:f2:c5:40:f9:ce:0b:ec:6b: f4:1a:05:de:9d:b8:f4:8e:28:78:3f:c1:b7:50:a3: de:40:0d:ab:d6:dc:56:4c:fd:5b:ca:6e:e5:9b:bb: dc:e4:71:2c:eb:0e:1d:40:ce:c8:d6:80:ad:4a:e6: aa:4c:ce:2f:0c:88:9d:17:22:b4:74:29:ad:6c:05: 6b:4d:e9:3d:dc:c8:de:99:99:92:a4:fd:1d:e8:c3: cb:06:b7:73:09:07:e8:3e:62:1a:19:33:5e:23:0c: 97:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3F:98:E0:DF:C7:28:A2:05:97:D5:D2:C1:1C:84:2C:5D:4C:1F:09 X509v3 Authority Key Identifier: keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e20323039333336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.110.171.0/24 Signature Algorithm: sha256WithRSAEncryption 30:c2:48:d6:85:86:19:d1:1c:d7:35:2f:f1:77:fd:f5:02:47: bc:90:c2:52:bf:19:9d:12:e7:30:3a:1e:8e:22:f7:aa:68:2c: 53:cd:2d:5a:da:44:90:19:bc:28:fa:3d:4a:59:ab:7b:31:e7: 9d:87:f7:d5:80:9f:93:39:5d:4b:29:43:63:f5:44:3e:26:d0: a8:e6:81:78:5e:5c:b3:7c:f4:33:0b:87:5a:6f:ba:8e:14:93: ee:15:48:4d:46:c2:66:4f:f1:78:d1:84:6d:4b:9d:15:98:c0: 51:0b:90:3c:0f:23:aa:16:92:cd:b5:ca:61:59:1b:28:28:67: b0:61:a6:90:e4:a8:d3:89:49:d4:73:5f:29:04:b6:cb:47:aa: f3:63:be:d6:fa:fa:4f:ed:de:b8:26:fd:14:f3:1b:cb:3b:c3: e3:bb:36:c4:c1:af:fb:81:6e:45:ab:6e:6d:b0:58:67:95:93: b8:57:41:fc:11:8d:ce:c5:ff:15:84:6e:6b:53:a7:b1:24:f8: 74:2f:03:b2:54:0c:1e:a0:a2:18:11:a5:b7:8a:cc:01:93:a5: 6f:c6:f7:19:33:66:df:08:1e:05:21:ee:6e:67:4a:9f:61:e7: 01:06:21:87:40:07:4d:87:13:28:df:14:d1:85:97:b4:77:b1: e0:c0:df:a2 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUDMluWsohdyFlZfddzCgypl7KNVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl ODZlMGVmYzAeFw0yNTEyMDkxNTIxMDBaFw0yNjEyMDgxNTI2MDBaMDMxMTAvBgNV BAMTKEM1M0Y5OEUwREZDNzI4QTIwNTk3RDVEMkMxMUM4NDJDNUQ0QzFGMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHNPY0Q3jtLpguwUuwerIv9xpR QYn3EdCGqUQmJeoEh0KIA9kEzPscuRodvrTfaCfJRBcUj6XoREW2Mb2HY25a6k6V 4yNjV1H+NlAxaf3Ovilv+BukX5SnPdVZ05fhJbaLjnqp1asNgzfXErRmiRdIV5x7 hfh7IjJbGJU1DpIVlNa1nqKYrhOsswmbTWEeGGBmbIfbmq+Zx6LP0OLyxUD5zgvs a/QaBd6duPSOKHg/wbdQo95ADavW3FZM/VvKbuWbu9zkcSzrDh1AzsjWgK1K5qpM zi8MiJ0XIrR0Ka1sBWtN6T3cyN6ZmZKk/R3ow8sGt3MJB+g+YhoZM14jDJdJAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUxT+Y4N/HKKIFl9XSwRyELF1MHwkwHwYDVR0j BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo dUR2dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx MzczMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzOTMzMzMzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAG1uqzANBgkqhkiG9w0BAQsFAAOCAQEAMMJI1oWGGdEc1zUv8Xf99QJHvJDC Ur8ZnRLnMDoejiL3qmgsU80tWtpEkBm8KPo9SlmrezHnnYf31YCfkzldSylDY/VE PibQqOaBeF5cs3z0MwuHWm+6jhST7hVITUbCZk/xeNGEbUudFZjAUQuQPA8jqhaS zbXKYVkbKChnsGGmkOSo04lJ1HNfKQS2y0eq82O+1vr6T+3euCb9FPMbyzvD47s2 xMGv+4FuRatubbBYZ5WTuFdB/BGNzsX/FYRua1OnsST4dC8DslQMHqCiGBGlt4rM AZOlb8b3GTNm3wgeBSHubmdKn2HnAQYhh0AHTYcTKN8U0YWXtHex4MDfog== -----END CERTIFICATE-----Generated at Fri Dec 12 07:43:36 2025 by rpki-client