This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137352e302f32342d3234203d3e2039333034.roa File: 3130392e3131302e3137352e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: oDqCds+bgd5RirKaKNen6NJwXDeEeLpbJ3W181ysiQ0= Subject key identifier: A9:9A:CB:F3:00:43:E8:05:33:24:A2:49:EF:8B:2C:ED:68:F3:5B:2D Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Certificate serial: 263E9539EE7D2A3D3F70A1D7B92533967F27DF1F Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137352e302f32342d3234203d3e2039333034.roa Signing time: Wed 19 Nov 2025 09:28:23 +0000 ROA not before: Wed 19 Nov 2025 09:23:23 +0000 ROA not after: Wed 18 Nov 2026 09:28:23 +0000 asID: 9304 IP address blocks: 109.110.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 23:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:3e:95:39:ee:7d:2a:3d:3f:70:a1:d7:b9:25:33:96:7f:27:df:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Validity Not Before: Nov 19 09:23:23 2025 GMT Not After : Nov 18 09:28:23 2026 GMT Subject: CN=A99ACBF30043E8053324A249EF8B2CED68F35B2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1f:fd:14:8b:a5:88:e6:2c:2a:25:bb:57:90: 82:3f:1b:bf:7d:9b:55:ab:57:44:56:7a:42:45:8c: 52:11:47:f0:68:56:f1:a0:80:ee:e2:77:f2:65:7c: b0:a2:d6:42:11:19:04:de:d5:3c:46:3b:86:d1:65: aa:af:a3:10:aa:95:22:2c:3a:1f:74:10:23:41:2e: 5a:c2:86:26:9f:6b:26:45:92:47:7f:d2:a4:bc:db: 8b:62:95:3f:d4:e3:da:74:bd:ea:25:43:cf:ed:69: 39:33:6f:56:7c:8a:e5:7b:58:40:c4:8c:32:91:d7: a1:cb:0c:e4:2b:4b:d5:60:74:56:04:f6:c6:8a:14: 8c:05:7b:ac:41:37:87:41:1f:d7:cd:23:e3:87:c1: c9:cc:71:cd:73:81:1f:ab:4f:c9:83:57:85:ad:8c: 87:c5:c7:7d:56:1c:bd:84:6d:16:d0:fa:4c:15:d4: 7d:e6:1c:f0:20:55:9c:84:26:76:cf:37:13:8c:59: ed:70:b1:c3:78:9a:d5:8d:8f:ac:11:2e:71:f8:aa: 7c:a7:e1:36:fb:45:0f:2d:08:92:de:1d:7a:6f:1e: 00:dc:4f:59:39:5e:74:92:96:9f:3b:0d:3e:e4:39: e3:dd:a6:48:ba:db:1a:bb:04:d2:95:ea:7f:39:0c: 42:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9A:CB:F3:00:43:E8:05:33:24:A2:49:EF:8B:2C:ED:68:F3:5B:2D X509v3 Authority Key Identifier: keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137352e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.110.175.0/24 Signature Algorithm: sha256WithRSAEncryption 50:b2:79:85:6a:e1:fb:22:c1:e1:d1:dc:9d:25:00:9b:b4:34: bf:6e:7f:67:b8:bc:95:ac:83:f6:e1:a9:fc:33:e7:bf:b1:98: d5:20:a1:bb:d5:94:08:52:f3:f3:86:c5:ca:18:0f:b1:7e:00: 54:ef:eb:ad:97:46:bd:aa:be:97:c9:a0:f4:9f:56:b4:10:e7: ad:5e:21:ab:5d:da:9c:30:d9:d5:3e:54:de:23:09:8a:27:b1: 43:0b:90:d0:66:f9:d9:6e:47:d1:54:8f:7a:69:e4:0f:69:26: 3c:4a:66:cc:b2:9f:cb:81:c8:af:45:0a:18:2d:aa:ec:b9:20: be:bb:dd:97:4b:12:33:6c:a0:3e:c5:fd:25:5d:e5:dc:ea:c9: 0c:b3:6b:95:be:b1:15:85:13:2c:62:02:d6:32:d1:b4:80:7d: 9c:a6:b0:7c:b1:b0:f3:58:fc:e6:a8:7c:99:a7:33:e3:12:5e: 6f:11:ff:06:ba:33:92:69:92:d5:a1:ac:3e:91:fd:02:60:99: dc:c0:02:19:ac:22:a6:31:69:d2:bb:de:ab:67:e4:29:b9:03: 5b:20:66:22:1b:c7:49:72:b6:3f:1e:f8:da:fe:b2:58:ba:51: 1f:71:7a:b5:7a:92:70:d7:82:38:6f:87:6f:19:20:06:4d:e5: 78:19:01:60 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUJj6VOe59Kj0/cKHXuSUzln8n3x8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl ODZlMGVmYzAeFw0yNTExMTkwOTIzMjNaFw0yNjExMTgwOTI4MjNaMDMxMTAvBgNV BAMTKEE5OUFDQkYzMDA0M0U4MDUzMzI0QTI0OUVGOEIyQ0VENjhGMzVCMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgH/0Ui6WI5iwqJbtXkII/G799 m1WrV0RWekJFjFIRR/BoVvGggO7id/JlfLCi1kIRGQTe1TxGO4bRZaqvoxCqlSIs Oh90ECNBLlrChiafayZFkkd/0qS824tilT/U49p0veolQ8/taTkzb1Z8iuV7WEDE jDKR16HLDOQrS9VgdFYE9saKFIwFe6xBN4dBH9fNI+OHwcnMcc1zgR+rT8mDV4Wt jIfFx31WHL2EbRbQ+kwV1H3mHPAgVZyEJnbPNxOMWe1wscN4mtWNj6wRLnH4qnyn 4Tb7RQ8tCJLeHXpvHgDcT1k5XnSSlp87DT7kOePdpki62xq7BNKV6n85DEJFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUqZrL8wBD6AUzJKJJ74ss7WjzWy0wHwYDVR0j BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo dUR2dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx MzczNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA bW6vMA0GCSqGSIb3DQEBCwUAA4IBAQBQsnmFauH7IsHh0dydJQCbtDS/bn9nuLyV rIP24an8M+e/sZjVIKG71ZQIUvPzhsXKGA+xfgBU7+utl0a9qr6XyaD0n1a0EOet XiGrXdqcMNnVPlTeIwmKJ7FDC5DQZvnZbkfRVI96aeQPaSY8SmbMsp/LgcivRQoY LarsuSC+u92XSxIzbKA+xf0lXeXc6skMs2uVvrEVhRMsYgLWMtG0gH2cprB8sbDz WPzmqHyZpzPjEl5vEf8GujOSaZLVoaw+kf0CYJncwAIZrCKmMWnSu96rZ+QpuQNb IGYiG8dJcrY/Hvja/rJYulEfcXq1epJw14I4b4dvGSAGTeV4GQFg -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:36 2025 by rpki-client