This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e203432383331.roa File: 3130392e3131302e3137362e302f32342d3234203d3e203432383331.roa (raw, json) Hash identifier: nqAj1A4GqG8vXLE1VGV7vviXnhF2ITLbfydBIOLDY5M= Subject key identifier: B4:D4:A2:23:59:27:8D:0D:44:A4:7F:08:63:17:EF:8C:A2:EC:D5:4D Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Certificate serial: 0B8840F80374686F8AF9D15C03334DDC64B36F14 Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e203432383331.roa Signing time: Mon 17 Nov 2025 11:07:20 +0000 ROA not before: Mon 17 Nov 2025 11:02:20 +0000 ROA not after: Mon 16 Nov 2026 11:07:20 +0000 asID: 42831 IP address blocks: 109.110.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 18:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:88:40:f8:03:74:68:6f:8a:f9:d1:5c:03:33:4d:dc:64:b3:6f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Validity Not Before: Nov 17 11:02:20 2025 GMT Not After : Nov 16 11:07:20 2026 GMT Subject: CN=B4D4A22359278D0D44A47F086317EF8CA2ECD54D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d9:07:29:82:f4:41:3a:39:55:42:a1:87:ce: aa:b2:68:67:f0:b0:a0:de:63:9b:21:41:09:2c:ab: ba:08:4b:90:b8:9b:3c:a4:54:42:2b:04:b4:90:a7: 46:d8:22:07:a2:f6:08:a0:15:df:2b:72:3e:61:fa: 33:63:ca:34:9c:cd:f9:d4:5c:4e:1e:82:19:cb:30: 74:14:e3:16:4d:e7:7e:c6:13:d9:a2:4a:1f:65:9d: a9:20:5f:a8:0b:73:fd:2e:e1:48:b8:97:b0:59:9f: ad:9d:d6:0d:4d:f3:1f:f2:ed:1c:0f:26:ba:3a:a0: c4:90:81:62:e4:9a:32:96:cd:d8:e6:9f:3f:52:81: 68:d9:1a:ba:ea:df:51:47:6f:68:d6:36:b4:13:ac: 4d:a2:bf:85:fd:c7:bb:4d:b0:d6:cb:13:49:1b:ec: af:74:c1:6e:bd:35:92:9a:8e:79:a5:4f:38:dd:e5: 0e:b8:0e:f6:5a:a2:72:93:a9:51:32:74:92:d0:9c: 3a:ac:bf:02:60:c3:eb:e8:dc:21:d2:8a:75:ca:6f: 80:31:46:a3:26:51:54:06:73:ce:04:c4:fe:49:18: db:4b:6b:0d:ce:72:74:8b:25:db:bb:b0:a2:0c:10: 88:d3:10:a6:33:d1:2c:f7:8f:a7:57:a9:99:c3:0d: 9e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D4:A2:23:59:27:8D:0D:44:A4:7F:08:63:17:EF:8C:A2:EC:D5:4D X509v3 Authority Key Identifier: keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e203432383331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.110.176.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:d4:1d:90:67:72:11:0c:18:1e:1b:ab:e5:92:db:03:4a:11: 2b:19:c8:29:47:0c:66:2a:21:4d:19:84:e6:55:47:bb:57:40: 05:2b:47:2a:ea:a1:27:56:34:fa:ac:c5:25:c2:cc:17:c0:ae: 57:ca:30:d2:81:bc:f6:a6:e3:03:6b:25:e0:fa:5d:47:31:68: 6d:30:81:81:9b:51:cb:87:7c:99:32:11:f8:d5:7e:bc:56:8e: 0b:f3:00:54:07:de:f4:bb:f8:31:29:a0:17:ec:cb:99:03:2b: 9e:2d:4b:36:bf:64:42:b6:77:bb:a9:23:49:a0:a8:84:de:da: fb:8d:a7:8a:07:9d:d4:76:b3:da:fa:fc:50:1b:bb:7d:95:7e: 24:25:52:ae:b2:ee:05:68:33:45:3c:f8:cd:69:cb:33:9b:5a: a9:6b:4d:6b:4f:18:63:ec:3a:49:1a:ab:3d:48:68:9a:e1:79: b9:65:19:85:97:ed:f5:21:2d:50:cb:68:70:02:e7:fc:07:76: 11:9b:a5:aa:e4:fa:3f:5d:53:f7:be:02:e5:c0:53:58:a9:4b: d7:9b:26:f2:55:97:d3:24:72:6b:08:be:e4:9e:83:d3:a8:7d: f4:80:72:24:78:ed:91:29:ae:cd:9a:73:6e:33:ef:5e:ea:a9: d1:cc:51:7f -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUC4hA+AN0aG+K+dFcAzNN3GSzbxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl ODZlMGVmYzAeFw0yNTExMTcxMTAyMjBaFw0yNjExMTYxMTA3MjBaMDMxMTAvBgNV BAMTKEI0RDRBMjIzNTkyNzhEMEQ0NEE0N0YwODYzMTdFRjhDQTJFQ0Q1NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi2QcpgvRBOjlVQqGHzqqyaGfw sKDeY5shQQksq7oIS5C4mzykVEIrBLSQp0bYIgei9gigFd8rcj5h+jNjyjSczfnU XE4eghnLMHQU4xZN537GE9miSh9lnakgX6gLc/0u4Ui4l7BZn62d1g1N8x/y7RwP Jro6oMSQgWLkmjKWzdjmnz9SgWjZGrrq31FHb2jWNrQTrE2iv4X9x7tNsNbLE0kb 7K90wW69NZKajnmlTzjd5Q64DvZaonKTqVEydJLQnDqsvwJgw+vo3CHSinXKb4Ax RqMmUVQGc84ExP5JGNtLaw3OcnSLJdu7sKIMEIjTEKYz0Sz3j6dXqZnDDZ7rAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUtNSiI1knjQ1EpH8IYxfvjKLs1U0wHwYDVR0j BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo dUR2dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx MzczNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzIzODMzMzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABtbrAwDQYJKoZIhvcNAQELBQADggEBAJvUHZBnchEMGB4bq+WS2wNKESsZyClH DGYqIU0ZhOZVR7tXQAUrRyrqoSdWNPqsxSXCzBfArlfKMNKBvPam4wNrJeD6XUcx aG0wgYGbUcuHfJkyEfjVfrxWjgvzAFQH3vS7+DEpoBfsy5kDK54tSza/ZEK2d7up I0mgqITe2vuNp4oHndR2s9r6/FAbu32VfiQlUq6y7gVoM0U8+M1pyzObWqlrTWtP GGPsOkkaqz1IaJrhebllGYWX7fUhLVDLaHAC5/wHdhGbpark+j9dU/e+AuXAU1ip S9ebJvJVl9MkcmsIvuSeg9OoffSAciR47ZEprs2ac24z717qqdHMUX8= -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:25 2025 by rpki-client