This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3231372e36352e37302e302f32342d3234203d3e20323035383936.roa File: 3231372e36352e37302e302f32342d3234203d3e20323035383936.roa (raw, json) Hash identifier: V1lVBYqnXHnQs70CmqulQbR78GGathHqDUpzsmTFt5Q= Subject key identifier: 0A:20:BE:30:D0:91:A4:84:4A:BA:66:0B:2D:62:A2:5A:5C:E1:3F:97 Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Certificate serial: 5E939675675B16B24F08D3937FE1756B5BE0FC9F Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3231372e36352e37302e302f32342d3234203d3e20323035383936.roa Signing time: Tue 11 Nov 2025 08:02:58 +0000 ROA not before: Tue 11 Nov 2025 07:57:58 +0000 ROA not after: Tue 10 Nov 2026 08:02:58 +0000 asID: 205896 IP address blocks: 217.65.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 05:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:93:96:75:67:5b:16:b2:4f:08:d3:93:7f:e1:75:6b:5b:e0:fc:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Validity Not Before: Nov 11 07:57:58 2025 GMT Not After : Nov 10 08:02:58 2026 GMT Subject: CN=0A20BE30D091A4844ABA660B2D62A25A5CE13F97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:63:76:96:74:6d:b9:7a:8a:ad:cc:fe:bc:31: 8d:61:3f:3c:82:c8:ca:68:0d:a4:fd:8c:b5:de:0e: f3:b8:c3:9c:6c:74:79:9b:ab:aa:5e:99:2a:9b:94: 42:9e:14:29:3b:93:5f:9f:1d:6b:ec:6e:5c:76:a2: 72:8e:b4:b9:bb:b8:17:e0:ab:f7:33:89:eb:85:3e: aa:ac:d0:89:b0:24:ae:fd:59:b0:eb:b4:59:2e:91: 1b:1f:a1:20:eb:d4:b3:14:c7:e4:c7:af:2f:16:f1: eb:df:8c:f5:fd:5b:65:3f:62:4b:a6:6b:40:8d:07: fe:22:6f:8a:12:84:49:4d:ae:d4:57:72:61:34:b1: ba:29:f5:89:9d:83:c9:a8:4c:ee:b9:33:4e:89:3d: 43:bd:ae:f9:da:a3:cc:4b:ae:bc:6c:d1:11:ca:3b: 74:49:44:9d:ed:e4:25:f9:33:31:21:dc:7a:c4:a0: 52:0b:4c:3a:82:74:b6:95:1d:1b:80:4a:7d:2c:c3: 51:af:a0:2f:91:97:87:2e:59:de:f5:f4:63:8c:27: eb:c3:44:6a:aa:83:2d:a6:dc:9c:9c:ab:03:f1:02: 3a:b0:aa:83:35:5c:5f:7d:38:8b:08:92:ae:69:8f: e3:c4:22:d1:82:1a:38:87:85:b1:87:78:79:fe:a8: 3c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:20:BE:30:D0:91:A4:84:4A:BA:66:0B:2D:62:A2:5A:5C:E1:3F:97 X509v3 Authority Key Identifier: keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3231372e36352e37302e302f32342d3234203d3e20323035383936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.65.70.0/24 Signature Algorithm: sha256WithRSAEncryption 55:c9:63:dd:20:c2:b7:32:d9:a1:59:01:1f:6d:70:53:4f:bd: 69:6c:50:5e:f5:df:20:c8:67:13:07:76:a8:00:b2:04:ea:09: 9d:6b:b4:75:72:14:5f:18:e1:e9:1d:14:7a:7f:0a:78:5a:e3: ae:cf:d4:3e:12:2a:67:8e:81:29:49:a4:40:40:c8:64:cc:4d: f0:73:ea:60:63:3d:c5:6e:a1:2d:bb:b4:34:ea:62:b9:ef:bb: ab:4b:6f:97:44:c4:21:07:30:8d:51:67:06:86:59:c7:70:32: a6:67:ae:6a:ce:ad:35:45:81:c6:8e:d9:e4:88:ae:62:8d:58: 86:1f:f0:03:e8:4c:4f:7b:19:88:4b:01:d8:a9:2f:94:a0:d0: 11:43:ae:e8:55:1b:7d:b3:51:19:22:c3:71:5a:72:1f:43:46: b2:ed:13:33:c1:d3:30:48:99:4d:e6:55:4d:de:31:2d:ee:94: 3d:04:a3:6a:28:3f:06:ce:9d:b0:72:3e:53:83:ce:45:cc:2a: 91:67:ce:e5:41:f8:71:e3:8a:fd:e8:0c:1c:53:e4:2f:70:1b: 5e:60:11:21:c9:6f:d0:8b:11:57:e2:d8:d8:f5:a7:b7:9d:b4: 53:55:3c:c7:ed:9e:7d:86:3d:d1:d1:c0:87:b1:41:42:33:09: 90:c5:72:da -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUXpOWdWdbFrJPCNOTf+F1a1vg/J8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl ODZlMGVmYzAeFw0yNTExMTEwNzU3NThaFw0yNjExMTAwODAyNThaMDMxMTAvBgNV BAMTKDBBMjBCRTMwRDA5MUE0ODQ0QUJBNjYwQjJENjJBMjVBNUNFMTNGOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Y3aWdG25eoqtzP68MY1hPzyC yMpoDaT9jLXeDvO4w5xsdHmbq6pemSqblEKeFCk7k1+fHWvsblx2onKOtLm7uBfg q/czieuFPqqs0ImwJK79WbDrtFkukRsfoSDr1LMUx+THry8W8evfjPX9W2U/Ykum a0CNB/4ib4oShElNrtRXcmE0sbop9Ymdg8moTO65M06JPUO9rvnao8xLrrxs0RHK O3RJRJ3t5CX5MzEh3HrEoFILTDqCdLaVHRuASn0sw1GvoC+Rl4cuWd719GOMJ+vD RGqqgy2m3JycqwPxAjqwqoM1XF99OIsIkq5pj+PEItGCGjiHhbGHeHn+qDwRAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUCiC+MNCRpIRKumYLLWKiWlzhP5cwHwYDVR0j BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo dUR2dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzIzMTM3MmUzNjM1MmUzNzMw MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM1MzgzOTM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 2UFGMA0GCSqGSIb3DQEBCwUAA4IBAQBVyWPdIMK3MtmhWQEfbXBTT71pbFBe9d8g yGcTB3aoALIE6gmda7R1chRfGOHpHRR6fwp4WuOuz9Q+EipnjoEpSaRAQMhkzE3w c+pgYz3FbqEtu7Q06mK577urS2+XRMQhBzCNUWcGhlnHcDKmZ65qzq01RYHGjtnk iK5ijViGH/AD6ExPexmISwHYqS+UoNARQ67oVRt9s1EZIsNxWnIfQ0ay7RMzwdMw SJlN5lVN3jEt7pQ9BKNqKD8Gzp2wcj5Tg85FzCqRZ87lQfhx44r96AwcU+QvcBte YBEhyW/QixFX4tjY9ae3nbRTVTzH7Z59hj3R0cCHsUFCMwmQxXLa -----END CERTIFICATE-----Generated at Sun Nov 23 13:04:29 2025 by rpki-client