This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e203432383331.roa File: 3139332e33372e3233392e302f32342d3234203d3e203432383331.roa (raw, json) Hash identifier: 5ApGEymqRrwyhmUY6eAqXio2ZY2xEe9/R80CO6fRY1s= Subject key identifier: 71:F8:E5:3E:15:02:AD:4E:D3:30:FD:6F:D0:21:DA:0F:A2:7F:DE:3E Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Certificate serial: 69A25C8B331F26E71B6D8B9D84D395A36244D6DD Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e203432383331.roa Signing time: Sat 08 Nov 2025 20:51:42 +0000 ROA not before: Sat 08 Nov 2025 20:46:42 +0000 ROA not after: Sat 07 Nov 2026 20:51:42 +0000 asID: 42831 IP address blocks: 193.37.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 04:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a2:5c:8b:33:1f:26:e7:1b:6d:8b:9d:84:d3:95:a3:62:44:d6:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Validity Not Before: Nov 8 20:46:42 2025 GMT Not After : Nov 7 20:51:42 2026 GMT Subject: CN=71F8E53E1502AD4ED330FD6FD021DA0FA27FDE3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c4:93:09:44:db:48:f6:ad:48:30:2a:bc:1f: f7:3c:65:dc:33:ff:30:45:66:7f:e2:8e:38:6a:a0: 73:36:e1:9c:9e:ae:ae:8f:0e:a8:11:77:59:6b:19: fc:ca:f0:f5:d7:1d:93:f1:fe:e6:a0:a1:f3:51:6e: 58:49:62:22:20:49:c6:08:79:e6:ad:a7:d8:96:fc: 03:70:7d:60:0e:be:c1:d9:ff:68:2c:2c:69:ff:22: 5b:33:11:34:b0:f3:81:95:0d:6e:87:35:35:dd:9a: ad:14:07:75:f2:62:70:79:67:31:3f:17:86:87:cc: e5:ff:d8:f6:74:be:50:26:1a:f7:ee:7d:b2:da:b0: 43:a3:30:43:23:bb:b8:b8:4b:7c:88:43:8a:d4:e8: 28:9e:b6:b4:1a:d6:33:0b:d0:94:8a:fd:b4:55:77: 79:f4:2a:8e:ed:c7:bd:2e:ba:a6:ed:3c:84:89:58: fa:c1:de:b2:8c:61:ee:b5:36:1c:2f:34:8f:5f:d3: 55:bd:d7:eb:58:e0:98:9b:96:88:bb:c9:52:54:dc: 68:5c:a6:ec:25:ed:99:44:58:46:e4:3f:e8:18:57: f4:e6:ef:1c:68:62:59:00:25:de:bc:a9:89:04:b6: 2a:b9:17:8a:93:8f:97:ab:a8:a5:7c:e9:a0:a4:07: 81:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F8:E5:3E:15:02:AD:4E:D3:30:FD:6F:D0:21:DA:0F:A2:7F:DE:3E X509v3 Authority Key Identifier: keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e203432383331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.37.239.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:79:ec:21:64:46:93:03:eb:00:11:99:c5:c6:04:03:38:53: da:3b:4c:a3:ca:9c:c7:65:ad:18:00:ba:e1:01:52:ed:ca:4f: d4:1a:c0:fc:57:6a:e8:a8:e9:65:a7:ac:08:b1:e2:bb:19:57: 21:7d:c0:75:f6:a5:2c:9f:a3:11:c2:16:79:2f:28:44:30:1d: 21:e5:b3:40:66:33:f3:2a:3b:33:5e:21:1d:8e:36:85:f1:cf: 17:98:3f:d7:bd:a3:a7:70:4a:a8:2d:f7:12:91:e2:83:e9:10: 0e:28:4b:26:38:d4:8e:ea:3b:2d:76:00:63:95:0b:33:c9:4d: b3:63:a8:ad:b6:e8:64:ec:3e:d9:ae:b8:99:85:f4:98:9f:fd: f4:32:b7:54:8c:3e:eb:0d:40:66:b9:0b:d0:77:a8:1b:d4:b6: 66:12:69:dd:ad:24:96:05:e4:37:89:6e:56:e5:cd:89:b5:ef: 6f:83:9e:3e:62:22:3e:74:e9:48:32:63:82:19:c8:ba:d8:20: 60:d9:ea:d5:d6:ba:a5:86:4e:a9:fc:12:a6:eb:41:6c:a5:ea: dc:14:58:0f:c2:5c:ba:58:a6:f7:3c:5b:1c:2c:51:22:34:04: 87:ac:eb:3b:f9:c5:8a:5a:66:69:2d:07:bd:84:47:3b:f2:51: bd:cd:17:96 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUaaJcizMfJucbbYudhNOVo2JE1t0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3 OWI1ZmQ5MTAeFw0yNTExMDgyMDQ2NDJaFw0yNjExMDcyMDUxNDJaMDMxMTAvBgNV BAMTKDcxRjhFNTNFMTUwMkFENEVEMzMwRkQ2RkQwMjFEQTBGQTI3RkRFM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDExJMJRNtI9q1IMCq8H/c8Zdwz /zBFZn/ijjhqoHM24Zyerq6PDqgRd1lrGfzK8PXXHZPx/uagofNRblhJYiIgScYI eeatp9iW/ANwfWAOvsHZ/2gsLGn/IlszETSw84GVDW6HNTXdmq0UB3XyYnB5ZzE/ F4aHzOX/2PZ0vlAmGvfufbLasEOjMEMju7i4S3yIQ4rU6CietrQa1jML0JSK/bRV d3n0Ko7tx70uuqbtPISJWPrB3rKMYe61NhwvNI9f01W91+tY4Jibloi7yVJU3Ghc puwl7ZlEWEbkP+gYV/Tm7xxoYlkAJd68qYkEtiq5F4qTj5erqKV86aCkB4GDAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUcfjlPhUCrU7TMP1v0CHaD6J/3j4wHwYDVR0j BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5 ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t MV9aRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzEzOTMzMmUzMzM3MmUzMjMz MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMyMzgzMzMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA wSXvMA0GCSqGSIb3DQEBCwUAA4IBAQBdeewhZEaTA+sAEZnFxgQDOFPaO0yjypzH Za0YALrhAVLtyk/UGsD8V2roqOllp6wIseK7GVchfcB19qUsn6MRwhZ5LyhEMB0h 5bNAZjPzKjszXiEdjjaF8c8XmD/XvaOncEqoLfcSkeKD6RAOKEsmONSO6jstdgBj lQszyU2zY6ittuhk7D7ZrriZhfSYn/30MrdUjD7rDUBmuQvQd6gb1LZmEmndrSSW BeQ3iW5W5c2Jte9vg54+YiI+dOlIMmOCGci62CBg2erV1rqlhk6p/BKm60Fsperc FFgPwly6WKb3PFscLFEiNASHrOs7+cWKWmZpLQe9hEc78lG9zReW -----END CERTIFICATE-----Generated at Fri Dec 5 16:14:44 2025 by rpki-client