This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3231322e32332e3231392e302f32342d3234203d3e203231383539.roa File: 3231322e32332e3231392e302f32342d3234203d3e203231383539.roa (raw, json) Hash identifier: pJ6d6n2haBy6CtDXHAeF/ubVn4SZijUgK/jxw4NolrI= Subject key identifier: 3F:C7:F2:76:F6:12:41:43:C1:58:B3:55:8E:6B:23:00:31:D2:C3:5D Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Certificate serial: 081B05323B19FF7ACBB8947F64D008E17CF63440 Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3231322e32332e3231392e302f32342d3234203d3e203231383539.roa Signing time: Wed 07 Jan 2026 05:59:39 +0000 ROA not before: Wed 07 Jan 2026 05:54:39 +0000 ROA not after: Wed 06 Jan 2027 05:59:39 +0000 asID: 21859 IP address blocks: 212.23.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 03:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:1b:05:32:3b:19:ff:7a:cb:b8:94:7f:64:d0:08:e1:7c:f6:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Validity Not Before: Jan 7 05:54:39 2026 GMT Not After : Jan 6 05:59:39 2027 GMT Subject: CN=3FC7F276F6124143C158B3558E6B230031D2C35D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fb:d7:0d:1a:9d:52:a3:08:a8:e5:58:ce:71: 57:55:10:49:b3:79:5d:22:2f:2a:f1:dc:1d:2e:0a: 9b:bb:22:99:ca:85:3d:d5:72:e2:46:56:a0:32:f5: 70:f4:46:c7:9e:21:2f:d0:2f:80:f7:e1:9e:08:79: 56:6f:b9:15:69:20:c8:4a:9b:90:db:2a:61:66:ac: 8e:0b:64:3d:24:98:11:68:5c:1c:8a:0b:fe:59:40: fc:4b:07:c5:18:c0:93:58:67:63:24:9f:db:3e:07: 5f:c3:f0:65:b1:97:1a:b3:a9:fb:f6:c3:f7:72:4e: 10:a9:9d:4c:74:07:d2:ae:6d:0e:32:e4:42:3b:fa: 63:ba:9c:94:09:df:1f:95:45:4b:62:3e:2d:42:7f: d8:55:a5:be:85:15:e6:49:dd:f7:79:8f:fe:29:42: 86:a0:10:38:1a:9e:e5:6d:c7:05:de:31:98:36:5e: a4:e0:21:d7:d4:1e:a3:d3:c9:42:67:5a:b1:f9:fd: 88:70:ed:a0:2e:db:f6:9c:bf:6b:bf:6e:b0:a2:99: ea:59:0d:fd:08:26:57:36:54:0f:aa:bc:16:93:eb: 28:ee:44:b8:f8:25:33:77:6f:13:f6:fe:40:87:b4: 71:0c:ab:07:68:19:3f:a8:a8:4c:73:eb:70:a8:aa: f8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C7:F2:76:F6:12:41:43:C1:58:B3:55:8E:6B:23:00:31:D2:C3:5D X509v3 Authority Key Identifier: keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3231322e32332e3231392e302f32342d3234203d3e203231383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.23.219.0/24 Signature Algorithm: sha256WithRSAEncryption a8:8e:45:09:d0:36:33:fa:dc:d3:80:9f:11:4a:0b:d0:c2:71: 9a:8b:19:6a:4c:ee:2a:50:87:cf:57:25:8f:7f:05:ff:b5:66: 46:35:72:c3:fd:7a:64:1c:83:f9:5c:8a:82:09:5f:43:56:b0: 84:4c:c7:35:86:e6:b2:c1:a4:94:ba:e9:13:6e:9c:c8:b0:0a: c6:b4:0e:9a:de:4b:13:78:95:ba:57:68:cf:d6:98:e0:e4:79: 15:cc:9c:ab:2a:de:67:87:bc:13:93:b1:63:f2:8d:d3:57:e1: b8:84:ac:78:f1:64:42:ac:20:77:34:87:b0:7b:62:df:cc:f5: 95:c1:8a:8f:a5:d0:e5:69:10:e5:d0:33:51:11:d7:63:6c:56: 6c:49:5d:0c:bd:ab:7e:9b:c0:0a:34:a1:df:e2:f8:3a:7e:c8: 2c:b9:f9:dd:3c:6a:82:1c:bd:9b:d4:6a:d8:b6:6c:c9:26:a3: d8:8c:82:ec:cb:ee:45:cb:e3:fe:6e:01:6c:be:6e:3a:7a:44: fd:f3:dd:8c:dc:44:48:9a:76:1b:1c:b3:69:84:72:86:ed:02: f9:72:f0:75:bd:75:20:46:80:2d:a4:32:22:23:29:ce:98:76: c1:76:c3:77:5c:dd:04:cc:49:d9:17:62:7f:6e:4d:fc:c5:01: 0a:85:c8:ae -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUCBsFMjsZ/3rLuJR/ZNAI4Xz2NEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3 OWI1ZmQ5MTAeFw0yNjAxMDcwNTU0MzlaFw0yNzAxMDYwNTU5MzlaMDMxMTAvBgNV BAMTKDNGQzdGMjc2RjYxMjQxNDNDMTU4QjM1NThFNkIyMzAwMzFEMkMzNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl+9cNGp1Sowio5VjOcVdVEEmz eV0iLyrx3B0uCpu7IpnKhT3VcuJGVqAy9XD0RseeIS/QL4D34Z4IeVZvuRVpIMhK m5DbKmFmrI4LZD0kmBFoXByKC/5ZQPxLB8UYwJNYZ2Mkn9s+B1/D8GWxlxqzqfv2 w/dyThCpnUx0B9KubQ4y5EI7+mO6nJQJ3x+VRUtiPi1Cf9hVpb6FFeZJ3fd5j/4p QoagEDganuVtxwXeMZg2XqTgIdfUHqPTyUJnWrH5/Yhw7aAu2/acv2u/brCimepZ Df0IJlc2VA+qvBaT6yjuRLj4JTN3bxP2/kCHtHEMqwdoGT+oqExz63Coqvg9AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUP8fydvYSQUPBWLNVjmsjADHSw10wHwYDVR0j BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5 ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t MV9aRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzIzMTMyMmUzMjMzMmUzMjMx MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzgzNTM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 1BfbMA0GCSqGSIb3DQEBCwUAA4IBAQCojkUJ0DYz+tzTgJ8RSgvQwnGaixlqTO4q UIfPVyWPfwX/tWZGNXLD/XpkHIP5XIqCCV9DVrCETMc1huaywaSUuukTbpzIsArG tA6a3ksTeJW6V2jP1pjg5HkVzJyrKt5nh7wTk7Fj8o3TV+G4hKx48WRCrCB3NIew e2LfzPWVwYqPpdDlaRDl0DNREddjbFZsSV0Mvat+m8AKNKHf4vg6fsgsufndPGqC HL2b1GrYtmzJJqPYjILsy+5Fy+P+bgFsvm46ekT9892M3ERImnYbHLNphHKG7QL5 cvB1vXUgRoAtpDIiIynOmHbBdsN3XN0EzEnZF2J/bk38xQEKhciu -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:53 2026 by rpki-client