This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130352e302f32342d3234203d3e20323135303236.roa File: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (raw, json) Hash identifier: CEnX1eNlwK6zTbdiivvYtvATObcHBs1ojc6GAmrJxmA= Subject key identifier: ED:A2:E6:B8:68:34:DF:31:3C:9B:18:30:DE:32:E2:82:8B:AA:B8:61 Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 17F41CACD2EF3826BF2F7F0B22F779E9EE66458D Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130352e302f32342d3234203d3e20323135303236.roa Signing time: Tue 25 Nov 2025 15:55:12 +0000 ROA not before: Tue 25 Nov 2025 15:50:12 +0000 ROA not after: Tue 24 Nov 2026 15:55:12 +0000 asID: 215026 IP address blocks: 31.22.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 00:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f4:1c:ac:d2:ef:38:26:bf:2f:7f:0b:22:f7:79:e9:ee:66:45:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Nov 25 15:50:12 2025 GMT Not After : Nov 24 15:55:12 2026 GMT Subject: CN=EDA2E6B86834DF313C9B1830DE32E2828BAAB861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e6:cd:2d:c1:b1:1f:8a:b3:d2:02:f6:75:38: 7f:d6:2c:ff:ad:1a:3a:2d:5d:3e:3c:67:7a:bb:bc: df:d3:9d:aa:11:ff:99:ec:20:2e:2d:8e:39:1d:42: ee:cb:60:3c:67:10:54:c8:47:e0:7b:cb:03:54:99: 56:54:fc:46:cd:c7:73:9e:b7:e7:b9:d0:32:a1:17: c2:ef:5e:af:7c:b2:d5:f2:39:e3:b1:bd:31:29:0f: b0:85:fa:1b:51:cb:17:5c:c4:56:c6:46:c7:be:59: 2b:fa:5c:a9:2f:35:8a:01:77:05:8e:5b:8d:26:76: 29:e7:08:f5:d8:8f:30:79:77:cd:44:c6:83:ae:3f: db:5d:cb:16:9c:f2:6c:f4:2a:4c:4d:69:b6:5c:75: 01:92:9d:2e:9e:97:13:e2:58:54:f9:8f:60:f8:b8: 9a:e9:3b:03:0d:59:26:a7:cb:f5:9c:be:c3:e0:00: aa:e2:e8:cf:96:d1:1f:a0:94:95:a1:5a:30:56:e0: 20:b0:61:cd:20:dd:b9:0b:af:e7:8a:27:8f:2b:4b: e5:5d:01:ff:38:9b:5c:ac:e7:b7:c8:e5:9d:bf:16: b8:41:8f:93:bc:e5:15:56:cf:08:e9:c9:07:e6:6f: ab:a1:d4:76:53:53:da:62:7b:5a:e2:8b:3a:4d:1a: 7b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A2:E6:B8:68:34:DF:31:3C:9B:18:30:DE:32:E2:82:8B:AA:B8:61 X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130352e302f32342d3234203d3e20323135303236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.105.0/24 Signature Algorithm: sha256WithRSAEncryption 84:8d:a3:36:4b:4d:60:01:14:0a:93:da:52:4c:95:48:84:fa: e2:b0:f7:60:f7:81:cf:7f:ca:b8:23:32:8f:09:94:46:3e:75: aa:09:5c:99:ea:b5:e4:43:90:ef:6b:4d:ed:4e:c7:30:ef:2c: a3:4e:ed:c6:50:7f:86:a1:26:84:c5:a0:90:25:71:b8:9b:05: 46:25:56:b0:51:c4:e8:a7:89:62:ec:f4:e2:90:ce:48:a5:65: c2:32:b7:90:58:28:3d:ff:9d:11:d2:4e:90:61:a0:48:54:e7: 26:fd:6a:84:7d:5e:b4:53:c3:83:32:9b:90:00:8c:27:db:6a: a3:67:cb:c6:0d:37:55:ce:9c:e3:34:96:53:73:c2:a7:1d:f8: e1:cb:33:fe:e9:9d:b3:95:3f:ec:85:d9:c1:79:ad:63:ac:8d: 74:97:63:cf:c6:fc:21:64:d8:22:fb:b3:0b:7f:e0:27:89:bb: 74:4b:a5:ad:07:e8:22:c3:6e:c8:f0:cc:2a:42:ec:25:8d:dd: 24:c9:70:93:c6:c7:5a:0c:32:0f:09:0e:6b:7a:45:72:6e:dc: 48:15:96:c1:c9:99:b8:2b:ee:a4:03:0a:36:d3:b7:78:fc:cb: 74:2a:ca:49:a7:45:10:23:ea:fe:38:f9:9e:91:ab:b5:db:d2: 6f:8d:69:a6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUF/QcrNLvOCa/L38LIvd56e5mRY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNTExMjUxNTUwMTJaFw0yNjExMjQxNTU1MTJaMDMxMTAvBgNV BAMTKEVEQTJFNkI4NjgzNERGMzEzQzlCMTgzMERFMzJFMjgyOEJBQUI4NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx5s0twbEfirPSAvZ1OH/WLP+t GjotXT48Z3q7vN/TnaoR/5nsIC4tjjkdQu7LYDxnEFTIR+B7ywNUmVZU/EbNx3Oe t+e50DKhF8LvXq98stXyOeOxvTEpD7CF+htRyxdcxFbGRse+WSv6XKkvNYoBdwWO W40mdinnCPXYjzB5d81ExoOuP9tdyxac8mz0KkxNabZcdQGSnS6elxPiWFT5j2D4 uJrpOwMNWSany/WcvsPgAKri6M+W0R+glJWhWjBW4CCwYc0g3bkLr+eKJ48rS+Vd Af84m1ys57fI5Z2/FrhBj5O85RVWzwjpyQfmb6uh1HZTU9pie1riizpNGntbAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU7aLmuGg03zE8mxgw3jLigouquGEwHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQt NmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2NjIwLzAvMzMzMTJlMzIzMjJlMzEzMDM1 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM1MzAzMjM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA HxZpMA0GCSqGSIb3DQEBCwUAA4IBAQCEjaM2S01gARQKk9pSTJVIhPrisPdg94HP f8q4IzKPCZRGPnWqCVyZ6rXkQ5Dva03tTscw7yyjTu3GUH+GoSaExaCQJXG4mwVG JVawUcTop4li7PTikM5IpWXCMreQWCg9/50R0k6QYaBIVOcm/WqEfV60U8ODMpuQ AIwn22qjZ8vGDTdVzpzjNJZTc8KnHfjhyzP+6Z2zlT/shdnBea1jrI10l2PPxvwh ZNgi+7MLf+Anibt0S6WtB+giw27I8MwqQuwljd0kyXCTxsdaDDIPCQ5rekVybtxI FZbByZm4K+6kAwo207d4/Mt0KspJp0UQI+r+OPmekau129JvjWmm -----END CERTIFICATE-----Generated at Fri Dec 5 17:30:42 2025 by rpki-client