This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130382e302f32342d3234203d3e203432383331.roa File: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (raw, json) Hash identifier: 8yRIzyX7kSL5wlZucsqrW2Cnq9iyHa3XujSoVf8z1CY= Subject key identifier: 62:D1:C4:9D:F5:4B:4B:C9:BF:69:A2:B5:C7:25:CA:79:7D:0B:CA:7F Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 23D90ED01AFFC1AA012D3399D3D5D5402FC3B7B4 Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130382e302f32342d3234203d3e203432383331.roa Signing time: Mon 17 Nov 2025 15:55:11 +0000 ROA not before: Mon 17 Nov 2025 15:50:11 +0000 ROA not after: Mon 16 Nov 2026 15:55:11 +0000 asID: 42831 IP address blocks: 31.22.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 00:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d9:0e:d0:1a:ff:c1:aa:01:2d:33:99:d3:d5:d5:40:2f:c3:b7:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Nov 17 15:50:11 2025 GMT Not After : Nov 16 15:55:11 2026 GMT Subject: CN=62D1C49DF54B4BC9BF69A2B5C725CA797D0BCA7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e0:15:09:75:84:7c:63:90:94:2c:b9:ce:20: 49:43:da:54:06:5e:32:15:e5:74:c5:76:e1:2f:88: 1e:51:01:22:6e:84:91:3b:1c:86:24:94:c4:a5:06: 1c:a1:82:a1:7c:cf:d7:1b:a6:f0:a5:60:1f:b0:d8: 0c:b4:4e:7f:72:1c:98:5b:84:69:c4:f0:15:87:68: 40:7d:bf:73:e6:72:34:ea:f5:14:eb:37:91:1d:e9: 92:10:3f:33:00:9e:fc:9b:b2:50:4f:6f:19:53:a8: f9:0e:f5:1b:5b:76:db:20:1a:ab:38:2f:7b:0f:fa: f6:5d:4b:26:b8:c2:6f:53:62:bb:a6:d0:1b:79:de: 19:2b:a8:26:78:2c:0f:88:1c:16:5e:30:e3:a7:75: bc:14:22:e8:82:c6:02:8c:bb:4b:42:67:22:15:18: 3d:e5:12:45:4d:b7:55:e7:9b:bd:67:a0:c6:d4:e3: f4:a5:1c:99:45:20:93:2f:08:3e:f4:ce:f8:f5:2c: 9a:1a:f2:ea:0f:2b:b4:42:17:1f:01:2f:76:ca:a8: 79:ba:c6:90:3b:e0:2f:88:44:83:c0:e6:d0:d5:9b: af:eb:21:25:b8:1b:0c:89:91:0b:1d:96:34:02:0d: d0:9c:af:ec:fb:94:c3:7e:11:3c:a4:30:53:b0:33: 46:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D1:C4:9D:F5:4B:4B:C9:BF:69:A2:B5:C7:25:CA:79:7D:0B:CA:7F X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130382e302f32342d3234203d3e203432383331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.108.0/24 Signature Algorithm: sha256WithRSAEncryption 93:97:07:06:fa:b1:fe:02:35:9d:2f:4f:e3:39:f3:ee:69:37: 0f:66:3d:fa:e8:cc:1a:4c:f8:24:af:f3:cf:77:0b:a6:2d:e6: a9:49:54:c9:72:8b:6d:b9:eb:9b:ff:08:8d:90:f4:d5:c8:b7: 81:6c:0f:14:c7:61:9c:8a:70:7c:7e:75:38:18:21:27:b5:94: cb:bf:4c:8b:e1:27:b4:69:07:1c:09:f8:6a:f2:0e:cf:1d:86: e3:0c:42:01:b3:4d:f9:69:59:16:05:a2:e5:d3:d6:f9:7c:79: 90:3b:92:70:ae:27:1f:82:09:1e:37:ba:f7:60:b3:da:61:f4: ab:a0:ef:e3:82:15:1e:bd:4b:b9:e5:d6:9d:0d:c7:5b:32:e0: 33:f9:dd:86:07:f1:01:d1:e3:0c:eb:f0:54:76:7b:9c:2f:8d: 7a:a1:b7:05:fc:c0:66:26:e4:c8:c5:07:c1:fc:7e:40:4e:10: 95:12:55:f9:40:3e:09:0a:2b:1a:cf:5e:1f:95:cf:1e:fc:38: 8a:91:e7:90:bc:af:3f:ae:e5:bf:fc:3f:49:4a:02:fc:93:ca: 12:70:c3:ad:88:e5:ee:08:6e:2e:54:e3:f1:d0:95:80:d7:e6: b6:1f:b1:40:17:92:74:4c:13:60:d3:49:70:87:07:5a:0f:e8: a6:76:e2:df -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUI9kO0Br/waoBLTOZ09XVQC/Dt7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNTExMTcxNTUwMTFaFw0yNjExMTYxNTU1MTFaMDMxMTAvBgNV BAMTKDYyRDFDNDlERjU0QjRCQzlCRjY5QTJCNUM3MjVDQTc5N0QwQkNBN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv4BUJdYR8Y5CULLnOIElD2lQG XjIV5XTFduEviB5RASJuhJE7HIYklMSlBhyhgqF8z9cbpvClYB+w2Ay0Tn9yHJhb hGnE8BWHaEB9v3PmcjTq9RTrN5Ed6ZIQPzMAnvybslBPbxlTqPkO9RtbdtsgGqs4 L3sP+vZdSya4wm9TYrum0Bt53hkrqCZ4LA+IHBZeMOOndbwUIuiCxgKMu0tCZyIV GD3lEkVNt1Xnm71noMbU4/SlHJlFIJMvCD70zvj1LJoa8uoPK7RCFx8BL3bKqHm6 xpA74C+IRIPA5tDVm6/rISW4GwyJkQsdljQCDdCcr+z7lMN+ETykMFOwM0ZDAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUYtHEnfVLS8m/aaK1xyXKeX0Lyn8wHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQt NmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2NjIwLzAvMzMzMTJlMzIzMjJlMzEzMDM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMjM4MzMzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB8W bDANBgkqhkiG9w0BAQsFAAOCAQEAk5cHBvqx/gI1nS9P4znz7mk3D2Y9+ujMGkz4 JK/zz3cLpi3mqUlUyXKLbbnrm/8IjZD01ci3gWwPFMdhnIpwfH51OBghJ7WUy79M i+EntGkHHAn4avIOzx2G4wxCAbNN+WlZFgWi5dPW+Xx5kDuScK4nH4IJHje692Cz 2mH0q6Dv44IVHr1LueXWnQ3HWzLgM/ndhgfxAdHjDOvwVHZ7nC+NeqG3BfzAZibk yMUHwfx+QE4QlRJV+UA+CQorGs9eH5XPHvw4ipHnkLyvP67lv/w/SUoC/JPKEnDD rYjl7ghuLlTj8dCVgNfmth+xQBeSdEwTYNNJcIcHWg/opnbi3w== -----END CERTIFICATE-----Generated at Fri Dec 5 16:19:05 2025 by rpki-client