This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3131302e302f32342d3234203d3e20323038393035.roa File: 33312e32322e3131302e302f32342d3234203d3e20323038393035.roa (raw, json) Hash identifier: GDspqRij6MiNPh7udQ2b5uDlkV2tbpp6r9PQ/alfk6o= Subject key identifier: 9F:6B:2C:DE:81:0D:C1:16:A6:0E:B9:E2:DD:8E:F2:42:DF:51:45:8E Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 05A3506CF26E352E24CD0A6808D8B7C1313D561F Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3131302e302f32342d3234203d3e20323038393035.roa Signing time: Mon 15 Dec 2025 20:35:36 +0000 ROA not before: Mon 15 Dec 2025 20:30:36 +0000 ROA not after: Mon 14 Dec 2026 20:35:36 +0000 asID: 208905 IP address blocks: 31.22.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a3:50:6c:f2:6e:35:2e:24:cd:0a:68:08:d8:b7:c1:31:3d:56:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Dec 15 20:30:36 2025 GMT Not After : Dec 14 20:35:36 2026 GMT Subject: CN=9F6B2CDE810DC116A60EB9E2DD8EF242DF51458E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:68:42:d1:f0:69:a7:53:0c:ff:43:d8:17:d9: fe:12:b0:c6:4f:1d:a7:a7:5b:58:e3:37:09:a8:8f: 1d:0f:33:02:7e:77:46:36:6d:3a:10:96:ae:65:38: 63:b9:c6:4e:2a:b9:3e:93:be:88:5e:d8:f4:62:28: 8e:ed:5b:bc:61:e3:c7:5c:e7:30:1b:8e:60:50:8f: 15:53:01:2f:0a:32:19:a0:84:ac:26:08:92:2d:22: 48:a9:53:be:d5:89:20:aa:94:e1:45:7b:49:6b:f6: c3:2a:e4:ea:5b:c4:b5:06:fd:79:ae:74:5b:ff:39: e0:2a:a7:36:5a:0e:86:cd:19:95:fd:22:fd:9a:d5: f1:b5:07:1f:29:12:11:7a:53:36:e5:e1:0f:ed:57: 3e:45:76:9d:a3:69:00:2b:4f:5d:a5:c1:3a:c3:80: 17:76:33:79:6a:a7:1b:bd:7f:82:82:a6:0d:08:fc: c7:3e:fa:10:0b:38:fe:0e:4c:3e:81:cd:50:c1:b1: f8:97:f9:90:d6:0d:e4:65:6e:4f:d1:ef:87:42:59: 09:05:55:62:bd:02:36:9b:63:47:c8:00:20:7e:eb: f8:13:cb:d8:d8:92:61:62:c3:f6:67:5c:9e:b8:ed: 8e:01:1e:1b:d8:84:17:74:38:f5:f7:50:9f:54:d5: d3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6B:2C:DE:81:0D:C1:16:A6:0E:B9:E2:DD:8E:F2:42:DF:51:45:8E X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3131302e302f32342d3234203d3e20323038393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.110.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:05:a7:6e:c6:a9:06:c0:32:00:46:8f:8f:e8:ed:83:3e:4e: 2f:67:39:52:4c:af:f3:d4:5a:3b:99:75:be:74:b5:cf:26:ee: 33:33:ee:16:75:53:a1:19:d6:34:25:9c:e3:83:cd:36:38:a5: ff:4c:c8:ee:f7:59:d9:57:9d:b5:27:45:94:c3:4d:02:90:f6: 33:9f:79:db:a2:22:f6:80:c9:05:f2:06:58:75:77:ce:d0:48: 15:bc:00:ce:65:77:b3:3b:70:35:45:f4:e8:59:3b:bc:13:fe: aa:d3:ba:ce:47:1a:34:9f:f8:f6:7e:53:6e:af:a1:eb:68:ee: ef:b8:38:8b:0c:05:40:01:94:69:30:ff:a7:53:24:6d:28:59: 0c:37:2c:7b:fe:3e:23:05:07:4f:d7:f3:d8:d1:ac:e1:84:5a: 48:af:56:60:7c:74:c4:8c:f2:08:c9:ef:0e:64:f2:8a:c8:96: 4a:33:42:ab:66:1a:8b:08:26:bf:30:0c:d0:09:c1:7d:80:1b: f5:2c:e7:7b:4b:2c:d1:da:30:a9:ef:7c:59:bd:a9:55:9b:38: 71:47:32:e5:dc:8d:62:7d:f9:f0:bb:e7:eb:66:96:54:e5:a3: a7:70:1a:a4:5d:f1:33:5c:cf:3d:39:d9:3d:0b:49:e5:80:0c: 12:f0:12:62 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUBaNQbPJuNS4kzQpoCNi3wTE9Vh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNTEyMTUyMDMwMzZaFw0yNjEyMTQyMDM1MzZaMDMxMTAvBgNV BAMTKDlGNkIyQ0RFODEwREMxMTZBNjBFQjlFMkREOEVGMjQyREY1MTQ1OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOaELR8GmnUwz/Q9gX2f4SsMZP HaenW1jjNwmojx0PMwJ+d0Y2bToQlq5lOGO5xk4quT6Tvohe2PRiKI7tW7xh48dc 5zAbjmBQjxVTAS8KMhmghKwmCJItIkipU77ViSCqlOFFe0lr9sMq5OpbxLUG/Xmu dFv/OeAqpzZaDobNGZX9Iv2a1fG1Bx8pEhF6Uzbl4Q/tVz5Fdp2jaQArT12lwTrD gBd2M3lqpxu9f4KCpg0I/Mc++hALOP4OTD6BzVDBsfiX+ZDWDeRlbk/R74dCWQkF VWK9AjabY0fIACB+6/gTy9jYkmFiw/ZnXJ647Y4BHhvYhBd0OPX3UJ9U1dPrAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUn2ss3oENwRamDrni3Y7yQt9RRY4wHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQt NmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2NjIwLzAvMzMzMTJlMzIzMjJlMzEzMTMw MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM4MzkzMDM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA HxZuMA0GCSqGSIb3DQEBCwUAA4IBAQBLBaduxqkGwDIARo+P6O2DPk4vZzlSTK/z 1Fo7mXW+dLXPJu4zM+4WdVOhGdY0JZzjg802OKX/TMju91nZV521J0WUw00CkPYz n3nboiL2gMkF8gZYdXfO0EgVvADOZXezO3A1RfToWTu8E/6q07rORxo0n/j2flNu r6HraO7vuDiLDAVAAZRpMP+nUyRtKFkMNyx7/j4jBQdP1/PY0azhhFpIr1ZgfHTE jPIIye8OZPKKyJZKM0KrZhqLCCa/MAzQCcF9gBv1LOd7SyzR2jCp73xZvalVmzhx RzLl3I1iffnwu+frZpZU5aOncBqkXfEzXM89Odk9C0nlgAwS8BJi -----END CERTIFICATE-----Generated at Fri Dec 19 09:17:56 2025 by rpki-client