This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e33322e302f32312d3234203d3e203437353833.roa File: 3134372e39332e33322e302f32312d3234203d3e203437353833.roa (raw, json) Hash identifier: xy7d0Oj6JJa8bAEck1qr4QpKQhfFoc8tcuZxgn/E360= Subject key identifier: 83:C6:A7:66:8E:AF:8A:B5:4C:B7:7E:86:F4:81:8A:88:F8:BA:43:D7 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 713BF0934A7AECDC93BCFE0BB4B8B8AB313C66B7 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e33322e302f32312d3234203d3e203437353833.roa Signing time: Wed 12 Nov 2025 16:48:49 +0000 ROA not before: Wed 12 Nov 2025 16:43:49 +0000 ROA not after: Wed 11 Nov 2026 16:48:49 +0000 asID: 47583 IP address blocks: 147.93.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:3b:f0:93:4a:7a:ec:dc:93:bc:fe:0b:b4:b8:b8:ab:31:3c:66:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 12 16:43:49 2025 GMT Not After : Nov 11 16:48:49 2026 GMT Subject: CN=83C6A7668EAF8AB54CB77E86F4818A88F8BA43D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:01:3e:14:08:4b:4a:d0:4f:ae:cb:12:0a:65: ef:dd:58:ec:43:0e:a7:8b:1b:c3:49:dd:38:a6:4e: a8:a2:e6:78:10:3d:71:23:5d:a3:70:9c:df:0a:0b: 26:6f:1f:5c:1a:69:ea:b8:05:54:ae:1f:a0:e2:a5: 5c:1e:8a:82:c2:4c:bb:5b:df:bb:e9:82:66:a0:2a: ff:31:e3:a1:54:55:33:cd:18:b4:6f:c5:00:08:a2: d3:15:af:e6:03:e4:12:d9:57:54:d0:cd:2d:6f:6d: 2a:28:0f:4c:75:76:28:de:e0:4c:3c:ed:2e:c8:16: 20:fb:d0:f1:8f:12:28:ff:b8:ed:de:8e:1a:3d:84: 7d:8b:9b:6e:87:6c:b4:50:57:90:42:c4:b1:2e:3a: 3c:1a:97:fb:ef:22:b6:7e:bb:f5:ee:af:17:9b:c1: 16:45:0f:8c:6e:17:f0:c7:0a:65:c4:f6:5d:8a:16: 4c:5f:5d:ac:9f:99:a1:75:19:56:12:6c:89:2a:1a: fd:fd:0e:ea:16:9f:87:b2:9d:09:e1:58:0b:5b:7b: a4:2b:c6:b4:2c:82:4b:db:2f:a4:b0:14:65:df:b5: 0f:0c:a2:36:cc:be:49:40:07:db:d0:a2:93:3e:b4: a1:ef:15:0d:81:e3:19:d1:6c:47:c3:b7:9d:78:a2: 40:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C6:A7:66:8E:AF:8A:B5:4C:B7:7E:86:F4:81:8A:88:F8:BA:43:D7 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e33322e302f32312d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.93.32.0/21 Signature Algorithm: sha256WithRSAEncryption 15:b4:77:09:32:5f:47:d6:a4:26:ed:0c:d4:7a:8f:8f:28:a1: c2:0f:7b:1f:b8:fd:eb:c8:6e:ec:58:57:c0:a1:68:91:b9:4c: d4:57:1e:b5:b8:c1:a2:40:dc:b2:0f:09:9a:1f:67:f5:5e:89: 8b:89:ea:1e:fe:a7:e7:c2:3c:d6:be:cc:22:dc:bd:b2:16:9b: dd:91:30:bf:57:ee:26:08:bd:dd:e7:44:ef:70:28:1f:b8:97: 41:1a:70:57:f1:da:4a:9a:8b:7f:89:b7:75:28:af:fb:50:04: 58:dd:ee:88:88:22:80:a7:a4:d8:76:b6:b3:25:be:24:37:d1: 41:2b:f3:bc:f9:e2:85:51:9c:11:d5:98:1e:99:e2:8e:59:5b: ae:48:7d:45:43:be:4f:90:f7:28:e2:5f:fa:49:9d:8c:ec:62: 36:e7:bc:a9:49:42:5d:a9:62:30:94:a7:8a:33:d7:b4:af:1d: 22:3c:13:ec:32:17:37:7f:0f:e3:6b:55:ad:92:ea:2e:db:44: 57:92:7c:17:9a:55:bd:fd:33:7a:ba:86:eb:c6:1b:e6:83:d8: 05:ac:6b:44:22:64:21:37:7f:dd:53:f9:5c:0a:5e:44:b6:c4: ee:b5:88:87:7e:5c:88:44:33:97:0b:3f:5b:89:f4:f0:6b:95: ca:a7:d5:a9 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUcTvwk0p67NyTvP4LtLi4qzE8ZrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMTIxNjQzNDlaFw0yNjExMTExNjQ4NDlaMDMxMTAvBgNV BAMTKDgzQzZBNzY2OEVBRjhBQjU0Q0I3N0U4NkY0ODE4QTg4RjhCQTQzRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkAT4UCEtK0E+uyxIKZe/dWOxD DqeLG8NJ3TimTqii5ngQPXEjXaNwnN8KCyZvH1waaeq4BVSuH6DipVweioLCTLtb 37vpgmagKv8x46FUVTPNGLRvxQAIotMVr+YD5BLZV1TQzS1vbSooD0x1dije4Ew8 7S7IFiD70PGPEij/uO3ejho9hH2Lm26HbLRQV5BCxLEuOjwal/vvIrZ+u/Xurxeb wRZFD4xuF/DHCmXE9l2KFkxfXayfmaF1GVYSbIkqGv39DuoWn4eynQnhWAtbe6Qr xrQsgkvbL6SwFGXftQ8MojbMvklAB9vQopM+tKHvFQ2B4xnRbEfDt514okBXAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUg8anZo6virVMt36G9IGKiPi6Q9cwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM3MmUzOTMzMmUzMzMy MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA5Nd IDANBgkqhkiG9w0BAQsFAAOCAQEAFbR3CTJfR9akJu0M1HqPjyihwg97H7j968hu 7FhXwKFokblM1FcetbjBokDcsg8Jmh9n9V6Ji4nqHv6n58I81r7MIty9shab3ZEw v1fuJgi93edE73AoH7iXQRpwV/HaSpqLf4m3dSiv+1AEWN3uiIgigKek2Ha2syW+ JDfRQSvzvPnihVGcEdWYHpnijllbrkh9RUO+T5D3KOJf+kmdjOxiNue8qUlCXali MJSnijPXtK8dIjwT7DIXN38P42tVrZLqLttEV5J8F5pVvf0zerqG68Yb5oPYBaxr RCJkITd/3VP5XApeRLbE7rWIh35ciEQzlws/W4n08GuVyqfVqQ== -----END CERTIFICATE-----Generated at Fri Dec 5 06:24:15 2025 by rpki-client