This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e34302e302f32312d3234203d3e203437353833.roa File: 3134372e39332e34302e302f32312d3234203d3e203437353833.roa (raw, json) Hash identifier: Bo6Zv3UrWECBMoAVrhLl/5oJgjyT03z0hrR4ZYFnFTo= Subject key identifier: 73:D5:31:46:BA:28:1C:1F:5D:53:E4:B7:FD:CB:39:A1:49:64:D8:1B Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 707EC54D50E91879B19D22E6BBAAA6E0106BFF7A Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e34302e302f32312d3234203d3e203437353833.roa Signing time: Wed 12 Nov 2025 16:48:49 +0000 ROA not before: Wed 12 Nov 2025 16:43:49 +0000 ROA not after: Wed 11 Nov 2026 16:48:49 +0000 asID: 47583 IP address blocks: 147.93.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:7e:c5:4d:50:e9:18:79:b1:9d:22:e6:bb:aa:a6:e0:10:6b:ff:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 12 16:43:49 2025 GMT Not After : Nov 11 16:48:49 2026 GMT Subject: CN=73D53146BA281C1F5D53E4B7FDCB39A14964D81B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4e:57:2f:ec:4e:99:b8:92:97:ec:bc:2a:be: 31:6c:99:f8:f9:10:e6:2c:29:e3:a5:07:56:de:d2: a6:97:10:38:38:33:aa:88:72:b8:7c:ba:3f:fd:5c: a8:7f:ab:bf:5c:12:5c:75:5a:30:c1:be:02:33:46: 4b:3e:36:31:7c:49:a8:ad:21:78:cb:74:ad:47:04: 22:b9:f9:ed:70:60:60:72:a9:e7:e7:b9:b2:e7:f2: 6d:eb:f9:74:c5:1c:b9:c3:22:1e:90:da:a3:11:3b: 41:4e:9a:db:bd:e3:ea:45:b9:21:a4:17:84:43:c9: dc:9a:01:26:93:1d:96:4e:f3:9b:d6:17:ee:58:05: 9e:66:93:af:54:68:41:ff:59:97:c9:3c:02:e2:26: a2:24:95:e3:09:26:00:fb:a5:db:b4:b0:cc:18:81: f6:48:46:22:73:29:75:e1:cf:6b:3a:00:c7:2e:ae: e3:73:af:0e:d0:77:32:d3:b0:7b:a4:27:31:6f:87: 54:ab:19:d0:e2:43:33:c5:27:92:1f:cd:27:ee:fb: 98:5f:87:b6:39:b5:0a:e8:38:73:92:d5:14:68:f8: 47:80:d4:0c:a6:6f:0a:38:e1:20:c2:70:6b:04:c9: f8:31:91:e3:37:2e:56:de:0a:36:f1:c9:76:cc:53: 95:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D5:31:46:BA:28:1C:1F:5D:53:E4:B7:FD:CB:39:A1:49:64:D8:1B X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e34302e302f32312d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.93.40.0/21 Signature Algorithm: sha256WithRSAEncryption 8c:17:4c:28:08:e9:bd:86:56:4a:39:d9:69:22:52:7a:5c:c5: 25:57:57:a9:fc:63:d6:fd:55:9b:e2:d6:ca:70:45:cb:42:3d: 2b:f5:ac:ad:65:68:b4:8a:f2:9c:2d:fd:45:54:eb:92:00:34: b0:e4:b8:22:3c:27:82:d8:ca:4a:ae:a8:f6:4e:36:cb:37:9e: 22:e0:d0:f8:fc:df:23:a5:92:58:68:c2:6f:0d:0f:3d:34:5e: 25:16:0d:22:75:78:ac:c0:f9:95:cb:1d:9c:e2:b9:06:6a:9e: 89:16:ea:b6:df:4a:d3:bd:80:35:c1:4c:2a:cc:80:74:68:ff: eb:45:41:8b:45:83:87:d9:9e:c3:50:46:1d:e8:39:26:4b:6b: 7c:f5:37:6b:86:e9:dc:76:1d:ca:1c:1c:87:de:84:f8:38:cd: 81:68:12:19:81:6b:b7:3e:6c:3f:4a:65:4d:86:58:d6:8d:88: c4:68:67:a3:a9:aa:eb:c3:21:3a:99:87:74:ff:9b:7c:e3:38: 5e:a9:ac:a5:1a:b0:fa:6f:74:35:df:da:f8:ce:b4:13:79:36: 2e:51:64:9b:59:26:d1:6b:70:ab:62:2e:22:19:4e:05:9e:a5: 37:57:10:98:ed:d6:d4:01:80:b2:14:8c:c4:af:31:75:dc:13: 10:13:4e:72 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUcH7FTVDpGHmxnSLmu6qm4BBr/3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMTIxNjQzNDlaFw0yNjExMTExNjQ4NDlaMDMxMTAvBgNV BAMTKDczRDUzMTQ2QkEyODFDMUY1RDUzRTRCN0ZEQ0IzOUExNDk2NEQ4MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDITlcv7E6ZuJKX7LwqvjFsmfj5 EOYsKeOlB1be0qaXEDg4M6qIcrh8uj/9XKh/q79cElx1WjDBvgIzRks+NjF8Sait IXjLdK1HBCK5+e1wYGByqefnubLn8m3r+XTFHLnDIh6Q2qMRO0FOmtu94+pFuSGk F4RDydyaASaTHZZO85vWF+5YBZ5mk69UaEH/WZfJPALiJqIkleMJJgD7pdu0sMwY gfZIRiJzKXXhz2s6AMcuruNzrw7QdzLTsHukJzFvh1SrGdDiQzPFJ5IfzSfu+5hf h7Y5tQroOHOS1RRo+EeA1Aymbwo44SDCcGsEyfgxkeM3LlbeCjbxyXbMU5U/AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUc9UxRrooHB9dU+S3/cs5oUlk2BswHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM3MmUzOTMzMmUzNDMw MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA5Nd KDANBgkqhkiG9w0BAQsFAAOCAQEAjBdMKAjpvYZWSjnZaSJSelzFJVdXqfxj1v1V m+LWynBFy0I9K/WsrWVotIrynC39RVTrkgA0sOS4IjwngtjKSq6o9k42yzeeIuDQ +PzfI6WSWGjCbw0PPTReJRYNInV4rMD5lcsdnOK5BmqeiRbqtt9K072ANcFMKsyA dGj/60VBi0WDh9mew1BGHeg5JktrfPU3a4bp3HYdyhwch96E+DjNgWgSGYFrtz5s P0plTYZY1o2IxGhno6mq68MhOpmHdP+bfOM4XqmspRqw+m90Nd/a+M60E3k2LlFk m1km0Wtwq2IuIhlOBZ6lN1cQmO3W1AGAshSMxK8xddwTEBNOcg== -----END CERTIFICATE-----Generated at Fri Dec 5 06:22:31 2025 by rpki-client