This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e35362e302f32312d3234203d3e203437353833.roa File: 3134372e39332e35362e302f32312d3234203d3e203437353833.roa (raw, json) Hash identifier: HCz/3vv7j+tZ3T3SZzjZAo9Tn0ASpZTK60E2vNWZuQc= Subject key identifier: C1:4E:92:C5:0E:8E:C0:2D:26:E7:75:C0:8F:19:9F:34:8C:99:25:57 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 5E2BF4B87C6988F3AF3A72922DB58F1A67FBBE87 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e35362e302f32312d3234203d3e203437353833.roa Signing time: Wed 12 Nov 2025 16:48:49 +0000 ROA not before: Wed 12 Nov 2025 16:43:49 +0000 ROA not after: Wed 11 Nov 2026 16:48:49 +0000 asID: 47583 IP address blocks: 147.93.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:2b:f4:b8:7c:69:88:f3:af:3a:72:92:2d:b5:8f:1a:67:fb:be:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 12 16:43:49 2025 GMT Not After : Nov 11 16:48:49 2026 GMT Subject: CN=C14E92C50E8EC02D26E775C08F199F348C992557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:eb:1d:dd:d7:27:ba:d7:49:84:b0:cf:7f:df: 81:e2:86:64:ef:3a:ff:be:0e:c1:05:09:a7:5a:b2: af:44:05:f0:97:1a:43:10:6f:25:78:1d:d7:9e:ef: 5f:43:e3:b3:83:6b:29:ea:d0:b5:6d:79:a5:8b:d6: 26:90:3f:54:76:86:f5:e1:34:dc:f4:95:ef:b7:4e: fa:73:8e:b0:9f:99:45:c5:8a:6a:51:9f:90:1f:b1: c9:c1:bc:ac:c4:25:50:01:6d:2e:30:38:c4:67:2b: 04:1c:85:a2:72:37:f0:88:5f:e9:e0:69:63:bd:a2: f8:05:6a:04:73:75:cc:6b:db:1a:22:b5:1b:e4:cd: 7d:96:a5:a9:28:76:7b:f1:d0:6a:3f:66:66:95:b6: d3:c0:b4:c2:0c:ed:66:d0:90:c6:2e:ce:5b:03:3a: 27:02:57:c3:3f:ee:b7:50:6c:62:be:2c:b3:f2:96: cd:b6:05:17:30:5a:06:19:3f:ad:20:10:59:e7:60: 68:8a:8e:4f:cc:a7:57:aa:38:66:66:5b:c1:37:36: ae:dd:c3:38:ae:63:3e:70:c7:4b:6f:a5:33:9f:4a: b5:8c:26:f9:ee:ad:23:a3:83:cd:65:96:a4:ae:b2: c4:ce:6b:94:33:b6:bb:b1:23:7f:68:fb:ac:3b:6e: 1b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4E:92:C5:0E:8E:C0:2D:26:E7:75:C0:8F:19:9F:34:8C:99:25:57 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e35362e302f32312d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.93.56.0/21 Signature Algorithm: sha256WithRSAEncryption 3f:c6:45:ee:d5:d4:95:2a:4a:77:b6:1d:c3:d1:64:ca:fc:6a: fc:63:11:fa:6b:0e:8c:c4:51:7c:f5:b3:65:3a:b5:01:46:6f: 0e:3c:73:eb:67:ca:2e:52:e2:5a:fe:47:70:c5:d3:51:89:93: cf:fb:4c:ee:e0:f6:da:ba:72:95:4f:ba:fb:44:e4:fc:c6:46: 72:c2:8b:5a:fb:a3:91:13:4d:7b:84:ba:29:b5:68:0d:73:fa: 26:3c:ee:91:45:6e:c2:45:33:64:b0:f2:1b:00:8e:ee:41:8f: c8:af:d1:6e:65:24:41:b8:5e:6c:8e:f8:92:24:f7:d9:8d:f0: 42:8d:d2:8f:b0:d6:c6:c1:8d:47:79:d9:fd:cf:74:7c:f5:75: e8:10:6b:93:54:11:94:37:bb:3b:f4:70:6d:62:a6:4b:b5:86: df:af:b7:30:1d:45:23:63:60:61:cc:03:dd:c2:e1:59:33:48: e8:02:55:60:ed:a3:79:45:28:84:92:22:a8:ee:df:97:3c:dd: 7b:f1:be:32:72:95:5e:ec:ab:9e:ab:63:e8:16:ee:a3:15:c7: 85:b8:d6:16:e9:a5:6c:fb:80:94:8b:0c:88:1b:ee:9f:e5:3c: da:2b:4e:8f:73:94:66:98:6a:05:05:60:ab:65:c8:c0:3e:91: 1b:ff:2d:eb -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUXiv0uHxpiPOvOnKSLbWPGmf7vocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMTIxNjQzNDlaFw0yNjExMTExNjQ4NDlaMDMxMTAvBgNV BAMTKEMxNEU5MkM1MEU4RUMwMkQyNkU3NzVDMDhGMTk5RjM0OEM5OTI1NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq6x3d1ye610mEsM9/34HihmTv Ov++DsEFCadasq9EBfCXGkMQbyV4Hdee719D47ODaynq0LVteaWL1iaQP1R2hvXh NNz0le+3TvpzjrCfmUXFimpRn5AfscnBvKzEJVABbS4wOMRnKwQchaJyN/CIX+ng aWO9ovgFagRzdcxr2xoitRvkzX2Wpakodnvx0Go/ZmaVttPAtMIM7WbQkMYuzlsD OicCV8M/7rdQbGK+LLPyls22BRcwWgYZP60gEFnnYGiKjk/Mp1eqOGZmW8E3Nq7d wziuYz5wx0tvpTOfSrWMJvnurSOjg81llqSussTOa5QztruxI39o+6w7bhvhAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUwU6SxQ6OwC0m53XAjxmfNIyZJVcwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM3MmUzOTMzMmUzNTM2 MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA5Nd ODANBgkqhkiG9w0BAQsFAAOCAQEAP8ZF7tXUlSpKd7Ydw9Fkyvxq/GMR+msOjMRR fPWzZTq1AUZvDjxz62fKLlLiWv5HcMXTUYmTz/tM7uD22rpylU+6+0Tk/MZGcsKL WvujkRNNe4S6KbVoDXP6JjzukUVuwkUzZLDyGwCO7kGPyK/RbmUkQbhebI74kiT3 2Y3wQo3Sj7DWxsGNR3nZ/c90fPV16BBrk1QRlDe7O/RwbWKmS7WG36+3MB1FI2Ng YcwD3cLhWTNI6AJVYO2jeUUohJIiqO7flzzde/G+MnKVXuyrnqtj6BbuoxXHhbjW FumlbPuAlIsMiBvun+U82itOj3OUZphqBQVgq2XIwD6RG/8t6w== -----END CERTIFICATE-----Generated at Fri Dec 5 06:23:12 2025 by rpki-client