This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e36342e302f32312d3234203d3e203437353833.roa File: 3134372e39332e36342e302f32312d3234203d3e203437353833.roa (raw, json) Hash identifier: EdQDe8GsZdCbUJKB6e8veL8dPMehqgaxLuEy608zM/g= Subject key identifier: F8:2B:D2:AA:31:8E:D2:EF:D4:57:AC:DE:EE:96:B2:1C:65:5E:DD:A7 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 2D6625D1D46770DAA3A1815E1CBF0A2249C12AA4 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e36342e302f32312d3234203d3e203437353833.roa Signing time: Mon 17 Nov 2025 20:48:55 +0000 ROA not before: Mon 17 Nov 2025 20:43:55 +0000 ROA not after: Mon 16 Nov 2026 20:48:55 +0000 asID: 47583 IP address blocks: 147.93.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:66:25:d1:d4:67:70:da:a3:a1:81:5e:1c:bf:0a:22:49:c1:2a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 17 20:43:55 2025 GMT Not After : Nov 16 20:48:55 2026 GMT Subject: CN=F82BD2AA318ED2EFD457ACDEEE96B21C655EDDA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f6:cf:f7:34:e5:10:4c:ba:39:15:8e:1d:91: e6:88:48:28:40:2a:5d:10:7b:61:78:53:86:83:62: d6:d6:0b:71:c1:b0:17:33:d6:29:f3:96:f3:66:90: 3d:be:81:71:62:91:cb:2d:69:00:57:bf:0f:29:b5: 12:38:0d:40:2a:c9:92:a1:a3:84:10:0b:3b:4e:2c: 03:5f:df:7f:dc:0a:0f:2b:c8:a8:bb:4a:7b:fe:12: 43:9f:de:c6:7c:13:78:06:b7:b9:e1:73:71:74:3c: 9e:13:79:37:0e:84:e5:05:1e:9b:ba:85:29:49:c7: be:9a:1f:6a:8e:39:e2:12:dd:b8:52:27:f6:74:b9: 25:92:73:39:45:58:06:1e:9c:b9:6d:c8:07:ef:dd: f2:c5:ab:4b:1d:11:62:f6:d4:de:66:44:41:bb:bc: 67:4d:f4:9a:a4:34:88:73:42:10:fd:dd:5c:1c:b7: 50:c2:df:9d:ac:04:9b:58:5e:12:f7:43:72:65:73: 9e:aa:6f:a5:cb:d2:ec:49:02:8c:f7:8b:e6:41:c2: 7c:55:60:d9:3c:7b:8f:22:50:20:70:b8:b9:a6:0b: 23:9f:85:3c:40:5b:83:87:68:9e:56:68:3a:1a:36: 06:65:db:eb:2b:e8:98:5f:c2:30:1c:0e:0d:32:70: 6f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2B:D2:AA:31:8E:D2:EF:D4:57:AC:DE:EE:96:B2:1C:65:5E:DD:A7 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e36342e302f32312d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.93.64.0/21 Signature Algorithm: sha256WithRSAEncryption 97:bf:b0:d9:49:57:00:83:a3:08:ff:52:ce:03:46:11:ce:c4: 74:20:7e:ba:c8:67:89:02:01:6b:fc:5d:05:2b:dc:96:ec:80: 33:ea:98:99:85:51:8f:a4:cb:90:29:9b:1f:b2:77:e7:88:43: 83:5e:94:d7:c1:6e:d7:9d:39:82:f2:87:a8:eb:1f:5d:26:6d: 85:74:33:aa:f0:e5:b4:4d:da:fd:f2:c6:4c:43:bf:52:37:25: 84:3c:cf:15:9d:39:dc:9e:ef:43:d6:fc:fc:f3:0b:f0:6c:8f: d0:cd:f9:29:4d:98:ce:ce:f4:11:3e:98:4f:9c:c3:b1:75:bb: a9:d5:f1:1a:cc:14:72:8a:0a:27:33:f7:7f:4e:2d:74:03:5a: 80:0f:4f:42:9a:a4:ef:82:34:8e:d5:bf:8e:b6:7c:ca:da:c5: 3a:b3:9f:fe:93:7b:2b:2d:06:0d:0e:4e:bc:33:22:24:08:56: ad:f5:32:6a:4b:e7:6c:31:d7:76:19:21:5e:4e:d4:d8:e7:d2: ee:f1:d2:38:59:37:5e:38:3f:ac:b1:34:a6:1f:4f:a6:22:52: bb:62:5d:73:73:8e:bc:14:06:5f:b0:9e:39:67:c9:fa:11:fe: b7:9d:74:74:6c:df:38:21:8d:4f:40:20:db:fb:84:01:0f:db: 32:0e:89:61 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIULWYl0dRncNqjoYFeHL8KIknBKqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMTcyMDQzNTVaFw0yNjExMTYyMDQ4NTVaMDMxMTAvBgNV BAMTKEY4MkJEMkFBMzE4RUQyRUZENDU3QUNERUVFOTZCMjFDNjU1RUREQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa9s/3NOUQTLo5FY4dkeaISChA Kl0Qe2F4U4aDYtbWC3HBsBcz1inzlvNmkD2+gXFikcstaQBXvw8ptRI4DUAqyZKh o4QQCztOLANf33/cCg8ryKi7Snv+EkOf3sZ8E3gGt7nhc3F0PJ4TeTcOhOUFHpu6 hSlJx76aH2qOOeIS3bhSJ/Z0uSWSczlFWAYenLltyAfv3fLFq0sdEWL21N5mREG7 vGdN9JqkNIhzQhD93Vwct1DC352sBJtYXhL3Q3Jlc56qb6XL0uxJAoz3i+ZBwnxV YNk8e48iUCBwuLmmCyOfhTxAW4OHaJ5WaDoaNgZl2+sr6JhfwjAcDg0ycG8LAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU+CvSqjGO0u/UV6ze7payHGVe3acwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM3MmUzOTMzMmUzNjM0 MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA5Nd QDANBgkqhkiG9w0BAQsFAAOCAQEAl7+w2UlXAIOjCP9SzgNGEc7EdCB+ushniQIB a/xdBSvcluyAM+qYmYVRj6TLkCmbH7J354hDg16U18Fu1505gvKHqOsfXSZthXQz qvDltE3a/fLGTEO/UjclhDzPFZ053J7vQ9b8/PML8GyP0M35KU2Yzs70ET6YT5zD sXW7qdXxGswUcooKJzP3f04tdANagA9PQpqk74I0jtW/jrZ8ytrFOrOf/pN7Ky0G DQ5OvDMiJAhWrfUyakvnbDHXdhkhXk7U2OfS7vHSOFk3Xjg/rLE0ph9PpiJSu2Jd c3OOvBQGX7CeOWfJ+hH+t510dGzfOCGNT0Ag2/uEAQ/bMg6JYQ== -----END CERTIFICATE-----Generated at Fri Dec 5 06:22:33 2025 by rpki-client