This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e37322e302f32322d3234203d3e203437353833.roa File: 3134372e39332e37322e302f32322d3234203d3e203437353833.roa (raw, json) Hash identifier: EL9K3XFBUvNcBAsH97riHfFjWodpiPUAVHDRtouxGI8= Subject key identifier: 54:E9:1C:30:BB:42:24:3D:24:F0:0C:A4:8A:FB:F8:8E:5B:3F:00:3D Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 07D8DF57D97AA21E18CA425B75C59CCD02621466 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e37322e302f32322d3234203d3e203437353833.roa Signing time: Mon 17 Nov 2025 20:48:55 +0000 ROA not before: Mon 17 Nov 2025 20:43:55 +0000 ROA not after: Mon 16 Nov 2026 20:48:55 +0000 asID: 47583 IP address blocks: 147.93.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d8:df:57:d9:7a:a2:1e:18:ca:42:5b:75:c5:9c:cd:02:62:14:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 17 20:43:55 2025 GMT Not After : Nov 16 20:48:55 2026 GMT Subject: CN=54E91C30BB42243D24F00CA48AFBF88E5B3F003D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cf:f0:6a:44:a1:6a:38:09:84:69:60:c8:4a: 0e:68:4b:dc:68:aa:18:88:f5:52:2e:0f:51:b7:50: 70:5f:3c:23:89:aa:37:c8:b4:c7:5c:15:9c:f4:cc: d3:a6:6b:e4:a1:32:05:ff:6f:25:19:49:8e:a1:c6: 31:be:a1:be:b4:1a:06:6d:dc:dd:b1:83:f4:79:0d: b4:74:f2:67:ff:1b:0c:d2:e3:f7:60:6d:49:63:3a: fc:ef:b2:db:40:0b:ac:ba:8e:70:73:12:32:c6:50: 02:66:3f:60:d7:e2:f1:e6:bb:2a:eb:d0:02:45:be: 09:cc:c2:db:57:6c:9d:ec:e5:d9:75:a9:2d:78:bd: d6:7b:f7:eb:40:21:1f:5c:6f:c1:4a:e6:68:7b:69: 23:de:f7:5d:af:7e:e5:17:9c:82:ee:09:aa:39:b9: 39:64:7b:0b:b5:c3:54:ee:09:15:e0:a9:9b:90:be: a7:de:75:21:5b:dc:03:fc:a5:07:ba:e1:70:84:4b: 2d:39:d1:6f:af:c0:3d:71:67:f4:9a:c5:c7:6f:4a: 77:95:1c:39:6a:72:ff:4d:a8:ff:97:a6:ad:da:25: 11:15:9c:a1:86:e4:b4:29:eb:64:d5:a6:5d:bf:56: ce:64:bb:ce:bd:05:e6:cb:9b:40:bb:32:97:17:9d: 8d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E9:1C:30:BB:42:24:3D:24:F0:0C:A4:8A:FB:F8:8E:5B:3F:00:3D X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e37322e302f32322d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.93.72.0/22 Signature Algorithm: sha256WithRSAEncryption 60:4c:da:34:1f:09:e5:71:11:be:0d:b4:ed:b7:91:11:be:47: 82:13:01:d4:88:3d:0c:d2:c6:99:00:f5:66:f5:5e:1b:4d:cb: 5c:8e:d4:52:31:b0:19:33:92:89:5b:bb:45:1e:35:a9:14:d8: 1d:9c:9f:e2:e2:6d:0c:df:60:1b:bc:be:ad:8a:bc:7a:33:2b: 9b:22:d2:f2:10:b9:89:b6:41:fa:6f:af:bb:25:01:ab:e7:72: 81:b7:60:c7:89:bf:bb:6d:09:31:e0:a3:60:66:ec:e3:84:8e: 2b:37:96:05:46:03:21:5e:45:b5:f6:9a:c8:d7:57:96:b4:ab: ba:d7:d1:e1:d9:5f:23:cb:6e:f8:1c:73:fa:56:c3:39:9d:f7: 30:1c:66:d8:c5:58:4f:32:68:64:3d:f7:c7:8f:da:dd:c6:98: 0a:60:61:26:11:f6:24:95:fb:32:21:f1:73:ad:fc:95:74:52: c1:d9:9b:7a:1a:6a:b3:ac:55:f7:13:a3:74:32:9f:8d:4f:39: 29:50:14:88:3f:a5:b3:b1:39:7f:72:72:2d:f0:79:88:7e:c5: 0a:ba:39:15:8c:e9:7f:09:60:b0:e7:17:0a:f9:f6:65:b3:ff: 50:9e:6a:58:3e:91:37:57:0d:57:7b:62:69:71:1a:ea:c4:44: 35:ab:f3:4d -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUB9jfV9l6oh4YykJbdcWczQJiFGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMTcyMDQzNTVaFw0yNjExMTYyMDQ4NTVaMDMxMTAvBgNV BAMTKDU0RTkxQzMwQkI0MjI0M0QyNEYwMENBNDhBRkJGODhFNUIzRjAwM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbz/BqRKFqOAmEaWDISg5oS9xo qhiI9VIuD1G3UHBfPCOJqjfItMdcFZz0zNOma+ShMgX/byUZSY6hxjG+ob60GgZt 3N2xg/R5DbR08mf/GwzS4/dgbUljOvzvsttAC6y6jnBzEjLGUAJmP2DX4vHmuyrr 0AJFvgnMwttXbJ3s5dl1qS14vdZ79+tAIR9cb8FK5mh7aSPe912vfuUXnILuCao5 uTlkewu1w1TuCRXgqZuQvqfedSFb3AP8pQe64XCESy050W+vwD1xZ/SaxcdvSneV HDlqcv9NqP+Xpq3aJREVnKGG5LQp62TVpl2/Vs5ku869BebLm0C7MpcXnY17AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUVOkcMLtCJD0k8Aykivv4jls/AD0wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM3MmUzOTMzMmUzNzMy MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEApNd SDANBgkqhkiG9w0BAQsFAAOCAQEAYEzaNB8J5XERvg207beREb5HghMB1Ig9DNLG mQD1ZvVeG03LXI7UUjGwGTOSiVu7RR41qRTYHZyf4uJtDN9gG7y+rYq8ejMrmyLS 8hC5ibZB+m+vuyUBq+dygbdgx4m/u20JMeCjYGbs44SOKzeWBUYDIV5FtfaayNdX lrSrutfR4dlfI8tu+Bxz+lbDOZ33MBxm2MVYTzJoZD33x4/a3caYCmBhJhH2JJX7 MiHxc638lXRSwdmbehpqs6xV9xOjdDKfjU85KVAUiD+ls7E5f3JyLfB5iH7FCro5 FYzpfwlgsOcXCvn2ZbP/UJ5qWD6RN1cNV3tiaXEa6sRENavzTQ== -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:40 2025 by rpki-client