This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e37362e302f32342d3234203d3e20323034393135.roa File: 3134372e39332e37362e302f32342d3234203d3e20323034393135.roa (raw, json) Hash identifier: gE8Me4rms+RUk7vptNPmzL7kG9h9xVF4QTqxqpxluEQ= Subject key identifier: 67:86:83:55:DA:27:87:6F:34:B7:64:19:F2:47:3D:26:01:4F:30:21 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 633C05FE2C857DE935B72CFEAA5A457B1B2FD4BA Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e37362e302f32342d3234203d3e20323034393135.roa Signing time: Thu 06 Nov 2025 08:25:16 +0000 ROA not before: Thu 06 Nov 2025 08:20:16 +0000 ROA not after: Thu 05 Nov 2026 08:25:16 +0000 asID: 204915 IP address blocks: 147.93.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:3c:05:fe:2c:85:7d:e9:35:b7:2c:fe:aa:5a:45:7b:1b:2f:d4:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 6 08:20:16 2025 GMT Not After : Nov 5 08:25:16 2026 GMT Subject: CN=67868355DA27876F34B76419F2473D26014F3021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:aa:97:6d:b4:64:54:f4:7b:f2:0f:73:74:65: 7c:e0:c1:d9:99:40:d9:e8:d4:6c:c5:c9:86:85:d0: de:9b:60:a3:2f:1b:f5:1c:c3:63:34:fa:6d:6a:76: 87:8c:a9:ee:06:a2:21:3b:36:d4:c5:a1:ae:00:25: 52:7b:de:06:5b:13:c8:74:ee:77:d6:4a:d1:fd:5a: e7:a1:f7:69:ff:19:63:97:e2:ba:95:11:0e:07:af: 44:be:80:5f:66:c1:05:2f:5e:2f:aa:36:95:2b:a8: d5:07:c3:97:52:b6:9f:c2:05:58:ce:11:91:90:79: 6b:53:2c:a0:8d:c6:c7:d3:bf:be:ec:83:25:b9:88: 7c:6c:23:62:dd:ca:7d:0a:db:f1:c6:0b:66:e9:49: 5e:4f:db:0b:a6:9f:e0:25:d2:e8:9f:ed:cc:f6:84: 78:dc:26:cf:eb:cc:6b:9f:21:c6:08:1e:a6:36:78: df:37:49:2b:3c:dd:d6:89:1e:bf:be:45:31:d4:e0: a8:8e:dd:30:f7:40:f2:d5:a5:46:b3:26:05:b9:c6: f8:99:8b:37:88:05:09:b9:f9:25:b6:22:76:68:de: 60:3a:a9:c6:42:40:75:be:c1:94:d8:33:ec:5c:94: ae:d5:86:cf:bb:9f:9b:6c:50:c5:2c:96:dd:49:30: 14:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:86:83:55:DA:27:87:6F:34:B7:64:19:F2:47:3D:26:01:4F:30:21 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e37362e302f32342d3234203d3e20323034393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.93.76.0/24 Signature Algorithm: sha256WithRSAEncryption 05:7b:27:34:59:92:aa:25:73:95:a6:0a:61:81:a6:05:44:2b: b5:3c:bd:05:35:06:c3:fe:7d:69:f7:d1:8f:0b:51:42:53:8c: 81:c7:10:77:c6:04:a6:51:cd:ce:9a:76:da:7a:dd:3b:68:b7: 2d:f5:8b:11:d2:ef:8d:da:ef:f0:db:6b:e3:ab:b7:57:95:58: 96:a0:b5:81:c4:27:26:c1:b3:16:25:77:4c:be:2f:6f:2d:32: 27:ca:d3:c2:e4:fd:f7:de:28:6a:50:c8:8b:a7:ea:83:b9:ee: e0:a2:ff:2d:c3:76:f7:50:6b:30:87:07:45:61:1d:89:b0:54: 8f:e0:da:51:93:a4:74:3a:05:3a:9f:5e:cf:a2:b9:85:93:24: 73:01:f4:3c:74:34:bb:ca:57:f2:eb:e7:86:92:cb:ec:4e:5b: d5:4b:31:5f:c4:25:30:72:7b:4b:6f:12:01:e2:6a:55:68:f4: b8:f2:bf:e1:76:44:ea:f2:bb:e6:90:22:62:2c:50:ef:93:2e: fe:a1:94:52:c2:96:76:79:e3:38:e8:74:fd:4b:5b:1b:64:32: 22:a0:e1:43:6d:56:25:b8:b3:de:c1:5d:5f:bc:34:37:70:51: cb:2a:4d:20:3b:75:5c:ca:4b:f6:7b:5a:c2:34:fd:b5:32:4b: c9:e4:6c:b9 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUYzwF/iyFfek1tyz+qlpFexsv1LowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMDYwODIwMTZaFw0yNjExMDUwODI1MTZaMDMxMTAvBgNV BAMTKDY3ODY4MzU1REEyNzg3NkYzNEI3NjQxOUYyNDczRDI2MDE0RjMwMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIqpdttGRU9HvyD3N0ZXzgwdmZ QNno1GzFyYaF0N6bYKMvG/Ucw2M0+m1qdoeMqe4GoiE7NtTFoa4AJVJ73gZbE8h0 7nfWStH9Wueh92n/GWOX4rqVEQ4Hr0S+gF9mwQUvXi+qNpUrqNUHw5dStp/CBVjO EZGQeWtTLKCNxsfTv77sgyW5iHxsI2Ldyn0K2/HGC2bpSV5P2wumn+Al0uif7cz2 hHjcJs/rzGufIcYIHqY2eN83SSs83daJHr++RTHU4KiO3TD3QPLVpUazJgW5xviZ izeIBQm5+SW2InZo3mA6qcZCQHW+wZTYM+xclK7Vhs+7n5tsUMUslt1JMBTLAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUZ4aDVdonh280t2QZ8kc9JgFPMCEwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM3MmUzOTMzMmUzNzM2 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM0MzkzMTM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k11MMA0GCSqGSIb3DQEBCwUAA4IBAQAFeyc0WZKqJXOVpgphgaYFRCu1PL0FNQbD /n1p99GPC1FCU4yBxxB3xgSmUc3Omnbaet07aLct9YsR0u+N2u/w22vjq7dXlViW oLWBxCcmwbMWJXdMvi9vLTInytPC5P333ihqUMiLp+qDue7gov8tw3b3UGswhwdF YR2JsFSP4NpRk6R0OgU6n17PormFkyRzAfQ8dDS7ylfy6+eGksvsTlvVSzFfxCUw cntLbxIB4mpVaPS48r/hdkTq8rvmkCJiLFDvky7+oZRSwpZ2eeM46HT9S1sbZDIi oOFDbVYluLPewV1fvDQ3cFHLKk0gO3Vcykv2e1rCNP21MkvJ5Gy5 -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:32 2025 by rpki-client