This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e39362e302f32302d3234203d3e203437353833.roa File: 3134372e39332e39362e302f32302d3234203d3e203437353833.roa (raw, json) Hash identifier: 1SlR8YKkOVraTrMhNxkdfR0Kcn28EDrldSOzy1pkeNs= Subject key identifier: 3B:E7:A6:91:D3:F9:8C:D1:2F:10:07:A0:09:95:70:A7:3C:FE:4E:98 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 7B8DC3B9D382BB699AC285B81ED775DA4A6C7E95 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e39362e302f32302d3234203d3e203437353833.roa Signing time: Mon 17 Nov 2025 20:48:55 +0000 ROA not before: Mon 17 Nov 2025 20:43:55 +0000 ROA not after: Mon 16 Nov 2026 20:48:55 +0000 asID: 47583 IP address blocks: 147.93.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:8d:c3:b9:d3:82:bb:69:9a:c2:85:b8:1e:d7:75:da:4a:6c:7e:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 17 20:43:55 2025 GMT Not After : Nov 16 20:48:55 2026 GMT Subject: CN=3BE7A691D3F98CD12F1007A0099570A73CFE4E98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e7:fe:4e:73:cd:8f:78:21:64:a5:ea:90:aa: df:77:08:70:82:fe:ac:c7:54:58:52:16:c2:4e:ed: 9c:d1:f3:5d:f7:e2:55:42:70:f5:98:5a:9c:ca:58: 5a:63:a9:78:ff:f7:18:aa:9a:37:b5:a9:e3:37:b8: 7e:dd:12:28:b0:fa:95:76:20:9a:a9:1c:ed:59:ab: 93:56:9c:28:c2:d5:f4:42:84:c4:18:7b:3e:3b:a2: da:11:d5:2a:72:27:35:56:c4:b6:33:f4:3b:43:66: a2:3c:64:8a:fe:58:bc:7a:f1:63:df:52:f1:6e:fe: bb:86:70:25:3b:9b:cd:38:67:54:d7:95:fb:ca:eb: a5:55:d0:75:68:33:d9:35:50:3c:90:3f:7f:97:8a: 52:07:c6:26:f6:4e:c5:77:d4:28:87:d4:27:bd:b1: 64:15:b7:15:3c:1e:de:8d:1c:7a:74:2f:97:53:7e: ca:66:73:e1:9d:1a:c1:51:e5:82:50:d3:fd:04:ef: 28:a4:bf:94:93:ef:3b:a8:89:fd:68:70:f2:2c:18: 77:1c:00:bc:54:bc:15:33:49:d4:70:a4:3a:39:03: 42:cc:a0:62:b6:b9:0b:76:88:56:8e:71:29:17:51: c7:90:6d:96:84:f9:f0:4b:79:4e:c5:a9:0b:59:27: 39:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E7:A6:91:D3:F9:8C:D1:2F:10:07:A0:09:95:70:A7:3C:FE:4E:98 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e39362e302f32302d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.93.96.0/20 Signature Algorithm: sha256WithRSAEncryption 9d:e0:61:00:bd:2b:39:13:14:44:57:48:24:cc:83:d8:d4:1e: cd:de:d1:8c:08:dd:55:00:f3:a5:d3:ae:33:a1:92:de:a5:a5: 15:07:c3:91:f6:40:77:2f:f4:06:57:0d:76:31:b6:c8:26:86: d4:2c:95:14:61:29:28:4d:c7:38:6b:3e:f1:2e:8b:53:92:b1: 67:4b:9d:54:0f:a3:cc:6b:ec:47:b7:04:7f:c7:51:01:f5:e7: ab:fc:fd:44:be:4e:52:f2:a9:35:87:f3:c3:85:73:9c:93:7d: 70:44:0d:71:25:97:35:d9:50:70:54:39:f0:04:b1:6d:29:49: ce:23:51:aa:32:9d:b1:4e:62:87:a0:8f:c3:12:9b:02:66:b3: d2:28:5d:ad:a1:b3:94:08:59:4d:c5:f1:97:a6:ab:1a:cd:7f: 0a:25:6b:26:da:89:91:7e:fe:49:ca:39:51:1d:d0:1a:13:0e: b4:fa:b1:9b:dc:27:4c:32:0d:81:40:4c:b5:a7:2e:46:26:3d: f7:9e:f3:3f:dd:fa:af:41:8e:6d:76:63:b2:3b:b8:ca:59:4c: ea:3c:72:ed:5f:84:aa:39:b5:67:d6:f7:81:db:de:69:37:01: 17:20:5e:04:d7:5a:b1:8e:85:6a:ff:de:53:0d:db:74:fd:d0: eb:cd:28:47 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUe43DudOCu2mawoW4Htd12kpsfpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMTcyMDQzNTVaFw0yNjExMTYyMDQ4NTVaMDMxMTAvBgNV BAMTKDNCRTdBNjkxRDNGOThDRDEyRjEwMDdBMDA5OTU3MEE3M0NGRTRFOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/5/5Oc82PeCFkpeqQqt93CHCC /qzHVFhSFsJO7ZzR81334lVCcPWYWpzKWFpjqXj/9xiqmje1qeM3uH7dEiiw+pV2 IJqpHO1Zq5NWnCjC1fRChMQYez47otoR1SpyJzVWxLYz9DtDZqI8ZIr+WLx68WPf UvFu/ruGcCU7m804Z1TXlfvK66VV0HVoM9k1UDyQP3+XilIHxib2TsV31CiH1Ce9 sWQVtxU8Ht6NHHp0L5dTfspmc+GdGsFR5YJQ0/0E7yikv5ST7zuoif1ocPIsGHcc ALxUvBUzSdRwpDo5A0LMoGK2uQt2iFaOcSkXUceQbZaE+fBLeU7FqQtZJzmZAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUO+emkdP5jNEvEAegCZVwpzz+TpgwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM3MmUzOTMzMmUzOTM2 MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBJNd YDANBgkqhkiG9w0BAQsFAAOCAQEAneBhAL0rORMURFdIJMyD2NQezd7RjAjdVQDz pdOuM6GS3qWlFQfDkfZAdy/0BlcNdjG2yCaG1CyVFGEpKE3HOGs+8S6LU5KxZ0ud VA+jzGvsR7cEf8dRAfXnq/z9RL5OUvKpNYfzw4VznJN9cEQNcSWXNdlQcFQ58ASx bSlJziNRqjKdsU5ih6CPwxKbAmaz0ihdraGzlAhZTcXxl6arGs1/CiVrJtqJkX7+ Sco5UR3QGhMOtPqxm9wnTDINgUBMtacuRiY9957zP936r0GObXZjsju4yllM6jxy 7V+Eqjm1Z9b3gdveaTcBFyBeBNdasY6Fav/eUw3bdP3Q680oRw== -----END CERTIFICATE-----Generated at Fri Dec 5 06:23:35 2025 by rpki-client