This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132322e302f32342d3234203d3e20313336373837.roa File: 3231322e39302e3132322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 2oLvDZR1kwr/PH2pR75XnmrxEDLf+HqbvVoNhMVUr3M= Subject key identifier: 5B:B1:D9:1B:A1:71:9F:CB:A3:E6:95:2B:EC:B3:D2:5E:A4:65:F8:D6 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 26C6640B9FC9402DE630F11623BE3FD2D85295C1 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132322e302f32342d3234203d3e20313336373837.roa Signing time: Sun 16 Nov 2025 18:48:52 +0000 ROA not before: Sun 16 Nov 2025 18:43:52 +0000 ROA not after: Sun 15 Nov 2026 18:48:52 +0000 asID: 136787 IP address blocks: 212.90.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:c6:64:0b:9f:c9:40:2d:e6:30:f1:16:23:be:3f:d2:d8:52:95:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 16 18:43:52 2025 GMT Not After : Nov 15 18:48:52 2026 GMT Subject: CN=5BB1D91BA1719FCBA3E6952BECB3D25EA465F8D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:de:ed:01:47:fb:5c:fa:e5:7c:c0:14:c4:10: cf:a1:6a:ac:11:3a:35:47:97:d2:d5:ca:cb:f9:0f: 3d:13:cd:16:60:1b:b4:28:af:7c:90:5c:0b:bd:c4: b8:5d:c4:44:bd:53:85:2f:22:e4:42:a0:81:ff:85: 9c:3a:ca:c4:33:1b:51:41:d4:54:b5:44:65:fc:40: 2f:a0:3a:f7:1d:b8:66:7b:58:47:f8:da:04:36:be: f8:6f:09:9d:e0:eb:78:bb:d6:04:5b:1f:4d:75:1f: 42:7b:29:f4:d2:4f:21:80:22:8d:96:64:6e:7d:37: df:0c:14:ce:45:a1:08:f0:ec:47:5c:cb:de:50:68: 09:55:fa:43:d4:7a:3e:4b:1f:22:1c:e4:b0:9c:0b: 75:e8:af:57:8a:fe:85:23:22:c5:02:8a:80:1e:74: e3:a5:18:ff:4f:50:4d:b6:85:78:90:0f:2c:46:d6: 2a:6f:05:0b:0e:57:71:03:27:db:e8:ce:0f:49:30: 99:b7:4a:ff:be:9a:73:95:19:7b:69:f4:e6:a5:ec: df:98:68:c4:2f:6a:7c:53:6c:61:15:d0:00:e5:1a: 53:24:32:b5:34:7b:b2:b9:92:8a:9a:14:e9:e2:e1: 1c:42:b9:2c:c5:42:0a:f2:05:0e:6d:69:4e:16:b4: 26:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B1:D9:1B:A1:71:9F:CB:A3:E6:95:2B:EC:B3:D2:5E:A4:65:F8:D6 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.90.122.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:aa:19:b8:41:4b:01:b4:32:5b:35:a6:ad:ea:f1:c4:5f:81: c7:63:50:26:44:25:81:02:b4:ab:35:33:b8:d2:c4:2d:d9:a1: d0:8a:e9:ae:ff:a5:bf:10:dd:d6:17:80:87:08:d6:cf:5e:30: 2e:f7:20:c3:ce:a0:f9:73:92:61:95:0a:b0:ea:c6:87:ab:95: 38:6b:c5:0f:03:a5:03:80:ad:32:5a:87:90:b0:f0:d6:46:b0: bb:ac:a8:6a:99:a4:3b:e8:2a:18:f8:87:0c:b9:ca:98:9f:9c: 3e:ed:8b:05:08:b4:39:b8:b8:df:db:93:da:2d:c0:2f:55:89: ba:16:a9:77:89:34:a3:b3:88:1c:d0:96:a4:12:1f:4f:6d:46: 33:38:80:7f:97:55:d8:86:ea:4e:5c:df:bd:df:49:f1:8e:83: 30:d7:cc:09:1f:a1:06:ed:8c:5c:45:ab:d9:4d:8a:bb:75:8b: d3:d6:ee:2c:10:4d:46:42:65:0a:c9:a7:44:cc:0a:cf:5b:86: 4f:f5:fd:ac:6a:84:87:0a:01:ad:b9:a8:3e:e8:98:69:e0:9c: ba:fd:00:1c:76:6e:60:e1:c9:d9:74:7b:aa:6b:9a:f1:bc:34: b4:57:34:61:3b:b1:99:a2:1c:06:d7:c7:4c:da:7f:9f:1a:fa: ab:0a:35:0c -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUJsZkC5/JQC3mMPEWI74/0thSlcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMTYxODQzNTJaFw0yNjExMTUxODQ4NTJaMDMxMTAvBgNV BAMTKDVCQjFEOTFCQTE3MTlGQ0JBM0U2OTUyQkVDQjNEMjVFQTQ2NUY4RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq3u0BR/tc+uV8wBTEEM+haqwR OjVHl9LVysv5Dz0TzRZgG7Qor3yQXAu9xLhdxES9U4UvIuRCoIH/hZw6ysQzG1FB 1FS1RGX8QC+gOvcduGZ7WEf42gQ2vvhvCZ3g63i71gRbH011H0J7KfTSTyGAIo2W ZG59N98MFM5FoQjw7Edcy95QaAlV+kPUej5LHyIc5LCcC3Xor1eK/oUjIsUCioAe dOOlGP9PUE22hXiQDyxG1ipvBQsOV3EDJ9vozg9JMJm3Sv++mnOVGXtp9Oal7N+Y aMQvanxTbGEV0ADlGlMkMrU0e7K5koqaFOni4RxCuSzFQgryBQ5taU4WtCZ7AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUW7HZG6Fxn8uj5pUr7LPSXqRl+NYwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzOTMwMmUzMTMy MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADUWnowDQYJKoZIhvcNAQELBQADggEBAE+qGbhBSwG0Mls1pq3q8cRfgcdjUCZE JYECtKs1M7jSxC3ZodCK6a7/pb8Q3dYXgIcI1s9eMC73IMPOoPlzkmGVCrDqxoer lThrxQ8DpQOArTJah5Cw8NZGsLusqGqZpDvoKhj4hwy5ypifnD7tiwUItDm4uN/b k9otwC9ViboWqXeJNKOziBzQlqQSH09tRjM4gH+XVdiG6k5c373fSfGOgzDXzAkf oQbtjFxFq9lNirt1i9PW7iwQTUZCZQrJp0TMCs9bhk/1/axqhIcKAa25qD7omGng nLr9ABx2bmDhydl0e6prmvG8NLRXNGE7sZmiHAbXx0zaf58a+qsKNQw= -----END CERTIFICATE-----Generated at Fri Dec 5 05:39:27 2025 by rpki-client