This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36352e302f32342d3234203d3e20323132323338.roa File: 3231322e39372e36352e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: 9tVo6uqWA26imtgO/AbH/u2MuhjX5TaaErWGBxwE/ck= Subject key identifier: 83:AD:D9:4C:6E:64:0A:63:42:34:DF:60:59:9E:72:E8:31:58:7C:FF Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 5EEDFD24593F50081F576784E5F17BB9ECA84918 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36352e302f32342d3234203d3e20323132323338.roa Signing time: Tue 21 Oct 2025 13:22:50 +0000 ROA not before: Tue 21 Oct 2025 13:17:50 +0000 ROA not after: Tue 20 Oct 2026 13:22:50 +0000 asID: 212238 IP address blocks: 212.97.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Dec 2025 22:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ed:fd:24:59:3f:50:08:1f:57:67:84:e5:f1:7b:b9:ec:a8:49:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Oct 21 13:17:50 2025 GMT Not After : Oct 20 13:22:50 2026 GMT Subject: CN=83ADD94C6E640A634234DF60599E72E831587CFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:c4:81:bd:ab:7a:9a:38:26:2f:bf:00:68: 34:6e:b1:4b:b9:21:ea:b9:d7:64:14:d4:f2:0f:12: ed:16:a9:a0:44:06:2f:07:ea:84:2f:c7:ab:1a:af: 0b:eb:38:50:6a:a2:fe:6b:3a:4f:3c:16:6c:52:33: 34:71:d8:79:59:c3:e8:e0:c4:4e:3b:23:41:8e:50: 5d:64:ae:78:e1:62:ba:ad:f2:c0:ba:14:eb:eb:1c: 29:59:84:fb:2c:5a:42:94:e9:a1:f9:9e:42:70:c8: de:15:2d:32:84:16:3f:18:ff:9b:33:e9:06:52:b5: 42:c2:b6:5b:7f:3b:c8:d2:2f:a9:13:a6:6a:0c:8b: 9f:07:c1:b9:9d:0c:21:df:cf:12:ea:36:10:38:a2: d2:b0:a2:2d:b2:07:e7:15:21:82:aa:cc:ac:f7:57: 2b:30:86:3b:93:5d:fc:af:b7:77:e3:18:9d:ae:1d: cf:7e:86:95:d8:37:a0:9e:d2:ed:18:c1:3c:9d:39: fa:61:c1:8d:0b:b1:99:ed:b5:0b:4f:8d:d0:65:b2: 6f:ec:69:30:3e:c5:09:94:73:55:23:87:99:93:b8: a7:30:75:64:fd:b5:ee:e1:4c:29:98:c7:d1:b1:5b: 23:e9:6b:93:ed:f8:d3:d3:86:e3:42:6a:95:47:99: fa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AD:D9:4C:6E:64:0A:63:42:34:DF:60:59:9E:72:E8:31:58:7C:FF X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36352e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.97.65.0/24 Signature Algorithm: sha256WithRSAEncryption 22:2e:21:d5:47:7f:b6:4a:49:f8:33:e6:24:13:e9:6b:ef:77: 7d:49:22:95:72:96:13:1d:23:f7:ae:25:81:ed:f9:9a:2e:d5: 82:6c:7c:a2:73:22:f6:5a:4b:85:41:42:57:0e:f6:02:fd:fa: 27:a0:07:f4:8b:be:de:6c:a7:70:8e:d3:83:63:77:80:20:57: 09:20:f7:50:9e:f4:ae:24:4a:f1:32:f0:67:d9:40:00:cb:3f: 01:50:4e:bf:aa:62:24:bc:1a:c9:21:49:f0:71:d9:72:51:a9: 89:2e:38:de:c1:ca:09:83:75:c9:7a:07:16:fe:7d:d3:be:e8: ea:40:44:21:09:77:61:0e:34:a5:5e:f8:f9:e6:b8:70:0d:af: e9:30:1f:a2:2d:ee:21:a5:cd:7f:cb:a5:22:21:3f:e1:01:ff: b0:5e:e0:ea:c2:c0:50:ec:e6:ae:2f:04:34:27:19:68:84:38: f9:1d:18:80:51:7d:4a:c1:13:72:3c:3f:aa:3a:39:f2:e2:a1: 4e:de:bd:ef:75:a2:5d:e8:f1:e7:5a:58:85:f8:13:1c:5a:46: dd:16:62:ef:97:f3:f7:64:2b:42:01:e7:fb:9c:d7:c2:c3:fd: cd:34:2e:2f:d3:9d:65:f8:66:ff:16:d5:17:3e:f1:cb:80:71: 8e:ef:a1:fb -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUXu39JFk/UAgfV2eE5fF7ueyoSRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEwMjExMzE3NTBaFw0yNjEwMjAxMzIyNTBaMDMxMTAvBgNV BAMTKDgzQUREOTRDNkU2NDBBNjM0MjM0REY2MDU5OUU3MkU4MzE1ODdDRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11cSBvat6mjgmL78AaDRusUu5 Ieq512QU1PIPEu0WqaBEBi8H6oQvx6sarwvrOFBqov5rOk88FmxSMzRx2HlZw+jg xE47I0GOUF1krnjhYrqt8sC6FOvrHClZhPssWkKU6aH5nkJwyN4VLTKEFj8Y/5sz 6QZStULCtlt/O8jSL6kTpmoMi58HwbmdDCHfzxLqNhA4otKwoi2yB+cVIYKqzKz3 VyswhjuTXfyvt3fjGJ2uHc9+hpXYN6Ce0u0YwTydOfphwY0LsZnttQtPjdBlsm/s aTA+xQmUc1Ujh5mTuKcwdWT9te7hTCmYx9GxWyPpa5Pt+NPThuNCapVHmfo9AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUg63ZTG5kCmNCNN9gWZ5y6DFYfP8wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzOTM3MmUzNjM1 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 1GFBMA0GCSqGSIb3DQEBCwUAA4IBAQAiLiHVR3+2Skn4M+YkE+lr73d9SSKVcpYT HSP3riWB7fmaLtWCbHyicyL2WkuFQUJXDvYC/fonoAf0i77ebKdwjtODY3eAIFcJ IPdQnvSuJErxMvBn2UAAyz8BUE6/qmIkvBrJIUnwcdlyUamJLjjewcoJg3XJegcW /n3TvujqQEQhCXdhDjSlXvj55rhwDa/pMB+iLe4hpc1/y6UiIT/hAf+wXuDqwsBQ 7OauLwQ0JxlohDj5HRiAUX1KwRNyPD+qOjny4qFO3r3vdaJd6PHnWliF+BMcWkbd FmLvl/P3ZCtCAef7nNfCw/3NNC4v051l+Gb/FtUXPvHLgHGO76H7 -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:05 2025 by rpki-client