This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36372e302f32342d3234203d3e20323132323338.roa File: 3231322e39372e36372e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: g//AJt5OhfoOLnl5LVC2lcTucm1MzneGYy/eXfU86WQ= Subject key identifier: EC:F9:AA:36:9A:86:55:1F:4B:2A:34:45:02:D2:42:34:87:EC:63:4C Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 52303F3DF8BA1D2FC9C25AE1B341CD975173DF1A Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36372e302f32342d3234203d3e20323132323338.roa Signing time: Tue 21 Oct 2025 13:22:48 +0000 ROA not before: Tue 21 Oct 2025 13:17:48 +0000 ROA not after: Tue 20 Oct 2026 13:22:48 +0000 asID: 212238 IP address blocks: 212.97.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Dec 2025 22:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:30:3f:3d:f8:ba:1d:2f:c9:c2:5a:e1:b3:41:cd:97:51:73:df:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Oct 21 13:17:48 2025 GMT Not After : Oct 20 13:22:48 2026 GMT Subject: CN=ECF9AA369A86551F4B2A344502D2423487EC634C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f0:4e:3a:ba:df:47:a5:b4:43:ea:50:ec:77: f6:9b:81:cb:7b:5c:2f:68:4e:5f:8f:01:e4:82:14: 7d:0f:9f:11:42:ad:c9:dc:19:f9:cc:92:b1:ae:08: 1b:38:f5:a3:1a:51:c2:f8:45:6a:94:0b:26:ca:90: 31:9a:3d:98:21:aa:ca:6b:cb:0b:0f:e9:ea:70:a2: 39:d0:f9:2b:d5:a6:d6:47:a9:04:7d:62:7a:d0:68: 2b:c0:55:1b:65:30:92:29:d2:88:f7:40:1e:33:af: 3f:46:bd:f1:79:40:73:d5:0c:4c:b2:12:6a:ca:ed: 53:cc:ce:8f:76:71:7a:68:12:46:d8:f3:56:79:0d: 2d:37:36:2a:e9:9b:a0:39:c8:cb:fb:c2:2d:33:91: f4:a8:9a:5b:0f:c8:17:9c:3c:fe:92:5e:00:73:7d: 12:84:51:3c:8c:73:92:a6:56:2e:ce:47:48:6e:77: 67:9c:80:10:f9:2b:97:12:a1:3c:9d:40:34:bf:da: b8:66:d1:de:cd:32:ad:e8:eb:23:0f:35:d7:42:02: c3:4c:21:c9:4f:19:c3:20:7f:97:20:f6:cf:fe:20: 4e:ae:5a:fe:ed:c4:cd:95:45:5f:7d:48:2f:8f:cf: 6b:27:c9:b3:d0:30:c0:7a:a3:e2:bd:07:66:b7:39: 94:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F9:AA:36:9A:86:55:1F:4B:2A:34:45:02:D2:42:34:87:EC:63:4C X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36372e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.97.67.0/24 Signature Algorithm: sha256WithRSAEncryption 39:13:d1:d0:a5:cd:2e:96:35:f6:f8:06:e6:53:dc:1a:c4:b9: 14:81:b8:70:c6:bb:1c:31:7b:bc:1f:d0:0c:59:d5:5a:1f:f9: a3:5b:0e:64:a1:67:24:16:c4:bf:e0:b1:a6:5f:b4:ac:23:23: f5:30:10:85:bd:0d:5f:43:b8:07:a9:2f:b9:9d:5f:f4:d3:8e: 72:9f:a4:15:c6:6d:75:93:49:99:65:aa:ab:c2:e4:e7:05:8b: 11:1b:a3:9f:47:9d:06:87:7a:1c:52:2a:1e:fe:c0:e4:ba:48: 71:28:d8:90:4f:56:9b:e0:45:6e:ab:da:fd:0e:7f:3d:e8:51: 83:e8:48:72:c4:09:d6:f9:ac:04:07:c7:2a:50:48:f0:2e:a6: 2c:5a:21:41:19:b4:03:31:96:52:53:ec:9b:bb:a8:94:f1:79: fc:a1:70:c6:ab:8b:63:92:2f:b9:41:8d:57:84:57:f4:e7:35: 48:50:d2:68:d0:93:d1:b7:c5:df:44:f8:83:21:04:67:7c:c3: 63:86:23:96:ce:cd:49:25:4a:07:b8:dc:42:31:31:bd:9e:21: cf:6e:ae:d2:86:3e:3e:61:54:85:90:b7:ba:60:6d:0a:f8:a8: 54:c9:c2:a7:2c:76:6f:d8:81:5d:3c:78:57:0f:28:22:cc:26: e7:2a:b7:38 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUUjA/Pfi6HS/Jwlrhs0HNl1Fz3xowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEwMjExMzE3NDhaFw0yNjEwMjAxMzIyNDhaMDMxMTAvBgNV BAMTKEVDRjlBQTM2OUE4NjU1MUY0QjJBMzQ0NTAyRDI0MjM0ODdFQzYzNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC58E46ut9HpbRD6lDsd/abgct7 XC9oTl+PAeSCFH0PnxFCrcncGfnMkrGuCBs49aMaUcL4RWqUCybKkDGaPZghqspr ywsP6epwojnQ+SvVptZHqQR9YnrQaCvAVRtlMJIp0oj3QB4zrz9GvfF5QHPVDEyy EmrK7VPMzo92cXpoEkbY81Z5DS03Nirpm6A5yMv7wi0zkfSomlsPyBecPP6SXgBz fRKEUTyMc5KmVi7OR0hud2ecgBD5K5cSoTydQDS/2rhm0d7NMq3o6yMPNddCAsNM IclPGcMgf5cg9s/+IE6uWv7txM2VRV99SC+Pz2snybPQMMB6o+K9B2a3OZTlAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU7PmqNpqGVR9LKjRFAtJCNIfsY0wwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzOTM3MmUzNjM3 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 1GFDMA0GCSqGSIb3DQEBCwUAA4IBAQA5E9HQpc0uljX2+AbmU9waxLkUgbhwxrsc MXu8H9AMWdVaH/mjWw5koWckFsS/4LGmX7SsIyP1MBCFvQ1fQ7gHqS+5nV/0045y n6QVxm11k0mZZaqrwuTnBYsRG6OfR50Gh3ocUioe/sDkukhxKNiQT1ab4EVuq9r9 Dn896FGD6EhyxAnW+awEB8cqUEjwLqYsWiFBGbQDMZZSU+ybu6iU8Xn8oXDGq4tj ki+5QY1XhFf05zVIUNJo0JPRt8XfRPiDIQRnfMNjhiOWzs1JJUoHuNxCMTG9niHP bq7Shj4+YVSFkLe6YG0K+KhUycKnLHZv2IFdPHhXDygizCbnKrc4 -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:08 2025 by rpki-client