This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e37312e302f32342d3234203d3e20313336373837.roa File: 3231322e39372e37312e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: cHbGmhmZ08n/AeSZJnq9MZu96jHzTPgiefWP9P4eY8Y= Subject key identifier: 97:67:70:63:78:4F:FA:95:29:99:D0:A6:05:6F:CD:20:EE:F6:C9:61 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 6319E26F8ADA5B2E349C9DFBE82528C0766C324B Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e37312e302f32342d3234203d3e20313336373837.roa Signing time: Tue 02 Dec 2025 19:50:13 +0000 ROA not before: Tue 02 Dec 2025 19:45:13 +0000 ROA not after: Tue 01 Dec 2026 19:50:13 +0000 asID: 136787 IP address blocks: 212.97.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:19:e2:6f:8a:da:5b:2e:34:9c:9d:fb:e8:25:28:c0:76:6c:32:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 2 19:45:13 2025 GMT Not After : Dec 1 19:50:13 2026 GMT Subject: CN=97677063784FFA952999D0A6056FCD20EEF6C961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:98:4f:44:dc:03:30:67:3b:46:8f:0a:18: 01:f1:0d:1c:56:6e:34:af:e6:d9:a3:01:4e:09:f9: 1e:f0:1b:ad:a2:38:9f:d5:c1:4d:7f:03:e0:4c:5d: 18:b1:76:9c:d3:58:f4:f5:d4:c4:f5:87:c9:ce:70: 9a:b3:cb:db:ab:be:6b:8e:87:1f:3f:6b:b4:38:d0: b0:0f:9c:71:6c:11:01:f8:22:10:20:cd:00:60:37: da:51:44:20:b9:e5:a4:9c:f4:ed:f3:01:a2:0b:f4: 61:80:fb:bc:91:40:62:d0:43:88:18:94:b1:07:0d: 97:42:0f:1b:0c:8b:bc:20:11:68:5e:82:f2:68:44: 5d:53:e8:98:1c:e9:11:a9:24:7c:4c:c3:65:1e:53: 90:e6:2b:cf:83:07:b3:99:b9:f1:80:b8:15:a3:9e: 63:d6:f8:aa:1a:3c:46:e7:cc:7c:24:b4:f1:46:8b: cc:3f:23:49:41:f5:62:34:88:7d:c2:85:bf:6e:e5: 0b:54:5e:bd:dd:cb:46:33:2f:df:2c:49:eb:29:9a: 86:a7:21:29:1e:ca:40:69:98:d8:fa:82:fa:43:b6: 2b:79:3b:98:2e:e8:ba:d7:30:d1:a8:62:5b:c3:46: df:40:e3:9c:3b:c2:cf:30:8d:6e:94:30:4e:83:d1: 18:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:67:70:63:78:4F:FA:95:29:99:D0:A6:05:6F:CD:20:EE:F6:C9:61 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e37312e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.97.71.0/24 Signature Algorithm: sha256WithRSAEncryption 07:36:a0:5d:a1:07:c3:7c:68:58:34:2f:61:84:54:ea:e8:f4: 37:b1:d5:d5:21:36:2c:bf:5a:3d:3a:f0:9b:11:40:58:00:cf: 9e:76:de:1d:cf:6d:01:f1:96:de:3f:78:c1:0b:04:80:ff:49: 38:b8:a2:26:be:53:3b:91:a9:77:c4:a0:2c:6e:98:06:5e:2a: 6f:a0:f5:87:ac:8f:0a:1c:bb:58:e4:2b:c7:a3:c0:f3:50:d1: 95:fc:2b:7f:02:e0:4f:48:4b:61:19:ff:b3:54:ed:2b:a6:3f: e9:86:60:3a:d2:12:e2:c0:b6:09:55:d4:c5:83:7d:bb:72:d4: ac:82:fe:5b:1e:4c:7a:65:70:04:b2:e7:17:0f:4a:33:bf:aa: 35:8c:8d:2d:29:06:d8:48:10:7a:1d:71:f6:82:5d:e6:6f:52: 3e:a7:fd:7d:60:bf:89:6c:bf:c9:83:7f:1c:4c:6d:ac:eb:4e: 52:a8:13:17:80:69:c1:fe:b2:d6:4d:89:1a:59:7f:ff:86:2c: e5:c7:8d:26:69:11:0d:7f:30:b1:2b:4f:fc:62:58:39:c0:e8: 89:01:a1:6d:a2:ec:ee:bd:6d:22:18:d8:96:01:50:6c:7f:60: 8f:de:6b:b9:ac:c8:47:c5:65:59:d6:0b:85:27:d2:ce:f1:17: df:de:02:15 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUYxnib4raWy40nJ376CUowHZsMkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMDIxOTQ1MTNaFw0yNjEyMDExOTUwMTNaMDMxMTAvBgNV BAMTKDk3Njc3MDYzNzg0RkZBOTUyOTk5RDBBNjA1NkZDRDIwRUVGNkM5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+j5hPRNwDMGc7Ro8KGAHxDRxW bjSv5tmjAU4J+R7wG62iOJ/VwU1/A+BMXRixdpzTWPT11MT1h8nOcJqzy9urvmuO hx8/a7Q40LAPnHFsEQH4IhAgzQBgN9pRRCC55aSc9O3zAaIL9GGA+7yRQGLQQ4gY lLEHDZdCDxsMi7wgEWhegvJoRF1T6Jgc6RGpJHxMw2UeU5DmK8+DB7OZufGAuBWj nmPW+KoaPEbnzHwktPFGi8w/I0lB9WI0iH3Chb9u5QtUXr3dy0YzL98sSespmoan ISkeykBpmNj6gvpDtit5O5gu6LrXMNGoYlvDRt9A45w7ws8wjW6UME6D0RjhAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUl2dwY3hP+pUpmdCmBW/NIO72yWEwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzOTM3MmUzNzMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 1GFHMA0GCSqGSIb3DQEBCwUAA4IBAQAHNqBdoQfDfGhYNC9hhFTq6PQ3sdXVITYs v1o9OvCbEUBYAM+edt4dz20B8ZbeP3jBCwSA/0k4uKImvlM7kal3xKAsbpgGXipv oPWHrI8KHLtY5CvHo8DzUNGV/Ct/AuBPSEthGf+zVO0rpj/phmA60hLiwLYJVdTF g327ctSsgv5bHkx6ZXAEsucXD0ozv6o1jI0tKQbYSBB6HXH2gl3mb1I+p/19YL+J bL/Jg38cTG2s605SqBMXgGnB/rLWTYkaWX//hizlx40maRENfzCxK0/8Ylg5wOiJ AaFtouzuvW0iGNiWAVBsf2CP3mu5rMhHxWVZ1guFJ9LO8Rff3gIV -----END CERTIFICATE-----Generated at Fri Dec 5 05:41:40 2025 by rpki-client