This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130332e302f32342d3234203d3e20323132323338.roa File: 3231372e3231362e3130332e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: WYBYFfaMnyKg3nZtJA1Q1BjXl1sCRDMEZ3ZWBBRMbwA= Subject key identifier: C5:E5:05:B1:5D:34:6C:F7:C8:20:EB:68:FE:A4:72:79:4E:D1:E6:4C Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 38A71E671B46F816A8383F2B770C969CAC784168 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130332e302f32342d3234203d3e20323132323338.roa Signing time: Fri 19 Dec 2025 22:03:47 +0000 ROA not before: Fri 19 Dec 2025 21:58:47 +0000 ROA not after: Fri 18 Dec 2026 22:03:47 +0000 asID: 212238 IP address blocks: 217.216.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a7:1e:67:1b:46:f8:16:a8:38:3f:2b:77:0c:96:9c:ac:78:41:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 19 21:58:47 2025 GMT Not After : Dec 18 22:03:47 2026 GMT Subject: CN=C5E505B15D346CF7C820EB68FEA472794ED1E64C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fc:db:76:9e:43:7a:c4:8c:88:0a:23:3f:f7: 8e:a9:bf:e1:38:78:96:e6:74:dc:f4:b1:52:89:96: a9:c2:82:0c:08:e0:78:02:54:0c:f4:1f:f5:2e:df: 7e:e7:56:32:81:99:1e:52:ee:bb:f6:a5:75:b3:96: d2:12:eb:8b:96:8c:46:0a:75:1f:c1:11:a6:b5:4a: 2e:40:9e:ad:c8:0b:c4:d7:4e:6e:86:cb:14:ce:47: 57:ef:85:35:37:2d:52:d8:3e:3b:1f:b4:21:d7:17: 96:87:67:0d:e6:f2:99:e8:5a:d7:b5:f7:75:72:a6: 76:5f:3e:1d:94:23:86:81:3e:13:77:92:eb:eb:f5: 60:0b:0d:e4:fb:94:8c:ea:f1:82:71:51:4b:85:2f: 4c:9f:a4:96:80:22:c0:a2:63:7f:01:22:29:fb:4e: d5:d4:45:81:18:f0:15:fe:88:bc:df:ca:c8:5e:7c: 06:34:59:f9:02:c9:cf:21:16:37:3c:a2:03:2b:67: e9:ba:e1:2d:1e:e5:c4:31:11:46:d2:1e:3d:a0:ff: 06:71:87:01:9e:a0:1d:38:14:1e:a4:40:b5:f8:59: 5f:73:66:29:e4:ae:14:de:0b:ac:2b:ce:2e:46:3d: aa:2c:0d:2a:51:8c:6b:c1:d7:72:9f:e3:b9:ba:e3: 88:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E5:05:B1:5D:34:6C:F7:C8:20:EB:68:FE:A4:72:79:4E:D1:E6:4C X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130332e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.103.0/24 Signature Algorithm: sha256WithRSAEncryption 32:29:7f:e9:9f:9a:31:2a:bc:54:14:0d:a7:ba:02:3b:d9:ee: 6f:ef:71:ea:3b:46:8f:fd:8a:c6:61:da:53:dc:1b:75:1b:d7: aa:d2:e0:80:db:be:f2:b9:73:4d:4a:88:dd:97:fd:a4:6e:a2: 0c:a6:3a:d1:d3:e0:53:e0:65:f6:2d:27:e3:06:1e:81:f6:41: c5:07:3a:4a:b4:c7:8f:6f:11:4f:69:30:e0:82:23:84:5b:76: 89:dc:82:e2:28:54:53:9d:2d:e1:3f:a8:62:75:97:56:67:2b: c3:59:c1:1f:29:a3:3a:a9:f1:c8:ed:4e:e1:57:aa:bd:ea:b2: 6c:3b:e1:24:3a:a0:22:a8:ea:72:8d:4f:e4:c2:fd:72:4f:05: d2:93:e4:2b:f8:6a:6a:a8:13:22:5e:b9:f8:97:7d:ab:99:f9: 8f:5e:93:f5:1e:fe:9f:3a:1c:3a:c8:83:ef:5b:da:62:40:17: 76:e7:f1:72:85:9a:72:ca:e8:06:1d:50:6f:34:75:75:0b:26: 9d:2d:90:94:04:49:8a:20:2e:b3:34:99:73:bf:c1:f7:75:21: 48:9e:3c:13:49:0e:80:fc:8b:73:87:7e:90:77:fe:ec:41:cb: 58:44:14:b9:75:4a:2c:53:2c:6f:fd:6f:9d:38:e0:11:79:69: 9a:cb:b6:f3 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUOKceZxtG+BaoOD8rdwyWnKx4QWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMTkyMTU4NDdaFw0yNjEyMTgyMjAzNDdaMDMxMTAvBgNV BAMTKEM1RTUwNUIxNUQzNDZDRjdDODIwRUI2OEZFQTQ3Mjc5NEVEMUU2NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/Nt2nkN6xIyICiM/946pv+E4 eJbmdNz0sVKJlqnCggwI4HgCVAz0H/Uu337nVjKBmR5S7rv2pXWzltIS64uWjEYK dR/BEaa1Si5Anq3IC8TXTm6GyxTOR1fvhTU3LVLYPjsftCHXF5aHZw3m8pnoWte1 93VypnZfPh2UI4aBPhN3kuvr9WALDeT7lIzq8YJxUUuFL0yfpJaAIsCiY38BIin7 TtXURYEY8BX+iLzfyshefAY0WfkCyc8hFjc8ogMrZ+m64S0e5cQxEUbSHj2g/wZx hwGeoB04FB6kQLX4WV9zZinkrhTeC6wrzi5GPaosDSpRjGvB13Kf47m644i3AgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUxeUFsV00bPfIIOto/qRyeU7R5kwwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx MzAzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMyMzMzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANnYZzANBgkqhkiG9w0BAQsFAAOCAQEAMil/6Z+aMSq8VBQNp7oCO9nub+9x 6jtGj/2KxmHaU9wbdRvXqtLggNu+8rlzTUqI3Zf9pG6iDKY60dPgU+Bl9i0n4wYe gfZBxQc6SrTHj28RT2kw4IIjhFt2idyC4ihUU50t4T+oYnWXVmcrw1nBHymjOqnx yO1O4VeqveqybDvhJDqgIqjqco1P5ML9ck8F0pPkK/hqaqgTIl65+Jd9q5n5j16T 9R7+nzocOsiD71vaYkAXdufxcoWacsroBh1QbzR1dQsmnS2QlARJiiAuszSZc7/B 93UhSJ48E0kOgPyLc4d+kHf+7EHLWEQUuXVKLFMsb/1vnTjgEXlpmsu28w== -----END CERTIFICATE-----Generated at Sat Dec 20 21:44:06 2025 by rpki-client