This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130372e302f32342d3234203d3e20313336373837.roa File: 3231372e3231362e3130372e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: hoPzGT4xRkrjmwHuIBcp7jNqRpihjvH803AaBYGWxRk= Subject key identifier: DC:E0:05:9A:B2:F3:77:7A:B4:0B:41:27:29:AB:CD:E1:1F:92:0B:2B Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 674A790089B192CAB441D4F7D63DB75F8E63A0C1 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130372e302f32342d3234203d3e20313336373837.roa Signing time: Wed 12 Nov 2025 16:05:35 +0000 ROA not before: Wed 12 Nov 2025 16:00:35 +0000 ROA not after: Wed 11 Nov 2026 16:05:35 +0000 asID: 136787 IP address blocks: 217.216.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:4a:79:00:89:b1:92:ca:b4:41:d4:f7:d6:3d:b7:5f:8e:63:a0:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 12 16:00:35 2025 GMT Not After : Nov 11 16:05:35 2026 GMT Subject: CN=DCE0059AB2F3777AB40B412729ABCDE11F920B2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2a:d0:aa:fd:f3:62:61:57:90:fa:7c:b3:30: ec:e8:ba:79:1f:68:0f:84:b6:3f:3f:36:84:a5:05: 76:0d:98:01:f1:46:5e:2d:a6:97:10:ee:25:a5:b8: 22:39:81:e1:37:75:b1:ce:4f:fd:0e:99:46:ec:63: a4:7d:b2:b6:e3:a7:92:2a:86:0e:b1:ad:c6:73:e9: b7:bb:7e:e6:3a:bf:cc:ca:43:84:9b:af:e5:01:e7: f4:13:a9:0a:cd:09:93:46:4b:55:b9:0a:d2:e3:32: ee:0b:21:9b:51:8b:0e:b3:3f:eb:64:01:c7:b2:5a: ee:0d:d4:48:34:d6:fa:14:16:28:e2:ad:6a:1d:13: 4d:f6:f9:c2:a8:a5:76:57:88:ce:2a:48:08:a6:13: f7:f1:9b:e5:02:28:c1:1d:41:e4:47:1f:bc:02:a3: 43:8e:42:2c:4f:ba:93:83:9e:2f:5b:28:e5:14:db: 3a:5a:7c:99:c9:68:52:a2:ec:1e:e6:3e:fe:c6:3b: b4:d8:7a:de:15:ec:13:9b:53:b4:6e:a0:85:a7:28: ef:0e:c6:bd:6a:12:e4:64:21:05:b8:ce:8c:70:12: 47:5b:d6:5b:33:cf:f0:07:e3:9c:4a:4a:e1:5c:af: 11:e6:38:b8:93:b0:23:61:71:09:13:52:8b:4b:92: de:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E0:05:9A:B2:F3:77:7A:B4:0B:41:27:29:AB:CD:E1:1F:92:0B:2B X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130372e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.107.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:0e:89:8e:d3:c1:27:1e:db:d0:4f:2e:25:2e:14:24:e4:64: 75:75:65:0b:e1:83:88:9a:c1:a4:79:1e:42:f9:21:e0:3a:1a: 3b:71:15:63:9d:6f:85:bb:c7:af:60:f8:5c:57:1b:6c:87:a0: 2e:41:26:81:e7:84:d3:d0:91:16:ff:aa:58:e8:23:b5:66:86: cc:63:b9:43:30:8e:9a:5c:93:4e:54:5e:ef:75:f0:e8:09:86: 11:57:3e:b5:c8:b2:e1:b7:91:f2:d1:82:af:e4:4f:b6:f6:5b: e0:7a:34:cb:b5:48:31:02:63:a9:dd:d7:2a:d9:ee:08:de:23: 8e:87:b9:28:e7:65:75:7a:e8:c1:73:f1:11:b6:db:bf:9d:a8: 04:a5:9f:11:13:49:32:c5:89:41:4e:c2:89:ef:52:e5:bb:82: cc:f6:df:f4:9c:62:3a:31:b6:55:ed:f4:0b:55:43:c3:fe:c4: 3c:b8:fe:7f:49:e9:d9:ed:af:6d:e7:e7:bf:c3:79:f3:30:8a: ac:a5:74:31:5d:10:7a:05:4c:b3:f4:b9:28:5b:7f:69:9a:27: b8:03:29:c1:10:de:86:83:99:b7:3d:26:5b:2b:aa:fe:15:98: d9:f9:43:8d:b7:95:c4:de:81:72:09:a9:1e:51:96:91:7f:34: 74:8e:92:0a -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUZ0p5AImxksq0QdT31j23X45joMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMTIxNjAwMzVaFw0yNjExMTExNjA1MzVaMDMxMTAvBgNV BAMTKERDRTAwNTlBQjJGMzc3N0FCNDBCNDEyNzI5QUJDREUxMUY5MjBCMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTKtCq/fNiYVeQ+nyzMOzounkf aA+Etj8/NoSlBXYNmAHxRl4tppcQ7iWluCI5geE3dbHOT/0OmUbsY6R9srbjp5Iq hg6xrcZz6be7fuY6v8zKQ4Sbr+UB5/QTqQrNCZNGS1W5CtLjMu4LIZtRiw6zP+tk AceyWu4N1Eg01voUFijirWodE032+cKopXZXiM4qSAimE/fxm+UCKMEdQeRHH7wC o0OOQixPupODni9bKOUU2zpafJnJaFKi7B7mPv7GO7TYet4V7BObU7RuoIWnKO8O xr1qEuRkIQW4zoxwEkdb1lszz/AH45xKSuFcrxHmOLiTsCNhcQkTUotLkt5rAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQU3OAFmrLzd3q0C0EnKavN4R+SCyswHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx MzAzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANnYazANBgkqhkiG9w0BAQsFAAOCAQEAfg6JjtPBJx7b0E8uJS4UJORkdXVl C+GDiJrBpHkeQvkh4DoaO3EVY51vhbvHr2D4XFcbbIegLkEmgeeE09CRFv+qWOgj tWaGzGO5QzCOmlyTTlRe73Xw6AmGEVc+tciy4beR8tGCr+RPtvZb4Ho0y7VIMQJj qd3XKtnuCN4jjoe5KOdldXrowXPxEbbbv52oBKWfERNJMsWJQU7Cie9S5buCzPbf 9JxiOjG2Ve30C1VDw/7EPLj+f0np2e2vbefnv8N58zCKrKV0MV0QegVMs/S5KFt/ aZonuAMpwRDehoOZtz0mWyuq/hWY2flDjbeVxN6BcgmpHlGWkX80dI6SCg== -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:22 2025 by rpki-client