This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134382e302f32322d3234203d3e20313333313530.roa File: 3231372e3231362e3134382e302f32322d3234203d3e20313333313530.roa (raw, json) Hash identifier: Ef2jMwkc4wFvjxviVkUqacNbF3Cw/Cyy0DYMQHNlUs0= Subject key identifier: EA:95:83:E7:20:F4:81:6F:35:D8:55:12:42:DD:B4:D9:74:74:53:AB Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 4872EBC8026D8FC9F2C08370CA5D828F77E67549 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134382e302f32322d3234203d3e20313333313530.roa Signing time: Wed 26 Nov 2025 22:47:15 +0000 ROA not before: Wed 26 Nov 2025 22:42:15 +0000 ROA not after: Wed 25 Nov 2026 22:47:15 +0000 asID: 133150 IP address blocks: 217.216.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:72:eb:c8:02:6d:8f:c9:f2:c0:83:70:ca:5d:82:8f:77:e6:75:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 26 22:42:15 2025 GMT Not After : Nov 25 22:47:15 2026 GMT Subject: CN=EA9583E720F4816F35D8551242DDB4D9747453AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9e:a2:78:cd:59:c9:6f:9b:5f:d7:5f:e4:bf: bb:b6:0c:c9:7c:4f:6f:2c:7b:f8:8b:dc:b7:6b:9f: 21:4b:a0:61:0e:52:52:ac:f9:cc:59:bb:ca:99:f5: a0:16:64:2e:fb:43:da:37:a3:5d:79:09:4b:ea:74: 9b:e9:5a:38:1c:ba:08:d4:41:e0:88:e9:c3:32:72: 9a:2e:8c:98:1f:a4:3c:f1:8f:fb:29:c9:b4:fc:14: 25:33:94:d2:8e:77:a1:b7:37:2c:a2:d4:e8:72:2e: 69:f2:8c:25:99:64:a6:bf:4e:ca:5b:16:96:0f:54: 8e:4d:1f:21:08:43:6c:fa:99:4d:aa:f0:ec:c5:09: 61:99:83:16:31:19:e6:46:7a:12:c5:51:8a:79:02: b2:d5:50:8a:fe:30:01:39:99:4d:9e:a5:c6:de:21: c4:a6:2c:04:b9:d9:eb:ab:57:a3:b1:20:4f:ce:92: 21:ca:7f:eb:25:7a:0d:5c:14:2a:14:c8:ce:85:5f: 08:03:ed:79:9f:62:63:bd:fc:ce:93:34:03:02:26: 20:f6:03:86:b0:ec:37:74:6d:bd:6a:33:3f:42:41: 5d:e5:cf:02:8f:b3:ed:af:90:4e:00:64:fc:f1:0f: c7:73:22:09:cf:d3:ba:45:3e:89:34:1a:db:1c:09: 84:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:95:83:E7:20:F4:81:6F:35:D8:55:12:42:DD:B4:D9:74:74:53:AB X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134382e302f32322d3234203d3e20313333313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.148.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:49:88:df:c5:76:c3:56:8c:04:f1:f6:53:2e:70:da:44:85: 5f:f5:39:6d:f9:8a:98:b9:c0:8d:e9:06:80:35:69:5e:3e:01: 0c:da:f6:f5:48:e0:3b:f3:0b:e2:17:30:65:bc:d4:66:a7:95: 56:83:dd:06:78:54:ee:f6:f6:bd:8b:0b:7b:d5:01:36:c8:6d: 5a:73:d9:0d:98:67:9d:06:1f:6d:b8:93:d1:8a:a3:a6:ae:55: 3e:e5:27:54:8c:56:57:a6:e4:62:58:95:60:7c:43:64:88:1d: b8:54:31:53:5b:af:a4:35:b0:2d:df:8d:12:65:f2:ad:82:87: ab:ec:25:66:25:50:bd:5c:7d:d7:49:4f:fe:fb:34:42:12:02: b2:03:49:37:f9:3f:0a:d2:b5:f0:48:a7:ca:d0:b6:11:cb:22: 7d:8a:72:9d:e7:2c:e3:cf:1e:80:ab:e7:ba:99:27:6e:95:ce: dc:00:3f:bd:8d:77:05:aa:42:33:15:a1:22:2b:be:a9:d6:f4: e0:7c:ef:75:f0:79:f0:8a:ff:57:b9:23:95:ba:44:38:57:13: d5:eb:61:a3:6e:02:33:28:31:c5:73:f9:8c:95:50:e6:fc:c4: ef:84:c3:b9:38:ae:07:16:c2:c1:83:6c:92:5a:1b:bc:20:72: a7:83:c8:45 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUSHLryAJtj8nywINwyl2Cj3fmdUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjYyMjQyMTVaFw0yNjExMjUyMjQ3MTVaMDMxMTAvBgNV BAMTKEVBOTU4M0U3MjBGNDgxNkYzNUQ4NTUxMjQyRERCNEQ5NzQ3NDUzQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgnqJ4zVnJb5tf11/kv7u2DMl8 T28se/iL3LdrnyFLoGEOUlKs+cxZu8qZ9aAWZC77Q9o3o115CUvqdJvpWjgcugjU QeCI6cMycpoujJgfpDzxj/spybT8FCUzlNKOd6G3Nyyi1OhyLmnyjCWZZKa/Tspb FpYPVI5NHyEIQ2z6mU2q8OzFCWGZgxYxGeZGehLFUYp5ArLVUIr+MAE5mU2epcbe IcSmLAS52eurV6OxIE/OkiHKf+sleg1cFCoUyM6FXwgD7XmfYmO9/M6TNAMCJiD2 A4aw7Dd0bb1qMz9CQV3lzwKPs+2vkE4AZPzxD8dzIgnP07pFPok0GtscCYTLAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQU6pWD5yD0gW812FUSQt202XR0U6swHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx MzQzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzMzMxMzUzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAtnYlDANBgkqhkiG9w0BAQsFAAOCAQEAbUmI38V2w1aMBPH2Uy5w2kSFX/U5 bfmKmLnAjekGgDVpXj4BDNr29UjgO/ML4hcwZbzUZqeVVoPdBnhU7vb2vYsLe9UB NshtWnPZDZhnnQYfbbiT0Yqjpq5VPuUnVIxWV6bkYliVYHxDZIgduFQxU1uvpDWw Ld+NEmXyrYKHq+wlZiVQvVx910lP/vs0QhICsgNJN/k/CtK18EinytC2EcsifYpy necs488egKvnupknbpXO3AA/vY13BapCMxWhIiu+qdb04HzvdfB58Ir/V7kjlbpE OFcT1etho24CMygxxXP5jJVQ5vzE74TDuTiuBxbCwYNsklobvCByp4PIRQ== -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:20 2025 by rpki-client