This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3136302e302f32322d3232203d3e20313336303534.roa File: 3231372e3231362e3136302e302f32322d3232203d3e20313336303534.roa (raw, json) Hash identifier: miM4wPfQsMKM2H2V79OnhUnMS4UxFQ2YZdO7c2acATw= Subject key identifier: 89:47:06:47:8A:5F:89:E9:D4:2C:7B:6A:1B:A9:43:A9:EF:8B:EE:AE Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 1E7D91AC2838572443804456A3F03ECBE970A1D0 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3136302e302f32322d3232203d3e20313336303534.roa Signing time: Mon 17 Nov 2025 14:33:08 +0000 ROA not before: Mon 17 Nov 2025 14:28:08 +0000 ROA not after: Mon 16 Nov 2026 14:33:08 +0000 asID: 136054 IP address blocks: 217.216.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 15:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:7d:91:ac:28:38:57:24:43:80:44:56:a3:f0:3e:cb:e9:70:a1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 17 14:28:08 2025 GMT Not After : Nov 16 14:33:08 2026 GMT Subject: CN=894706478A5F89E9D42C7B6A1BA943A9EF8BEEAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:30:42:9b:6a:c4:76:da:33:c9:2f:53:d3:71: 2c:85:3d:90:8c:75:f5:d1:63:f4:05:52:01:17:ef: f4:c4:fe:bc:3c:0b:1a:15:0b:36:af:5c:55:6c:50: b3:10:40:60:2a:08:3b:73:55:10:4a:7a:ff:c8:d5: 84:48:02:78:e0:ec:f8:5b:91:32:7d:a4:ce:6b:10: a5:52:60:33:15:2b:db:97:62:96:25:18:b4:43:c2: 66:b7:a0:1a:47:dc:da:ee:f9:00:f5:1e:18:0d:eb: c9:35:66:6d:d0:cb:1e:8b:14:0c:00:00:7c:5a:0c: 41:f4:68:54:51:94:ed:32:44:45:3e:61:0c:de:0e: 9a:88:91:51:94:94:2f:c5:2b:ab:7f:2b:9b:a8:23: 8c:f4:48:b4:46:8c:41:72:0f:7d:39:04:ca:f4:12: 53:e8:73:5d:49:f1:8d:d5:6e:0e:77:1a:c7:32:80: c6:39:58:4f:96:60:0c:0f:ef:08:df:3e:d1:c3:7d: b1:a5:dc:56:d9:b1:fe:f2:6f:bd:31:11:6e:b8:0f: 15:33:46:ca:7d:3e:f7:c5:a4:dc:2a:58:a1:a5:41: 81:a2:15:92:85:34:62:53:33:c5:53:02:00:79:ad: 6e:8f:8b:08:7b:92:00:06:0f:e2:43:06:02:4d:c6: e7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:47:06:47:8A:5F:89:E9:D4:2C:7B:6A:1B:A9:43:A9:EF:8B:EE:AE X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3136302e302f32322d3232203d3e20313336303534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.160.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:9e:18:a3:f4:58:2c:2f:e8:af:2a:2b:c3:ab:45:a3:33:ea: c1:a5:8e:a8:26:b0:9e:62:44:84:8e:87:8e:03:2e:e2:82:14: a0:a7:88:44:a4:23:2b:9a:96:c9:a2:08:ae:87:8f:4b:00:5f: 42:aa:24:d2:36:b3:da:e7:a9:5f:57:44:4d:68:dd:6f:15:6e: 3b:00:f9:a1:67:08:52:f1:7f:07:2a:8f:83:32:4b:9c:70:c8: 54:99:b3:bd:3c:51:75:9f:35:e1:c0:83:e2:a4:0f:1c:3a:c2: 83:1d:2a:29:8c:f1:24:09:01:63:36:8c:c8:4b:e7:92:71:80: 88:70:3d:42:5d:4b:63:64:77:3a:e2:c7:0b:6a:a1:d7:79:fc: 19:23:71:6b:42:81:d3:e3:d3:82:ed:df:dc:d7:d0:68:35:73: f3:5e:b3:69:66:ec:2a:9b:1f:de:43:11:0b:e8:b2:04:9c:7a: ff:7b:29:d5:f4:1e:1f:e6:c3:4d:c0:51:37:93:61:f5:2f:9c: a1:29:82:8a:cc:00:12:1e:8b:a1:68:be:b5:65:65:06:32:d5: 07:e8:46:25:51:b9:19:1e:4e:9d:b2:1c:f7:4d:f8:54:af:a9: ae:27:c2:f0:da:ff:69:a4:78:cc:d8:78:a0:5d:35:06:12:94: e6:e6:06:2a -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUHn2RrCg4VyRDgERWo/A+y+lwodAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMTcxNDI4MDhaFw0yNjExMTYxNDMzMDhaMDMxMTAvBgNV BAMTKDg5NDcwNjQ3OEE1Rjg5RTlENDJDN0I2QTFCQTk0M0E5RUY4QkVFQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrMEKbasR22jPJL1PTcSyFPZCM dfXRY/QFUgEX7/TE/rw8CxoVCzavXFVsULMQQGAqCDtzVRBKev/I1YRIAnjg7Phb kTJ9pM5rEKVSYDMVK9uXYpYlGLRDwma3oBpH3Nru+QD1HhgN68k1Zm3Qyx6LFAwA AHxaDEH0aFRRlO0yREU+YQzeDpqIkVGUlC/FK6t/K5uoI4z0SLRGjEFyD305BMr0 ElPoc11J8Y3Vbg53GscygMY5WE+WYAwP7wjfPtHDfbGl3FbZsf7yb70xEW64DxUz Rsp9PvfFpNwqWKGlQYGiFZKFNGJTM8VTAgB5rW6Piwh7kgAGD+JDBgJNxueXAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUiUcGR4pfienULHtqG6lDqe+L7q4wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx MzYzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNjMwMzUzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAtnYoDANBgkqhkiG9w0BAQsFAAOCAQEAnZ4Yo/RYLC/oryorw6tFozPqwaWO qCawnmJEhI6HjgMu4oIUoKeIRKQjK5qWyaIIroePSwBfQqok0jaz2uepX1dETWjd bxVuOwD5oWcIUvF/ByqPgzJLnHDIVJmzvTxRdZ814cCD4qQPHDrCgx0qKYzxJAkB YzaMyEvnknGAiHA9Ql1LY2R3OuLHC2qh13n8GSNxa0KB0+PTgu3f3NfQaDVz816z aWbsKpsf3kMRC+iyBJx6/3sp1fQeH+bDTcBRN5Nh9S+coSmCiswAEh6LoWi+tWVl BjLVB+hGJVG5GR5OnbIc9034VK+prifC8Nr/aaR4zNh4oF01BhKU5uYGKg== -----END CERTIFICATE-----Generated at Wed Dec 3 16:30:43 2025 by rpki-client