This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3136342e302f32322d3234203d3e20313532313739.roa File: 3231372e3231362e3136342e302f32322d3234203d3e20313532313739.roa (raw, json) Hash identifier: 9xjYv3tD2TQlhz9lKaM6NTYmawUNXrCJkE/0gsS3Alg= Subject key identifier: F9:FF:7E:39:1E:BD:EE:89:64:C6:24:BD:9F:A3:31:40:4F:D0:C5:F3 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 74854DDF4E1A238F60F374FA97137346FD642E2F Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3136342e302f32322d3234203d3e20313532313739.roa Signing time: Mon 24 Nov 2025 08:45:16 +0000 ROA not before: Mon 24 Nov 2025 08:40:16 +0000 ROA not after: Mon 23 Nov 2026 08:45:16 +0000 asID: 152179 IP address blocks: 217.216.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 11:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:85:4d:df:4e:1a:23:8f:60:f3:74:fa:97:13:73:46:fd:64:2e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 24 08:40:16 2025 GMT Not After : Nov 23 08:45:16 2026 GMT Subject: CN=F9FF7E391EBDEE8964C624BD9FA331404FD0C5F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0c:ff:08:c9:2c:b5:8d:6f:3e:42:e2:05:fb: 27:74:6c:d0:fb:a2:5d:cc:a5:71:5c:ff:51:6e:8c: dd:aa:7b:34:03:fc:ba:f2:d3:85:fe:34:2e:47:7b: 0f:7c:b1:a7:1d:c5:ab:4a:eb:72:7b:b1:b9:00:fe: fe:d6:32:76:1b:a9:83:50:6a:44:dd:1f:17:f2:47: da:7e:e0:0c:5d:07:99:a2:2b:2d:9c:2f:5f:4c:27: c2:08:bb:f0:70:5c:93:6a:94:c0:3c:2f:8f:3c:49: 45:0f:0d:53:58:c6:e9:38:c1:8c:e0:58:39:78:96: c3:59:fd:3b:b0:6e:af:12:b6:61:73:fa:34:37:52: 45:9f:91:74:e2:43:90:24:6d:a7:87:52:f0:84:f7: 6c:ef:c5:65:f0:d1:c1:83:d5:e9:c5:4d:d8:d3:bc: 36:76:5a:eb:c6:b0:40:b1:ad:1b:df:d1:77:59:48: e7:0d:d1:2b:1e:ad:54:08:cd:36:6f:89:00:f9:1b: 70:5a:2d:d0:4c:b0:f3:d2:8f:c5:43:58:73:ad:bc: ad:6b:bf:13:4a:0b:96:ff:bb:36:d3:77:4c:a1:43: 61:4f:8d:14:2e:be:f7:06:2c:ba:1c:4d:63:1f:1e: 8c:d8:81:a7:5d:ce:81:68:9d:17:b3:06:76:59:1b: 32:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FF:7E:39:1E:BD:EE:89:64:C6:24:BD:9F:A3:31:40:4F:D0:C5:F3 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3136342e302f32322d3234203d3e20313532313739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.164.0/22 Signature Algorithm: sha256WithRSAEncryption 96:c4:2c:6f:5f:e1:2e:40:83:ae:93:44:98:6c:ff:5d:74:84: 94:0c:a1:ee:50:63:ec:f8:15:09:45:f2:28:ef:43:cd:81:a3: bd:10:c1:82:61:c6:f5:ae:10:1d:5c:79:ac:f0:dd:e1:9d:fd: eb:13:b2:e6:2a:2e:40:e8:df:13:6d:e8:cb:0f:a0:76:fb:0d: af:4e:c7:32:d5:b5:8f:54:30:64:e1:ca:75:3b:c3:1d:80:c7: ca:41:53:2e:a6:f1:cf:ed:87:d3:41:df:b8:de:30:f5:ef:86: 4c:68:5b:65:8d:e1:e7:c5:59:03:ca:ec:cc:17:09:5f:18:fb: a9:91:56:b3:75:4a:5e:b3:f2:2c:75:d5:ad:7f:9f:9e:0d:b0: 07:86:f3:50:cb:80:06:66:40:e7:9d:c5:ca:ef:44:d2:c0:4d: 3f:d9:a1:19:81:39:9f:e8:35:f5:11:96:d8:43:c2:e0:00:9a: 77:49:d8:54:67:cc:6b:b1:0c:32:a6:4f:f6:a2:7e:96:96:b1: 91:d8:cf:a5:73:ad:a7:d4:5c:cc:8b:34:83:cd:21:7a:2c:da: b7:7c:58:cf:ab:23:b2:d3:6d:49:09:00:cc:e0:cc:c5:81:73: c1:e9:82:9e:da:36:c8:d8:d2:20:7a:f4:41:82:38:b1:0f:3e: 06:80:2c:59 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUdIVN304aI49g83T6lxNzRv1kLi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjQwODQwMTZaFw0yNjExMjMwODQ1MTZaMDMxMTAvBgNV BAMTKEY5RkY3RTM5MUVCREVFODk2NEM2MjRCRDlGQTMzMTQwNEZEMEM1RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDP8IySy1jW8+QuIF+yd0bND7 ol3MpXFc/1FujN2qezQD/Lry04X+NC5Hew98sacdxatK63J7sbkA/v7WMnYbqYNQ akTdHxfyR9p+4AxdB5miKy2cL19MJ8IIu/BwXJNqlMA8L488SUUPDVNYxuk4wYzg WDl4lsNZ/Tuwbq8StmFz+jQ3UkWfkXTiQ5AkbaeHUvCE92zvxWXw0cGD1enFTdjT vDZ2WuvGsECxrRvf0XdZSOcN0SserVQIzTZviQD5G3BaLdBMsPPSj8VDWHOtvK1r vxNKC5b/uzbTd0yhQ2FPjRQuvvcGLLocTWMfHozYgaddzoFonRezBnZZGzJJAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQU+f9+OR697olkxiS9n6MxQE/QxfMwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx MzYzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzUzMjMxMzczOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAtnYpDANBgkqhkiG9w0BAQsFAAOCAQEAlsQsb1/hLkCDrpNEmGz/XXSElAyh 7lBj7PgVCUXyKO9DzYGjvRDBgmHG9a4QHVx5rPDd4Z396xOy5iouQOjfE23oyw+g dvsNr07HMtW1j1QwZOHKdTvDHYDHykFTLqbxz+2H00HfuN4w9e+GTGhbZY3h58VZ A8rszBcJXxj7qZFWs3VKXrPyLHXVrX+fng2wB4bzUMuABmZA553Fyu9E0sBNP9mh GYE5n+g19RGW2EPC4ACad0nYVGfMa7EMMqZP9qJ+lpaxkdjPpXOtp9RczIs0g80h eizat3xYz6sjstNtSQkAzODMxYFzwemCnto2yNjSIHr0QYI4sQ8+BoAsWQ== -----END CERTIFICATE-----Generated at Fri Dec 5 04:36:39 2025 by rpki-client