This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139322e302f32322d3234203d3e2039333034.roa File: 3231372e3231362e3139322e302f32322d3234203d3e2039333034.roa (raw, json) Hash identifier: WMGytyOu+ljB6Iq+zByroyjyDih+M5kQ4hz58K0N8us= Subject key identifier: D2:75:CC:29:D1:DF:6E:B1:3A:C3:EC:B8:FF:75:89:33:74:B6:B4:71 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 2BD68EE33982CE99B8AA512A07D390612275CEF0 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139322e302f32322d3234203d3e2039333034.roa Signing time: Thu 20 Nov 2025 18:57:54 +0000 ROA not before: Thu 20 Nov 2025 18:52:54 +0000 ROA not after: Thu 19 Nov 2026 18:57:54 +0000 asID: 9304 IP address blocks: 217.216.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 17:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d6:8e:e3:39:82:ce:99:b8:aa:51:2a:07:d3:90:61:22:75:ce:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 20 18:52:54 2025 GMT Not After : Nov 19 18:57:54 2026 GMT Subject: CN=D275CC29D1DF6EB13AC3ECB8FF75893374B6B471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:1a:71:b1:ba:ea:25:c1:fa:73:59:42:2c:73: f9:d2:42:ce:54:51:a4:f5:15:4e:5e:74:be:b9:da: 0c:b1:94:dc:e3:e4:c0:38:9a:04:92:88:3d:f6:8e: 9f:68:f5:7b:e9:8f:82:24:11:7a:f8:da:7b:07:9f: 30:c5:e3:dc:ca:5d:10:c2:40:91:0e:cf:36:ec:29: f1:07:e8:85:de:a8:ba:ef:e5:6d:59:7f:d6:a7:f4: 59:01:d2:da:12:9b:16:5e:11:65:6c:ed:9e:fc:0e: 3d:c4:51:8b:52:50:5c:f7:ef:3c:0d:26:c1:3b:e7: ba:88:e6:bb:60:04:6a:df:3a:3c:57:d6:80:c9:67: 86:fa:e7:40:d9:ea:bb:c4:82:21:ba:4b:39:7a:1d: 90:ea:8f:2c:cf:8a:4b:0a:cf:e8:81:da:ad:e4:23: 6d:f6:9f:4a:38:87:fb:d0:b9:0a:bb:f9:cc:82:ee: 6f:6c:30:ae:45:41:f7:9f:8b:11:83:47:5e:29:c4: ad:db:bf:5f:e1:27:a1:93:1f:08:2b:e4:91:36:25: b0:1d:c7:48:7f:a4:5f:62:17:8f:9f:99:86:a9:36: 5a:9c:e2:ba:8f:41:4c:d1:b5:ab:f0:cd:24:a8:75: 47:5b:a8:b7:d3:a9:d0:11:24:c3:26:70:12:6f:a5: b7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:75:CC:29:D1:DF:6E:B1:3A:C3:EC:B8:FF:75:89:33:74:B6:B4:71 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139322e302f32322d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.192.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:37:fa:18:84:d1:8e:2c:81:41:07:83:bd:ea:ec:1e:60:db: 61:5a:76:bf:b5:ea:fb:b7:97:fa:cc:77:c8:0c:1d:2a:2f:95: c9:7e:b5:b0:4f:69:cc:63:e9:d4:a3:76:b9:94:1e:39:82:f3: f7:07:bb:e8:83:ec:57:37:b4:62:20:6c:0c:49:fe:4e:66:68: d4:01:f9:a0:29:5a:18:69:0c:7a:e0:38:0f:0e:c5:62:38:9f: 5f:b1:a6:b3:ab:92:eb:e2:bb:10:fe:62:d0:de:4c:d9:b9:b4: e7:d1:c3:7c:08:7f:d5:d9:79:40:11:e4:dd:b4:9c:28:a2:d5: 93:23:ce:ff:be:b6:10:c6:05:d6:9a:77:ae:4d:e2:38:5a:23: a4:35:43:21:de:50:1d:e7:67:2b:1f:4c:1d:c5:a5:be:51:b2: 8b:1b:fc:3d:77:52:e9:0c:e7:0b:c4:04:29:02:f3:d4:ce:14: cf:9a:23:d4:cb:8d:4f:d6:10:16:57:df:11:a1:be:09:74:71: fe:23:bf:70:ea:31:ee:f6:13:24:09:59:90:38:11:34:21:8b: e4:95:bf:95:40:f9:9a:05:8d:a4:dd:ed:19:c7:fc:0f:a7:5f: 16:f4:91:e8:f9:c8:92:0e:1c:e7:02:1f:26:aa:c4:a8:cc:8c: ac:e1:f8:ca -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUK9aO4zmCzpm4qlEqB9OQYSJ1zvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjAxODUyNTRaFw0yNjExMTkxODU3NTRaMDMxMTAvBgNV BAMTKEQyNzVDQzI5RDFERjZFQjEzQUMzRUNCOEZGNzU4OTMzNzRCNkI0NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3GnGxuuolwfpzWUIsc/nSQs5U UaT1FU5edL652gyxlNzj5MA4mgSSiD32jp9o9Xvpj4IkEXr42nsHnzDF49zKXRDC QJEOzzbsKfEH6IXeqLrv5W1Zf9an9FkB0toSmxZeEWVs7Z78Dj3EUYtSUFz37zwN JsE757qI5rtgBGrfOjxX1oDJZ4b650DZ6rvEgiG6Szl6HZDqjyzPiksKz+iB2q3k I232n0o4h/vQuQq7+cyC7m9sMK5FQfefixGDR14pxK3bv1/hJ6GTHwgr5JE2JbAd x0h/pF9iF4+fmYapNlqc4rqPQUzRtavwzSSodUdbqLfTqdARJMMmcBJvpbd3AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU0nXMKdHfbrE6w+y4/3WJM3S2tHEwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx MzkzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC 2djAMA0GCSqGSIb3DQEBCwUAA4IBAQA6N/oYhNGOLIFBB4O96uweYNthWna/ter7 t5f6zHfIDB0qL5XJfrWwT2nMY+nUo3a5lB45gvP3B7vog+xXN7RiIGwMSf5OZmjU AfmgKVoYaQx64DgPDsViOJ9fsaazq5Lr4rsQ/mLQ3kzZubTn0cN8CH/V2XlAEeTd tJwootWTI87/vrYQxgXWmneuTeI4WiOkNUMh3lAd52crH0wdxaW+UbKLG/w9d1Lp DOcLxAQpAvPUzhTPmiPUy41P1hAWV98Rob4JdHH+I79w6jHu9hMkCVmQOBE0IYvk lb+VQPmaBY2k3e0Zx/wPp18W9JHo+ciSDhznAh8mqsSozIys4fjK -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:37 2025 by rpki-client