This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230382e302f32302d3234203d3e203139333138.roa File: 3231372e3231362e3230382e302f32302d3234203d3e203139333138.roa (raw, json) Hash identifier: gbxccW2lFWYrSgdVkbj/bwzt/qgSaPnWdw8a0p7aMgo= Subject key identifier: 39:62:21:0E:FA:E4:06:34:16:20:02:02:88:EC:B2:D9:44:67:00:52 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 431E61977BC04618B693B74CD5A0B4F6CC526119 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230382e302f32302d3234203d3e203139333138.roa Signing time: Wed 12 Nov 2025 09:44:25 +0000 ROA not before: Wed 12 Nov 2025 09:39:25 +0000 ROA not after: Wed 11 Nov 2026 09:44:25 +0000 asID: 19318 IP address blocks: 217.216.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:1e:61:97:7b:c0:46:18:b6:93:b7:4c:d5:a0:b4:f6:cc:52:61:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 12 09:39:25 2025 GMT Not After : Nov 11 09:44:25 2026 GMT Subject: CN=3962210EFAE406341620020288ECB2D944670052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a2:74:02:32:22:15:ef:ac:c5:02:88:18:df: 0b:e3:ca:da:9d:5a:05:8e:a8:02:bd:29:c0:9d:d6: 98:9a:b0:0c:c5:66:5e:6e:42:a7:fc:4a:19:c6:00: 2c:9a:b3:9c:c8:1e:70:63:0e:af:57:57:e5:3f:63: 32:f2:97:e3:73:44:42:dc:33:74:b8:93:93:df:e7: 06:f2:b5:99:b6:36:dc:e5:8c:90:39:06:33:dd:a8: d3:2b:52:3b:7c:2d:81:77:a5:ae:18:0f:6c:93:c3: 25:57:df:37:73:c9:90:69:35:52:59:fc:bb:a5:0b: 9b:50:87:6e:b2:50:72:76:aa:3d:e2:b1:9b:1f:f3: ab:4f:5b:83:f8:05:d0:99:5d:29:f6:82:93:ea:1e: 05:fa:85:03:cf:b4:ab:33:d9:40:ed:f5:65:b4:bc: c8:23:ad:70:dc:98:f5:aa:ef:31:19:4f:73:12:9a: 30:3b:15:b8:8c:6a:5a:bb:fc:b3:26:3a:d4:14:71: ba:3e:91:d6:37:c1:34:a2:f1:f3:23:b5:95:ba:a6: bb:d3:00:5e:e6:a1:2b:05:d0:53:95:2c:b1:38:a8: a8:6a:e3:92:c5:6b:b3:ee:e6:c0:ae:73:24:4c:3e: 26:35:01:43:19:6c:ad:b8:48:67:f4:d7:75:79:a3: 5b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:62:21:0E:FA:E4:06:34:16:20:02:02:88:EC:B2:D9:44:67:00:52 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230382e302f32302d3234203d3e203139333138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.208.0/20 Signature Algorithm: sha256WithRSAEncryption 6e:e3:be:8d:d5:8e:76:7a:0e:a5:df:b9:c0:47:d2:41:48:19: eb:aa:f3:69:80:ed:9a:67:bc:9c:90:49:9c:0c:6f:3c:7d:2f: 43:46:0f:ab:6a:d9:21:45:11:77:7c:ef:01:d5:88:7c:98:e5: 66:af:42:1f:ac:a5:44:13:6e:c9:f7:6d:f0:97:20:83:64:d6: c8:51:9a:e1:2b:69:13:a1:93:7d:f1:d8:f5:38:09:18:cb:84: d5:0e:7d:f0:d5:76:24:00:53:f1:dc:d0:27:32:58:62:bf:9b: 6b:e4:7e:3b:17:b2:e3:56:1c:a8:87:e8:3b:e9:dd:a2:e7:7b: 9a:d2:c7:8d:aa:02:9f:31:4d:8a:1b:e2:3e:24:af:1a:a0:80: 61:2c:9d:51:d5:f4:a8:ff:b4:6d:fb:cc:66:0d:e3:3e:91:2c: 50:5d:d7:e4:c7:67:ec:63:5c:d6:5c:66:a0:f0:a0:fc:0f:9e: 6d:50:62:70:22:e2:f4:24:c6:d2:ed:b7:1f:34:a7:e7:67:5b: ee:a9:70:d9:a0:63:e0:1b:3e:8f:48:56:dc:38:b1:09:53:14: a1:51:ab:4b:13:ec:4c:7b:a3:00:eb:5b:70:ac:9c:3c:4c:3f: 4b:f5:bb:ad:8d:8a:f4:48:63:fa:f3:cc:86:f6:47:20:47:ec: 71:4d:a0:da -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUQx5hl3vARhi2k7dM1aC09sxSYRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMTIwOTM5MjVaFw0yNjExMTEwOTQ0MjVaMDMxMTAvBgNV BAMTKDM5NjIyMTBFRkFFNDA2MzQxNjIwMDIwMjg4RUNCMkQ5NDQ2NzAwNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYonQCMiIV76zFAogY3wvjytqd WgWOqAK9KcCd1piasAzFZl5uQqf8ShnGACyas5zIHnBjDq9XV+U/YzLyl+NzRELc M3S4k5Pf5wbytZm2NtzljJA5BjPdqNMrUjt8LYF3pa4YD2yTwyVX3zdzyZBpNVJZ /LulC5tQh26yUHJ2qj3isZsf86tPW4P4BdCZXSn2gpPqHgX6hQPPtKsz2UDt9WW0 vMgjrXDcmPWq7zEZT3MSmjA7FbiMalq7/LMmOtQUcbo+kdY3wTSi8fMjtZW6prvT AF7moSsF0FOVLLE4qKhq45LFa7Pu5sCucyRMPiY1AUMZbK24SGf013V5o1v/AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUOWIhDvrkBjQWIAICiOyy2URnAFIwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMy MzAzODJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMxMzkzMzMxMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATZ2NAwDQYJKoZIhvcNAQELBQADggEBAG7jvo3VjnZ6DqXfucBH0kFIGeuq82mA 7ZpnvJyQSZwMbzx9L0NGD6tq2SFFEXd87wHViHyY5WavQh+spUQTbsn3bfCXIINk 1shRmuEraROhk33x2PU4CRjLhNUOffDVdiQAU/Hc0CcyWGK/m2vkfjsXsuNWHKiH 6Dvp3aLne5rSx42qAp8xTYob4j4krxqggGEsnVHV9Kj/tG37zGYN4z6RLFBd1+TH Z+xjXNZcZqDwoPwPnm1QYnAi4vQkxtLttx80p+dnW+6pcNmgY+AbPo9IVtw4sQlT FKFRq0sT7Ex7owDrW3CsnDxMP0v1u62NivRIY/rzzIb2RyBH7HFNoNo= -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:20 2025 by rpki-client