This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232342e302f32302d3230203d3e203230333236.roa File: 3231372e3231362e3232342e302f32302d3230203d3e203230333236.roa (raw, json) Hash identifier: kXz48QbcT2efEBlg8znoVIeWgVeg0bJbSbDfemKP/lg= Subject key identifier: 84:62:69:47:48:40:A6:2B:ED:3D:D1:8C:05:94:B5:8E:DD:AA:0B:76 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 47F4F09FA889A93211AF357185D5EC7620766698 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232342e302f32302d3230203d3e203230333236.roa Signing time: Thu 13 Nov 2025 04:08:26 +0000 ROA not before: Thu 13 Nov 2025 04:03:26 +0000 ROA not after: Thu 12 Nov 2026 04:08:26 +0000 asID: 20326 IP address blocks: 217.216.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 17:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f4:f0:9f:a8:89:a9:32:11:af:35:71:85:d5:ec:76:20:76:66:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 13 04:03:26 2025 GMT Not After : Nov 12 04:08:26 2026 GMT Subject: CN=846269474840A62BED3DD18C0594B58EDDAA0B76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:ae:36:86:4d:fd:b1:01:00:85:9a:c9:03:78: fa:9c:4e:53:b6:74:ec:da:0c:c1:92:5a:34:f9:9d: b9:98:3f:01:da:26:e7:96:47:82:8b:82:de:12:6c: b7:e2:6e:05:63:37:31:ee:c0:8e:f6:a5:15:35:77: ed:04:9d:d1:a4:b6:a7:90:ff:e5:41:58:22:4b:4c: 85:2b:4d:2f:a0:ec:13:ec:72:be:8f:dc:78:c6:84: 9b:3f:00:05:23:f6:c9:e8:2e:3b:88:63:0f:c4:30: 4e:96:18:91:44:bb:26:4c:e6:86:11:55:3d:06:0c: bc:78:42:f1:c2:0b:a8:3d:87:b4:08:f1:b9:42:64: 0c:b6:bd:c9:d9:a0:cd:48:9e:ef:48:29:72:b2:7f: f9:56:92:31:6f:93:07:de:91:fc:c2:05:af:a5:f4: 21:c7:79:8d:f7:65:0c:78:3f:b6:84:df:b1:7c:b6: f0:ae:ae:eb:b1:8a:15:ba:8c:60:a9:32:9b:a1:86: 3c:51:8c:da:ba:17:e8:49:59:92:78:1d:bd:ce:32: cd:07:77:c9:56:d3:40:25:df:9f:d4:5c:c1:a0:1f: 43:16:cd:3f:d4:65:40:bc:d7:40:d4:ab:61:b4:da: 46:97:04:4f:72:c1:9d:96:45:8f:c4:e8:c3:95:8b: ab:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:62:69:47:48:40:A6:2B:ED:3D:D1:8C:05:94:B5:8E:DD:AA:0B:76 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232342e302f32302d3230203d3e203230333236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.224.0/20 Signature Algorithm: sha256WithRSAEncryption 55:02:4a:21:da:d8:94:6b:05:98:75:8b:e0:13:75:c1:b9:a4: e8:47:a3:d8:f3:03:01:e9:32:57:1a:69:ad:30:dc:b5:68:08: 8c:51:2d:c6:9b:44:e4:45:9e:ea:22:71:d6:47:6b:95:31:d3: c8:62:6b:d7:7c:4f:44:4e:d3:c1:61:94:42:4f:2b:85:57:d7: 24:1c:5d:b6:44:2a:78:84:89:c1:8f:4e:b3:d9:51:40:28:0c: 52:55:47:9b:e2:b7:a6:92:71:f5:8b:0c:7d:a4:75:60:d1:46: 07:3d:3d:0d:20:2d:12:15:ed:3d:87:c9:ee:41:00:35:ed:aa: 2f:b7:ce:5c:e6:3e:5c:5f:8a:6e:c6:3a:b0:7e:ef:1d:f9:36: 6a:45:e4:78:fe:28:21:f3:a6:8f:35:7e:4b:6f:4d:c8:05:fe: 48:da:86:e2:ba:a9:5b:0c:a5:17:fd:9a:f2:b4:53:de:d8:f5: 92:27:1b:b8:88:0a:38:43:47:f4:73:e2:fc:fc:0a:df:3e:7a: e6:d9:cc:0b:72:15:ab:9a:02:bb:35:a5:39:04:5f:8d:92:82: 4c:13:9c:0e:10:a3:dc:71:53:e7:80:c3:6c:e2:74:12:7a:e7: 74:fc:5d:7f:9c:c6:62:c0:fb:86:47:8d:87:8e:7a:30:1d:dc: 74:c0:9f:6e -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUR/Twn6iJqTIRrzVxhdXsdiB2ZpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMTMwNDAzMjZaFw0yNjExMTIwNDA4MjZaMDMxMTAvBgNV BAMTKDg0NjI2OTQ3NDg0MEE2MkJFRDNERDE4QzA1OTRCNThFRERBQTBCNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8rjaGTf2xAQCFmskDePqcTlO2 dOzaDMGSWjT5nbmYPwHaJueWR4KLgt4SbLfibgVjNzHuwI72pRU1d+0EndGktqeQ /+VBWCJLTIUrTS+g7BPscr6P3HjGhJs/AAUj9snoLjuIYw/EME6WGJFEuyZM5oYR VT0GDLx4QvHCC6g9h7QI8blCZAy2vcnZoM1Inu9IKXKyf/lWkjFvkwfekfzCBa+l 9CHHeY33ZQx4P7aE37F8tvCuruuxihW6jGCpMpuhhjxRjNq6F+hJWZJ4Hb3OMs0H d8lW00Al35/UXMGgH0MWzT/UZUC810DUq2G02kaXBE9ywZ2WRY/E6MOVi6shAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUhGJpR0hApivtPdGMBZS1jt2qC3YwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMy MzIzNDJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMyMzAzMzMyMzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATZ2OAwDQYJKoZIhvcNAQELBQADggEBAFUCSiHa2JRrBZh1i+ATdcG5pOhHo9jz AwHpMlcaaa0w3LVoCIxRLcabRORFnuoicdZHa5Ux08hia9d8T0RO08FhlEJPK4VX 1yQcXbZEKniEicGPTrPZUUAoDFJVR5vit6aScfWLDH2kdWDRRgc9PQ0gLRIV7T2H ye5BADXtqi+3zlzmPlxfim7GOrB+7x35NmpF5Hj+KCHzpo81fktvTcgF/kjahuK6 qVsMpRf9mvK0U97Y9ZInG7iICjhDR/Rz4vz8Ct8+eubZzAtyFauaArs1pTkEX42S gkwTnA4Qo9xxU+eAw2zidBJ653T8XX+cxmLA+4ZHjYeOejAd3HTAn24= -----END CERTIFICATE-----Generated at Thu Dec 4 07:38:19 2025 by rpki-client