This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e33322e302f32312d3332203d3e20313431393935.roa File: 3231372e3231362e33322e302f32312d3332203d3e20313431393935.roa (raw, json) Hash identifier: l8AokrUCXMTsyYcovwi2GuqGdbBMzavigictT0axF6A= Subject key identifier: 35:1A:7B:FC:8D:33:50:A5:32:DF:26:5F:D4:3F:F3:84:6B:76:04:D8 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 1708B8F1016149E44ACB2730DEF1E746DC97DD25 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e33322e302f32312d3332203d3e20313431393935.roa Signing time: Wed 19 Nov 2025 17:41:47 +0000 ROA not before: Wed 19 Nov 2025 17:36:47 +0000 ROA not after: Wed 18 Nov 2026 17:41:47 +0000 asID: 141995 IP address blocks: 217.216.32.0/21 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:08:b8:f1:01:61:49:e4:4a:cb:27:30:de:f1:e7:46:dc:97:dd:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 19 17:36:47 2025 GMT Not After : Nov 18 17:41:47 2026 GMT Subject: CN=351A7BFC8D3350A532DF265FD43FF3846B7604D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1a:bb:6e:03:53:33:dd:05:a5:b7:30:d7:3f: 60:40:b5:21:6f:61:0c:3a:9c:af:f6:71:6f:78:ca: 82:1e:12:9d:1a:76:99:c7:95:5d:42:88:d3:e6:fc: aa:49:90:6f:b7:68:27:a8:bb:9c:53:a5:72:80:0c: 0f:af:96:16:b2:fb:9e:17:c6:79:28:31:c0:17:68: 87:bc:40:ae:96:6d:20:b3:c4:37:9b:d0:97:8a:fb: 95:96:ec:ee:0f:2b:ae:76:0d:8b:85:95:85:40:be: 14:ff:5f:9a:6f:8c:a7:fb:e9:47:99:53:1e:29:44: 73:27:28:c2:7b:4e:c1:f2:a6:d4:85:f7:6a:4e:3a: dc:e5:8e:9a:01:f8:2b:f9:cf:61:0c:33:ed:95:a3: 16:77:16:c4:69:38:c2:d7:45:af:1c:6f:bf:e1:34: f5:ef:90:ff:24:45:ea:94:16:d2:ef:ba:17:6f:c8: cc:8f:2c:b9:25:99:d9:bd:1b:c2:b9:ee:e4:bc:a1: d5:ca:92:30:b0:81:fe:bf:2b:47:6a:df:83:67:90: 4e:73:38:07:96:45:14:83:23:fb:fc:1e:ba:9e:14: 56:bf:92:36:f7:e8:d9:1c:8a:9d:53:2a:d7:ce:b6: a8:1a:9f:ed:2c:c5:cb:ad:4c:1a:db:a9:11:d3:6a: 8d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1A:7B:FC:8D:33:50:A5:32:DF:26:5F:D4:3F:F3:84:6B:76:04:D8 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e33322e302f32312d3332203d3e20313431393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.32.0/21 Signature Algorithm: sha256WithRSAEncryption 28:37:10:2e:88:37:8b:73:24:30:24:ed:27:66:c9:bf:4c:0e: 00:ba:90:81:7a:0d:aa:a9:58:db:be:e3:02:48:a3:b5:8c:40: df:13:53:2f:79:5b:b8:0f:f4:c6:96:a3:97:6d:1b:1a:73:fb: 96:2a:8f:e0:75:db:79:f6:75:82:43:12:f4:b7:13:b6:2b:0a: c7:00:8d:1d:93:f2:93:18:62:f7:ac:e7:60:6b:f2:e9:37:5f: d4:77:4e:5b:54:a3:c4:45:db:08:bf:b0:ec:91:6d:f1:55:a4: 24:f4:d2:27:e8:08:da:d9:33:4b:5e:69:23:57:26:55:b6:72: 8d:78:75:d4:61:a8:af:d6:4a:15:5b:60:22:ef:be:c9:75:f9: 5a:2b:92:c8:d0:b3:c8:53:55:99:d2:0f:8d:15:9c:66:7a:ba: 70:58:45:f2:c1:83:0f:7a:99:d2:b3:f4:cf:1c:a9:93:07:7a: 5b:4c:ef:53:8c:60:af:ec:79:66:58:a4:6c:57:ea:14:cd:9e: 67:3c:8a:55:fe:15:1a:ff:a1:91:d1:de:5c:27:9d:f3:86:f5: 1f:c0:e8:fe:5f:8a:5f:c5:81:ae:9d:a1:70:19:ab:3e:06:51: 22:fc:c8:af:ac:ff:ca:cf:e4:36:2a:1f:3e:12:4f:aa:ba:61: 36:f5:da:9d -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUFwi48QFhSeRKyycw3vHnRtyX3SUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMTkxNzM2NDdaFw0yNjExMTgxNzQxNDdaMDMxMTAvBgNV BAMTKDM1MUE3QkZDOEQzMzUwQTUzMkRGMjY1RkQ0M0ZGMzg0NkI3NjA0RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuGrtuA1Mz3QWltzDXP2BAtSFv YQw6nK/2cW94yoIeEp0adpnHlV1CiNPm/KpJkG+3aCeou5xTpXKADA+vlhay+54X xnkoMcAXaIe8QK6WbSCzxDeb0JeK+5WW7O4PK652DYuFlYVAvhT/X5pvjKf76UeZ Ux4pRHMnKMJ7TsHyptSF92pOOtzljpoB+Cv5z2EMM+2VoxZ3FsRpOMLXRa8cb7/h NPXvkP8kReqUFtLvuhdvyMyPLLklmdm9G8K57uS8odXKkjCwgf6/K0dq34NnkE5z OAeWRRSDI/v8HrqeFFa/kjb36Nkcip1TKtfOtqgan+0sxcutTBrbqRHTao0fAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUNRp7/I0zUKUy3yZf1D/zhGt2BNgwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMz MzIyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzMTM0MzEzOTM5MzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAPZ2CAwDQYJKoZIhvcNAQELBQADggEBACg3EC6IN4tzJDAk7Sdmyb9MDgC6kIF6 DaqpWNu+4wJIo7WMQN8TUy95W7gP9MaWo5dtGxpz+5Yqj+B123n2dYJDEvS3E7Yr CscAjR2T8pMYYves52Br8uk3X9R3TltUo8RF2wi/sOyRbfFVpCT00ifoCNrZM0te aSNXJlW2co14ddRhqK/WShVbYCLvvsl1+VorksjQs8hTVZnSD40VnGZ6unBYRfLB gw96mdKz9M8cqZMHeltM71OMYK/seWZYpGxX6hTNnmc8ilX+FRr/oZHR3lwnnfOG 9R/A6P5fil/Fga6doXAZqz4GUSL8yK+s/8rP5DYqHz4ST6q6YTb12p0= -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:26 2025 by rpki-client