This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e34302e302f32312d3332203d3e203430303231.roa File: 3231372e3231362e34302e302f32312d3332203d3e203430303231.roa (raw, json) Hash identifier: o2PJd/+pdSiQWnwhP8D48xw1K9kL1X+KGbGWRRTxmz8= Subject key identifier: 82:F0:BD:D4:E7:80:36:A5:F8:EA:0A:51:2E:84:0E:59:41:E2:08:10 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 3287A7BDD4365B48DD0CDC956723FDA3A076E7B0 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e34302e302f32312d3332203d3e203430303231.roa Signing time: Wed 19 Nov 2025 17:42:03 +0000 ROA not before: Wed 19 Nov 2025 17:37:03 +0000 ROA not after: Wed 18 Nov 2026 17:42:03 +0000 asID: 40021 IP address blocks: 217.216.40.0/21 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:87:a7:bd:d4:36:5b:48:dd:0c:dc:95:67:23:fd:a3:a0:76:e7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 19 17:37:03 2025 GMT Not After : Nov 18 17:42:03 2026 GMT Subject: CN=82F0BDD4E78036A5F8EA0A512E840E5941E20810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:15:26:59:39:27:e5:56:58:9f:cd:50:a9:10: 47:a3:b7:7a:19:1c:0c:5e:fa:5f:c5:ca:40:3a:1c: e5:cf:ce:c1:42:d3:4f:8c:d7:03:aa:a7:a5:2b:4a: 10:5f:ba:17:0a:bc:db:14:5e:8e:4c:4a:67:da:57: 22:8b:ec:50:20:ec:a6:2f:bc:93:46:0c:28:7c:80: d5:3f:04:e8:41:2c:b2:4d:ee:7c:c9:0b:4e:12:50: 43:63:85:7c:32:7c:94:ae:cf:35:73:67:c1:7d:ad: d9:88:81:31:20:ee:da:da:29:58:a2:97:e7:d4:62: 95:85:36:03:d2:3c:47:45:e2:39:64:af:f3:27:9b: 31:7e:26:de:f7:83:16:47:b4:6b:0a:20:61:19:ef: 1f:e6:47:90:98:67:24:4b:30:8d:32:5b:19:a2:61: ac:e4:d4:c3:77:39:d3:9d:94:c5:ae:85:36:ef:d3: 63:ff:76:39:dd:d9:65:53:3c:f8:7d:cb:b0:c6:ce: 56:90:a8:ae:4a:90:fe:27:9c:a4:13:45:46:8d:00: 93:a7:46:24:b1:b3:f1:41:5d:3b:3a:cb:c1:ed:c9: 1d:aa:20:25:aa:dc:a5:c5:f1:6b:0f:15:08:1e:8c: 3b:e0:4c:fe:ee:a5:41:f6:6e:c4:9d:e2:3b:70:fa: fe:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F0:BD:D4:E7:80:36:A5:F8:EA:0A:51:2E:84:0E:59:41:E2:08:10 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e34302e302f32312d3332203d3e203430303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.40.0/21 Signature Algorithm: sha256WithRSAEncryption 44:3e:5c:a0:df:7b:4b:bc:77:37:3b:ec:fa:d9:8d:f4:6e:38: 4f:17:58:e7:9f:d3:79:21:57:db:a1:f6:40:42:95:9b:bc:58: 7e:d5:b5:41:bb:a9:ea:ca:58:39:cb:96:5a:30:69:51:16:d9: de:5c:ef:55:04:58:55:fc:71:cb:b4:16:0a:15:f9:38:79:2f: 02:4f:86:89:a5:e9:67:44:ef:6f:71:1f:49:92:a3:10:2e:96: ae:a4:f7:ad:b1:ee:ad:a8:98:6b:1b:e0:42:6a:d4:07:af:f6: 14:27:91:83:90:21:d5:c5:52:e4:8c:03:05:00:8a:f1:db:64: 6f:19:79:e4:ea:61:6b:d9:b1:57:40:b1:a6:10:3e:df:ca:d8: 51:4e:13:95:09:46:24:1c:2b:a7:b4:44:5f:a0:09:5f:1a:76: 5f:66:ae:37:e1:10:72:e6:8f:47:35:fb:21:cd:d0:bb:f1:35: 8e:30:0b:69:2e:8d:48:83:54:b4:0b:17:36:de:58:34:bd:a9: c2:f9:81:44:c0:d3:5d:43:3a:99:ac:7f:54:5a:b2:f6:21:bd: 25:9f:1b:9c:73:46:d5:34:8b:2c:84:78:76:ef:02:3e:99:6d: 87:e1:e5:24:f2:94:5b:75:18:32:86:6e:98:ee:5e:b0:f8:cc: 4c:80:a1:3e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUMoenvdQ2W0jdDNyVZyP9o6B257AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMTkxNzM3MDNaFw0yNjExMTgxNzQyMDNaMDMxMTAvBgNV BAMTKDgyRjBCREQ0RTc4MDM2QTVGOEVBMEE1MTJFODQwRTU5NDFFMjA4MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FSZZOSflVlifzVCpEEejt3oZ HAxe+l/FykA6HOXPzsFC00+M1wOqp6UrShBfuhcKvNsUXo5MSmfaVyKL7FAg7KYv vJNGDCh8gNU/BOhBLLJN7nzJC04SUENjhXwyfJSuzzVzZ8F9rdmIgTEg7traKVii l+fUYpWFNgPSPEdF4jlkr/MnmzF+Jt73gxZHtGsKIGEZ7x/mR5CYZyRLMI0yWxmi Yazk1MN3OdOdlMWuhTbv02P/djnd2WVTPPh9y7DGzlaQqK5KkP4nnKQTRUaNAJOn RiSxs/FBXTs6y8HtyR2qICWq3KXF8WsPFQgejDvgTP7upUH2bsSd4jtw+v6nAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUgvC91OeANqX46gpRLoQOWUHiCBAwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTM0 MzAyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzNDMwMzAzMjMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD 2dgoMA0GCSqGSIb3DQEBCwUAA4IBAQBEPlyg33tLvHc3O+z62Y30bjhPF1jnn9N5 IVfbofZAQpWbvFh+1bVBu6nqylg5y5ZaMGlRFtneXO9VBFhV/HHLtBYKFfk4eS8C T4aJpelnRO9vcR9JkqMQLpaupPetse6tqJhrG+BCatQHr/YUJ5GDkCHVxVLkjAMF AIrx22RvGXnk6mFr2bFXQLGmED7fythRThOVCUYkHCuntERfoAlfGnZfZq434RBy 5o9HNfshzdC78TWOMAtpLo1Ig1S0Cxc23lg0vanC+YFEwNNdQzqZrH9UWrL2Ib0l nxucc0bVNIsshHh27wI+mW2H4eUk8pRbdRgyhm6Y7l6w+MxMgKE+ -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:35 2025 by rpki-client