This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e34382e302f32312d3332203d3e203430303231.roa File: 3231372e3231362e34382e302f32312d3332203d3e203430303231.roa (raw, json) Hash identifier: jRZLfyDes06N3Gu5P/VN+OxKnn+XsdCLUweAPgXd5E8= Subject key identifier: E0:F5:04:AD:C7:D6:9D:BE:F0:E6:A2:16:EC:E3:2D:27:55:BD:E2:11 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 0FC3CACED5135ACCAF7D33370CCA88329006524A Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e34382e302f32312d3332203d3e203430303231.roa Signing time: Wed 19 Nov 2025 17:42:15 +0000 ROA not before: Wed 19 Nov 2025 17:37:15 +0000 ROA not after: Wed 18 Nov 2026 17:42:15 +0000 asID: 40021 IP address blocks: 217.216.48.0/21 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c3:ca:ce:d5:13:5a:cc:af:7d:33:37:0c:ca:88:32:90:06:52:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 19 17:37:15 2025 GMT Not After : Nov 18 17:42:15 2026 GMT Subject: CN=E0F504ADC7D69DBEF0E6A216ECE32D2755BDE211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f7:d5:9f:f1:2d:50:13:25:8d:9f:bf:76:22: b9:c2:bb:cf:09:12:eb:df:f5:16:f6:b4:3e:66:4b: 72:c7:d8:13:35:53:08:57:f4:67:eb:6b:7d:97:24: b1:12:0b:0b:d6:a0:d1:4c:eb:34:94:8c:29:0b:aa: d3:29:da:5c:4f:74:ed:c3:4d:06:bf:50:1b:9b:e4: 8d:a2:ff:10:13:32:38:46:67:29:67:af:18:89:0d: f1:a2:9b:3d:02:ba:81:71:06:19:d3:c2:d8:b2:8b: f7:b7:aa:18:b3:6e:7c:b7:47:e0:92:ba:63:ef:99: df:89:6e:72:8d:c0:4b:9c:31:1f:dd:7d:a8:42:a4: 3b:dc:e5:7f:58:54:66:66:6a:f8:c1:b3:19:5d:12: 45:82:bc:c1:0d:aa:b8:a5:05:89:af:c4:57:97:6e: 6e:c0:ee:a2:54:9f:11:dd:2e:51:bb:7a:87:22:61: 5a:81:c5:46:7a:3f:29:5b:7f:51:05:3e:18:75:b2: 7c:db:83:a8:00:fb:b7:31:da:7d:8c:ab:7a:e7:e8: cd:51:20:33:c0:76:b8:ce:90:39:b4:3e:35:1d:44: cb:40:e8:02:f7:8f:c8:00:17:36:40:cd:ee:72:6b: 6a:d7:8b:9f:30:0c:07:7a:dd:b1:5d:0a:bf:1b:9f: 66:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F5:04:AD:C7:D6:9D:BE:F0:E6:A2:16:EC:E3:2D:27:55:BD:E2:11 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e34382e302f32312d3332203d3e203430303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.48.0/21 Signature Algorithm: sha256WithRSAEncryption 5b:b6:51:0c:c2:b0:98:dc:90:20:16:94:98:a5:c3:35:27:1d: f8:f5:ad:3a:d3:55:64:76:13:43:a4:6c:da:1f:81:f6:ec:2b: b2:66:55:6f:6d:97:91:34:75:86:1f:a3:ab:a5:6a:f9:5b:60: cb:dd:17:02:69:39:c6:bf:03:99:2c:61:85:f1:5a:ed:60:b6: f3:8e:d6:0b:be:2f:94:0b:d5:0e:e7:9f:e2:52:4c:d4:51:ed: 8a:41:45:de:37:33:c8:91:09:ed:72:6c:45:fa:f8:f9:44:d1: 3b:8e:11:6a:42:65:02:52:ce:fc:8f:45:b3:53:b5:34:c5:8c: 07:a0:95:8f:a0:ca:e7:ec:1c:99:28:bf:4d:f6:04:c8:5c:a9: c0:01:8e:c1:5a:3d:92:6e:0c:96:f3:d2:14:1f:17:a8:a0:86: 51:25:7d:a9:3e:5f:90:ab:4b:51:fc:6a:0e:15:0c:71:02:45: a6:5b:60:ae:4b:ec:f6:97:71:9b:ab:68:94:72:ee:6c:ef:98: 7f:11:a2:2e:fd:a0:19:f1:68:46:2e:0c:d3:93:10:f1:d7:1c: 38:86:5d:2d:22:97:ea:8a:42:e0:d8:a1:23:0f:5e:86:e2:f3: 1d:a6:75:25:15:78:ba:c6:cc:66:4c:e2:e6:78:75:63:6c:e3: ac:03:c3:5d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUD8PKztUTWsyvfTM3DMqIMpAGUkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMTkxNzM3MTVaFw0yNjExMTgxNzQyMTVaMDMxMTAvBgNV BAMTKEUwRjUwNEFEQzdENjlEQkVGMEU2QTIxNkVDRTMyRDI3NTVCREUyMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG99Wf8S1QEyWNn792IrnCu88J Euvf9Rb2tD5mS3LH2BM1UwhX9Gfra32XJLESCwvWoNFM6zSUjCkLqtMp2lxPdO3D TQa/UBub5I2i/xATMjhGZylnrxiJDfGimz0CuoFxBhnTwtiyi/e3qhizbny3R+CS umPvmd+JbnKNwEucMR/dfahCpDvc5X9YVGZmavjBsxldEkWCvMENqrilBYmvxFeX bm7A7qJUnxHdLlG7eociYVqBxUZ6Pylbf1EFPhh1snzbg6gA+7cx2n2Mq3rn6M1R IDPAdrjOkDm0PjUdRMtA6AL3j8gAFzZAze5ya2rXi58wDAd63bFdCr8bn2YJAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU4PUErcfWnb7w5qIW7OMtJ1W94hEwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTM0 MzgyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzNDMwMzAzMjMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD 2dgwMA0GCSqGSIb3DQEBCwUAA4IBAQBbtlEMwrCY3JAgFpSYpcM1Jx349a0601Vk dhNDpGzaH4H27CuyZlVvbZeRNHWGH6OrpWr5W2DL3RcCaTnGvwOZLGGF8VrtYLbz jtYLvi+UC9UO55/iUkzUUe2KQUXeNzPIkQntcmxF+vj5RNE7jhFqQmUCUs78j0Wz U7U0xYwHoJWPoMrn7ByZKL9N9gTIXKnAAY7BWj2SbgyW89IUHxeooIZRJX2pPl+Q q0tR/GoOFQxxAkWmW2CuS+z2l3Gbq2iUcu5s75h/EaIu/aAZ8WhGLgzTkxDx1xw4 hl0tIpfqikLg2KEjD16G4vMdpnUlFXi6xsxmTOLmeHVjbOOsA8Nd -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:34 2025 by rpki-client