This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e35372e302f32342d3234203d3e20323033333830.roa File: 3231372e3231362e35372e302f32342d3234203d3e20323033333830.roa (raw, json) Hash identifier: Bfi5U2z4sXgqshbXgt95FJH5BRlFA5RijGWMp8++fUA= Subject key identifier: 39:39:D7:B8:02:74:50:B4:2B:90:EF:27:BB:A8:74:E9:92:1F:A9:1C Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 5102FE885457B55B885F00898818427625BFC2A3 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e35372e302f32342d3234203d3e20323033333830.roa Signing time: Tue 25 Nov 2025 10:47:30 +0000 ROA not before: Tue 25 Nov 2025 10:42:30 +0000 ROA not after: Tue 24 Nov 2026 10:47:30 +0000 asID: 203380 IP address blocks: 217.216.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:02:fe:88:54:57:b5:5b:88:5f:00:89:88:18:42:76:25:bf:c2:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 25 10:42:30 2025 GMT Not After : Nov 24 10:47:30 2026 GMT Subject: CN=3939D7B8027450B42B90EF27BBA874E9921FA91C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b5:37:c0:bd:67:28:cd:e7:86:74:bb:e0:c2: 64:38:1c:9f:54:5a:ca:fb:db:cc:21:23:2f:4c:02: 11:e3:cd:39:36:03:0a:20:70:5f:5d:ee:b6:0b:28: 99:b4:b1:1c:c5:df:9c:d1:91:84:7f:3b:f7:49:4d: 0b:2b:f6:e3:26:8a:28:b7:b2:45:c6:02:da:3e:42: bb:34:26:29:fb:12:71:77:f4:62:32:4b:28:e8:ea: c2:87:b5:fa:48:ee:c9:f4:50:fb:70:6f:30:a4:af: a7:f4:1b:c0:0c:2f:77:f9:6f:ab:46:52:d0:f8:12: 10:3b:e4:fa:bf:ae:2b:5c:da:1f:fc:d6:14:52:63: 55:ce:bc:9e:a6:e9:32:7c:88:ed:ee:e1:71:25:66: 52:34:8d:af:07:e6:4a:9d:28:71:24:dd:a9:3e:10: 47:4f:f1:5a:0a:25:9c:23:d8:70:33:07:75:a5:cb: 45:89:89:87:1b:3f:e3:87:ce:77:f7:6f:93:54:a1: 62:cf:9b:9a:39:43:18:d6:7d:02:bd:d6:74:cd:06: 15:4e:95:aa:f3:7f:58:86:f4:9c:7f:e6:a1:33:01: 24:d0:1a:d3:e8:91:a0:43:5d:45:73:88:d1:4a:a5: cf:23:c1:71:e9:c1:62:7a:fd:20:5f:76:83:9c:7a: 76:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:39:D7:B8:02:74:50:B4:2B:90:EF:27:BB:A8:74:E9:92:1F:A9:1C X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e35372e302f32342d3234203d3e20323033333830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.57.0/24 Signature Algorithm: sha256WithRSAEncryption 39:31:48:57:c0:0e:38:fd:29:3c:e7:39:73:e6:89:84:78:37: 62:6b:79:cb:57:3b:e9:6c:95:fe:28:3a:ea:f6:d0:56:46:69: 19:f7:9a:3f:79:08:36:ed:54:cf:98:eb:ec:68:c2:8c:cf:95: 67:5f:09:14:e5:5f:3a:0a:06:97:e6:e9:4e:b5:78:66:72:1b: 50:ed:5d:6e:17:72:fc:56:43:a2:ab:c8:d7:37:60:db:c3:9a: 12:e1:53:d4:95:4f:c0:2f:95:1d:f0:1b:9f:2a:38:51:3a:d5: e7:30:ce:c9:c1:1a:6e:40:5d:bd:86:ca:e3:1e:8d:5c:40:c9: 61:dd:f0:1f:b8:04:d8:bb:75:18:47:c0:fc:7c:da:40:85:e4: 79:bc:4c:35:32:22:56:f3:da:93:37:50:a9:d7:6c:22:92:5e: b6:37:34:5b:d7:51:8e:18:e4:b7:c1:32:ad:7a:74:d9:9d:83: a6:9c:f0:87:03:b5:03:de:b8:44:cb:67:6c:6f:e0:fe:6f:09: 98:a5:ef:c8:b4:eb:f5:43:93:f1:67:df:a6:78:fb:a5:a4:70: 40:59:5e:9e:53:15:63:93:b1:a1:44:a9:d3:0a:81:21:2f:6d: 11:5b:b2:be:01:d8:8d:dc:93:21:60:83:06:21:9d:e6:47:06: 01:86:77:ea -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUUQL+iFRXtVuIXwCJiBhCdiW/wqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjUxMDQyMzBaFw0yNjExMjQxMDQ3MzBaMDMxMTAvBgNV BAMTKDM5MzlEN0I4MDI3NDUwQjQyQjkwRUYyN0JCQTg3NEU5OTIxRkE5MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3tTfAvWcozeeGdLvgwmQ4HJ9U Wsr728whIy9MAhHjzTk2AwogcF9d7rYLKJm0sRzF35zRkYR/O/dJTQsr9uMmiii3 skXGAto+Qrs0Jin7EnF39GIySyjo6sKHtfpI7sn0UPtwbzCkr6f0G8AML3f5b6tG UtD4EhA75Pq/ritc2h/81hRSY1XOvJ6m6TJ8iO3u4XElZlI0ja8H5kqdKHEk3ak+ EEdP8VoKJZwj2HAzB3Wly0WJiYcbP+OHznf3b5NUoWLPm5o5QxjWfQK91nTNBhVO larzf1iG9Jx/5qEzASTQGtPokaBDXUVziNFKpc8jwXHpwWJ6/SBfdoOcenYzAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUOTnXuAJ0ULQrkO8nu6h06ZIfqRwwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTM1 MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzMzMzM4MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADZ2DkwDQYJKoZIhvcNAQELBQADggEBADkxSFfADjj9KTznOXPmiYR4N2JrectX O+lslf4oOur20FZGaRn3mj95CDbtVM+Y6+xowozPlWdfCRTlXzoKBpfm6U61eGZy G1DtXW4XcvxWQ6KryNc3YNvDmhLhU9SVT8AvlR3wG58qOFE61ecwzsnBGm5AXb2G yuMejVxAyWHd8B+4BNi7dRhHwPx82kCF5Hm8TDUyIlbz2pM3UKnXbCKSXrY3NFvX UY4Y5LfBMq16dNmdg6ac8IcDtQPeuETLZ2xv4P5vCZil78i06/VDk/Fn36Z4+6Wk cEBZXp5TFWOTsaFEqdMKgSEvbRFbsr4B2I3ckyFggwYhneZHBgGGd+o= -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:21 2025 by rpki-client