This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e35382e302f32332d3332203d3e20313431393935.roa File: 3231372e3231362e35382e302f32332d3332203d3e20313431393935.roa (raw, json) Hash identifier: w0ACTPcr4FdoDdNy3hViPquhmSdJDm0CGaThUl6BBu0= Subject key identifier: E9:EE:EE:13:01:28:F4:8B:E8:B7:13:BD:8E:4D:B2:48:CE:DF:F7:B6 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 57B6A3E87B1EE32B0DE076DDA5FE19EC7355D5CD Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e35382e302f32332d3332203d3e20313431393935.roa Signing time: Fri 28 Nov 2025 13:28:49 +0000 ROA not before: Fri 28 Nov 2025 13:23:49 +0000 ROA not after: Fri 27 Nov 2026 13:28:49 +0000 asID: 141995 IP address blocks: 217.216.58.0/23 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b6:a3:e8:7b:1e:e3:2b:0d:e0:76:dd:a5:fe:19:ec:73:55:d5:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 28 13:23:49 2025 GMT Not After : Nov 27 13:28:49 2026 GMT Subject: CN=E9EEEE130128F48BE8B713BD8E4DB248CEDFF7B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:77:8c:c3:d6:42:77:d9:fe:ad:b4:71:4a:aa: da:27:e8:6c:f4:80:fe:1e:47:a5:8e:93:d0:2e:22: a2:1c:9f:4a:87:fd:0b:00:63:4b:5b:3a:3f:dc:3b: 19:73:ee:13:66:f1:5e:4b:04:8f:b2:69:a7:98:dc: b0:a8:16:0a:33:4d:64:6e:1e:19:f5:1c:f5:ab:e3: 3d:d1:58:2e:47:7e:33:11:bc:48:d9:74:b9:b2:f2: 61:c0:ae:a8:2a:de:60:6e:74:9a:e1:ec:bc:56:88: 6f:a5:47:11:b6:1c:bd:3c:ac:70:73:8e:59:7d:82: 27:80:1a:4a:30:e2:9e:5a:0b:ac:e0:71:a0:69:c0: 11:aa:c3:4e:fe:af:85:ea:8e:8a:44:50:6a:94:b3: 95:7f:ac:68:0e:31:63:e1:f9:c5:8c:61:72:ae:b6: 46:50:82:a8:3a:d1:44:db:b4:bb:92:e4:91:67:f3: e7:11:c0:44:00:fd:c6:7c:c4:3f:85:39:4f:c7:99: 44:7e:63:f6:a8:60:81:e9:8f:2b:80:ba:6d:ff:ba: 06:30:fe:af:e8:10:41:f5:a7:59:e1:84:ef:3c:ba: 0c:71:aa:97:c2:2c:f5:36:4c:f9:4b:ba:5a:63:5d: 6b:58:39:b8:46:d1:50:3b:4e:9f:46:6c:4d:31:5b: a1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EE:EE:13:01:28:F4:8B:E8:B7:13:BD:8E:4D:B2:48:CE:DF:F7:B6 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e35382e302f32332d3332203d3e20313431393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.58.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:42:c3:b6:8b:f4:c0:9f:8a:d6:71:92:4a:c7:11:26:5d:fd: 22:4f:bb:06:70:d7:8c:15:8b:82:e9:7d:3e:75:0b:2f:b5:c9: 71:e9:8b:54:c3:9b:71:80:e0:35:96:c1:b3:00:39:93:11:6f: 5e:2e:56:44:c4:5a:2b:2e:32:78:e0:ac:8c:73:ac:54:ae:e4: a6:e9:f2:15:ec:e3:07:6f:03:09:11:aa:ca:7c:68:ab:0d:ff: 3e:41:84:b8:6a:f9:ba:68:34:24:e3:ce:d2:71:2d:fe:85:b9: db:72:ef:94:77:31:09:56:f4:9b:2f:72:20:18:af:0c:94:7c: 22:31:35:25:e4:f1:64:bc:54:cc:b7:2e:62:01:ec:cf:6d:8e: 36:aa:96:73:e9:8e:9e:95:f3:ef:2c:a7:5b:5b:f5:ab:fc:65: 7f:13:a0:73:56:cf:c0:6a:8e:20:7b:0d:01:cf:ce:e7:73:e5: c5:0d:5e:79:a4:81:5c:0f:a1:b1:9b:9a:ea:d8:ad:54:34:2b: 66:2b:4f:3e:31:da:0a:7c:0c:d2:25:8d:4f:67:28:b4:13:53: 00:94:34:0f:31:bc:77:a8:22:a8:9d:88:9d:b8:b3:c8:89:4f: 5f:5f:e8:5d:d4:94:4e:4b:e6:50:90:85:d9:a9:72:96:15:1a: 0e:05:6b:77 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUV7aj6Hse4ysN4Hbdpf4Z7HNV1c0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjgxMzIzNDlaFw0yNjExMjcxMzI4NDlaMDMxMTAvBgNV BAMTKEU5RUVFRTEzMDEyOEY0OEJFOEI3MTNCRDhFNERCMjQ4Q0VERkY3QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCud4zD1kJ32f6ttHFKqton6Gz0 gP4eR6WOk9AuIqIcn0qH/QsAY0tbOj/cOxlz7hNm8V5LBI+yaaeY3LCoFgozTWRu Hhn1HPWr4z3RWC5HfjMRvEjZdLmy8mHArqgq3mBudJrh7LxWiG+lRxG2HL08rHBz jll9gieAGkow4p5aC6zgcaBpwBGqw07+r4XqjopEUGqUs5V/rGgOMWPh+cWMYXKu tkZQgqg60UTbtLuS5JFn8+cRwEQA/cZ8xD+FOU/HmUR+Y/aoYIHpjyuAum3/ugYw /q/oEEH1p1nhhO88ugxxqpfCLPU2TPlLulpjXWtYObhG0VA7Tp9GbE0xW6EvAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU6e7uEwEo9IvotxO9jk2ySM7f97YwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTM1 MzgyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMTM0MzEzOTM5MzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHZ2DowDQYJKoZIhvcNAQELBQADggEBAD1Cw7aL9MCfitZxkkrHESZd/SJPuwZw 14wVi4LpfT51Cy+1yXHpi1TDm3GA4DWWwbMAOZMRb14uVkTEWisuMnjgrIxzrFSu 5Kbp8hXs4wdvAwkRqsp8aKsN/z5BhLhq+bpoNCTjztJxLf6Fudty75R3MQlW9Jsv ciAYrwyUfCIxNSXk8WS8VMy3LmIB7M9tjjaqlnPpjp6V8+8sp1tb9av8ZX8ToHNW z8BqjiB7DQHPzudz5cUNXnmkgVwPobGbmurYrVQ0K2YrTz4x2gp8DNIljU9nKLQT UwCUNA8xvHeoIqidiJ24s8iJT19f6F3UlE5L5lCQhdmpcpYVGg4Fa3c= -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:23 2025 by rpki-client