This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36302e302f32342d3234203d3e20313336373837.roa File: 3231372e3231362e36302e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: Ifupjm7V3E78kZRhaNqOUIKCyUvC33w0wfoDQ7cHwSw= Subject key identifier: EC:9F:A4:FF:8D:5D:3E:F3:7C:8B:01:46:6D:17:71:74:B2:30:8C:D5 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 248F445069AE2B1B3706E2397FFC9BA9145BDB78 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36302e302f32342d3234203d3e20313336373837.roa Signing time: Fri 05 Dec 2025 14:32:40 +0000 ROA not before: Fri 05 Dec 2025 14:27:40 +0000 ROA not after: Fri 04 Dec 2026 14:32:40 +0000 asID: 136787 IP address blocks: 217.216.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8f:44:50:69:ae:2b:1b:37:06:e2:39:7f:fc:9b:a9:14:5b:db:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 5 14:27:40 2025 GMT Not After : Dec 4 14:32:40 2026 GMT Subject: CN=EC9FA4FF8D5D3EF37C8B01466D177174B2308CD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b4:62:c1:b3:61:5d:db:f3:b1:37:45:48:9f: fa:a3:fb:59:52:62:d4:f1:4e:ce:4d:07:c0:fb:5c: 85:cd:3c:2d:6c:24:f8:4c:6d:ce:a8:c2:57:5c:23: d0:7e:41:76:c8:55:47:c9:4c:0b:eb:bb:5c:71:e9: 9c:dc:ed:c0:2b:d6:e1:e8:77:81:c8:f2:e1:70:c1: 92:af:82:3b:22:b2:5d:be:d4:6b:b0:98:50:44:9b: 59:b3:a4:33:eb:f2:98:53:18:e4:a1:f8:d6:9f:b3: 58:92:4c:7c:f1:36:01:b6:56:86:0a:4c:e8:3e:3a: 38:63:bd:ea:71:de:a3:23:7c:d2:ba:84:51:c1:1b: fa:8a:63:04:3d:31:a1:53:f3:07:19:18:dd:79:19: fb:09:06:da:9d:92:6d:c7:7e:74:3d:e6:2e:72:a6: f5:04:a8:e9:76:12:25:23:5c:4a:cc:d0:4f:5c:de: 73:f9:50:b8:b3:39:71:1e:52:b7:56:44:a9:41:35: 13:2b:55:77:78:d0:0b:eb:ea:f2:22:54:dd:bb:40: c0:7b:a9:03:14:b9:fb:a3:6a:c4:5d:e8:b8:a9:a1: 09:76:d2:bf:29:7d:2e:76:bb:d5:d5:fd:88:75:ae: 33:16:6a:fe:9d:02:3f:b3:5d:64:6e:94:f5:e4:a1: 3b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9F:A4:FF:8D:5D:3E:F3:7C:8B:01:46:6D:17:71:74:B2:30:8C:D5 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36302e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.60.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:fb:18:d7:f1:7a:7f:8c:1e:40:83:64:fe:f9:48:ed:21:30: b6:4e:a1:eb:ee:7f:b5:08:f8:82:54:02:7b:47:ea:f2:37:a1: 64:01:ee:a9:1c:0c:95:3a:34:c8:fc:8b:6b:ff:26:42:75:a2: ba:c5:fd:ea:8f:8e:dc:12:80:19:0b:e3:66:d1:ea:05:5d:84: 67:08:44:10:64:06:7e:3c:37:dc:3f:e7:77:f7:a5:34:a5:ea: c4:b3:0b:74:7c:01:b2:b7:45:10:a6:99:a2:d4:a0:ae:b4:b5: 72:f1:8c:3a:3f:19:83:40:06:52:5a:fb:0f:f0:4e:81:c3:4a: 67:90:11:09:74:36:e2:e4:e8:7e:8e:6d:64:54:04:bd:b3:a5: 06:30:33:af:4f:c6:42:fa:46:14:0d:5f:6b:e7:94:af:56:2d: 65:72:5d:28:f5:be:6b:8a:38:49:d1:52:11:f6:f8:71:9b:e4: e9:43:74:28:02:88:ef:cc:ad:16:19:c5:18:38:65:72:11:25: fa:b4:10:ff:0a:bf:c3:17:60:74:5f:81:10:23:9b:65:07:76: a8:9f:0c:8f:11:11:09:81:d7:44:a8:79:b1:88:68:c3:b7:a5: f8:c2:12:89:ed:7a:51:e8:67:c4:6f:ea:7b:7e:6c:37:ac:04: ab:d4:85:19 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUJI9EUGmuKxs3BuI5f/ybqRRb23gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMDUxNDI3NDBaFw0yNjEyMDQxNDMyNDBaMDMxMTAvBgNV BAMTKEVDOUZBNEZGOEQ1RDNFRjM3QzhCMDE0NjZEMTc3MTc0QjIzMDhDRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjtGLBs2Fd2/OxN0VIn/qj+1lS YtTxTs5NB8D7XIXNPC1sJPhMbc6owldcI9B+QXbIVUfJTAvru1xx6Zzc7cAr1uHo d4HI8uFwwZKvgjsisl2+1GuwmFBEm1mzpDPr8phTGOSh+Nafs1iSTHzxNgG2VoYK TOg+Ojhjvepx3qMjfNK6hFHBG/qKYwQ9MaFT8wcZGN15GfsJBtqdkm3HfnQ95i5y pvUEqOl2EiUjXErM0E9c3nP5ULizOXEeUrdWRKlBNRMrVXd40Avr6vIiVN27QMB7 qQMUufujasRd6LipoQl20r8pfS52u9XV/Yh1rjMWav6dAj+zXWRulPXkoTtBAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU7J+k/41dPvN8iwFGbRdxdLIwjNUwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTM2 MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADZ2DwwDQYJKoZIhvcNAQELBQADggEBAI77GNfxen+MHkCDZP75SO0hMLZOoevu f7UI+IJUAntH6vI3oWQB7qkcDJU6NMj8i2v/JkJ1orrF/eqPjtwSgBkL42bR6gVd hGcIRBBkBn48N9w/53f3pTSl6sSzC3R8AbK3RRCmmaLUoK60tXLxjDo/GYNABlJa +w/wToHDSmeQEQl0NuLk6H6ObWRUBL2zpQYwM69PxkL6RhQNX2vnlK9WLWVyXSj1 vmuKOEnRUhH2+HGb5OlDdCgCiO/MrRYZxRg4ZXIRJfq0EP8Kv8MXYHRfgRAjm2UH dqifDI8REQmB10SoebGIaMO3pfjCEontelHoZ8Rv6nt+bDesBKvUhRk= -----END CERTIFICATE-----Generated at Sat Dec 6 22:48:03 2025 by rpki-client