This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36382e302f32342d3234203d3e20323037313337.roa File: 3231372e3231362e36382e302f32342d3234203d3e20323037313337.roa (raw, json) Hash identifier: pt7tqHTeyKrhQirYq2a0eDuKGs72Z+JJ8DF6s2fcWC8= Subject key identifier: D6:A4:29:17:47:4E:69:F7:1C:53:AD:2F:ED:EA:AE:FF:9C:77:3C:4F Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 61265EF7010AEED239817AF4DA2FA4BDE91C1C20 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36382e302f32342d3234203d3e20323037313337.roa Signing time: Wed 12 Nov 2025 16:02:34 +0000 ROA not before: Wed 12 Nov 2025 15:57:34 +0000 ROA not after: Wed 11 Nov 2026 16:02:34 +0000 asID: 207137 IP address blocks: 217.216.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:26:5e:f7:01:0a:ee:d2:39:81:7a:f4:da:2f:a4:bd:e9:1c:1c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 12 15:57:34 2025 GMT Not After : Nov 11 16:02:34 2026 GMT Subject: CN=D6A42917474E69F71C53AD2FEDEAAEFF9C773C4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d1:25:ae:a5:79:20:4a:48:4c:ad:b3:b4:25: be:84:23:47:93:99:42:7e:a5:8b:a6:e6:0b:e4:6e: 0a:d7:57:32:86:2c:05:ca:81:53:b2:38:03:a6:1b: 19:cd:6b:cb:6b:3e:cb:12:5e:87:e4:de:21:25:22: 24:23:85:f9:a4:79:f3:08:f3:b8:80:00:2b:eb:3d: 42:f9:2f:ce:ce:9b:47:8e:d2:a9:8c:31:de:98:ca: c0:3f:bd:b9:92:db:e1:90:a4:21:be:2f:e2:db:61: df:45:fc:71:58:d8:ad:16:cc:cc:35:9d:fe:d2:d3: 07:ef:df:39:88:42:c9:08:e8:ce:31:c3:18:b7:be: 0f:9f:a6:f9:5b:12:c2:f5:b7:4d:df:08:ff:65:f3: ba:60:c3:cc:2a:38:25:d0:82:17:06:89:c1:d7:fe: 4e:23:c5:99:18:12:51:fb:bd:1c:6d:f6:6a:8b:a0: 3c:fc:30:c5:cf:14:82:74:b7:77:0f:31:e7:14:75: 39:77:6b:7c:50:99:50:3b:bd:39:fb:c4:bd:d6:27: df:e9:00:89:88:04:20:5b:5b:3d:45:dc:1a:0e:4d: f1:36:a3:f5:52:49:19:76:7e:3f:61:d6:94:73:58: 8a:ec:7e:4c:87:6a:77:78:b9:d0:64:81:ca:0e:75: ba:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A4:29:17:47:4E:69:F7:1C:53:AD:2F:ED:EA:AE:FF:9C:77:3C:4F X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36382e302f32342d3234203d3e20323037313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.68.0/24 Signature Algorithm: sha256WithRSAEncryption 53:2d:d5:ba:46:36:12:45:be:d9:8b:2b:42:04:83:e1:e9:b3: 63:87:7f:df:2a:1a:6e:54:a6:18:c7:69:e6:3b:35:80:a4:8a: 0e:03:4b:08:e6:36:a9:23:45:6f:9c:e9:5a:64:62:81:eb:ea: 72:33:1f:01:e0:cb:6c:8f:8a:c3:33:1c:9f:2a:ef:61:47:a9: f5:1b:02:11:1f:12:e8:eb:32:99:08:f7:c3:0b:52:b3:bd:d2: da:bf:2e:27:32:b3:43:35:b7:70:f7:ea:e6:4f:75:ee:2b:9f: 16:0e:8d:f7:e2:84:e3:73:39:5d:bc:58:06:10:b3:3d:48:f6: 23:65:6b:0f:7d:f6:c2:5f:f9:b8:d0:3f:b9:00:96:95:ca:9a: b0:88:f2:c5:4e:b6:82:4b:1a:86:dd:ec:3c:c6:03:6b:70:d9: 48:ce:c4:00:12:98:9a:0c:5d:16:e7:92:a3:d4:45:78:3c:18: 5e:4a:54:bc:ab:d9:c7:b7:72:77:6e:7a:3f:75:04:e3:cf:d6: 94:b9:02:87:9e:4d:f8:29:68:4d:3a:95:ad:b9:fe:f7:10:3f: 98:76:60:c8:d4:0c:e9:4b:14:31:76:47:c4:35:7d:d5:34:4c: 43:95:0f:1c:9a:57:a9:43:96:ec:88:5b:82:c3:bc:2a:66:67: 3d:f8:16:7d -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUYSZe9wEK7tI5gXr02i+kvekcHCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMTIxNTU3MzRaFw0yNjExMTExNjAyMzRaMDMxMTAvBgNV BAMTKEQ2QTQyOTE3NDc0RTY5RjcxQzUzQUQyRkVERUFBRUZGOUM3NzNDNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC60SWupXkgSkhMrbO0Jb6EI0eT mUJ+pYum5gvkbgrXVzKGLAXKgVOyOAOmGxnNa8trPssSXofk3iElIiQjhfmkefMI 87iAACvrPUL5L87Om0eO0qmMMd6YysA/vbmS2+GQpCG+L+LbYd9F/HFY2K0WzMw1 nf7S0wfv3zmIQskI6M4xwxi3vg+fpvlbEsL1t03fCP9l87pgw8wqOCXQghcGicHX /k4jxZkYElH7vRxt9mqLoDz8MMXPFIJ0t3cPMecUdTl3a3xQmVA7vTn7xL3WJ9/p AImIBCBbWz1F3BoOTfE2o/VSSRl2fj9h1pRzWIrsfkyHand4udBkgcoOdborAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU1qQpF0dOafccU60v7equ/5x3PE8wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTM2 MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzczMTMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADZ2EQwDQYJKoZIhvcNAQELBQADggEBAFMt1bpGNhJFvtmLK0IEg+Hps2OHf98q Gm5UphjHaeY7NYCkig4DSwjmNqkjRW+c6VpkYoHr6nIzHwHgy2yPisMzHJ8q72FH qfUbAhEfEujrMpkI98MLUrO90tq/Licys0M1t3D36uZPde4rnxYOjffihONzOV28 WAYQsz1I9iNlaw999sJf+bjQP7kAlpXKmrCI8sVOtoJLGobd7DzGA2tw2UjOxAAS mJoMXRbnkqPURXg8GF5KVLyr2ce3cnduej91BOPP1pS5AoeeTfgpaE06la25/vcQ P5h2YMjUDOlLFDF2R8Q1fdU0TEOVDxyaV6lDluyIW4LDvCpmZz34Fn0= -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:26 2025 by rpki-client