This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36392e302f32342d3234203d3e20323037313337.roa File: 3231372e3231362e36392e302f32342d3234203d3e20323037313337.roa (raw, json) Hash identifier: BYXsua4x+dOhILzNT0qhYdzvLzPEPZkUcrrBJTSM2Ig= Subject key identifier: 96:EB:A1:DB:F8:0D:26:B6:AE:AA:E2:66:ED:44:1B:D1:C0:B9:8A:71 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 5946AD8C4D24A7E6FDA86C0B4E8EE175168F822C Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36392e302f32342d3234203d3e20323037313337.roa Signing time: Wed 12 Nov 2025 16:02:57 +0000 ROA not before: Wed 12 Nov 2025 15:57:57 +0000 ROA not after: Wed 11 Nov 2026 16:02:57 +0000 asID: 207137 IP address blocks: 217.216.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:46:ad:8c:4d:24:a7:e6:fd:a8:6c:0b:4e:8e:e1:75:16:8f:82:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 12 15:57:57 2025 GMT Not After : Nov 11 16:02:57 2026 GMT Subject: CN=96EBA1DBF80D26B6AEAAE266ED441BD1C0B98A71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:71:5b:ce:8c:93:13:e5:ca:70:dd:9b:8a:3a: b3:b9:0d:36:6e:ab:fb:31:ca:13:e1:82:74:84:96: ee:37:78:d1:4e:27:b9:f3:21:eb:1f:df:ba:1b:91: 62:17:4b:98:68:58:3d:5a:e9:ea:0d:23:0e:28:d9: 53:04:a9:63:f5:4b:37:68:28:9c:b1:85:61:04:4b: f0:9e:4c:5d:93:01:8c:bf:19:49:10:bd:71:6d:c6: fa:dc:d4:dc:ee:4a:2d:b8:4b:8d:f3:b7:9e:7f:aa: 70:ee:54:f9:64:85:f2:27:0a:a5:e4:8a:47:60:68: ea:9a:c1:38:f5:57:63:00:29:bb:4d:ed:6b:d3:3f: 02:bd:fb:42:7e:b2:c6:c5:d6:0f:03:88:31:cf:52: dd:79:18:2a:0b:63:1f:86:37:73:83:8a:63:83:ce: 5a:3d:ba:58:0f:e8:ca:fd:32:c7:d7:d6:ab:69:76: 01:04:a7:63:94:7a:24:38:be:a6:cf:40:6d:e3:e5: 76:22:a1:c5:4d:45:a0:83:05:32:3f:9f:72:52:8a: 74:7c:98:dd:5b:21:3d:5e:2c:36:9e:81:ec:4c:59: c7:1a:3b:a5:1d:d3:d3:63:9a:59:2b:bc:dd:74:16: b8:d1:6a:89:99:fe:9c:ec:69:50:d5:99:ae:99:b7: b7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EB:A1:DB:F8:0D:26:B6:AE:AA:E2:66:ED:44:1B:D1:C0:B9:8A:71 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36392e302f32342d3234203d3e20323037313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.69.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:ae:71:e1:b7:90:5d:14:0c:91:25:52:32:b9:3e:a8:ef:b6: c5:6e:19:54:08:09:92:ec:a4:00:4a:6a:87:65:57:ad:be:6b: f6:bb:3f:94:4f:19:33:07:35:3c:3b:e7:91:aa:67:25:2a:4e: e2:91:7f:e8:e2:74:c3:da:cf:e9:b6:b6:a7:5e:68:3c:9f:45: 26:3b:c3:89:9e:62:1a:ab:7b:05:d7:bf:be:82:01:cd:c1:5d: bb:49:bc:59:40:9e:a8:f0:32:2b:0f:fb:4c:73:19:be:bc:89: cb:6f:ba:4e:2f:3b:cf:90:38:e2:d5:a2:1e:12:4a:32:7f:dc: ba:3b:d3:cc:62:11:3b:c0:cd:70:0b:72:cd:84:cc:18:83:5b: ac:0f:bb:80:6a:4a:03:07:07:46:ea:c0:b0:77:ab:9a:39:cb: 88:76:38:74:aa:b0:35:ce:d2:e5:49:75:c7:46:ed:d1:33:04: 13:d6:ed:0a:98:ed:7b:78:a1:d8:94:aa:71:f4:7f:21:8b:ec: b1:6e:03:80:a4:7e:e8:4e:6d:7e:11:89:c2:56:b8:d7:63:cd: a6:c4:b9:86:c2:11:18:e9:22:a5:3a:f5:66:50:7f:fd:c7:65: 97:f9:2d:b8:84:08:3d:d2:de:a1:53:c4:55:06:f5:e7:f9:e2: b2:dc:0e:30 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUWUatjE0kp+b9qGwLTo7hdRaPgiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMTIxNTU3NTdaFw0yNjExMTExNjAyNTdaMDMxMTAvBgNV BAMTKDk2RUJBMURCRjgwRDI2QjZBRUFBRTI2NkVENDQxQkQxQzBCOThBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5cVvOjJMT5cpw3ZuKOrO5DTZu q/sxyhPhgnSElu43eNFOJ7nzIesf37obkWIXS5hoWD1a6eoNIw4o2VMEqWP1Szdo KJyxhWEES/CeTF2TAYy/GUkQvXFtxvrc1NzuSi24S43zt55/qnDuVPlkhfInCqXk ikdgaOqawTj1V2MAKbtN7WvTPwK9+0J+ssbF1g8DiDHPUt15GCoLYx+GN3ODimOD zlo9ulgP6Mr9MsfX1qtpdgEEp2OUeiQ4vqbPQG3j5XYiocVNRaCDBTI/n3JSinR8 mN1bIT1eLDaegexMWccaO6Ud09NjmlkrvN10FrjRaomZ/pzsaVDVma6Zt7dPAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUluuh2/gNJrauquJm7UQb0cC5inEwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTM2 MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzczMTMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADZ2EUwDQYJKoZIhvcNAQELBQADggEBAJquceG3kF0UDJElUjK5PqjvtsVuGVQI CZLspABKaodlV62+a/a7P5RPGTMHNTw755GqZyUqTuKRf+jidMPaz+m2tqdeaDyf RSY7w4meYhqrewXXv76CAc3BXbtJvFlAnqjwMisP+0xzGb68ictvuk4vO8+QOOLV oh4SSjJ/3Lo708xiETvAzXALcs2EzBiDW6wPu4BqSgMHB0bqwLB3q5o5y4h2OHSq sDXO0uVJdcdG7dEzBBPW7QqY7Xt4odiUqnH0fyGL7LFuA4CkfuhObX4RicJWuNdj zabEuYbCERjpIqU69WZQf/3HZZf5LbiECD3S3qFTxFUG9ef54rLcDjA= -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:27 2025 by rpki-client