This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e37302e302f32342d3234203d3e20323134313535.roa File: 3231372e3231362e37302e302f32342d3234203d3e20323134313535.roa (raw, json) Hash identifier: xdF6OszXHgPEhAz6zXQkZ6d8ZepVVcmH/TBGmThFYYo= Subject key identifier: AB:EB:BC:B4:D9:A4:8E:F8:9A:0C:F7:C2:FC:71:8B:A8:C2:EF:3B:67 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 5E16C0EC8858B93A0F196C2F0B2ACCCE0B6FB1B9 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e37302e302f32342d3234203d3e20323134313535.roa Signing time: Wed 12 Nov 2025 16:03:36 +0000 ROA not before: Wed 12 Nov 2025 15:58:36 +0000 ROA not after: Wed 11 Nov 2026 16:03:36 +0000 asID: 214155 IP address blocks: 217.216.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:16:c0:ec:88:58:b9:3a:0f:19:6c:2f:0b:2a:cc:ce:0b:6f:b1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 12 15:58:36 2025 GMT Not After : Nov 11 16:03:36 2026 GMT Subject: CN=ABEBBCB4D9A48EF89A0CF7C2FC718BA8C2EF3B67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c4:48:bd:a2:da:ed:e9:6a:be:c3:20:32:37: f2:48:52:7f:4c:d3:01:2c:77:a4:14:56:d7:80:27: 2c:74:51:5d:7d:b9:b3:d3:40:77:bd:77:7e:83:30: 41:b4:18:ae:79:c3:bd:4f:4a:35:76:ad:83:7b:86: be:f5:c8:02:12:de:2d:67:52:66:d7:d4:a4:04:f8: d3:af:ca:32:e2:80:47:82:a0:4c:76:d8:7e:01:48: 97:47:79:32:c0:8e:88:87:43:84:d4:76:e7:42:48: 08:74:47:c0:bc:79:14:d9:d1:c1:fb:34:67:f0:e9: 50:3c:36:ae:c9:1a:73:99:a5:25:af:6d:7e:40:55: 07:02:f7:ea:89:d9:41:4b:47:a7:6a:81:aa:9e:63: 1f:7d:a3:ee:97:07:98:3d:9d:83:51:57:bd:46:d4: d2:5f:72:2e:5d:79:22:a0:9f:6f:f6:97:48:b3:8a: 3f:b1:3b:7a:ee:03:03:8a:da:ec:b5:cf:dc:c4:40: 55:02:b4:53:3d:f9:7e:f1:e2:c6:44:e9:f0:d9:ce: 2b:35:88:cd:44:49:40:a1:27:b3:43:69:ec:f8:ee: 21:d5:b1:ed:60:df:48:c5:43:c5:9b:a1:40:c2:b1: 88:d1:dd:46:31:48:c9:89:5b:8f:77:16:5d:84:42: 2c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EB:BC:B4:D9:A4:8E:F8:9A:0C:F7:C2:FC:71:8B:A8:C2:EF:3B:67 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e37302e302f32342d3234203d3e20323134313535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.70.0/24 Signature Algorithm: sha256WithRSAEncryption 80:a0:fd:f0:17:49:b1:67:78:b2:17:2b:ec:54:16:fc:06:be: 05:71:d0:95:09:f9:1d:82:f8:bd:25:f5:cc:df:ca:84:a5:e7: f1:f3:33:a3:36:ac:e3:a6:0c:45:59:b0:eb:99:7a:49:78:c6: 51:0f:f9:39:14:4a:e1:59:f8:55:c9:fb:30:7e:2e:d5:08:30: 54:aa:86:c2:0e:c4:28:66:a4:5e:ec:a8:8d:66:a0:56:b0:ab: a3:91:06:1c:b0:6e:72:2d:a7:eb:01:c8:71:63:a8:48:00:e5: 51:96:fb:df:b2:df:8a:2b:59:b1:5d:85:bc:01:65:2d:73:4a: c1:7d:4a:00:ab:6f:df:48:79:74:97:1c:4a:f9:60:23:0a:13: f4:c2:f2:0c:9e:d0:20:1b:22:48:64:52:dc:dd:9a:20:6f:4b: b7:59:ec:34:b6:19:26:97:fd:cd:65:27:7c:ed:9c:12:ea:78: 41:f4:3c:4f:2e:8c:9c:f5:d5:34:2e:87:78:b7:ab:3d:eb:bd: a1:fa:03:03:28:69:73:df:ad:7a:27:92:86:3a:b5:35:87:17: 08:73:7b:0f:fa:fd:e0:f4:35:a8:56:3d:09:bd:a4:af:79:e5: 1d:87:29:aa:d7:96:57:f2:97:b6:6a:4e:c6:63:fb:af:5e:8a: 5a:85:0e:6e -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUXhbA7IhYuToPGWwvCyrMzgtvsbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMTIxNTU4MzZaFw0yNjExMTExNjAzMzZaMDMxMTAvBgNV BAMTKEFCRUJCQ0I0RDlBNDhFRjg5QTBDRjdDMkZDNzE4QkE4QzJFRjNCNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOxEi9otrt6Wq+wyAyN/JIUn9M 0wEsd6QUVteAJyx0UV19ubPTQHe9d36DMEG0GK55w71PSjV2rYN7hr71yAIS3i1n UmbX1KQE+NOvyjLigEeCoEx22H4BSJdHeTLAjoiHQ4TUdudCSAh0R8C8eRTZ0cH7 NGfw6VA8Nq7JGnOZpSWvbX5AVQcC9+qJ2UFLR6dqgaqeYx99o+6XB5g9nYNRV71G 1NJfci5deSKgn2/2l0izij+xO3ruAwOK2uy1z9zEQFUCtFM9+X7x4sZE6fDZzis1 iM1ESUChJ7NDaez47iHVse1g30jFQ8WboUDCsYjR3UYxSMmJW493Fl2EQizpAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUq+u8tNmkjviaDPfC/HGLqMLvO2cwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTM3 MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzQzMTM1MzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADZ2EYwDQYJKoZIhvcNAQELBQADggEBAICg/fAXSbFneLIXK+xUFvwGvgVx0JUJ +R2C+L0l9czfyoSl5/HzM6M2rOOmDEVZsOuZekl4xlEP+TkUSuFZ+FXJ+zB+LtUI MFSqhsIOxChmpF7sqI1moFawq6ORBhywbnItp+sByHFjqEgA5VGW+9+y34orWbFd hbwBZS1zSsF9SgCrb99IeXSXHEr5YCMKE/TC8gye0CAbIkhkUtzdmiBvS7dZ7DS2 GSaX/c1lJ3ztnBLqeEH0PE8ujJz11TQuh3i3qz3rvaH6AwMoaXPfrXonkoY6tTWH Fwhzew/6/eD0NahWPQm9pK955R2HKarXllfyl7ZqTsZj+69eilqFDm4= -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:28 2025 by rpki-client