This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e37322e302f32322d3332203d3e20313431393935.roa File: 3231372e3231362e37322e302f32322d3332203d3e20313431393935.roa (raw, json) Hash identifier: QnOct5j+HRngrubbEZ7ui+4oxuL/ygzieeKBXz1NIfY= Subject key identifier: D4:41:AF:29:5C:95:1C:39:2E:53:8C:0B:A5:C6:F1:C2:AA:A3:D3:55 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 2ED7ECAA884A108C4B749D40CD06809A1A922654 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e37322e302f32322d3332203d3e20313431393935.roa Signing time: Wed 05 Nov 2025 12:57:56 +0000 ROA not before: Wed 05 Nov 2025 12:52:56 +0000 ROA not after: Wed 04 Nov 2026 12:57:56 +0000 asID: 141995 IP address blocks: 217.216.72.0/22 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d7:ec:aa:88:4a:10:8c:4b:74:9d:40:cd:06:80:9a:1a:92:26:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 5 12:52:56 2025 GMT Not After : Nov 4 12:57:56 2026 GMT Subject: CN=D441AF295C951C392E538C0BA5C6F1C2AAA3D355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:d7:5e:82:05:cf:40:e3:8f:03:c1:98:1d: ef:19:47:c8:8c:59:86:8d:a3:3c:04:a7:59:00:cd: b5:d9:4a:0d:88:91:6f:e9:62:28:44:19:fc:bc:38: c5:ab:95:c6:e4:cd:dc:7a:ff:c1:fc:64:76:77:e6: 5d:ad:78:b2:ca:5d:b3:d8:5a:6f:11:7e:15:c0:0e: d2:c4:3d:23:c8:da:df:bc:9e:df:ba:5a:30:ea:c2: dc:c3:c2:65:2d:02:be:88:58:10:a3:6e:c1:79:92: 91:21:c7:40:55:5f:58:a8:14:f5:96:2c:87:84:82: 10:ef:95:bc:02:b8:6f:19:0f:0c:15:d5:56:06:2f: 34:ec:61:ce:59:25:5f:23:85:d4:b1:b6:b1:db:6b: 9f:6e:86:69:2b:3a:7b:65:cd:90:36:b0:39:24:08: 77:55:a4:cc:e4:1f:83:b9:03:27:5c:3c:81:68:57: ef:4c:f8:7e:5b:be:bf:24:1c:71:79:ac:d9:72:54: ef:4a:7c:84:d4:ef:88:64:0b:65:c6:ec:9b:1b:30: 04:4c:de:bc:27:60:77:26:d8:3f:6f:5a:7e:d1:1a: a7:62:d4:72:27:26:bf:92:68:2f:2b:8c:da:57:da: bf:cb:50:81:72:66:26:4f:81:6f:8a:34:df:24:0b: 01:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:41:AF:29:5C:95:1C:39:2E:53:8C:0B:A5:C6:F1:C2:AA:A3:D3:55 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e37322e302f32322d3332203d3e20313431393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.72.0/22 Signature Algorithm: sha256WithRSAEncryption 62:51:59:23:11:33:c3:02:8b:b5:1b:f6:8b:4e:fb:c1:bd:2b: 46:49:f1:55:d6:1f:f5:70:9d:f0:c7:61:86:6e:fe:c4:50:23: e3:b3:e5:3d:69:3f:61:9b:51:52:93:46:96:91:ea:85:71:76: ad:7d:5c:75:5a:43:6f:7f:b0:e5:09:63:4d:5c:0b:f2:d3:d5: f9:63:4c:11:0f:d8:50:b5:aa:25:2e:ac:fd:53:e1:a8:9c:29: 49:4e:69:bd:e1:21:08:e7:e9:a6:61:a2:a3:e2:97:28:d3:a5: be:c7:ed:d7:6d:15:69:cb:78:c9:55:18:22:53:b5:52:20:7e: c2:02:95:12:a1:20:f4:87:97:bf:e4:0a:aa:64:f4:bc:50:d9: bd:07:0c:49:1f:91:e6:9a:d8:51:e9:13:58:41:c4:bf:2c:c0: 9a:6a:03:12:de:7c:dd:ee:ad:43:0c:05:03:01:f9:e9:01:68: ba:3d:74:a5:dc:4e:6c:d4:aa:af:94:91:1e:91:96:22:c1:12: fc:ab:4f:79:9e:0b:e2:e8:fc:27:96:92:dc:6e:9a:c8:dd:a0: b8:60:20:29:1f:a4:22:77:90:a4:04:51:9c:45:cc:d2:9a:32: 77:cc:96:f9:5d:9e:38:bf:a8:c5:23:21:d7:98:37:26:56:a5: 38:8b:bb:40 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIULtfsqohKEIxLdJ1AzQaAmhqSJlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMDUxMjUyNTZaFw0yNjExMDQxMjU3NTZaMDMxMTAvBgNV BAMTKEQ0NDFBRjI5NUM5NTFDMzkyRTUzOEMwQkE1QzZGMUMyQUFBM0QzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLtdeggXPQOOPA8GYHe8ZR8iM WYaNozwEp1kAzbXZSg2IkW/pYihEGfy8OMWrlcbkzdx6/8H8ZHZ35l2teLLKXbPY Wm8RfhXADtLEPSPI2t+8nt+6WjDqwtzDwmUtAr6IWBCjbsF5kpEhx0BVX1ioFPWW LIeEghDvlbwCuG8ZDwwV1VYGLzTsYc5ZJV8jhdSxtrHba59uhmkrOntlzZA2sDkk CHdVpMzkH4O5AydcPIFoV+9M+H5bvr8kHHF5rNlyVO9KfITU74hkC2XG7JsbMARM 3rwnYHcm2D9vWn7RGqdi1HInJr+SaC8rjNpX2r/LUIFyZiZPgW+KNN8kCwGvAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU1EGvKVyVHDkuU4wLpcbxwqqj01UwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTM3 MzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMTM0MzEzOTM5MzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BALZ2EgwDQYJKoZIhvcNAQELBQADggEBAGJRWSMRM8MCi7Ub9otO+8G9K0ZJ8VXW H/VwnfDHYYZu/sRQI+Oz5T1pP2GbUVKTRpaR6oVxdq19XHVaQ29/sOUJY01cC/LT 1fljTBEP2FC1qiUurP1T4aicKUlOab3hIQjn6aZhoqPilyjTpb7H7ddtFWnLeMlV GCJTtVIgfsIClRKhIPSHl7/kCqpk9LxQ2b0HDEkfkeaa2FHpE1hBxL8swJpqAxLe fN3urUMMBQMB+ekBaLo9dKXcTmzUqq+UkR6RliLBEvyrT3meC+Lo/CeWktxumsjd oLhgICkfpCJ3kKQEUZxFzNKaMnfMlvldnji/qMUjIdeYNyZWpTiLu0A= -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:22 2025 by rpki-client