This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e37362e302f32332d3332203d3e20313431393935.roa File: 3231372e3231362e37362e302f32332d3332203d3e20313431393935.roa (raw, json) Hash identifier: Y7sj45+tdMk2fJ63kx5ehQgg5OFVxrLmVjLcx6Gg9O8= Subject key identifier: 76:DE:54:26:86:E1:F8:B5:59:98:B2:3E:7B:94:EC:DD:16:60:C9:E0 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 50AE3FD08809E9C363058ED077ABDBC61851D41F Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e37362e302f32332d3332203d3e20313431393935.roa Signing time: Wed 05 Nov 2025 12:58:05 +0000 ROA not before: Wed 05 Nov 2025 12:53:05 +0000 ROA not after: Wed 04 Nov 2026 12:58:05 +0000 asID: 141995 IP address blocks: 217.216.76.0/23 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ae:3f:d0:88:09:e9:c3:63:05:8e:d0:77:ab:db:c6:18:51:d4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 5 12:53:05 2025 GMT Not After : Nov 4 12:58:05 2026 GMT Subject: CN=76DE542686E1F8B55998B23E7B94ECDD1660C9E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c8:5f:ac:85:57:cf:16:1b:54:02:97:04:a4: 6f:39:41:ae:1b:5b:69:55:28:70:2f:cc:b3:b4:a1: 58:b3:97:0a:2c:46:c5:ea:40:ff:e9:8d:08:8e:5b: e1:7b:c7:dc:78:d5:8b:42:1c:2d:b0:46:a3:6b:a5: 07:19:7c:8e:37:ff:15:e1:c2:22:90:a5:2b:ce:b1: 4f:be:99:8a:56:05:7e:a8:76:52:df:a9:1f:4a:7e: ca:83:86:81:78:41:5e:11:8a:e2:f9:e4:cb:15:a0: 8d:82:08:bc:04:bf:04:a1:08:28:bc:7f:f5:96:8a: a3:f8:d1:3b:ef:bb:54:a1:8f:8e:93:34:ea:49:77: 48:26:3a:cc:03:0a:16:2e:e9:52:81:be:6a:6f:35: d7:d5:f5:d2:38:da:06:c2:51:4e:ed:77:39:71:f5: fd:8a:f1:4c:40:92:2a:c7:27:1e:85:84:17:4f:1d: ab:cc:73:3f:0c:35:8e:88:48:56:75:c9:43:cd:2b: 89:51:4f:69:eb:4c:8d:61:4a:49:6a:fc:8e:30:c4: 6e:15:c0:77:49:dd:99:31:27:70:bb:75:9d:1c:68: 6e:4e:9e:61:bd:d6:86:02:27:1b:7c:82:f8:51:fe: 4d:e1:ab:a5:e4:1f:fa:f6:b2:a8:3b:ef:13:06:e5: f5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DE:54:26:86:E1:F8:B5:59:98:B2:3E:7B:94:EC:DD:16:60:C9:E0 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e37362e302f32332d3332203d3e20313431393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.76.0/23 Signature Algorithm: sha256WithRSAEncryption 02:d0:04:6c:82:a3:c9:e5:f7:52:2f:26:a7:1f:59:c1:05:a3: 72:f6:ce:34:d0:af:db:ea:f2:76:39:19:f9:a6:cb:2c:fb:e3: 70:a5:50:53:37:3c:11:f7:c6:f6:2b:d4:ca:95:e6:ef:b1:7b: 3e:87:80:22:51:af:2d:c4:dc:7a:46:ad:1a:60:08:32:b6:ce: 24:c3:c2:8f:7a:d8:fc:9d:5a:85:ff:76:1f:c2:9a:96:e1:cb: 27:f1:d6:c8:97:cb:c0:c7:90:a2:58:0c:ec:3f:8c:f2:4f:e3: fd:fb:45:f6:f7:df:a7:af:04:a4:4f:db:31:a4:ee:0b:d1:d9: 5c:ba:e1:c0:ef:19:91:9d:62:e6:62:ad:97:e0:e1:d6:8e:5d: a2:f7:b2:5b:12:40:87:be:95:52:d3:60:a7:f8:d1:7f:14:62: 0f:d0:5d:76:c2:85:d8:e6:b6:98:7b:af:b5:da:5e:15:a8:94: 45:72:5d:2c:75:3a:4c:ff:b2:05:db:69:26:bf:e8:97:0c:e3: 6d:a9:63:00:44:72:97:be:46:0d:19:1b:34:18:1e:d5:f4:90: f0:94:10:21:7a:38:ff:b4:b1:f9:29:a6:90:45:e2:47:71:46: 19:a5:06:2b:41:e0:de:c4:f3:3c:e2:b9:07:ba:d8:7c:56:76: 71:73:c8:dd -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUUK4/0IgJ6cNjBY7Qd6vbxhhR1B8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMDUxMjUzMDVaFw0yNjExMDQxMjU4MDVaMDMxMTAvBgNV BAMTKDc2REU1NDI2ODZFMUY4QjU1OTk4QjIzRTdCOTRFQ0REMTY2MEM5RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvyF+shVfPFhtUApcEpG85Qa4b W2lVKHAvzLO0oVizlwosRsXqQP/pjQiOW+F7x9x41YtCHC2wRqNrpQcZfI43/xXh wiKQpSvOsU++mYpWBX6odlLfqR9KfsqDhoF4QV4RiuL55MsVoI2CCLwEvwShCCi8 f/WWiqP40Tvvu1Shj46TNOpJd0gmOswDChYu6VKBvmpvNdfV9dI42gbCUU7tdzlx 9f2K8UxAkirHJx6FhBdPHavMcz8MNY6ISFZ1yUPNK4lRT2nrTI1hSklq/I4wxG4V wHdJ3ZkxJ3C7dZ0caG5OnmG91oYCJxt8gvhR/k3hq6XkH/r2sqg77xMG5fVrAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUdt5UJobh+LVZmLI+e5Ts3RZgyeAwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTM3 MzYyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMTM0MzEzOTM5MzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHZ2EwwDQYJKoZIhvcNAQELBQADggEBAALQBGyCo8nl91IvJqcfWcEFo3L2zjTQ r9vq8nY5Gfmmyyz743ClUFM3PBH3xvYr1MqV5u+xez6HgCJRry3E3HpGrRpgCDK2 ziTDwo962PydWoX/dh/Cmpbhyyfx1siXy8DHkKJYDOw/jPJP4/37Rfb336evBKRP 2zGk7gvR2Vy64cDvGZGdYuZirZfg4daOXaL3slsSQIe+lVLTYKf40X8UYg/QXXbC hdjmtph7r7XaXhWolEVyXSx1Okz/sgXbaSa/6JcM422pYwBEcpe+Rg0ZGzQYHtX0 kPCUECF6OP+0sfkpppBF4kdxRhmlBitB4N7E8zziuQe62HxWdnFzyN0= -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:27 2025 by rpki-client