This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e37382e302f32332d3332203d3e20313431393935.roa File: 3231372e3231362e37382e302f32332d3332203d3e20313431393935.roa (raw, json) Hash identifier: MbatiiLAUp0Bm7UEwJnAuCKsaXcZD7Lq1tG8z51Fkdw= Subject key identifier: 64:14:E4:1B:5E:AB:8A:F6:77:27:1D:F0:69:AF:32:23:F2:81:7D:97 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 12AF39D140DEC10297CA36C2327F075D8ECAB78B Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e37382e302f32332d3332203d3e20313431393935.roa Signing time: Wed 05 Nov 2025 12:58:13 +0000 ROA not before: Wed 05 Nov 2025 12:53:13 +0000 ROA not after: Wed 04 Nov 2026 12:58:13 +0000 asID: 141995 IP address blocks: 217.216.78.0/23 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:af:39:d1:40:de:c1:02:97:ca:36:c2:32:7f:07:5d:8e:ca:b7:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 5 12:53:13 2025 GMT Not After : Nov 4 12:58:13 2026 GMT Subject: CN=6414E41B5EAB8AF677271DF069AF3223F2817D97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e9:89:86:91:d2:9f:02:6f:24:b3:91:af:9a: 85:0c:7d:8b:9c:79:11:cc:ce:2a:9c:3f:c8:22:9e: 1b:56:90:f4:31:13:72:92:73:d4:c3:c9:42:cd:d5: 25:18:d2:0b:3c:2b:13:4d:00:7f:5d:74:86:4a:b2: 4a:de:2a:d5:47:d8:a3:46:b3:18:4a:97:ca:7e:13: a9:c6:4d:35:f8:1a:26:b9:90:35:00:2f:b6:4f:d4: 19:e2:66:c0:61:46:a0:6c:be:73:c0:cb:f8:78:a8: a7:01:e2:56:1d:df:9f:1e:87:96:3d:06:11:87:f8: 21:9f:4a:05:08:75:d0:ba:6e:65:9e:16:47:86:ab: 10:79:ad:7e:bc:d7:14:88:e5:49:15:e5:d5:32:e7: d8:3e:a7:be:83:f7:bc:aa:f7:a2:85:df:05:d6:54: f0:b4:e2:04:60:f9:45:bb:1b:d3:d8:b1:b2:fe:0d: 94:4f:32:09:49:2c:f0:45:52:c1:9a:1b:c9:64:b2: c9:d5:b6:d7:1e:fc:af:8e:fa:43:e4:fc:29:f2:2a: 98:c5:fd:2b:8d:4a:79:44:5e:d0:e7:e5:8c:a4:be: 11:4e:06:ba:80:a7:11:cd:2e:48:f5:88:4e:5e:14: a1:e1:b1:39:7b:8d:f5:71:a0:f6:22:da:cb:0a:17: db:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:14:E4:1B:5E:AB:8A:F6:77:27:1D:F0:69:AF:32:23:F2:81:7D:97 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e37382e302f32332d3332203d3e20313431393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.216.78.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:29:fc:cb:63:82:22:0c:d9:9d:ba:3b:7c:07:61:0a:79:3e: 01:e6:c6:a4:12:64:42:00:7b:01:71:cf:f7:65:2e:7b:e8:a3: cf:1c:75:76:54:e8:1f:9e:55:fe:fb:19:3f:24:98:d2:30:ef: 59:2d:9e:73:04:be:a6:7c:1e:30:8e:31:ee:24:f6:59:02:e2: a1:2e:09:37:e3:ab:f4:20:fa:e3:83:ac:a1:54:2b:bc:c9:85: e1:6f:39:90:03:7e:df:b5:45:5d:b8:14:63:fa:e9:64:f2:2c: 07:bb:bb:c5:13:a2:bd:89:67:65:05:39:02:cb:cf:68:ce:e8: a4:b5:c9:83:40:b8:d1:10:48:c5:6c:06:89:96:96:d2:3f:ef: a1:57:98:2e:9a:65:b2:94:d5:c5:01:6b:24:25:5e:28:1e:e8: ef:3a:25:d5:d3:c6:27:61:54:0d:fb:92:9a:d6:bb:24:06:72: e6:63:b8:2d:c7:a5:50:40:74:74:dc:39:db:bf:db:9b:6a:2b: 60:85:fb:28:73:ce:6c:1d:ba:d5:28:dc:41:f3:23:57:9e:a0: c3:ba:bc:95:1e:df:be:bb:bf:fd:83:e6:a2:72:a8:1b:79:5f: 02:51:b3:aa:98:ab:aa:92:5d:e0:1b:de:0b:f9:38:30:7b:48: 86:02:e6:80 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUEq850UDewQKXyjbCMn8HXY7Kt4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMDUxMjUzMTNaFw0yNjExMDQxMjU4MTNaMDMxMTAvBgNV BAMTKDY0MTRFNDFCNUVBQjhBRjY3NzI3MURGMDY5QUYzMjIzRjI4MTdEOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL6YmGkdKfAm8ks5GvmoUMfYuc eRHMziqcP8ginhtWkPQxE3KSc9TDyULN1SUY0gs8KxNNAH9ddIZKskreKtVH2KNG sxhKl8p+E6nGTTX4Gia5kDUAL7ZP1BniZsBhRqBsvnPAy/h4qKcB4lYd358eh5Y9 BhGH+CGfSgUIddC6bmWeFkeGqxB5rX681xSI5UkV5dUy59g+p76D97yq96KF3wXW VPC04gRg+UW7G9PYsbL+DZRPMglJLPBFUsGaG8lkssnVttce/K+O+kPk/CnyKpjF /SuNSnlEXtDn5YykvhFOBrqApxHNLkj1iE5eFKHhsTl7jfVxoPYi2ssKF9t/AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUZBTkG16rivZ3Jx3waa8yI/KBfZcwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTM3 MzgyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMTM0MzEzOTM5MzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHZ2E4wDQYJKoZIhvcNAQELBQADggEBAJop/MtjgiIM2Z26O3wHYQp5PgHmxqQS ZEIAewFxz/dlLnvoo88cdXZU6B+eVf77GT8kmNIw71ktnnMEvqZ8HjCOMe4k9lkC 4qEuCTfjq/Qg+uODrKFUK7zJheFvOZADft+1RV24FGP66WTyLAe7u8UTor2JZ2UF OQLLz2jO6KS1yYNAuNEQSMVsBomWltI/76FXmC6aZbKU1cUBayQlXige6O86JdXT xidhVA37kprWuyQGcuZjuC3HpVBAdHTcOdu/25tqK2CF+yhzzmwdutUo3EHzI1ee oMO6vJUe3767v/2D5qJyqBt5XwJRs6qYq6qSXeAb3gv5ODB7SIYC5oA= -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:26 2025 by rpki-client