This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32382e302f32342d3234203d3e20323033333830.roa File: 3231372e3231372e32382e302f32342d3234203d3e20323033333830.roa (raw, json) Hash identifier: zfWn6rX/VwnTcHhoY4+7wWoVJkeP32JDA0Qa1dIAtZU= Subject key identifier: 04:36:F7:5F:6A:D3:B2:10:33:C7:E8:99:A4:0B:C0:2C:A6:12:17:36 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 7BC5C963572F98EAEF7DBD244CB4F8D974CA36D3 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32382e302f32342d3234203d3e20323033333830.roa Signing time: Tue 25 Nov 2025 10:51:49 +0000 ROA not before: Tue 25 Nov 2025 10:46:49 +0000 ROA not after: Tue 24 Nov 2026 10:51:49 +0000 asID: 203380 IP address blocks: 217.217.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c5:c9:63:57:2f:98:ea:ef:7d:bd:24:4c:b4:f8:d9:74:ca:36:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 25 10:46:49 2025 GMT Not After : Nov 24 10:51:49 2026 GMT Subject: CN=0436F75F6AD3B21033C7E899A40BC02CA6121736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fd:d5:fa:c7:97:b3:81:bc:ad:ab:34:d7:d2: 7f:b1:20:0e:1a:09:0b:f0:3f:45:78:75:1e:4f:02: 08:ef:02:ae:39:7d:38:ca:64:f2:bb:f7:f3:04:f6: 7b:d9:b3:c0:df:e0:1e:b5:a8:6f:2d:3b:a6:04:5e: fd:67:61:b5:bc:65:96:c8:9f:f8:6f:98:a7:90:ad: 10:c9:13:b9:2a:62:f5:bb:77:57:2c:32:50:09:e5: 04:1c:51:38:05:76:ba:e7:25:66:d2:5c:45:23:07: 8a:fd:3b:33:27:3a:ab:c2:58:2a:2f:a0:31:f0:99: 7b:e6:32:90:41:e9:cf:21:6c:02:70:d4:26:35:95: 1a:e3:5a:22:59:0a:02:3c:61:8f:4d:36:57:39:ce: cc:60:ea:4e:41:33:57:a7:d2:0f:9c:03:40:83:a8: a3:e6:cc:9e:bb:ba:55:4c:69:04:b9:dc:07:ea:36: 42:4a:ae:a3:0c:e6:07:cb:20:47:3c:9d:f6:92:86: e1:08:e6:61:61:7b:55:9d:1a:c0:2f:f6:88:16:9c: 54:d2:be:19:cd:17:5d:72:c9:a0:91:ad:cb:9b:6f: ab:29:db:3d:a9:cd:8d:e8:70:a6:c0:bd:e1:8e:8e: 5c:c6:db:c3:3b:ce:88:15:6f:4c:61:1d:5c:04:23: 19:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:36:F7:5F:6A:D3:B2:10:33:C7:E8:99:A4:0B:C0:2C:A6:12:17:36 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32382e302f32342d3234203d3e20323033333830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.217.28.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:cc:1c:51:7b:f4:c5:bd:c9:48:ab:8c:9a:13:a8:b2:49:c9: f0:04:62:00:97:db:77:1e:6e:a4:3e:96:b7:ac:1b:86:cf:0a: 24:ec:6a:88:4d:7c:17:2d:4b:4d:03:c0:68:18:16:26:63:69: d0:ec:01:83:9f:cb:52:8b:69:9d:4c:ba:f2:62:eb:be:78:f7: fe:95:1d:07:10:d9:4b:05:b6:35:2d:0e:03:be:8b:96:e9:a2: a0:94:4b:20:eb:7f:f0:f9:e7:08:3a:45:3c:28:2c:96:10:86: b3:f2:d8:ce:68:12:8d:9e:ee:0a:52:ee:be:83:93:92:29:29: 53:62:aa:90:60:83:57:bd:08:24:f2:03:2a:64:1a:45:24:df: 04:04:31:3d:db:3a:71:3a:69:7e:3d:53:b9:17:17:31:d9:8d: 22:e0:88:8d:4a:66:41:da:c4:60:cf:a9:eb:ee:f5:2f:2f:fe: 8f:39:15:44:8d:6d:32:e9:19:6c:5f:0e:fd:82:5a:d0:25:5b: 9f:51:f7:de:52:a5:2e:3d:15:cc:9e:37:73:3d:d5:ba:14:4d: 5d:21:19:bd:01:e6:8d:98:d6:94:5f:d4:45:6e:b6:ec:70:f1: 66:f5:fd:7f:c9:f7:ea:13:30:de:f7:23:56:20:bb:a7:b2:70: 02:07:b8:b4 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUe8XJY1cvmOrvfb0kTLT42XTKNtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjUxMDQ2NDlaFw0yNjExMjQxMDUxNDlaMDMxMTAvBgNV BAMTKDA0MzZGNzVGNkFEM0IyMTAzM0M3RTg5OUE0MEJDMDJDQTYxMjE3MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ/dX6x5ezgbytqzTX0n+xIA4a CQvwP0V4dR5PAgjvAq45fTjKZPK79/ME9nvZs8Df4B61qG8tO6YEXv1nYbW8ZZbI n/hvmKeQrRDJE7kqYvW7d1csMlAJ5QQcUTgFdrrnJWbSXEUjB4r9OzMnOqvCWCov oDHwmXvmMpBB6c8hbAJw1CY1lRrjWiJZCgI8YY9NNlc5zsxg6k5BM1en0g+cA0CD qKPmzJ67ulVMaQS53AfqNkJKrqMM5gfLIEc8nfaShuEI5mFhe1WdGsAv9ogWnFTS vhnNF11yyaCRrcubb6sp2z2pzY3ocKbAveGOjlzG28M7zogVb0xhHVwEIxlLAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUBDb3X2rTshAzx+iZpAvALKYSFzYwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzMzMzM4MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADZ2RwwDQYJKoZIhvcNAQELBQADggEBAB3MHFF79MW9yUirjJoTqLJJyfAEYgCX 23cebqQ+lresG4bPCiTsaohNfBctS00DwGgYFiZjadDsAYOfy1KLaZ1MuvJi6754 9/6VHQcQ2UsFtjUtDgO+i5bpoqCUSyDrf/D55wg6RTwoLJYQhrPy2M5oEo2e7gpS 7r6Dk5IpKVNiqpBgg1e9CCTyAypkGkUk3wQEMT3bOnE6aX49U7kXFzHZjSLgiI1K ZkHaxGDPqevu9S8v/o85FUSNbTLpGWxfDv2CWtAlW59R995SpS49FcyeN3M91boU TV0hGb0B5o2Y1pRf1EVutuxw8Wb1/X/J9+oTMN73I1Ygu6eycAIHuLQ= -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:21 2025 by rpki-client