This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e33322e302f32322d3234203d3e203533363136.roa File: 3231372e3231372e33322e302f32322d3234203d3e203533363136.roa (raw, json) Hash identifier: sWn0q64OgAO6fqW3aBCxG6Ecm7hVx5Bpmkp269ojbks= Subject key identifier: BC:19:97:98:16:5F:63:53:18:FE:F8:94:9A:E9:74:4E:47:FB:05:32 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 70BA164246A1AD015AF3F04C4B938FB183B153A3 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e33322e302f32322d3234203d3e203533363136.roa Signing time: Thu 13 Nov 2025 04:07:37 +0000 ROA not before: Thu 13 Nov 2025 04:02:37 +0000 ROA not after: Thu 12 Nov 2026 04:07:37 +0000 asID: 53616 IP address blocks: 217.217.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ba:16:42:46:a1:ad:01:5a:f3:f0:4c:4b:93:8f:b1:83:b1:53:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 13 04:02:37 2025 GMT Not After : Nov 12 04:07:37 2026 GMT Subject: CN=BC199798165F635318FEF8949AE9744E47FB0532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4a:74:9a:e5:4d:0f:6a:8e:72:c1:ba:81:a1: 44:42:75:1c:48:31:d0:56:e5:a1:ba:1e:ee:08:e4: 05:2e:33:fa:09:a9:10:18:2d:81:dd:ce:80:8e:15: c3:14:9b:f4:9c:5e:e7:b4:ae:13:38:0c:a3:c2:2b: d0:a3:58:4b:64:72:47:f7:56:c7:79:70:7d:01:46: 40:c3:e1:70:41:a9:b6:b1:ca:f1:fd:49:5b:04:0b: 13:91:db:04:77:54:50:a5:e1:60:a6:ad:d8:0a:bd: ab:9d:55:92:c3:a1:e9:40:b5:77:fb:12:7a:92:57: bb:52:cd:3e:4b:d9:bd:d6:22:7f:0d:ab:f4:7a:92: 41:ca:7a:16:39:83:2a:b2:3b:9c:ed:0c:77:db:48: 9d:87:bb:1e:41:70:45:06:ce:32:da:2d:ed:78:a3: 72:2a:36:74:57:db:67:d5:b6:74:f3:70:e9:24:eb: 04:91:82:8e:b8:c1:fe:65:cc:f8:2e:f7:4a:49:ed: f7:9e:a8:02:ff:71:88:4c:2a:fe:e2:f8:53:e6:5e: 8c:87:ac:93:9c:c2:66:65:f0:8e:ad:ac:c3:16:ba: 06:fd:e4:dc:d6:a8:e5:46:56:00:c9:2a:3d:b8:e8: d0:54:e4:46:61:e4:dc:46:75:12:00:e4:ed:81:ce: 3e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:19:97:98:16:5F:63:53:18:FE:F8:94:9A:E9:74:4E:47:FB:05:32 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e33322e302f32322d3234203d3e203533363136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.217.32.0/22 Signature Algorithm: sha256WithRSAEncryption 15:a5:16:3b:e9:74:e9:b0:2b:35:da:b1:f1:20:a8:28:58:b3: 23:fb:49:f3:6f:a8:0f:9a:c8:34:77:12:90:f0:69:37:81:ff: a0:43:cc:6b:65:0c:7c:6a:77:44:2e:cf:7b:54:47:9e:0f:88: 04:f7:70:dd:f2:3d:04:9d:9c:3c:78:cc:39:bf:78:99:94:87: df:03:18:b0:f8:7b:d1:36:6f:5c:9f:78:71:7b:7f:b2:6d:9e: 27:65:b5:d6:94:6e:ad:35:81:96:d8:5d:f2:90:1e:7e:96:a6: 3d:ff:4d:8d:73:b9:22:30:e6:07:25:cb:2e:57:ec:dc:a6:23: 34:12:40:88:c0:23:a4:d1:b3:c9:b0:cf:f9:80:ca:f8:a7:03: 78:0d:86:1b:e4:75:f7:aa:e8:b8:47:7f:12:30:3f:a4:36:21: 2f:aa:4b:77:68:f1:e8:93:15:9b:09:7d:0a:df:8b:1b:5d:94: 0b:d7:4e:e2:cf:98:bc:84:01:f9:5b:bd:5e:40:ac:5c:8c:a1: fd:d5:15:d4:b6:cb:fa:a0:f1:b4:b8:50:fd:2e:40:30:13:c1: 42:c9:6e:13:9e:87:9c:05:de:52:ce:3b:9c:06:01:b4:16:74: 35:3d:20:b2:54:75:80:0a:a0:7f:35:f8:f9:46:8d:d8:79:66: d5:6b:fa:23 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUcLoWQkahrQFa8/BMS5OPsYOxU6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMTMwNDAyMzdaFw0yNjExMTIwNDA3MzdaMDMxMTAvBgNV BAMTKEJDMTk5Nzk4MTY1RjYzNTMxOEZFRjg5NDlBRTk3NDRFNDdGQjA1MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfSnSa5U0Pao5ywbqBoURCdRxI MdBW5aG6Hu4I5AUuM/oJqRAYLYHdzoCOFcMUm/ScXue0rhM4DKPCK9CjWEtkckf3 Vsd5cH0BRkDD4XBBqbaxyvH9SVsECxOR2wR3VFCl4WCmrdgKvaudVZLDoelAtXf7 EnqSV7tSzT5L2b3WIn8Nq/R6kkHKehY5gyqyO5ztDHfbSJ2Hux5BcEUGzjLaLe14 o3IqNnRX22fVtnTzcOkk6wSRgo64wf5lzPgu90pJ7feeqAL/cYhMKv7i+FPmXoyH rJOcwmZl8I6trMMWugb95NzWqOVGVgDJKj246NBU5EZh5NxGdRIA5O2Bzj4vAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUvBmXmBZfY1MY/viUmul0Tkf7BTIwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMz MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMzMzYzMTM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC 2dkgMA0GCSqGSIb3DQEBCwUAA4IBAQAVpRY76XTpsCs12rHxIKgoWLMj+0nzb6gP msg0dxKQ8Gk3gf+gQ8xrZQx8andELs97VEeeD4gE93Dd8j0EnZw8eMw5v3iZlIff Axiw+HvRNm9cn3hxe3+ybZ4nZbXWlG6tNYGW2F3ykB5+lqY9/02Nc7kiMOYHJcsu V+zcpiM0EkCIwCOk0bPJsM/5gMr4pwN4DYYb5HX3qui4R38SMD+kNiEvqkt3aPHo kxWbCX0K34sbXZQL107iz5i8hAH5W71eQKxcjKH91RXUtsv6oPG0uFD9LkAwE8FC yW4TnoecBd5SzjucBgG0FnQ1PSCyVHWACqB/Nfj5Ro3YeWbVa/oj -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:29 2025 by rpki-client