This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36312e302f32342d3234203d3e20323132323338.roa File: 39332e3131342e36312e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: h7ZPo/ScDNL1RoZ9X/EjL/iXiPj27PcXl8ZmkkMneQ0= Subject key identifier: 6F:F0:C5:F8:3F:CC:DF:19:A3:BA:7A:61:7E:1F:E3:79:39:0C:6E:75 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 3090AC012AFE3BB2AB05C23486C4530A5123C3E3 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36312e302f32342d3234203d3e20323132323338.roa Signing time: Tue 21 Oct 2025 13:22:44 +0000 ROA not before: Tue 21 Oct 2025 13:17:44 +0000 ROA not after: Tue 20 Oct 2026 13:22:44 +0000 asID: 212238 IP address blocks: 93.114.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Dec 2025 22:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:90:ac:01:2a:fe:3b:b2:ab:05:c2:34:86:c4:53:0a:51:23:c3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Oct 21 13:17:44 2025 GMT Not After : Oct 20 13:22:44 2026 GMT Subject: CN=6FF0C5F83FCCDF19A3BA7A617E1FE379390C6E75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:56:9a:f2:82:c0:25:04:bb:cd:c3:61:22:b6: 79:f1:f1:55:6d:ea:c4:6d:6a:16:9a:55:71:26:ab: 3c:b4:67:5e:96:2a:20:cd:3a:78:d8:1d:64:76:69: cd:d0:a2:fb:28:f4:44:38:ec:48:99:77:e2:01:be: 81:f0:28:17:82:27:ac:54:a4:cd:ed:27:63:04:75: 38:fa:b3:61:91:4a:6c:ae:bd:e0:18:97:c4:73:93: 7e:9e:3c:c6:5e:08:e1:8e:24:88:8c:1d:fe:3c:24: 4c:56:94:dc:bf:81:cd:ac:2e:3e:73:fa:3c:29:86: 4c:74:95:93:ec:22:f7:9a:9c:1e:00:6b:ba:24:a0: 4d:d9:ff:32:b2:c8:21:ca:66:6b:2b:70:c5:75:33: 17:de:4b:c6:d8:dc:db:6c:ea:27:b4:8e:f6:82:bd: ab:53:61:6e:06:64:36:48:9e:06:f6:24:90:62:da: 6b:13:8d:bf:8f:95:82:d3:2f:5e:8e:c2:e3:8c:56: 57:e7:44:53:59:9b:7a:eb:0d:b5:be:df:0d:46:b0: 6d:50:43:dc:40:4c:5f:10:bf:74:44:e9:83:82:9b: 5a:cb:4f:f3:7b:56:6f:53:7a:06:dd:7b:83:50:a9: e5:99:dc:38:16:06:3a:a2:82:bd:e8:f4:ee:7d:f1: b6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F0:C5:F8:3F:CC:DF:19:A3:BA:7A:61:7E:1F:E3:79:39:0C:6E:75 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36312e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.114.61.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:9c:d6:41:1c:3d:7b:b7:c8:94:60:28:9a:98:0f:83:59:a6: c2:cd:c2:d1:ec:ed:0b:f9:da:64:00:17:94:0d:3a:20:be:1c: 9b:5d:bc:ea:15:38:73:79:8e:6b:eb:a7:3b:88:76:a0:64:2c: 8a:9f:2c:58:3c:c3:3e:d2:cb:ab:0e:fa:23:16:11:ae:15:8d: fb:01:a9:33:a7:9b:f3:08:2f:4d:41:20:1b:d8:5f:86:da:8a: e2:66:7a:0e:8e:39:a0:60:00:d4:c4:17:fc:3d:2a:32:e1:16: 12:f4:aa:7d:b5:ad:4e:b4:43:f5:7e:13:89:f0:90:7a:0a:22: e0:26:52:17:be:76:3a:1a:0a:1a:95:0a:a6:89:84:6f:78:f7: ab:1e:ee:15:06:22:b0:16:dc:0e:e6:58:11:23:4e:46:c8:1c: af:31:2b:46:ba:b0:3c:0f:8a:ce:c6:b4:16:2c:de:1c:aa:26: b5:9a:74:69:bd:48:19:17:f2:0e:0c:c0:db:80:28:21:35:1a: ec:f8:1e:19:50:fa:b3:29:ea:42:c6:73:79:7d:b0:ff:e1:c9: 1d:1b:b6:c9:96:6b:67:c6:ed:9e:e8:51:28:9c:ba:ae:a3:15: 2a:5e:f5:06:81:6d:22:69:a4:83:66:5e:ac:62:30:10:fc:6c: f6:56:71:23 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUMJCsASr+O7KrBcI0hsRTClEjw+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEwMjExMzE3NDRaFw0yNjEwMjAxMzIyNDRaMDMxMTAvBgNV BAMTKDZGRjBDNUY4M0ZDQ0RGMTlBM0JBN0E2MTdFMUZFMzc5MzkwQzZFNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuVprygsAlBLvNw2Eitnnx8VVt 6sRtahaaVXEmqzy0Z16WKiDNOnjYHWR2ac3Qovso9EQ47EiZd+IBvoHwKBeCJ6xU pM3tJ2MEdTj6s2GRSmyuveAYl8Rzk36ePMZeCOGOJIiMHf48JExWlNy/gc2sLj5z +jwphkx0lZPsIveanB4Aa7okoE3Z/zKyyCHKZmsrcMV1MxfeS8bY3Nts6ie0jvaC vatTYW4GZDZIngb2JJBi2msTjb+PlYLTL16OwuOMVlfnRFNZm3rrDbW+3w1GsG1Q Q9xATF8Qv3RE6YOCm1rLT/N7Vm9Tegbde4NQqeWZ3DgWBjqigr3o9O598bbpAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUb/DF+D/M3xmjunphfh/jeTkMbnUwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzMzJlMzEzMTM0MmUzNjMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA XXI9MA0GCSqGSIb3DQEBCwUAA4IBAQCMnNZBHD17t8iUYCiamA+DWabCzcLR7O0L +dpkABeUDTogvhybXbzqFThzeY5r66c7iHagZCyKnyxYPMM+0surDvojFhGuFY37 Aakzp5vzCC9NQSAb2F+G2oriZnoOjjmgYADUxBf8PSoy4RYS9Kp9ta1OtEP1fhOJ 8JB6CiLgJlIXvnY6GgoalQqmiYRvePerHu4VBiKwFtwO5lgRI05GyByvMStGurA8 D4rOxrQWLN4cqia1mnRpvUgZF/IODMDbgCghNRrs+B4ZUPqzKepCxnN5fbD/4ckd G7bJlmtnxu2e6FEonLquoxUqXvUGgW0iaaSDZl6sYjAQ/Gz2VnEj -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:04 2025 by rpki-client