This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3231322e3130372e31362e302f32332d3234203d3e203437353833.roa File: 3231322e3130372e31362e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: C6AnzRbTlX8IdxcZJe5qYEYR9tY6zW2VgKxbC2S5Rls= Subject key identifier: 2B:42:D0:FC:D1:66:2C:5A:05:95:F1:1F:26:19:77:45:E8:7A:EC:A8 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 5A32B788B393A53CC27F3ECC5015CF3714EB2B42 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3231322e3130372e31362e302f32332d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:26 +0000 ROA not before: Mon 29 Dec 2025 09:45:26 +0000 ROA not after: Mon 28 Dec 2026 09:50:26 +0000 asID: 47583 IP address blocks: 212.107.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:32:b7:88:b3:93:a5:3c:c2:7f:3e:cc:50:15:cf:37:14:eb:2b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 29 09:45:26 2025 GMT Not After : Dec 28 09:50:26 2026 GMT Subject: CN=2B42D0FCD1662C5A0595F11F26197745E87AECA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:c5:4b:3e:7d:62:57:74:7e:bc:4a:8a:fb: 96:27:15:70:3b:aa:4b:db:d3:08:c2:3a:d8:ff:18: 72:9f:53:c7:4c:a4:ca:a0:f2:55:76:9b:39:f7:0f: a1:35:0b:e0:5a:ab:32:7c:24:0a:58:59:d6:f5:30: 44:fe:ab:b6:7a:c4:37:c5:fc:62:af:ab:be:a3:aa: 4d:ab:af:75:ea:5c:18:1d:28:46:0b:95:4e:b5:75: 29:15:81:88:b9:3a:18:8d:d8:4b:df:ce:8e:48:5f: 6e:75:b3:c0:62:4e:42:de:92:1e:1a:0b:7d:10:8d: 41:be:5c:89:7f:da:92:aa:7c:42:db:73:b8:bb:d2: f6:c1:72:db:ad:d6:8f:8a:d3:11:38:1f:bc:57:3d: 49:0a:8c:3a:d0:39:b1:51:69:60:28:c7:8a:3a:cc: e8:6d:c3:79:72:07:0c:b7:d2:69:a3:69:8f:1d:91: 90:56:bf:95:05:7c:94:52:f1:6f:e7:18:ca:f8:47: b0:8d:91:37:f0:c9:7f:92:cc:1e:15:01:60:be:dd: 30:5d:db:66:25:41:fa:8d:e9:48:3c:7e:de:15:61: a2:43:a2:b7:6e:ea:bc:94:ca:5b:8e:5e:7c:fa:c0: 08:6c:ae:a0:4d:27:06:b3:37:fb:8b:c4:17:2f:0d: db:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:42:D0:FC:D1:66:2C:5A:05:95:F1:1F:26:19:77:45:E8:7A:EC:A8 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3231322e3130372e31362e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.107.16.0/23 Signature Algorithm: sha256WithRSAEncryption 89:2e:41:dd:9d:1b:33:6e:ff:c4:61:4a:fe:89:6e:4e:42:dd: 8c:54:89:3a:e8:f7:5c:3e:2e:e2:46:f1:46:f8:18:fa:6d:11: eb:4f:db:37:23:e9:d6:f5:c7:59:96:5b:39:ad:a6:9d:44:d5: 11:d0:0d:14:4f:71:a6:74:eb:af:64:94:83:cd:4c:44:53:42: bb:37:af:c8:4b:4b:da:73:4e:95:06:42:4c:bb:ea:ef:6f:fc: ca:20:68:b2:d8:c2:e0:fe:cb:7e:0f:1a:06:22:be:d5:19:7d: a2:02:46:8c:c6:ed:5f:06:b3:29:0b:f8:3c:e4:b8:56:d5:96: 29:14:ad:30:d3:0d:16:7e:22:46:e0:61:04:4f:c0:85:e3:68: 0d:a8:f8:7a:8e:39:f2:ad:51:f5:d6:90:f7:9f:26:4b:05:7e: 90:06:26:13:14:2a:79:f1:ee:25:da:41:a5:3c:e0:55:5f:a1: d9:3a:75:11:e6:a6:67:6c:5b:0b:3f:0d:92:88:c2:a8:55:8a: 09:93:fc:a4:88:79:c5:f7:60:8f:70:c1:ca:92:8b:e4:09:da: c9:db:5b:b4:42:ef:ad:15:1f:7c:cb:26:54:26:ba:54:d3:8e: d3:da:b1:ba:97:20:1f:9f:6f:0b:ee:7d:7b:66:3f:e7:c2:c2: 58:bf:19:e8 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUWjK3iLOTpTzCfz7MUBXPNxTrK0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMjkwOTQ1MjZaFw0yNjEyMjgwOTUwMjZaMDMxMTAvBgNV BAMTKDJCNDJEMEZDRDE2NjJDNUEwNTk1RjExRjI2MTk3NzQ1RTg3QUVDQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2pMVLPn1iV3R+vEqK+5YnFXA7 qkvb0wjCOtj/GHKfU8dMpMqg8lV2mzn3D6E1C+BaqzJ8JApYWdb1MET+q7Z6xDfF /GKvq76jqk2rr3XqXBgdKEYLlU61dSkVgYi5OhiN2Evfzo5IX251s8BiTkLekh4a C30QjUG+XIl/2pKqfELbc7i70vbBctut1o+K0xE4H7xXPUkKjDrQObFRaWAox4o6 zOhtw3lyBwy30mmjaY8dkZBWv5UFfJRS8W/nGMr4R7CNkTfwyX+SzB4VAWC+3TBd 22YlQfqN6Ug8ft4VYaJDordu6ryUyluOXnz6wAhsrqBNJwazN/uLxBcvDdtHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUK0LQ/NFmLFoFlfEfJhl3Reh67KgwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzIzMTMyMmUzMTMwMzcyZTMx MzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB 1GsQMA0GCSqGSIb3DQEBCwUAA4IBAQCJLkHdnRszbv/EYUr+iW5OQt2MVIk66Pdc Pi7iRvFG+Bj6bRHrT9s3I+nW9cdZlls5raadRNUR0A0UT3GmdOuvZJSDzUxEU0K7 N6/IS0vac06VBkJMu+rvb/zKIGiy2MLg/st+DxoGIr7VGX2iAkaMxu1fBrMpC/g8 5LhW1ZYpFK0w0w0WfiJG4GEET8CF42gNqPh6jjnyrVH11pD3nyZLBX6QBiYTFCp5 8e4l2kGlPOBVX6HZOnUR5qZnbFsLPw2SiMKoVYoJk/ykiHnF92CPcMHKkovkCdrJ 21u0Qu+tFR98yyZUJrpU047T2rG6lyAfn28L7n17Zj/nwsJYvxno -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:53 2026 by rpki-client