This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3231322e3130372e31382e302f32332d3234203d3e203437353833.roa File: 3231322e3130372e31382e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: 2lwvT9dRqvm8DFF9JqEpI0LAGlF1sa3CFslGOlZGINM= Subject key identifier: 45:BC:D4:F7:7C:79:D9:60:B6:EC:FF:39:8A:53:2F:94:8D:67:10:22 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 5D5CC6E78AF2589AAB6FA7827D36FC29B02FDA05 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3231322e3130372e31382e302f32332d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:28 +0000 ROA not before: Mon 29 Dec 2025 09:45:28 +0000 ROA not after: Mon 28 Dec 2026 09:50:28 +0000 asID: 47583 IP address blocks: 212.107.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:5c:c6:e7:8a:f2:58:9a:ab:6f:a7:82:7d:36:fc:29:b0:2f:da:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 29 09:45:28 2025 GMT Not After : Dec 28 09:50:28 2026 GMT Subject: CN=45BCD4F77C79D960B6ECFF398A532F948D671022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e0:b0:11:dc:ce:8a:06:7b:26:f9:a7:46:bb: c8:ec:6e:df:74:1e:06:09:a1:a6:f3:0e:ab:e1:a1: bc:22:8f:7e:1a:f7:34:30:21:d0:f5:51:87:81:63: 22:8e:38:d6:0a:9a:21:59:8d:c7:a6:c0:dc:e4:ff: 07:06:5b:4b:96:04:c8:29:7e:ef:7e:1f:7e:b3:08: 62:ef:8a:05:c1:a1:cb:df:b1:a5:4d:1c:69:2a:7f: ab:02:08:6c:39:f9:15:c7:e9:bf:92:be:a3:59:38: 4f:1f:ec:75:bf:43:56:ca:ab:01:23:59:a7:23:27: 84:0b:9a:30:b5:9f:e3:74:e1:dd:35:40:43:9e:4b: 59:99:21:ac:5f:16:87:65:e9:72:de:f5:84:62:75: 61:c6:f8:85:ce:de:9a:90:ea:b5:c7:50:85:a6:21: ec:19:06:54:e5:da:99:33:89:21:08:8e:56:d2:fa: 5f:e3:4e:7f:8b:97:ef:c8:35:4e:0e:14:fa:6f:8e: c3:45:1e:bd:46:d8:50:48:6f:d5:b7:e4:c0:9a:79: 3b:25:b3:3e:67:f1:3b:31:b4:bf:23:b4:a2:a5:e7: 49:f4:46:40:c3:b3:3d:47:8c:71:13:8a:1d:d3:b1: c6:73:e0:aa:9d:ee:ce:42:b7:12:9f:b9:d0:42:16: 8f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BC:D4:F7:7C:79:D9:60:B6:EC:FF:39:8A:53:2F:94:8D:67:10:22 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3231322e3130372e31382e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.107.18.0/23 Signature Algorithm: sha256WithRSAEncryption 21:c3:c1:d8:42:67:95:bc:00:b1:72:1a:23:a1:fa:c4:37:3d: d1:ee:b5:9f:1c:34:1a:b1:99:14:ee:12:c7:ee:99:47:85:c8: 13:60:c8:65:ad:fe:ee:50:4d:2b:6c:b6:76:cc:0c:11:de:00: 1a:89:39:52:1e:58:55:53:23:47:00:1f:f1:6d:ae:53:de:77: f4:28:89:a6:8f:6c:da:b3:d5:6a:3a:8c:dc:3f:6f:83:7d:3f: 19:39:2e:fa:1b:be:9a:38:1b:0b:04:3e:b5:b8:5b:26:bf:e2: 4c:87:8f:88:27:5c:9c:6c:d1:51:43:b2:e5:f6:9e:a9:d0:20: 31:f0:37:5a:c5:ea:f9:86:fb:b9:c4:03:2d:65:ef:fa:34:13: e9:e9:0c:ae:27:b8:cd:e3:39:f1:56:7d:47:91:b3:48:76:a3: e4:e2:dd:d6:4f:b7:29:1b:49:26:38:9e:05:3c:b9:4b:7d:85: 9a:fa:90:94:dc:60:55:38:f0:75:74:00:71:f5:01:36:4d:1b: 8e:63:a9:94:53:7d:82:ef:bb:4c:0f:8b:00:99:29:05:a9:37: 7c:37:6f:21:c6:2d:0b:c7:fe:96:2a:b4:4e:3f:9c:1a:02:45: 32:65:ff:3a:35:4d:c7:51:bb:08:9a:03:5f:52:ce:b2:fb:a0: aa:eb:0b:79 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUXVzG54ryWJqrb6eCfTb8KbAv2gUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMjkwOTQ1MjhaFw0yNjEyMjgwOTUwMjhaMDMxMTAvBgNV BAMTKDQ1QkNENEY3N0M3OUQ5NjBCNkVDRkYzOThBNTMyRjk0OEQ2NzEwMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg4LAR3M6KBnsm+adGu8jsbt90 HgYJoabzDqvhobwij34a9zQwIdD1UYeBYyKOONYKmiFZjcemwNzk/wcGW0uWBMgp fu9+H36zCGLvigXBocvfsaVNHGkqf6sCCGw5+RXH6b+SvqNZOE8f7HW/Q1bKqwEj WacjJ4QLmjC1n+N04d01QEOeS1mZIaxfFodl6XLe9YRidWHG+IXO3pqQ6rXHUIWm IewZBlTl2pkziSEIjlbS+l/jTn+Ll+/INU4OFPpvjsNFHr1G2FBIb9W35MCaeTsl sz5n8TsxtL8jtKKl50n0RkDDsz1HjHETih3TscZz4Kqd7s5CtxKfudBCFo8JAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQURbzU93x52WC27P85ilMvlI1nECIwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzIzMTMyMmUzMTMwMzcyZTMx MzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB 1GsSMA0GCSqGSIb3DQEBCwUAA4IBAQAhw8HYQmeVvACxchojofrENz3R7rWfHDQa sZkU7hLH7plHhcgTYMhlrf7uUE0rbLZ2zAwR3gAaiTlSHlhVUyNHAB/xba5T3nf0 KImmj2zas9VqOozcP2+DfT8ZOS76G76aOBsLBD61uFsmv+JMh4+IJ1ycbNFRQ7Ll 9p6p0CAx8Ddaxer5hvu5xAMtZe/6NBPp6QyuJ7jN4znxVn1HkbNIdqPk4t3WT7cp G0kmOJ4FPLlLfYWa+pCU3GBVOPB1dABx9QE2TRuOY6mUU32C77tMD4sAmSkFqTd8 N28hxi0Lx/6WKrROP5waAkUyZf86NU3HUbsImgNfUs6y+6Cq6wt5 -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:54 2026 by rpki-client