This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/33312e3231372e3235302e302f32342d3234203d3e2039303039.roa File: 33312e3231372e3235302e302f32342d3234203d3e2039303039.roa (raw, json) Hash identifier: DG28hBB84l9V9ckw7gup3DBCv9QaZr2Uq3kDqChJ4Y8= Subject key identifier: E1:54:1F:86:CC:63:61:C8:B0:46:78:66:FB:59:3E:A2:DE:68:7E:D3 Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0 Certificate serial: 34636C01A2CF8B3557F081E0652FDE09A2493F92 Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/33312e3231372e3235302e302f32342d3234203d3e2039303039.roa Signing time: Tue 09 Dec 2025 11:55:14 +0000 ROA not before: Tue 09 Dec 2025 11:50:14 +0000 ROA not after: Tue 08 Dec 2026 11:55:14 +0000 asID: 9009 IP address blocks: 31.217.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:63:6c:01:a2:cf:8b:35:57:f0:81:e0:65:2f:de:09:a2:49:3f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0 Validity Not Before: Dec 9 11:50:14 2025 GMT Not After : Dec 8 11:55:14 2026 GMT Subject: CN=E1541F86CC6361C8B0467866FB593EA2DE687ED3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:63:d6:ba:da:f0:98:6a:46:ca:af:96:55:58: bd:bb:ae:18:48:f3:d7:f4:ee:96:27:88:4e:a9:b9: 8a:b6:e2:97:58:09:16:c9:de:1d:06:e8:eb:8d:9a: 04:31:4b:4e:36:e8:33:be:90:96:52:e7:b9:b8:37: b0:3f:7a:16:41:31:51:53:16:eb:92:40:1a:56:31: 56:8d:55:d4:28:17:00:95:74:7f:cd:c8:a5:d2:f2: fd:e5:ee:ac:83:cc:e9:f8:6f:b9:ae:32:d7:61:0f: 64:f1:66:4b:41:1e:7b:24:a9:0e:0a:ce:e3:0a:ae: c3:af:ee:64:bb:1f:79:4d:ee:0b:43:d9:fc:01:6b: fa:ab:1d:9e:61:46:23:0c:d0:24:cd:7b:a9:78:ed: ae:ea:d8:02:88:25:e5:dc:d0:c0:f1:cd:f6:0d:cf: 85:b5:f9:c1:60:c1:31:cc:6d:c8:bd:49:38:3e:b8: fa:41:9a:f9:e7:dd:d9:ca:3a:e3:10:15:f1:35:f8: ec:b5:b0:e3:82:70:4e:a2:1a:68:7f:aa:ad:45:d4: 62:8c:e6:d8:2d:eb:68:6c:de:c7:5b:15:0a:f8:59: 2f:fa:6d:2e:d1:71:28:fe:c2:8b:4e:77:2e:d0:70: de:4d:46:67:66:82:38:8f:38:bc:54:86:14:8f:ad: 2e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:54:1F:86:CC:63:61:C8:B0:46:78:66:FB:59:3E:A2:DE:68:7E:D3 X509v3 Authority Key Identifier: keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/33312e3231372e3235302e302f32342d3234203d3e2039303039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.217.250.0/24 Signature Algorithm: sha256WithRSAEncryption 00:d9:64:51:a1:e1:59:80:ce:36:06:38:90:1f:d1:e4:17:0f: fc:35:36:81:2a:ab:c4:35:7d:ef:01:90:94:8c:a9:8c:35:03: ce:3b:27:7b:67:1c:a9:74:65:e9:ac:21:9b:a5:2e:78:7f:fd: 52:ce:70:5f:40:74:e7:9f:ec:00:2f:ff:1a:e4:ad:c5:da:99: 17:12:b0:b2:a0:8d:e0:0e:84:86:36:4d:38:35:0f:e1:d4:f1: c6:b6:68:57:c4:32:6a:20:28:2a:8b:f8:ee:e0:8a:a3:2b:85: 55:8f:01:6b:7c:00:ac:a1:4e:17:9f:cb:3a:75:46:ee:53:c0: f2:45:90:38:03:8b:ee:7d:28:81:1a:4b:9c:61:4c:e1:36:6c: 84:1d:19:b8:58:1b:cd:7c:a9:ee:c1:73:a4:47:68:2d:02:68: cc:8e:f8:f3:a3:32:16:99:6a:d5:99:84:22:72:11:4d:ba:e4: a7:d2:89:da:ab:44:a3:5e:1a:4b:18:26:23:20:74:18:35:10: c5:05:c6:4b:56:5e:6b:ff:12:7c:c6:eb:b4:e2:11:a9:86:76: a0:9f:55:cd:ab:ef:fd:7a:66:a5:42:a7:31:a5:73:3e:f8:37: 87:da:a8:9e:68:c6:4d:c5:90:5c:5f:aa:26:bd:21:f3:52:ff: ee:78:f4:31 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUNGNsAaLPizVX8IHgZS/eCaJJP5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm N2M5YWNhMDAeFw0yNTEyMDkxMTUwMTRaFw0yNjEyMDgxMTU1MTRaMDMxMTAvBgNV BAMTKEUxNTQxRjg2Q0M2MzYxQzhCMDQ2Nzg2NkZCNTkzRUEyREU2ODdFRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Y9a62vCYakbKr5ZVWL27rhhI 89f07pYniE6puYq24pdYCRbJ3h0G6OuNmgQxS0426DO+kJZS57m4N7A/ehZBMVFT FuuSQBpWMVaNVdQoFwCVdH/NyKXS8v3l7qyDzOn4b7muMtdhD2TxZktBHnskqQ4K zuMKrsOv7mS7H3lN7gtD2fwBa/qrHZ5hRiMM0CTNe6l47a7q2AKIJeXc0MDxzfYN z4W1+cFgwTHMbci9STg+uPpBmvnn3dnKOuMQFfE1+Oy1sOOCcE6iGmh/qq1F1GKM 5tgt62hs3sdbFQr4WS/6bS7RcSj+wotOdy7QcN5NRmdmgjiPOLxUhhSPrS6VAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU4VQfhsxjYciwRnhm+1k+ot5oftMwHwYDVR0j BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm SnJLQS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2E3ODllODct ZjQ4NC00MjNkLWExZDctMmMyZDU4NjBkMmVjLzAvMzMzMTJlMzIzMTM3MmUzMjM1 MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMwMzAzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB/Z +jANBgkqhkiG9w0BAQsFAAOCAQEAANlkUaHhWYDONgY4kB/R5BcP/DU2gSqrxDV9 7wGQlIypjDUDzjsne2ccqXRl6awhm6UueH/9Us5wX0B055/sAC//GuStxdqZFxKw sqCN4A6EhjZNODUP4dTxxrZoV8QyaiAoKov47uCKoyuFVY8Ba3wArKFOF5/LOnVG 7lPA8kWQOAOL7n0ogRpLnGFM4TZshB0ZuFgbzXyp7sFzpEdoLQJozI7486MyFplq 1ZmEInIRTbrkp9KJ2qtEo14aSxgmIyB0GDUQxQXGS1Zea/8SfMbrtOIRqYZ2oJ9V zavv/XpmpUKnMaVzPvg3h9qonmjGTcWQXF+qJr0h81L/7nj0MQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:53:28 2025 by rpki-client