This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36382e302f32342d3234203d3e2039303039.roa File: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (raw, json) Hash identifier: CxXf2MZIKaUycFVCcvqJ0pu6d/h/wQOBy3gRZyXomCo= Subject key identifier: 6A:44:70:C1:39:70:0E:9D:31:36:34:39:FB:59:AC:84:F3:91:19:38 Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e Certificate serial: 6F9658458A8A7FBAEDBD515741084EC6B890ED8F Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36382e302f32342d3234203d3e2039303039.roa Signing time: Tue 09 Dec 2025 11:55:14 +0000 ROA not before: Tue 09 Dec 2025 11:50:14 +0000 ROA not after: Tue 08 Dec 2026 11:55:14 +0000 asID: 9009 IP address blocks: 213.139.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:96:58:45:8a:8a:7f:ba:ed:bd:51:57:41:08:4e:c6:b8:90:ed:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e Validity Not Before: Dec 9 11:50:14 2025 GMT Not After : Dec 8 11:55:14 2026 GMT Subject: CN=6A4470C139700E9D31363439FB59AC84F3911938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ff:28:fc:5c:ce:f8:34:0b:e3:67:4b:22:f3: 12:e2:9e:47:a7:0b:d2:67:78:69:4a:8d:d8:47:0a: 74:eb:72:28:dc:e7:7e:c2:e5:eb:e7:9e:d2:f5:26: 49:7a:e8:bc:1b:09:fe:60:b2:51:a3:13:7e:00:73: 95:8c:7e:b1:3e:bc:8d:c3:27:3d:de:65:e7:fd:89: cb:97:2a:38:2c:a0:c7:a8:38:02:1b:0f:88:70:25: f8:16:0a:07:3b:b3:51:32:d8:d6:1b:ae:dd:62:2b: a6:69:83:50:62:19:83:47:70:6f:3f:6c:57:8d:75: db:cc:75:4d:4e:e4:f7:70:f2:13:cd:cb:8c:2c:c9: 87:65:c3:d0:e9:ad:8b:00:40:ab:42:3b:fa:fa:6a: c4:70:cb:53:fd:aa:08:48:bd:0d:42:f9:cb:79:43: 7d:75:84:f3:cd:f5:c7:19:b3:c6:e5:73:44:af:0e: 07:0e:de:6f:7f:14:ab:b8:05:60:d9:9b:67:a9:2f: 5d:a0:ae:f7:0b:6c:c2:ae:ba:86:a9:71:01:84:3c: a1:bd:29:50:5c:71:2c:c1:90:b6:51:79:c2:47:2f: 4a:d8:c5:27:22:13:50:15:9c:7c:08:0b:0c:66:70: 22:ff:33:c5:bd:ca:e9:90:f0:b1:58:bc:b0:a2:8c: bf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:44:70:C1:39:70:0E:9D:31:36:34:39:FB:59:AC:84:F3:91:19:38 X509v3 Authority Key Identifier: keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36382e302f32342d3234203d3e2039303039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.139.68.0/24 Signature Algorithm: sha256WithRSAEncryption 45:e4:e6:af:b4:80:2b:b1:f4:6a:ee:19:45:ee:5c:2c:a7:0f: 70:7a:6e:a5:27:ef:aa:5c:51:23:38:6e:fd:fe:34:c4:e3:cb: 00:0b:21:30:6e:8a:80:58:0a:94:17:c4:33:86:33:c7:ed:cb: c0:c9:e6:4a:3f:2d:f3:64:b5:ca:ea:0c:85:3d:48:22:14:86: e8:fc:a6:98:b6:5a:b7:1e:9e:86:a5:b1:e5:0c:1e:f5:b3:38: 76:ef:4a:a0:39:8f:66:4c:76:b5:01:9b:c9:69:df:1f:20:18: ea:b1:c6:5d:35:fe:17:91:a1:2f:1c:21:e0:3e:67:dd:e7:61: d3:d6:f0:09:25:a7:b7:2e:73:43:b1:44:59:02:9a:52:c9:74: 22:38:60:43:4c:d0:fd:01:c3:78:11:b4:e4:0b:96:46:d1:be: 38:1b:2c:97:60:79:3c:72:77:c3:38:db:87:b4:af:5a:5d:4d: d6:5c:a2:40:05:49:4a:c0:3d:89:90:87:13:79:09:43:89:6e: 35:33:2a:a3:32:1e:65:2c:ed:16:09:53:fc:52:5a:72:f1:74: 41:90:d2:c4:71:e8:c2:c9:3e:57:1e:9b:14:ed:48:15:dd:6a: ad:a2:cc:54:af:6f:fa:3a:94:37:6a:c8:2a:ca:8c:89:58:2d: 63:b3:7c:78 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUb5ZYRYqKf7rtvVFXQQhOxriQ7Y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk NDhjN2QzZTAeFw0yNTEyMDkxMTUwMTRaFw0yNjEyMDgxMTU1MTRaMDMxMTAvBgNV BAMTKDZBNDQ3MEMxMzk3MDBFOUQzMTM2MzQzOUZCNTlBQzg0RjM5MTE5MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW/yj8XM74NAvjZ0si8xLinken C9JneGlKjdhHCnTrcijc537C5evnntL1Jkl66LwbCf5gslGjE34Ac5WMfrE+vI3D Jz3eZef9icuXKjgsoMeoOAIbD4hwJfgWCgc7s1Ey2NYbrt1iK6Zpg1BiGYNHcG8/ bFeNddvMdU1O5Pdw8hPNy4wsyYdlw9DprYsAQKtCO/r6asRwy1P9qghIvQ1C+ct5 Q311hPPN9ccZs8blc0SvDgcO3m9/FKu4BWDZm2epL12grvcLbMKuuoapcQGEPKG9 KVBccSzBkLZRecJHL0rYxSciE1AVnHwICwxmcCL/M8W9yumQ8LFYvLCijL9HAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUakRwwTlwDp0xNjQ5+1mshPORGTgwHwYDVR0j BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT TWZUNC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM2 MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMwMzAzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANWL RDANBgkqhkiG9w0BAQsFAAOCAQEAReTmr7SAK7H0au4ZRe5cLKcPcHpupSfvqlxR Izhu/f40xOPLAAshMG6KgFgKlBfEM4Yzx+3LwMnmSj8t82S1yuoMhT1IIhSG6Pym mLZatx6ehqWx5Qwe9bM4du9KoDmPZkx2tQGbyWnfHyAY6rHGXTX+F5GhLxwh4D5n 3edh09bwCSWnty5zQ7FEWQKaUsl0IjhgQ0zQ/QHDeBG05AuWRtG+OBssl2B5PHJ3 wzjbh7SvWl1N1lyiQAVJSsA9iZCHE3kJQ4luNTMqozIeZSztFglT/FJacvF0QZDS xHHowsk+Vx6bFO1IFd1qraLMVK9v+jqUN2rIKsqMiVgtY7N8eA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:30:31 2025 by rpki-client