This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36392e302f32342d3234203d3e20313337353137.roa File: 3231332e3133392e36392e302f32342d3234203d3e20313337353137.roa (raw, json) Hash identifier: WAeRlxjmJVvRNyxPguDFGzV0PQIE4PPymfBbuZn//Pk= Subject key identifier: FD:65:A6:3E:DB:F8:CC:72:B3:06:3C:C0:58:0D:41:77:DD:CF:69:B6 Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e Certificate serial: 032A468B0DE2F6B31E856E439E5ADC2B23E9EB0F Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36392e302f32342d3234203d3e20313337353137.roa Signing time: Mon 08 Dec 2025 02:55:14 +0000 ROA not before: Mon 08 Dec 2025 02:50:14 +0000 ROA not after: Mon 07 Dec 2026 02:55:14 +0000 asID: 137517 IP address blocks: 213.139.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:2a:46:8b:0d:e2:f6:b3:1e:85:6e:43:9e:5a:dc:2b:23:e9:eb:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e Validity Not Before: Dec 8 02:50:14 2025 GMT Not After : Dec 7 02:55:14 2026 GMT Subject: CN=FD65A63EDBF8CC72B3063CC0580D4177DDCF69B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:13:cf:43:13:76:84:06:dd:bf:ac:9e:3b:8d: 14:5b:47:7e:0c:fc:3b:cc:f0:b6:48:ed:4c:47:91: 8d:24:98:12:59:25:d6:01:01:f1:e8:c9:26:62:f7: e6:3a:53:83:c6:50:26:5d:f6:b5:dc:1e:e6:8b:8a: 05:67:d9:bb:32:83:1d:33:f3:a1:67:97:21:87:c8: bf:b7:82:2f:5f:a6:fa:49:0a:2b:23:ea:f7:25:93: 06:38:5e:6b:37:dd:a0:b9:da:13:83:ba:9b:4c:cd: 2d:1d:d4:26:7a:a7:aa:d0:8a:c7:02:03:34:41:0e: bd:e0:d8:d3:9e:f3:2c:cb:44:2d:d1:dc:97:bd:0c: 46:21:5b:2a:47:98:21:85:58:92:c3:ba:73:eb:76: b0:46:cc:de:d8:a5:87:71:f0:01:0e:04:74:00:66: 1a:b4:e6:94:54:83:37:11:b5:06:a8:a4:2a:40:b1: 2f:07:8e:95:9e:31:6b:57:ae:07:62:3c:85:9d:cb: 75:f9:7d:97:21:f9:3d:34:be:f4:33:ff:20:bb:d0: 37:86:93:69:e1:50:87:5e:3f:a3:63:be:d5:22:f9: b1:53:89:bd:49:02:17:b0:cf:9e:77:4a:6c:4d:77: 3f:79:9a:c3:83:d9:91:dd:92:23:a6:0a:ad:a1:30: fa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:65:A6:3E:DB:F8:CC:72:B3:06:3C:C0:58:0D:41:77:DD:CF:69:B6 X509v3 Authority Key Identifier: keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36392e302f32342d3234203d3e20313337353137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.139.69.0/24 Signature Algorithm: sha256WithRSAEncryption 72:98:b5:d0:1d:cb:3a:e4:58:89:13:35:5e:b9:32:f6:6c:b2: f6:13:2a:05:b8:db:84:15:51:26:16:9c:3d:1c:40:74:6f:ec: 90:28:19:8d:ad:3a:2d:88:d7:ce:da:49:11:55:73:96:aa:93: 31:3e:1d:c9:ac:3b:27:36:32:3e:63:10:e2:1b:68:b4:42:8d: 82:e8:40:01:11:1d:56:a3:8b:12:d7:1e:f8:94:06:98:bb:92: f7:0d:f1:e8:45:e9:58:e3:f2:53:e6:26:8e:92:ba:41:61:02: 60:2a:d7:22:a5:c2:c5:b2:16:20:5a:7a:f0:5f:40:84:8b:04: 48:31:73:c9:ef:16:28:fc:93:8c:45:01:10:a7:93:cb:1f:15: 16:94:ff:3c:f1:9b:8f:30:b1:99:7f:52:a7:f5:6c:59:dc:ac: 92:53:81:e6:92:d8:91:d5:93:db:c9:52:59:5f:7f:71:e7:9d: ae:73:00:e7:7a:f5:cd:84:c5:a9:10:9a:24:31:06:4f:54:eb: 03:3b:95:c1:d6:04:85:b3:c6:4f:23:b0:de:03:86:d9:d9:89: db:88:33:af:23:1d:a5:10:cc:88:bd:a9:1a:43:75:92:e9:81: 8a:b0:ff:8c:5f:63:77:ba:a4:12:10:e5:5b:d5:fd:36:0f:f7: b7:ac:1c:90 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUAypGiw3i9rMehW5DnlrcKyPp6w8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk NDhjN2QzZTAeFw0yNTEyMDgwMjUwMTRaFw0yNjEyMDcwMjU1MTRaMDMxMTAvBgNV BAMTKEZENjVBNjNFREJGOENDNzJCMzA2M0NDMDU4MEQ0MTc3RERDRjY5QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5E89DE3aEBt2/rJ47jRRbR34M /DvM8LZI7UxHkY0kmBJZJdYBAfHoySZi9+Y6U4PGUCZd9rXcHuaLigVn2bsygx0z 86FnlyGHyL+3gi9fpvpJCisj6vclkwY4Xms33aC52hODuptMzS0d1CZ6p6rQiscC AzRBDr3g2NOe8yzLRC3R3Je9DEYhWypHmCGFWJLDunPrdrBGzN7YpYdx8AEOBHQA Zhq05pRUgzcRtQaopCpAsS8HjpWeMWtXrgdiPIWdy3X5fZch+T00vvQz/yC70DeG k2nhUIdeP6NjvtUi+bFTib1JAhewz553SmxNdz95msOD2ZHdkiOmCq2hMPovAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU/WWmPtv4zHKzBjzAWA1Bd93PabYwHwYDVR0j BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT TWZUNC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM2 MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczNTMxMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADVi0UwDQYJKoZIhvcNAQELBQADggEBAHKYtdAdyzrkWIkTNV65MvZssvYTKgW4 24QVUSYWnD0cQHRv7JAoGY2tOi2I187aSRFVc5aqkzE+HcmsOyc2Mj5jEOIbaLRC jYLoQAERHVajixLXHviUBpi7kvcN8ehF6Vjj8lPmJo6SukFhAmAq1yKlwsWyFiBa evBfQISLBEgxc8nvFij8k4xFARCnk8sfFRaU/zzxm48wsZl/Uqf1bFncrJJTgeaS 2JHVk9vJUllff3Hnna5zAOd69c2ExakQmiQxBk9U6wM7lcHWBIWzxk8jsN4DhtnZ iduIM68jHaUQzIi9qRpDdZLpgYqw/4xfY3e6pBIQ5VvV/TYP97esHJA= -----END CERTIFICATE-----Generated at Fri Dec 19 20:10:32 2025 by rpki-client