This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa File: 3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa (raw, json) Hash identifier: fJsom9F0kK13YCja85kMhtBJkHN5sEU0G4E2NSYs0/M= Subject key identifier: CC:59:48:92:71:EA:AC:23:92:FD:C3:B0:D4:CB:BA:05:FB:4F:90:41 Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e Certificate serial: 2844EDF26A400FFD9CE54A60E686D1C8CD28112C Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa Signing time: Mon 15 Dec 2025 17:55:32 +0000 ROA not before: Mon 15 Dec 2025 17:50:32 +0000 ROA not after: Mon 14 Dec 2026 17:55:32 +0000 asID: 212150 IP address blocks: 213.139.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:44:ed:f2:6a:40:0f:fd:9c:e5:4a:60:e6:86:d1:c8:cd:28:11:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e Validity Not Before: Dec 15 17:50:32 2025 GMT Not After : Dec 14 17:55:32 2026 GMT Subject: CN=CC59489271EAAC2392FDC3B0D4CBBA05FB4F9041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:72:97:37:19:91:eb:fe:b7:18:97:28:3b:0e: f8:55:cf:02:aa:d9:1b:12:e2:1a:90:14:a0:7f:19: a1:29:1d:85:53:0e:3d:59:68:5f:c8:bb:d1:b8:4b: f6:17:91:90:e1:a0:7c:dc:1c:78:ed:0f:99:08:48: 3d:93:7b:90:75:70:a3:b1:2d:64:e6:ef:70:64:5c: db:fc:14:e9:d5:db:03:50:c2:25:05:13:f2:fe:8d: 2d:e9:4a:32:27:c1:1c:2b:d3:56:26:66:ce:a9:09: 39:c3:ff:3d:64:0c:00:f0:e9:78:8c:18:51:d1:af: 82:2c:83:2b:a9:27:57:07:db:bd:a3:31:38:51:5a: 74:8e:a4:f9:e5:6d:53:b0:80:af:8d:7b:aa:4d:09: 86:91:3d:e0:eb:fb:41:a4:0f:dc:30:b1:92:9f:f8: 09:0d:bd:f3:e3:64:db:65:9b:04:02:fa:2d:a1:ac: c6:4e:a4:bd:25:29:69:ee:94:9c:ae:75:27:eb:00: cf:f7:cf:30:a5:48:2e:6f:f3:9e:00:29:01:ca:e5: 18:4e:c2:74:5c:a0:35:c9:d6:e4:9e:2c:13:68:84: 45:bf:59:1d:2b:0d:9c:3d:91:5b:99:d1:87:b5:87: 91:29:2b:d9:bb:1a:ea:90:2e:00:5c:c0:16:82:7e: fd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:59:48:92:71:EA:AC:23:92:FD:C3:B0:D4:CB:BA:05:FB:4F:90:41 X509v3 Authority Key Identifier: keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.139.79.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:2f:88:73:6b:dc:fa:96:54:b1:46:93:cc:1b:8c:32:4e:e8: ba:61:df:39:08:71:63:69:03:76:28:e7:50:7e:5e:ca:70:92: fd:a5:d7:a2:d4:c2:3c:55:38:28:36:52:4e:6e:71:46:39:22: f7:34:a2:74:2c:4b:9e:08:66:43:89:ce:4c:3d:13:9d:1e:98: 0f:e0:d6:a5:cc:86:1e:de:88:72:ff:b5:5d:5c:ac:a0:9e:9f: 3a:d7:7c:40:a0:b0:7c:9b:1a:5b:39:f1:58:19:33:2e:72:f6: b3:f7:82:b3:8a:ec:b8:35:64:1c:3f:0f:08:8d:2f:54:e1:50: 2d:27:ba:e1:b0:5c:f1:f8:e7:59:06:4b:0d:82:ef:61:79:c3: 85:36:e0:bb:15:52:83:3b:14:a9:87:62:e2:de:6f:56:95:10: 5b:1b:5c:b0:53:f3:5f:dc:ea:3c:79:ad:d4:2f:44:26:cc:e9: 96:ea:f8:d6:2c:31:35:6f:9a:1e:30:d1:62:db:d3:65:bc:eb: db:ed:59:04:48:cd:49:d1:b9:8c:45:bb:35:64:85:7c:54:01: 9c:ee:4b:40:99:cd:c6:04:5a:05:0a:2d:d4:f6:43:64:91:e6: e2:0b:1c:2d:9c:8b:da:2a:0d:5d:3f:24:8f:b8:3c:4a:fe:ce: bf:81:58:32 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUKETt8mpAD/2c5Upg5obRyM0oESwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk NDhjN2QzZTAeFw0yNTEyMTUxNzUwMzJaFw0yNjEyMTQxNzU1MzJaMDMxMTAvBgNV BAMTKENDNTk0ODkyNzFFQUFDMjM5MkZEQzNCMEQ0Q0JCQTA1RkI0RjkwNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfcpc3GZHr/rcYlyg7DvhVzwKq 2RsS4hqQFKB/GaEpHYVTDj1ZaF/Iu9G4S/YXkZDhoHzcHHjtD5kISD2Te5B1cKOx LWTm73BkXNv8FOnV2wNQwiUFE/L+jS3pSjInwRwr01YmZs6pCTnD/z1kDADw6XiM GFHRr4IsgyupJ1cH272jMThRWnSOpPnlbVOwgK+Ne6pNCYaRPeDr+0GkD9wwsZKf +AkNvfPjZNtlmwQC+i2hrMZOpL0lKWnulJyudSfrAM/3zzClSC5v854AKQHK5RhO wnRcoDXJ1uSeLBNohEW/WR0rDZw9kVuZ0Ye1h5EpK9m7GuqQLgBcwBaCfv1rAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUzFlIknHqrCOS/cOw1Mu6BftPkEEwHwYDVR0j BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT TWZUNC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM3 MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMTM1MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADVi08wDQYJKoZIhvcNAQELBQADggEBAG8viHNr3PqWVLFGk8wbjDJO6Lph3zkI cWNpA3Yo51B+Xspwkv2l16LUwjxVOCg2Uk5ucUY5Ivc0onQsS54IZkOJzkw9E50e mA/g1qXMhh7eiHL/tV1crKCenzrXfECgsHybGls58VgZMy5y9rP3grOK7Lg1ZBw/ DwiNL1ThUC0nuuGwXPH451kGSw2C72F5w4U24LsVUoM7FKmHYuLeb1aVEFsbXLBT 81/c6jx5rdQvRCbM6Zbq+NYsMTVvmh4w0WLb02W869vtWQRIzUnRuYxFuzVkhXxU AZzuS0CZzcYEWgUKLdT2Q2SR5uILHC2ci9oqDV0/JI+4PEr+zr+BWDI= -----END CERTIFICATE-----Generated at Fri Dec 19 21:49:34 2025 by rpki-client