This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137342e302f32342d3234203d3e20323132333335.roa File: 3130392e3131302e3137342e302f32342d3234203d3e20323132333335.roa (raw, json) Hash identifier: /3wXIH6WlScVe8AJidNFxj8dOzb5CT09l5bwcWq9Y14= Subject key identifier: 58:C0:29:18:A9:38:28:84:AE:42:19:8C:10:B7:F8:1A:2F:BF:CD:96 Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Certificate serial: 0B206C71F86988CA622E1A683D4F2934301599D5 Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137342e302f32342d3234203d3e20323132333335.roa Signing time: Fri 12 Dec 2025 14:55:32 +0000 ROA not before: Fri 12 Dec 2025 14:50:32 +0000 ROA not after: Fri 11 Dec 2026 14:55:32 +0000 asID: 212335 IP address blocks: 109.110.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:20:6c:71:f8:69:88:ca:62:2e:1a:68:3d:4f:29:34:30:15:99:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Validity Not Before: Dec 12 14:50:32 2025 GMT Not After : Dec 11 14:55:32 2026 GMT Subject: CN=58C02918A9382884AE42198C10B7F81A2FBFCD96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0f:65:56:ee:4e:ec:51:f7:96:bf:3b:7f:8c: 68:97:3d:56:c2:68:a5:55:fd:30:a8:6a:6f:43:c5: 6f:a3:30:4b:9b:b1:ab:9e:cb:73:b4:da:91:b6:f6: c8:d1:ad:7c:44:66:61:c6:8b:7d:88:c4:7d:a6:9d: d2:0f:cc:50:37:82:69:bf:2e:c6:a9:55:88:d9:84: 4a:66:09:80:81:43:d8:9d:52:56:1e:01:ff:30:cf: bb:0a:f5:24:71:a7:2d:ad:8f:0e:80:ea:c3:f8:61: 06:5f:50:b7:ac:89:3d:32:b7:c6:a3:b4:a5:d6:64: 3c:91:90:fd:33:99:53:00:3c:fb:87:3f:10:4d:ad: 38:07:b6:a1:1c:5b:85:3d:09:fb:67:39:83:ee:4d: 6c:29:47:27:53:23:e2:74:e7:45:c8:85:e9:f3:3f: 08:5e:e4:0a:59:c5:2e:d5:82:ad:fe:b8:4a:6a:7f: ab:f0:7d:3e:bd:b2:4b:89:50:81:fd:ee:51:2c:7f: 57:cb:6c:4e:29:a1:43:78:92:25:cc:9e:b7:4e:f0: 92:39:44:b3:b6:2b:d8:65:18:34:b6:84:ad:47:33: 50:bf:5f:83:fa:9f:2c:4e:7d:a0:cf:af:4e:c8:54: 08:d0:ed:92:bd:ed:19:e7:70:73:3e:f3:2e:d6:06: f8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C0:29:18:A9:38:28:84:AE:42:19:8C:10:B7:F8:1A:2F:BF:CD:96 X509v3 Authority Key Identifier: keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137342e302f32342d3234203d3e20323132333335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.110.174.0/24 Signature Algorithm: sha256WithRSAEncryption 50:3f:47:e9:ef:fd:f1:06:e9:53:2d:f8:12:67:ee:ed:1f:38: 9f:02:8e:ab:d6:1f:eb:a4:53:d8:6f:78:4e:22:ce:8e:76:fe: 50:74:ba:9b:8e:cc:bd:70:01:d4:03:b1:f5:95:de:b9:7b:72: e4:96:9d:26:84:37:67:17:c7:47:c8:84:82:24:96:2e:63:7d: 71:ec:ea:10:97:1b:65:f8:af:e1:e6:01:84:81:ee:a6:ac:b6: f7:79:35:64:c1:ee:38:35:b3:91:f2:3a:6e:9e:86:7d:a5:8c: a6:53:c9:87:b7:1d:61:cb:42:7e:8b:dd:71:d7:f6:57:1f:fd: 0e:5e:02:56:40:3a:45:26:a3:8b:58:7e:62:fe:1e:d3:e7:54: e9:bf:47:e1:63:8f:49:ed:d4:d5:ca:5b:67:a0:fa:a0:2c:04: ac:95:4b:0e:78:5a:d6:bb:ae:fe:e9:e9:56:20:2f:c1:fc:0f: 11:4f:66:fc:8e:44:fb:44:81:82:59:2f:15:c5:8c:c1:f6:da: f6:17:0f:51:d6:82:1b:51:2f:b4:a3:9a:b0:49:32:fe:06:96: 7d:1e:88:d5:10:5e:4e:04:d7:6b:22:af:b1:7a:93:eb:01:e2: 22:80:43:2c:82:5f:a3:73:ff:8f:ce:11:3a:12:06:15:05:53: 22:84:af:67 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUCyBscfhpiMpiLhpoPU8pNDAVmdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl ODZlMGVmYzAeFw0yNTEyMTIxNDUwMzJaFw0yNjEyMTExNDU1MzJaMDMxMTAvBgNV BAMTKDU4QzAyOTE4QTkzODI4ODRBRTQyMTk4QzEwQjdGODFBMkZCRkNEOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9D2VW7k7sUfeWvzt/jGiXPVbC aKVV/TCoam9DxW+jMEubsauey3O02pG29sjRrXxEZmHGi32IxH2mndIPzFA3gmm/ LsapVYjZhEpmCYCBQ9idUlYeAf8wz7sK9SRxpy2tjw6A6sP4YQZfULesiT0yt8aj tKXWZDyRkP0zmVMAPPuHPxBNrTgHtqEcW4U9CftnOYPuTWwpRydTI+J050XIhenz Pwhe5ApZxS7Vgq3+uEpqf6vwfT69skuJUIH97lEsf1fLbE4poUN4kiXMnrdO8JI5 RLO2K9hlGDS2hK1HM1C/X4P6nyxOfaDPr07IVAjQ7ZK97RnncHM+8y7WBviXAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUWMApGKk4KISuQhmMELf4Gi+/zZYwHwYDVR0j BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo dUR2dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx MzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMzMzMzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAG1urjANBgkqhkiG9w0BAQsFAAOCAQEAUD9H6e/98QbpUy34Emfu7R84nwKO q9Yf66RT2G94TiLOjnb+UHS6m47MvXAB1AOx9ZXeuXty5JadJoQ3ZxfHR8iEgiSW LmN9cezqEJcbZfiv4eYBhIHupqy293k1ZMHuODWzkfI6bp6GfaWMplPJh7cdYctC fovdcdf2Vx/9Dl4CVkA6RSaji1h+Yv4e0+dU6b9H4WOPSe3U1cpbZ6D6oCwErJVL Dnha1ruu/unpViAvwfwPEU9m/I5E+0SBglkvFcWMwfba9hcPUdaCG1EvtKOasEky /gaWfR6I1RBeTgTXayKvsXqT6wHiIoBDLIJfo3P/j84ROhIGFQVTIoSvZw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:02:09 2025 by rpki-client