This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138322e302f32342d3234203d3e203235313938.roa File: 3130392e3131302e3138322e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: RXI/LFwkAM36szy6VAOCYOoDTfrODK2d0/4pBFSJ3zs= Subject key identifier: 01:1A:D4:6E:B6:D7:00:2C:E0:E3:8E:CF:94:45:76:9A:05:A2:F8:31 Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Certificate serial: 690EA8C19F1A75BEE5A20E2485383EEBAEF46D69 Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138322e302f32342d3234203d3e203235313938.roa Signing time: Wed 17 Dec 2025 06:30:50 +0000 ROA not before: Wed 17 Dec 2025 06:25:50 +0000 ROA not after: Wed 16 Dec 2026 06:30:50 +0000 asID: 25198 IP address blocks: 109.110.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0e:a8:c1:9f:1a:75:be:e5:a2:0e:24:85:38:3e:eb:ae:f4:6d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Validity Not Before: Dec 17 06:25:50 2025 GMT Not After : Dec 16 06:30:50 2026 GMT Subject: CN=011AD46EB6D7002CE0E38ECF9445769A05A2F831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:f4:47:0d:2f:f8:fe:21:6f:c3:6c:34:ac: 7e:38:13:18:2b:60:7f:af:81:cf:5c:70:a9:08:26: 05:bc:de:b9:a7:6a:2f:fe:8e:54:9c:9e:b9:53:6f: 44:d6:8e:e4:e9:ae:a7:10:a9:3e:d1:4c:ff:11:93: 01:c5:24:bb:8c:23:cd:7e:53:75:0c:07:b8:fd:ee: 34:a9:f7:47:2a:9f:59:96:ff:1f:a8:6a:3d:ca:a3: 9f:4c:af:01:d3:09:27:10:cd:2f:61:c1:ea:70:39: 23:1e:d9:26:b6:68:6b:35:69:af:1e:57:b7:5f:76: 58:cd:ef:83:4f:8a:e8:50:fc:56:82:7f:7d:1a:6b: 2c:f6:67:a1:3e:ab:f6:8e:e6:a8:07:b1:df:80:83: f8:c6:a4:bc:6d:a0:47:87:83:b4:3f:37:39:ab:93: b2:6d:39:c2:c7:b8:d4:77:88:40:06:ce:cd:62:98: 8a:22:ba:49:c3:6d:88:50:77:69:80:13:a8:23:d9: 82:ed:75:dc:f0:97:b5:e8:a5:96:fc:30:59:cf:3d: b3:4e:ba:35:81:4d:09:56:71:bb:7d:c3:fc:a6:a3: 46:fe:f2:a7:b4:e0:33:a1:d5:f5:e1:3b:eb:8c:6f: b3:7b:27:de:0b:9b:49:29:2b:48:f6:71:bc:d2:b3: 9a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1A:D4:6E:B6:D7:00:2C:E0:E3:8E:CF:94:45:76:9A:05:A2:F8:31 X509v3 Authority Key Identifier: keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138322e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.110.182.0/24 Signature Algorithm: sha256WithRSAEncryption 59:4f:b1:66:6e:ff:c4:03:7c:27:78:ef:90:14:ee:62:58:ae: 88:d4:bd:a1:3e:ef:10:0c:63:68:7a:c5:8f:32:94:b2:1a:c2: 9b:3c:7f:ba:a8:24:49:3f:3e:d7:51:8f:c2:78:29:ef:bd:3a: ef:0e:15:15:e8:d8:19:77:9f:36:e4:7e:fa:21:dd:aa:ec:b6: e2:b4:f1:9e:92:63:e4:b6:9b:28:e6:0d:a1:cb:fa:f4:9d:4e: 19:05:b2:ac:7a:7d:46:e5:e2:4a:7c:46:b0:80:a8:28:aa:5b: 75:46:4f:fa:93:56:58:06:2a:76:bb:fc:4a:18:40:6c:af:eb: 55:56:4d:be:c2:5b:54:c1:cd:58:41:3c:4b:7b:6b:dd:2f:e9: 27:3b:7d:f9:11:e4:c8:65:37:db:fb:20:72:51:25:b2:a4:49: 8f:ef:1b:f8:7b:90:2d:d3:a9:14:57:87:2b:1c:d3:36:e4:27: 5e:b0:b5:7f:ac:2f:00:42:f3:88:a0:5a:bb:8e:5b:6f:1c:90: 17:f6:a6:0d:98:75:6e:f9:53:cf:dc:af:98:2b:ff:96:d1:ee: 96:ae:2b:dd:a8:dd:df:0f:44:d8:1d:f0:5b:89:7c:b8:e0:33: d9:2d:91:af:f7:0e:2d:8f:b1:51:36:30:20:4a:4e:16:6d:08: b2:5e:76:e6 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUaQ6owZ8adb7log4khTg+6670bWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl ODZlMGVmYzAeFw0yNTEyMTcwNjI1NTBaFw0yNjEyMTYwNjMwNTBaMDMxMTAvBgNV BAMTKDAxMUFENDZFQjZENzAwMkNFMEUzOEVDRjk0NDU3NjlBMDVBMkY4MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpP/RHDS/4/iFvw2w0rH44Exgr YH+vgc9ccKkIJgW83rmnai/+jlScnrlTb0TWjuTprqcQqT7RTP8RkwHFJLuMI81+ U3UMB7j97jSp90cqn1mW/x+oaj3Ko59MrwHTCScQzS9hwepwOSMe2Sa2aGs1aa8e V7dfdljN74NPiuhQ/FaCf30aayz2Z6E+q/aO5qgHsd+Ag/jGpLxtoEeHg7Q/Nzmr k7JtOcLHuNR3iEAGzs1imIoiuknDbYhQd2mAE6gj2YLtddzwl7XopZb8MFnPPbNO ujWBTQlWcbt9w/ymo0b+8qe04DOh1fXhO+uMb7N7J94Lm0kpK0j2cbzSs5p1AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUARrUbrbXACzg447PlEV2mgWi+DEwHwYDVR0j BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo dUR2dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx MzgzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzUzMTM5Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABtbrYwDQYJKoZIhvcNAQELBQADggEBAFlPsWZu/8QDfCd475AU7mJYrojUvaE+ 7xAMY2h6xY8ylLIawps8f7qoJEk/PtdRj8J4Ke+9Ou8OFRXo2Bl3nzbkfvoh3ars tuK08Z6SY+S2myjmDaHL+vSdThkFsqx6fUbl4kp8RrCAqCiqW3VGT/qTVlgGKna7 /EoYQGyv61VWTb7CW1TBzVhBPEt7a90v6Sc7ffkR5MhlN9v7IHJRJbKkSY/vG/h7 kC3TqRRXhysc0zbkJ16wtX+sLwBC84igWruOW28ckBf2pg2YdW75U8/cr5gr/5bR 7pauK92o3d8PRNgd8FuJfLjgM9ktka/3Di2PsVE2MCBKThZtCLJeduY= -----END CERTIFICATE-----Generated at Fri Dec 19 21:21:26 2025 by rpki-client