This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3231322e32332e3231392e302f32342d3234203d3e20343031373736.roa File: 3231322e32332e3231392e302f32342d3234203d3e20343031373736.roa (raw, json) Hash identifier: l2bgxk2QsJ2hm7ApfLEmZHejR3QB5+dyJiuOIYQWmg0= Subject key identifier: 55:D8:80:3F:13:A0:95:70:64:EE:B5:9B:AB:92:27:24:D6:C9:AC:E1 Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Certificate serial: 503D9B20EDF8D93739BB46F78E29EB2BCCD57BFA Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3231322e32332e3231392e302f32342d3234203d3e20343031373736.roa Signing time: Fri 19 Dec 2025 03:13:31 +0000 ROA not before: Fri 19 Dec 2025 03:08:31 +0000 ROA not after: Fri 18 Dec 2026 03:13:31 +0000 asID: 401776 IP address blocks: 212.23.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 18:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:3d:9b:20:ed:f8:d9:37:39:bb:46:f7:8e:29:eb:2b:cc:d5:7b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Validity Not Before: Dec 19 03:08:31 2025 GMT Not After : Dec 18 03:13:31 2026 GMT Subject: CN=55D8803F13A0957064EEB59BAB922724D6C9ACE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9d:45:b3:ae:2d:cd:06:52:1a:c7:a4:db:33: c8:2d:c2:2c:ac:01:34:d3:3b:1d:94:43:04:ad:45: c9:2b:02:1e:a2:d5:6d:c4:7e:34:f5:79:e4:ff:2d: e3:20:bc:d9:ac:a4:0b:6b:c3:42:d6:39:e1:a8:e6: e1:a1:4f:c8:1a:dc:27:bd:8d:96:61:40:17:2b:54: d3:04:25:52:9c:ac:b5:d3:80:fd:10:3c:68:ae:b7: b7:81:42:6f:9e:b2:d6:ef:e3:cb:4a:da:ac:ec:33: 41:d4:08:9f:06:1f:e7:0b:83:98:8c:e5:fc:b2:70: bf:7a:78:3a:24:32:1e:96:8e:ef:0c:79:bf:5f:1f: 5e:d6:03:7c:7e:62:d4:72:0f:f3:d1:05:60:e0:87: 40:8d:f5:c2:50:0b:ad:f1:e0:ac:ce:b4:39:24:0f: 0b:b1:f1:70:51:75:42:c7:5e:7c:2a:67:38:07:69: ae:33:25:13:19:03:cf:37:06:a3:69:6f:14:11:bb: f5:9c:7e:57:0c:ab:87:22:7d:72:57:7b:f2:91:d9: 6c:ae:0b:a4:c5:ca:67:48:8f:3e:cd:60:21:ae:54: 64:4b:8c:f4:fe:88:24:91:bd:a6:83:31:3e:48:2c: 5c:dc:b2:81:79:1a:f8:e1:19:1d:97:04:76:b6:5e: d2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D8:80:3F:13:A0:95:70:64:EE:B5:9B:AB:92:27:24:D6:C9:AC:E1 X509v3 Authority Key Identifier: keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3231322e32332e3231392e302f32342d3234203d3e20343031373736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.23.219.0/24 Signature Algorithm: sha256WithRSAEncryption b3:bf:92:98:1a:fb:fd:59:fb:c6:6a:3c:f8:7f:87:fb:d3:cb: 9e:87:67:29:9f:44:07:6f:27:d0:4d:b3:7d:2b:45:ec:bb:1d: f1:32:68:ea:01:fd:17:a5:fc:f3:77:04:7a:f9:8c:5b:49:78: 11:68:5e:96:88:28:26:8c:9c:1d:4a:66:3e:01:05:f6:d8:64: 1d:44:12:17:65:85:36:e8:d8:f8:fd:a5:9b:26:73:98:62:77: b7:21:d3:d0:45:ff:28:74:b0:6a:9f:2e:a0:35:c7:7a:c9:23: 4f:9a:a1:92:7a:2c:77:75:e0:60:6a:5e:d4:0e:2d:b0:16:20: d2:85:74:3a:c1:77:37:44:f4:2d:f8:fd:ce:ec:41:77:58:d5: 8c:99:d6:fc:ce:0a:d2:77:df:47:3f:1f:ad:f1:4e:6b:ef:6e: 58:fb:07:e6:7a:5f:1e:04:19:94:6f:6c:45:b3:2b:03:56:d8: 45:26:92:97:93:1d:6a:99:d8:ee:8a:d3:f0:aa:50:d0:14:9c: f1:f2:4f:aa:e1:5e:64:9d:b5:be:37:61:de:3c:90:b9:5b:6f: c3:d9:95:f8:95:c2:52:2b:b7:33:00:08:fb:5e:db:3e:c8:d8: d8:c3:19:8c:6d:c5:36:06:3f:a8:21:b0:72:2b:96:d7:b1:2e: b4:0a:d9:0b -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUUD2bIO342Tc5u0b3jinrK8zVe/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3 OWI1ZmQ5MTAeFw0yNTEyMTkwMzA4MzFaFw0yNjEyMTgwMzEzMzFaMDMxMTAvBgNV BAMTKDU1RDg4MDNGMTNBMDk1NzA2NEVFQjU5QkFCOTIyNzI0RDZDOUFDRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKnUWzri3NBlIax6TbM8gtwiys ATTTOx2UQwStRckrAh6i1W3EfjT1eeT/LeMgvNmspAtrw0LWOeGo5uGhT8ga3Ce9 jZZhQBcrVNMEJVKcrLXTgP0QPGiut7eBQm+estbv48tK2qzsM0HUCJ8GH+cLg5iM 5fyycL96eDokMh6Wju8Meb9fH17WA3x+YtRyD/PRBWDgh0CN9cJQC63x4KzOtDkk Dwux8XBRdULHXnwqZzgHaa4zJRMZA883BqNpbxQRu/WcflcMq4cifXJXe/KR2Wyu C6TFymdIjz7NYCGuVGRLjPT+iCSRvaaDMT5ILFzcsoF5GvjhGR2XBHa2XtLpAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUVdiAPxOglXBk7rWbq5InJNbJrOEwHwYDVR0j BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5 ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t MV9aRS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzIzMTMyMmUzMjMzMmUzMjMx MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzEzNzM3MzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADUF9swDQYJKoZIhvcNAQELBQADggEBALO/kpga+/1Z+8ZqPPh/h/vTy56HZymf RAdvJ9BNs30rRey7HfEyaOoB/Rel/PN3BHr5jFtJeBFoXpaIKCaMnB1KZj4BBfbY ZB1EEhdlhTbo2Pj9pZsmc5hid7ch09BF/yh0sGqfLqA1x3rJI0+aoZJ6LHd14GBq XtQOLbAWINKFdDrBdzdE9C34/c7sQXdY1YyZ1vzOCtJ330c/H63xTmvvblj7B+Z6 Xx4EGZRvbEWzKwNW2EUmkpeTHWqZ2O6K0/CqUNAUnPHyT6rhXmSdtb43Yd48kLlb b8PZlfiVwlIrtzMACPte2z7I2NjDGYxtxTYGP6ghsHIrltexLrQK2Qs= -----END CERTIFICATE-----Generated at Sat Dec 20 07:44:11 2025 by rpki-client