This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20313534343038.roa File: 3130332e34392e3133312e302f32342d3234203d3e20313534343038.roa (raw, json) Hash identifier: uNydLTQQX3HfUttLHpAQztbzmsLo2FwUjxcM/0z5ejA= Subject key identifier: 3C:48:E3:C1:90:C9:49:E3:FD:7C:1D:BA:12:5D:96:91:BC:49:93:DF Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 252F49D964B0534B9B6F55E8A18C396FCF0557D0 Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20313534343038.roa Signing time: Thu 11 Dec 2025 07:49:38 +0000 ROA not before: Thu 11 Dec 2025 07:44:38 +0000 ROA not after: Thu 10 Dec 2026 07:49:38 +0000 asID: 154408 IP address blocks: 103.49.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:2f:49:d9:64:b0:53:4b:9b:6f:55:e8:a1:8c:39:6f:cf:05:57:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Dec 11 07:44:38 2025 GMT Not After : Dec 10 07:49:38 2026 GMT Subject: CN=3C48E3C190C949E3FD7C1DBA125D9691BC4993DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a8:61:dd:db:3b:69:a1:ce:9b:60:c0:b6:04: aa:98:5d:55:cc:0e:55:44:95:00:42:d5:51:d0:c6: c0:46:dd:c9:ce:90:12:e7:3f:84:fc:a2:83:59:cb: 18:eb:ea:1f:76:d6:af:cc:fc:35:64:a7:c7:9e:ee: a4:d2:59:f7:2a:93:ec:b2:3d:71:03:71:c5:d8:30: b1:b7:2a:c0:be:fa:4e:45:7b:fb:0d:66:f0:17:6e: b5:f7:b7:72:95:a8:59:81:3d:86:4c:4d:54:be:3c: 54:bd:43:1a:36:ab:82:9b:32:17:44:84:d5:77:fe: 1f:1b:a3:cc:04:62:c3:25:92:9b:a9:96:cb:32:9d: 58:74:44:9b:05:1d:42:39:45:4b:49:9f:64:b3:00: c8:e3:db:ba:99:12:46:b0:b4:39:e0:c3:04:b6:df: 30:bf:a0:15:b2:01:c6:4c:fe:6e:8e:cb:6a:d5:f4: 31:7c:7a:d1:49:70:94:91:c2:f0:61:2e:66:95:4c: 7c:9c:f2:63:78:b6:b2:04:f4:f9:01:fe:e4:79:46: 42:b1:1a:f3:b8:a7:f6:08:0c:34:7c:35:ad:65:19: ea:3b:d4:22:c1:48:03:6c:db:f1:28:c0:42:de:ed: 97:a2:b5:0d:7b:11:a4:3c:7b:f9:98:ec:21:75:ab: fa:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:48:E3:C1:90:C9:49:E3:FD:7C:1D:BA:12:5D:96:91:BC:49:93:DF X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20313534343038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.49.131.0/24 Signature Algorithm: sha256WithRSAEncryption 41:d5:74:14:95:48:b9:78:f5:a1:7c:06:99:4c:4a:3c:d8:a1: d6:21:e4:f8:7d:29:f6:66:6f:cd:e4:bf:55:6f:fb:87:5f:b7: 7c:98:66:8f:31:a1:0b:d5:59:db:79:8c:f6:e9:b3:22:a5:42: 15:0c:df:f3:f5:a4:e7:e9:47:15:6b:4d:57:50:c6:5b:5e:8e: c1:97:0e:15:44:68:82:ed:1d:45:af:f7:ae:fa:86:ee:cd:ae: 54:5c:a3:00:6b:a6:03:f0:a1:c0:5f:07:9d:d9:89:36:1f:18: 23:4d:08:b3:2f:a7:3a:11:7b:e3:e6:10:ac:de:d9:45:4e:f1: ea:18:45:24:5c:a6:6a:3b:4d:0e:b2:2b:fb:50:5e:f5:21:b6: 0e:8b:34:4b:28:43:9d:41:96:67:65:1b:f4:a8:72:99:0e:e4: 50:1e:1d:2e:ab:21:7b:8c:54:60:14:58:51:82:ac:61:2a:4c: 5d:36:bf:b3:37:58:10:80:bb:7e:6e:70:b3:5c:a3:86:4e:b3: 97:f2:5d:2d:8b:6b:cb:45:cd:24:ee:b0:14:28:5c:54:2d:3c: 08:a3:35:81:28:0b:65:63:bb:a9:a2:5c:e5:52:d0:19:df:69: 8a:2b:bc:9c:38:2a:6d:44:fb:3c:7d:54:2e:6d:a8:1c:2b:b6: ed:39:d5:da -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUJS9J2WSwU0ubb1XooYw5b88FV9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNTEyMTEwNzQ0MzhaFw0yNjEyMTAwNzQ5MzhaMDMxMTAvBgNV BAMTKDNDNDhFM0MxOTBDOTQ5RTNGRDdDMURCQTEyNUQ5NjkxQkM0OTkzREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqGHd2ztpoc6bYMC2BKqYXVXM DlVElQBC1VHQxsBG3cnOkBLnP4T8ooNZyxjr6h921q/M/DVkp8ee7qTSWfcqk+yy PXEDccXYMLG3KsC++k5Fe/sNZvAXbrX3t3KVqFmBPYZMTVS+PFS9Qxo2q4KbMhdE hNV3/h8bo8wEYsMlkpuplssynVh0RJsFHUI5RUtJn2SzAMjj27qZEkawtDngwwS2 3zC/oBWyAcZM/m6Oy2rV9DF8etFJcJSRwvBhLmaVTHyc8mN4trIE9PkB/uR5RkKx GvO4p/YIDDR8Na1lGeo71CLBSANs2/EowELe7ZeitQ17EaQ8e/mY7CF1q/oLAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUPEjjwZDJSeP9fB26El2WkbxJk98wHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQt NmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2NjIwLzAvMzEzMDMzMmUzNDM5MmUzMTMz MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM1MzQzNDMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnMYMwDQYJKoZIhvcNAQELBQADggEBAEHVdBSVSLl49aF8BplMSjzYodYh5Ph9 KfZmb83kv1Vv+4dft3yYZo8xoQvVWdt5jPbpsyKlQhUM3/P1pOfpRxVrTVdQxlte jsGXDhVEaILtHUWv9676hu7NrlRcowBrpgPwocBfB53ZiTYfGCNNCLMvpzoRe+Pm EKze2UVO8eoYRSRcpmo7TQ6yK/tQXvUhtg6LNEsoQ51BlmdlG/SocpkO5FAeHS6r IXuMVGAUWFGCrGEqTF02v7M3WBCAu35ucLNco4ZOs5fyXS2La8tFzSTusBQoXFQt PAijNYEoC2Vju6miXOVS0BnfaYorvJw4Km1E+zx9VC5tqBwrtu051do= -----END CERTIFICATE-----Generated at Fri Dec 19 16:49:00 2025 by rpki-client