This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233372e302f32342d3234203d3e203231383430.roa File: 3231322e322e3233372e302f32342d3234203d3e203231383430.roa (raw, json) Hash identifier: L3ESl8pbUNlgeTu9V2jD2ZSXQbLunRFyb09yQ4PEhVI= Subject key identifier: DB:7D:06:A8:63:79:15:A6:52:8F:51:1D:D6:91:FB:4B:A6:92:42:8C Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a Certificate serial: 0E8BF76F49888C56CBED69B51ADB30DE3C0D8CFF Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233372e302f32342d3234203d3e203231383430.roa Signing time: Mon 15 Dec 2025 03:55:32 +0000 ROA not before: Mon 15 Dec 2025 03:50:32 +0000 ROA not after: Mon 14 Dec 2026 03:55:32 +0000 asID: 21840 IP address blocks: 212.2.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 04:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:8b:f7:6f:49:88:8c:56:cb:ed:69:b5:1a:db:30:de:3c:0d:8c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a Validity Not Before: Dec 15 03:50:32 2025 GMT Not After : Dec 14 03:55:32 2026 GMT Subject: CN=DB7D06A8637915A6528F511DD691FB4BA692428C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:be:ff:d4:c3:a8:d3:09:cf:73:56:ca:ad:36: 64:18:79:cb:a2:ed:89:70:63:e2:33:a6:46:d4:f0: dd:19:44:61:24:e1:92:9a:2c:49:f6:0a:73:5e:4f: ed:96:ef:ed:03:c1:cd:a9:0e:66:fa:15:45:b4:68: 60:1f:53:0e:84:86:52:af:88:ef:63:d2:40:cd:01: 95:74:0a:44:1f:ff:88:14:52:a6:a1:2a:a4:1f:3e: 0c:a1:3f:74:02:de:e6:77:c9:0c:73:5b:c7:71:4b: 5a:10:f0:f7:8e:bd:98:e7:68:1d:94:f0:6d:b1:a9: 03:46:9d:99:06:f9:ff:5e:93:16:ec:ec:ce:0e:f4: 72:e8:9d:e7:3a:7e:70:00:0d:dd:d4:24:30:19:42: a3:05:4c:48:aa:20:5b:90:ae:f3:56:06:38:d5:e8: 0f:a8:0d:ca:38:33:48:95:78:39:ef:d8:63:37:11: 88:e4:68:53:88:04:35:74:6d:af:50:e9:e0:25:8a: b0:35:21:be:19:ee:5d:2a:7f:49:4e:e6:7e:c1:b9: 60:df:e5:cc:f3:98:18:80:24:0a:e0:b7:46:63:5c: b2:23:fe:19:c6:83:a3:fe:17:6c:d4:54:4f:d0:7d: 1d:1f:d3:e8:7d:97:c5:b1:b4:61:15:6c:08:6e:d5: 3e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7D:06:A8:63:79:15:A6:52:8F:51:1D:D6:91:FB:4B:A6:92:42:8C X509v3 Authority Key Identifier: keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233372e302f32342d3234203d3e203231383430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.2.237.0/24 Signature Algorithm: sha256WithRSAEncryption 77:86:dc:d5:1f:98:f5:da:81:64:91:bc:f9:e9:d7:f6:4b:7c: 45:35:f9:00:b9:09:fa:99:79:21:f4:e7:a2:28:3c:49:69:4c: 22:82:f3:92:3d:33:a2:57:0f:d7:9d:ff:44:0c:23:50:7c:fa: 09:83:38:14:3c:9a:51:6c:16:a0:e0:c1:4d:f9:c9:29:59:e8: 20:46:fc:2b:3f:3c:54:d7:ec:aa:d9:f6:db:24:83:d7:4e:90: b0:c6:8c:3c:53:f6:c1:0c:34:06:da:00:cb:9b:54:35:68:80: 31:34:eb:f8:a7:f7:1e:61:6f:a2:07:11:64:5a:e7:7b:05:4f: 14:93:d9:55:d9:64:bc:91:22:24:5d:e6:0c:f3:6d:5c:d2:98: b3:45:85:fe:5c:5e:28:d9:e5:39:04:88:7e:e8:76:ae:b4:78: 2d:e2:97:e8:19:c5:e9:64:74:26:95:73:b5:14:5b:6b:8d:18: 47:22:f8:01:df:0a:b2:a1:2a:bb:46:80:62:0e:b8:dc:14:13: dd:ae:e8:32:03:53:22:c1:1b:22:69:38:c5:d7:b2:f8:08:56: 07:cd:66:8a:49:d9:bd:00:23:74:ec:a0:aa:4f:28:d0:4c:6d: ef:48:97:31:37:7a:b9:45:24:8f:00:5b:77:17:4b:f6:8a:db: 1f:9e:47:7b -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUDov3b0mIjFbL7Wm1Gtsw3jwNjP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3 ZTMwNTY0YTAeFw0yNTEyMTUwMzUwMzJaFw0yNjEyMTQwMzU1MzJaMDMxMTAvBgNV BAMTKERCN0QwNkE4NjM3OTE1QTY1MjhGNTExREQ2OTFGQjRCQTY5MjQyOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuvv/Uw6jTCc9zVsqtNmQYecui 7YlwY+IzpkbU8N0ZRGEk4ZKaLEn2CnNeT+2W7+0Dwc2pDmb6FUW0aGAfUw6EhlKv iO9j0kDNAZV0CkQf/4gUUqahKqQfPgyhP3QC3uZ3yQxzW8dxS1oQ8PeOvZjnaB2U 8G2xqQNGnZkG+f9ekxbs7M4O9HLonec6fnAADd3UJDAZQqMFTEiqIFuQrvNWBjjV 6A+oDco4M0iVeDnv2GM3EYjkaFOIBDV0ba9Q6eAlirA1Ib4Z7l0qf0lO5n7BuWDf 5czzmBiAJArgt0ZjXLIj/hnGg6P+F2zUVE/QfR0f0+h9l8WxtGEVbAhu1T5/AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU230GqGN5FaZSj1Ed1pH7S6aSQowwHwYDVR0j BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5 ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0 d1Zrby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzIzMTMyMmUzMjJlMzIzMzM3 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM4MzQzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQC 7TANBgkqhkiG9w0BAQsFAAOCAQEAd4bc1R+Y9dqBZJG8+enX9kt8RTX5ALkJ+pl5 IfTnoig8SWlMIoLzkj0zolcP153/RAwjUHz6CYM4FDyaUWwWoODBTfnJKVnoIEb8 Kz88VNfsqtn22ySD106QsMaMPFP2wQw0BtoAy5tUNWiAMTTr+Kf3HmFvogcRZFrn ewVPFJPZVdlkvJEiJF3mDPNtXNKYs0WF/lxeKNnlOQSIfuh2rrR4LeKX6BnF6WR0 JpVztRRba40YRyL4Ad8KsqEqu0aAYg643BQT3a7oMgNTIsEbImk4xdey+AhWB81m iknZvQAjdOygqk8o0Ext70iXMTd6uUUkjwBbdxdL9orbH55Hew== -----END CERTIFICATE-----Generated at Mon Dec 29 13:24:44 2025 by rpki-client