This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38302e302f32342d3234203d3e20313437303439.roa File: 3231322e31352e38302e302f32342d3234203d3e20313437303439.roa (raw, json) Hash identifier: 7yLwr3qjeFVwu+dRIdjUMjYV4yqAiUgWZWDzSga6Ggc= Subject key identifier: 32:AA:AF:2B:A6:4A:A4:3F:20:C8:53:D9:9E:D4:32:51:4F:1A:5D:24 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 1A8092AD98D1BA6C0EE37527237C77C1A5940F1B Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38302e302f32342d3234203d3e20313437303439.roa Signing time: Thu 18 Dec 2025 10:50:19 +0000 ROA not before: Thu 18 Dec 2025 10:45:19 +0000 ROA not after: Thu 17 Dec 2026 10:50:19 +0000 asID: 147049 IP address blocks: 212.15.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:80:92:ad:98:d1:ba:6c:0e:e3:75:27:23:7c:77:c1:a5:94:0f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 18 10:45:19 2025 GMT Not After : Dec 17 10:50:19 2026 GMT Subject: CN=32AAAF2BA64AA43F20C853D99ED432514F1A5D24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:38:4a:31:62:c9:6b:72:56:f4:fe:60:23:ff: e1:71:de:0a:d1:d3:43:08:26:47:1b:3c:18:51:ec: b4:0a:6b:3c:fd:16:ed:74:3b:a2:47:8a:c9:57:e0: 45:f4:9c:a7:2f:a9:86:9f:90:cf:e1:09:95:0e:0c: 7b:e6:62:b0:c6:c8:1e:e2:5e:24:57:a0:fe:47:79: 54:4f:e1:3d:84:49:42:c8:fd:e7:a6:25:61:4a:66: 76:63:ca:52:2d:2e:65:f4:8e:81:8e:a5:b6:ac:4e: c9:1f:b6:c1:a2:07:a7:10:d0:c8:12:38:c2:a6:96: f6:e2:5e:6f:22:97:b7:3b:b1:ab:f9:29:59:aa:e3: cb:68:a2:fc:bb:ca:5f:12:c2:e7:6c:2d:29:93:e8: 39:c1:a6:78:b3:df:b6:44:90:86:af:a1:6e:78:c3: 02:f0:55:b0:4a:2e:80:64:11:48:ca:4e:4b:ed:94: 57:38:4d:d6:7d:ed:80:e4:60:10:7f:c7:74:eb:44: ec:8c:c5:fb:e2:2c:a0:a7:0d:3d:eb:f8:82:69:08: fa:37:a8:4b:c8:81:04:7e:37:ed:a9:d9:eb:8e:9a: 34:15:0e:73:09:47:c6:98:35:75:20:b8:f8:ac:4c: 9b:c1:95:b0:95:e7:d7:9b:86:9a:b8:0d:71:30:c3: 8e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AA:AF:2B:A6:4A:A4:3F:20:C8:53:D9:9E:D4:32:51:4F:1A:5D:24 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38302e302f32342d3234203d3e20313437303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.15.80.0/24 Signature Algorithm: sha256WithRSAEncryption 49:49:71:7e:7d:d9:6b:74:9d:f6:65:6e:e8:77:ae:e9:2a:c9: c9:b5:91:8a:dc:73:23:99:16:38:bc:f6:3c:04:a4:34:75:05: 94:9d:58:86:12:66:d9:ef:1a:31:33:39:02:8e:75:0e:e2:0d: 35:df:96:c5:52:20:ac:16:28:3b:7c:dd:b4:a1:aa:1f:01:b9: c6:86:21:09:47:50:9a:ab:7c:a9:ef:4f:a5:9a:05:35:cf:05: d0:67:a6:8a:b9:ce:50:d6:bf:1e:55:b7:0a:ee:a8:bb:58:1f: 3e:75:c7:2a:ba:98:9a:1a:46:ed:22:4d:c6:c0:6a:bb:46:a7: d1:46:bb:b4:4c:29:64:67:83:fd:fa:43:03:ac:83:ab:0f:55: 5b:05:04:5b:ba:94:4b:51:fc:c8:6a:74:ad:cc:43:29:f5:1e: 99:b7:13:bb:6f:62:2f:53:de:7b:dc:3f:bd:4c:a9:1b:21:f9: 6b:9a:16:1f:79:91:94:19:32:9e:b1:c3:41:90:0e:3a:0e:29: 77:f3:0c:25:f5:1d:46:d7:07:eb:90:6f:ee:02:c1:7f:5a:ca: 07:49:b7:be:a7:f0:9a:b8:15:02:b1:fe:13:2c:ec:73:5f:e8: 4d:6c:2c:32:92:1f:b8:85:09:a0:f6:7a:f7:cd:67:79:e7:ab: 30:a9:a7:0b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUGoCSrZjRumwO43UnI3x3waWUDxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMTgxMDQ1MTlaFw0yNjEyMTcxMDUwMTlaMDMxMTAvBgNV BAMTKDMyQUFBRjJCQTY0QUE0M0YyMEM4NTNEOTlFRDQzMjUxNEYxQTVEMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcOEoxYslrclb0/mAj/+Fx3grR 00MIJkcbPBhR7LQKazz9Fu10O6JHislX4EX0nKcvqYafkM/hCZUODHvmYrDGyB7i XiRXoP5HeVRP4T2ESULI/eemJWFKZnZjylItLmX0joGOpbasTskftsGiB6cQ0MgS OMKmlvbiXm8il7c7sav5KVmq48toovy7yl8SwudsLSmT6DnBpniz37ZEkIavoW54 wwLwVbBKLoBkEUjKTkvtlFc4TdZ97YDkYBB/x3TrROyMxfviLKCnDT3r+IJpCPo3 qEvIgQR+N+2p2euOmjQVDnMJR8aYNXUguPisTJvBlbCV59ebhpq4DXEww46/AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUMqqvK6ZKpD8gyFPZntQyUU8aXSQwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzMTM1MmUzODMw MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDM3MzAzNDM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 1A9QMA0GCSqGSIb3DQEBCwUAA4IBAQBJSXF+fdlrdJ32ZW7od67pKsnJtZGK3HMj mRY4vPY8BKQ0dQWUnViGEmbZ7xoxMzkCjnUO4g0135bFUiCsFig7fN20oaofAbnG hiEJR1Caq3yp70+lmgU1zwXQZ6aKuc5Q1r8eVbcK7qi7WB8+dccqupiaGkbtIk3G wGq7RqfRRru0TClkZ4P9+kMDrIOrD1VbBQRbupRLUfzIanStzEMp9R6ZtxO7b2Iv U9573D+9TKkbIflrmhYfeZGUGTKescNBkA46Dil38wwl9R1G1wfrkG/uAsF/WsoH Sbe+p/CauBUCsf4TLOxzX+hNbCwykh+4hQmg9nr3zWd556swqacL -----END CERTIFICATE-----Generated at Fri Dec 19 21:29:09 2025 by rpki-client