This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38312e302f32342d3234203d3e20313437303439.roa File: 3231322e31352e38312e302f32342d3234203d3e20313437303439.roa (raw, json) Hash identifier: mXiXH7FYkxP7lgSa6Q/qwvpPTmp7CV5Q6Eob9hy7fEo= Subject key identifier: E3:36:5F:F3:A2:18:0F:36:CC:D5:C9:99:0A:E5:21:35:7E:8F:C4:99 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 6252A26C205E2B479408E3C09848CD4E2C4EE7C2 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38312e302f32342d3234203d3e20313437303439.roa Signing time: Thu 18 Dec 2025 10:50:20 +0000 ROA not before: Thu 18 Dec 2025 10:45:20 +0000 ROA not after: Thu 17 Dec 2026 10:50:20 +0000 asID: 147049 IP address blocks: 212.15.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:52:a2:6c:20:5e:2b:47:94:08:e3:c0:98:48:cd:4e:2c:4e:e7:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 18 10:45:20 2025 GMT Not After : Dec 17 10:50:20 2026 GMT Subject: CN=E3365FF3A2180F36CCD5C9990AE521357E8FC499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:cc:b4:3a:fc:7d:7c:ac:7c:e0:2f:57:fd: e9:5f:4a:8f:01:7e:43:d5:e5:04:61:85:46:8f:c1: 20:60:7b:2a:b7:df:a5:d8:98:ac:2c:92:56:db:92: a0:70:d8:3e:be:13:d6:be:56:c9:c7:51:ee:03:c9: 3f:26:fc:a6:07:c7:e1:5d:ab:d4:e9:6b:ee:91:99: 52:89:75:8c:0a:fe:a3:c2:f3:2a:90:56:40:93:42: e2:0f:6a:79:68:64:5d:47:3a:29:63:ce:f4:e8:bc: 81:05:78:92:a5:3f:3e:c4:7e:42:7b:4b:99:e2:43: 54:ab:b8:4b:ce:9b:42:53:4e:49:6a:1e:b4:b1:80: 2e:d3:1f:fc:c8:03:38:ae:45:4e:1a:66:d4:5a:cc: ab:c8:ea:49:c4:35:c8:46:ae:47:4e:9c:71:b2:b8: 2f:2a:33:41:6a:3c:6c:3c:1e:94:25:10:f7:ad:07: 00:26:b6:17:66:20:4c:8e:eb:aa:c5:68:80:09:00: d1:c5:44:0c:de:16:16:ad:b0:d0:bd:03:14:fd:cf: 4e:24:29:35:58:6b:0d:dd:3a:c1:a2:e0:58:1c:60: ea:e4:fb:a1:6f:b7:91:a7:08:37:cd:e5:9e:7e:f6: 05:9c:8a:11:c5:64:b6:c1:b8:36:53:ee:01:68:24: f6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:36:5F:F3:A2:18:0F:36:CC:D5:C9:99:0A:E5:21:35:7E:8F:C4:99 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38312e302f32342d3234203d3e20313437303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.15.81.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:6b:b6:a6:6e:de:d1:e3:1f:68:b4:fc:a9:5f:89:0a:01:fb: 6f:c3:92:d0:af:24:bc:98:c1:b9:50:24:25:59:bb:33:58:cf: de:0b:bd:2c:e1:58:c6:ab:9f:0a:81:0e:fc:14:30:18:b3:bd: 25:31:fd:f8:dd:ee:4b:c8:27:ae:96:e0:da:2b:ed:9b:4f:95: d3:92:2d:9b:35:08:31:6b:77:95:07:10:96:62:f6:71:4c:c3: 66:ed:29:22:a7:db:93:25:10:7a:ff:ff:7e:c0:ea:9d:ff:3c: 2b:2f:0e:3a:b6:8c:92:89:a1:e4:43:47:97:96:d6:ab:40:77: bf:5c:96:76:a8:e5:78:3e:da:31:d7:6f:23:fc:d2:bb:eb:0f: 46:99:63:11:c3:cb:d3:f3:88:f2:5b:c2:0c:7a:54:91:ae:76: 46:d8:52:3b:c5:3c:1b:a6:dd:d6:f1:39:eb:28:1c:1d:51:d6: 24:63:b7:ba:3d:5c:05:37:72:ab:52:d6:1d:01:d9:5a:ab:d4: f3:a1:36:bd:4b:80:1e:3d:6f:1b:c8:cc:c1:79:81:98:9e:af: dd:eb:b4:02:bb:aa:d4:69:0b:64:a4:b4:94:52:ee:97:7f:cf: 2f:ec:55:a0:09:64:9a:0d:6e:83:15:e0:a7:80:61:9a:1e:d0: 0c:73:09:21 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUYlKibCBeK0eUCOPAmEjNTixO58IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMTgxMDQ1MjBaFw0yNjEyMTcxMDUwMjBaMDMxMTAvBgNV BAMTKEUzMzY1RkYzQTIxODBGMzZDQ0Q1Qzk5OTBBRTUyMTM1N0U4RkM0OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+E8y0Ovx9fKx84C9X/elfSo8B fkPV5QRhhUaPwSBgeyq336XYmKwsklbbkqBw2D6+E9a+VsnHUe4DyT8m/KYHx+Fd q9Tpa+6RmVKJdYwK/qPC8yqQVkCTQuIPanloZF1HOiljzvTovIEFeJKlPz7EfkJ7 S5niQ1SruEvOm0JTTklqHrSxgC7TH/zIAziuRU4aZtRazKvI6knENchGrkdOnHGy uC8qM0FqPGw8HpQlEPetBwAmthdmIEyO66rFaIAJANHFRAzeFhatsNC9AxT9z04k KTVYaw3dOsGi4FgcYOrk+6Fvt5GnCDfN5Z5+9gWcihHFZLbBuDZT7gFoJPbnAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU4zZf86IYDzbM1cmZCuUhNX6PxJkwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzMTM1MmUzODMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDM3MzAzNDM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 1A9RMA0GCSqGSIb3DQEBCwUAA4IBAQBqa7ambt7R4x9otPypX4kKAftvw5LQryS8 mMG5UCQlWbszWM/eC70s4VjGq58KgQ78FDAYs70lMf343e5LyCeuluDaK+2bT5XT ki2bNQgxa3eVBxCWYvZxTMNm7Skip9uTJRB6//9+wOqd/zwrLw46toySiaHkQ0eX ltarQHe/XJZ2qOV4Ptox128j/NK76w9GmWMRw8vT84jyW8IMelSRrnZG2FI7xTwb pt3W8TnrKBwdUdYkY7e6PVwFN3KrUtYdAdlaq9TzoTa9S4AePW8byMzBeYGYnq/d 67QCu6rUaQtkpLSUUu6Xf88v7FWgCWSaDW6DFeCngGGaHtAMcwkh -----END CERTIFICATE-----Generated at Fri Dec 19 21:28:41 2025 by rpki-client