This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38322e302f32342d3234203d3e20313437303439.roa File: 3231322e31352e38322e302f32342d3234203d3e20313437303439.roa (raw, json) Hash identifier: t47CJHfF5sjOB91O/cFsTLCV4qfgVKPZuW/fJ9+iUnU= Subject key identifier: C8:CE:23:A4:12:7A:BC:65:F2:D7:9A:DC:2F:86:B4:88:B4:D0:B5:13 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 737CAAA0F9E1759A4E77BC4542C96174EF4D8710 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38322e302f32342d3234203d3e20313437303439.roa Signing time: Thu 18 Dec 2025 10:50:20 +0000 ROA not before: Thu 18 Dec 2025 10:45:20 +0000 ROA not after: Thu 17 Dec 2026 10:50:20 +0000 asID: 147049 IP address blocks: 212.15.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:7c:aa:a0:f9:e1:75:9a:4e:77:bc:45:42:c9:61:74:ef:4d:87:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 18 10:45:20 2025 GMT Not After : Dec 17 10:50:20 2026 GMT Subject: CN=C8CE23A4127ABC65F2D79ADC2F86B488B4D0B513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ef:f6:48:12:f3:e7:34:86:84:31:ca:66:1d: 65:f5:a1:e3:7f:cb:81:30:3b:8c:4a:90:c0:ba:22: 83:a2:d3:af:74:4f:7c:b5:ca:c0:7b:3f:dc:28:a7: 0a:6d:1a:e7:0f:19:70:13:62:6d:34:85:56:b1:89: 88:3f:0e:19:3d:9b:fe:59:d6:52:60:b5:6b:97:10: 10:5b:a1:28:b6:7c:48:54:a0:b1:6b:09:4e:15:8e: f3:52:5e:2d:15:1c:05:d8:f3:37:18:7d:80:42:66: 10:50:70:a4:82:d6:33:e0:15:2e:53:d3:8b:28:0a: 85:21:cc:03:45:ed:64:52:96:45:a3:87:16:e8:68: 2e:04:bf:5a:a3:83:91:13:48:2e:08:eb:fd:d1:68: 83:3d:28:cf:47:2f:c7:f6:1f:2f:56:bc:f0:d9:1b: 9b:b4:85:f2:08:4e:8a:7d:12:eb:c6:1a:2e:74:03: 47:f5:bf:45:2d:4a:0b:40:e1:30:56:83:da:93:43: 5c:14:c8:6d:51:4d:1d:6d:1f:3a:c6:35:1c:ca:8c: 13:ee:f0:eb:93:aa:a7:5a:db:31:65:80:e9:f7:6e: 41:4e:85:40:02:b8:02:44:66:b9:30:c5:f4:b9:a5: 52:7d:d6:03:ba:37:53:db:10:c2:1e:77:dd:34:24: 44:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CE:23:A4:12:7A:BC:65:F2:D7:9A:DC:2F:86:B4:88:B4:D0:B5:13 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38322e302f32342d3234203d3e20313437303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.15.82.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:a2:bf:bc:18:0b:53:7e:e4:7a:b9:57:54:8e:83:01:29:0f: 6b:8a:fb:d1:0a:65:92:93:f6:ff:d4:93:42:75:b8:ce:dd:3d: 5b:61:26:d9:cb:1f:7f:3a:b1:c0:70:19:ab:07:66:e3:58:11: 2a:e0:aa:70:94:ec:0f:fa:5e:65:4b:16:f9:b4:a1:15:5a:86: 36:54:b9:0c:7f:23:e6:d3:0d:af:8e:16:92:ea:05:7b:ee:24: 0b:ea:81:cb:7d:7f:1b:b1:ef:3d:bc:b4:05:72:32:b1:08:93: 43:2e:e7:53:56:21:56:fc:34:8c:68:b7:f7:b6:d3:9a:65:d9: e7:0a:4e:f4:14:7c:a2:bd:8f:3b:38:f9:62:12:12:0b:f8:1d: 21:84:ec:46:da:67:09:ae:21:45:8f:df:76:64:52:58:1d:68: d2:9f:21:23:af:63:12:0c:5f:c8:8b:22:6c:e7:a4:15:d0:21: f8:e6:64:e9:90:0c:17:99:f7:f0:ed:3a:a9:12:1c:65:46:c3: 7a:64:85:f2:ec:a0:08:b0:82:8a:a3:e7:b0:6c:a2:42:aa:68: f3:72:10:89:f8:9a:39:52:97:6c:e7:35:09:76:45:c2:ed:d0: d1:97:29:da:fd:45:47:65:4b:f0:e1:e5:cb:ef:b5:10:26:4a: 3a:45:05:0f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUc3yqoPnhdZpOd7xFQslhdO9NhxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMTgxMDQ1MjBaFw0yNjEyMTcxMDUwMjBaMDMxMTAvBgNV BAMTKEM4Q0UyM0E0MTI3QUJDNjVGMkQ3OUFEQzJGODZCNDg4QjREMEI1MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR7/ZIEvPnNIaEMcpmHWX1oeN/ y4EwO4xKkMC6IoOi0690T3y1ysB7P9wopwptGucPGXATYm00hVaxiYg/Dhk9m/5Z 1lJgtWuXEBBboSi2fEhUoLFrCU4VjvNSXi0VHAXY8zcYfYBCZhBQcKSC1jPgFS5T 04soCoUhzANF7WRSlkWjhxboaC4Ev1qjg5ETSC4I6/3RaIM9KM9HL8f2Hy9WvPDZ G5u0hfIITop9EuvGGi50A0f1v0UtSgtA4TBWg9qTQ1wUyG1RTR1tHzrGNRzKjBPu 8OuTqqda2zFlgOn3bkFOhUACuAJEZrkwxfS5pVJ91gO6N1PbEMIed900JESXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUyM4jpBJ6vGXy15rcL4a0iLTQtRMwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzMTM1MmUzODMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDM3MzAzNDM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 1A9SMA0GCSqGSIb3DQEBCwUAA4IBAQCfor+8GAtTfuR6uVdUjoMBKQ9rivvRCmWS k/b/1JNCdbjO3T1bYSbZyx9/OrHAcBmrB2bjWBEq4KpwlOwP+l5lSxb5tKEVWoY2 VLkMfyPm0w2vjhaS6gV77iQL6oHLfX8bse89vLQFcjKxCJNDLudTViFW/DSMaLf3 ttOaZdnnCk70FHyivY87OPliEhIL+B0hhOxG2mcJriFFj992ZFJYHWjSnyEjr2MS DF/IiyJs56QV0CH45mTpkAwXmffw7TqpEhxlRsN6ZIXy7KAIsIKKo+ewbKJCqmjz chCJ+Jo5Upds5zUJdkXC7dDRlyna/UVHZUvw4eXL77UQJko6RQUP -----END CERTIFICATE-----Generated at Fri Dec 19 21:28:40 2025 by rpki-client