This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38332e302f32342d3234203d3e20313437303439.roa File: 3231322e31352e38332e302f32342d3234203d3e20313437303439.roa (raw, json) Hash identifier: DuS4Ov03bIL3GMuwYTEprAMVFkmWpGcKb3+nOi8nF+Y= Subject key identifier: 7C:77:13:53:CE:3B:A1:C3:DB:86:24:80:72:37:4E:80:FE:81:08:32 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 63B721B612BB00EEC9A813F64961772CD14A6BEA Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38332e302f32342d3234203d3e20313437303439.roa Signing time: Thu 18 Dec 2025 10:50:19 +0000 ROA not before: Thu 18 Dec 2025 10:45:19 +0000 ROA not after: Thu 17 Dec 2026 10:50:19 +0000 asID: 147049 IP address blocks: 212.15.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b7:21:b6:12:bb:00:ee:c9:a8:13:f6:49:61:77:2c:d1:4a:6b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 18 10:45:19 2025 GMT Not After : Dec 17 10:50:19 2026 GMT Subject: CN=7C771353CE3BA1C3DB86248072374E80FE810832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:b8:b6:17:0d:ea:d6:3b:c6:0e:ff:62:3f: a7:ab:4e:cb:64:f1:79:ce:97:86:5b:19:96:24:ff: a8:75:78:38:bf:93:05:2e:f4:53:eb:18:19:34:7b: 0f:b8:af:10:01:ef:91:e4:e3:1d:5c:62:e3:b4:04: d2:61:e6:a9:44:d7:9a:13:e9:d7:5f:6d:d7:f5:98: c8:e4:e6:5f:47:1a:16:42:78:21:39:cf:bd:da:a2: 82:69:64:0d:ee:d8:80:fa:a7:c9:f1:ee:25:31:ba: ea:9d:a6:b2:e9:f4:5a:a8:b0:01:48:ce:89:98:d2: b6:27:c8:0f:0e:03:9f:ce:66:84:14:ba:b3:6a:78: dd:3e:38:c9:e9:32:d3:15:4c:1d:81:2f:51:65:4f: aa:75:62:0a:a3:89:00:b8:a1:7e:f2:9d:7c:2d:88: f3:0a:fe:c6:58:be:9c:e7:fd:79:58:2d:32:92:a4: de:b9:eb:62:c7:18:32:f9:83:1a:27:b3:05:18:71: ca:27:58:42:60:53:58:32:6d:e9:d8:63:00:91:6e: cc:da:2f:b9:3b:80:be:e8:2a:ef:db:2a:f7:fa:28: 56:3f:29:9c:50:bd:e4:16:11:7d:7f:47:8f:23:36: 51:4a:c2:c3:76:65:6f:81:63:df:c3:30:4a:2a:4b: c9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:77:13:53:CE:3B:A1:C3:DB:86:24:80:72:37:4E:80:FE:81:08:32 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38332e302f32342d3234203d3e20313437303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.15.83.0/24 Signature Algorithm: sha256WithRSAEncryption 74:25:94:f3:e4:0a:50:66:89:5f:96:d4:47:ea:66:ff:f5:fe: 9c:53:2c:02:0c:d0:02:b7:89:e8:0d:9a:53:5a:bc:14:07:4b: 1c:14:61:2a:23:f6:40:23:56:0f:ad:22:6c:dc:6e:b0:01:2d: aa:ac:92:68:6b:3b:a9:d7:2a:ae:b4:f8:73:f3:53:aa:78:6f: f7:7b:ad:0a:92:49:52:6e:2e:62:af:02:60:bb:df:7b:84:a8: a8:5e:06:ea:9f:c3:b9:91:7d:9f:e1:4b:a7:d2:1d:b7:2b:a7: 24:91:b9:2c:15:4b:fc:9f:7b:f7:49:b5:50:f5:12:79:3f:3b: 3b:c6:88:f2:bd:a3:7d:49:6a:a4:59:5c:f0:0e:d4:b6:26:cd: 37:cb:64:b6:75:02:05:1e:04:14:1d:10:c2:9b:1a:f9:22:a8: 2a:c3:02:3f:fd:25:ed:34:04:19:e7:e4:73:43:ca:62:6f:18: b0:ca:01:ad:1a:1e:ae:6a:ff:87:77:47:74:d4:13:d2:0c:f4: 87:4e:26:6c:4a:cd:82:57:af:2a:41:8e:1d:4a:e5:03:c9:0a: 45:1e:27:96:ed:a4:e0:d2:97:fd:2b:9c:53:41:b2:b1:b9:60: e5:17:74:74:b4:f5:16:8c:aa:50:40:0d:7e:10:ff:33:19:c6: 77:eb:f0:a9 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUY7chthK7AO7JqBP2SWF3LNFKa+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMTgxMDQ1MTlaFw0yNjEyMTcxMDUwMTlaMDMxMTAvBgNV BAMTKDdDNzcxMzUzQ0UzQkExQzNEQjg2MjQ4MDcyMzc0RTgwRkU4MTA4MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEW7i2Fw3q1jvGDv9iP6erTstk 8XnOl4ZbGZYk/6h1eDi/kwUu9FPrGBk0ew+4rxAB75Hk4x1cYuO0BNJh5qlE15oT 6ddfbdf1mMjk5l9HGhZCeCE5z73aooJpZA3u2ID6p8nx7iUxuuqdprLp9FqosAFI zomY0rYnyA8OA5/OZoQUurNqeN0+OMnpMtMVTB2BL1FlT6p1YgqjiQC4oX7ynXwt iPMK/sZYvpzn/XlYLTKSpN6562LHGDL5gxonswUYcconWEJgU1gybenYYwCRbsza L7k7gL7oKu/bKvf6KFY/KZxQveQWEX1/R48jNlFKwsN2ZW+BY9/DMEoqS8mjAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUfHcTU847ocPbhiSAcjdOgP6BCDIwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzMTM1MmUzODMz MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDM3MzAzNDM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 1A9TMA0GCSqGSIb3DQEBCwUAA4IBAQB0JZTz5ApQZolfltRH6mb/9f6cUywCDNAC t4noDZpTWrwUB0scFGEqI/ZAI1YPrSJs3G6wAS2qrJJoazup1yqutPhz81OqeG/3 e60KkklSbi5irwJgu997hKioXgbqn8O5kX2f4Uun0h23K6ckkbksFUv8n3v3SbVQ 9RJ5Pzs7xojyvaN9SWqkWVzwDtS2Js03y2S2dQIFHgQUHRDCmxr5IqgqwwI//SXt NAQZ5+RzQ8pibxiwygGtGh6uav+Hd0d01BPSDPSHTiZsSs2CV68qQY4dSuUDyQpF HieW7aTg0pf9K5xTQbKxuWDlF3R0tPUWjKpQQA1+EP8zGcZ36/Cp -----END CERTIFICATE-----Generated at Fri Dec 19 21:29:07 2025 by rpki-client