This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38352e302f32342d3234203d3e20313437303439.roa File: 3231322e31352e38352e302f32342d3234203d3e20313437303439.roa (raw, json) Hash identifier: 8/5jdAnHVXV7+wFs+drYgwezEXsrOOvX40I7vziEKJ4= Subject key identifier: 42:09:CF:FB:B7:10:C4:89:28:F1:F9:5F:37:80:25:94:66:9D:BC:D8 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 6D9A0F2DC655B3947CD802CE8E4568857FB18F15 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38352e302f32342d3234203d3e20313437303439.roa Signing time: Thu 18 Dec 2025 10:50:19 +0000 ROA not before: Thu 18 Dec 2025 10:45:19 +0000 ROA not after: Thu 17 Dec 2026 10:50:19 +0000 asID: 147049 IP address blocks: 212.15.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:9a:0f:2d:c6:55:b3:94:7c:d8:02:ce:8e:45:68:85:7f:b1:8f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 18 10:45:19 2025 GMT Not After : Dec 17 10:50:19 2026 GMT Subject: CN=4209CFFBB710C48928F1F95F37802594669DBCD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f9:b1:86:48:c5:09:6e:f4:8b:46:6b:a5:47: b3:60:0d:3b:63:fe:63:03:39:28:1a:5b:37:d3:c3: d0:50:0b:38:e1:fe:59:51:c6:63:f8:8d:5f:03:f1: e9:60:fe:d8:74:89:66:80:9d:b4:ba:9b:5f:3c:6e: 56:c8:5a:83:a4:e6:b4:6c:5b:51:99:a8:8d:cf:28: c3:b7:0b:50:09:2e:2b:a0:71:7e:6f:1f:c8:2a:a0: 8d:89:a5:a9:4e:80:06:42:ce:0b:94:61:48:c5:60: 95:2e:22:e9:fc:3a:84:2d:ee:de:76:ee:93:54:95: da:3d:ab:e1:89:c3:fd:7d:1f:62:3d:8d:82:4f:9d: 0a:03:55:10:c0:03:79:07:a4:49:96:1c:3b:8f:5e: 26:b3:f9:7f:66:12:48:4f:78:07:2d:34:32:3f:ea: 30:39:78:dc:b4:aa:90:52:c3:51:2b:5b:35:fc:c5: 4b:49:89:14:5e:1c:68:e5:1e:89:2d:86:e9:f4:7b: e9:e3:8e:69:30:4f:1d:28:68:f6:fe:0e:4d:6d:9e: 7c:96:16:25:7f:c2:20:30:ba:c2:76:a4:dd:8b:a3: 98:94:db:fb:7c:80:df:4b:82:08:b9:0b:e7:b1:ec: a9:b8:2a:7c:c4:5f:b5:98:f7:8c:98:db:19:45:0d: cb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:09:CF:FB:B7:10:C4:89:28:F1:F9:5F:37:80:25:94:66:9D:BC:D8 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38352e302f32342d3234203d3e20313437303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.15.85.0/24 Signature Algorithm: sha256WithRSAEncryption 57:5d:f3:66:40:89:6f:5b:d3:5f:c7:f1:76:69:1a:1b:2e:c7: 8c:4d:62:0d:16:57:e6:a2:57:4e:b0:5f:aa:70:d9:be:16:23: 95:c8:f1:83:76:30:b1:ce:29:f8:e0:14:45:9b:d8:92:fc:37: 39:8a:ba:b6:c7:0a:50:1a:97:ff:39:ff:2a:b5:70:fa:aa:bf: d7:ce:d1:b3:35:0b:78:29:50:8a:22:7c:02:c1:0c:23:59:f5: d8:2b:72:c2:be:2b:71:1f:72:49:fa:be:15:d9:ad:3b:95:cc: 60:b8:d9:35:3e:ab:bd:19:0a:9c:ec:64:3f:42:52:38:88:37: 27:7f:ab:aa:22:01:6a:3c:89:ea:9f:ef:40:5d:f6:d6:b0:74: c4:20:7f:0f:0c:de:69:b7:ab:3f:66:a3:eb:29:42:f7:9c:1b: 32:94:e1:67:29:16:9b:94:0c:e9:bc:7b:0a:ea:c9:4e:f7:16: 2f:d6:4f:7c:30:5f:74:29:21:dd:70:9f:12:38:f8:a7:17:d6: d6:32:d5:6d:6a:8e:fe:cd:23:19:4f:8f:bd:c5:57:20:81:77: 8d:bf:ef:d7:f9:f5:47:2f:f9:5d:4b:99:72:31:de:a9:be:3d: eb:0b:d2:2b:95:f7:d9:fd:81:e1:76:92:1c:1e:74:25:47:37: 49:1c:85:a0 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUbZoPLcZVs5R82ALOjkVohX+xjxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMTgxMDQ1MTlaFw0yNjEyMTcxMDUwMTlaMDMxMTAvBgNV BAMTKDQyMDlDRkZCQjcxMEM0ODkyOEYxRjk1RjM3ODAyNTk0NjY5REJDRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX+bGGSMUJbvSLRmulR7NgDTtj /mMDOSgaWzfTw9BQCzjh/llRxmP4jV8D8elg/th0iWaAnbS6m188blbIWoOk5rRs W1GZqI3PKMO3C1AJLiugcX5vH8gqoI2JpalOgAZCzguUYUjFYJUuIun8OoQt7t52 7pNUldo9q+GJw/19H2I9jYJPnQoDVRDAA3kHpEmWHDuPXiaz+X9mEkhPeActNDI/ 6jA5eNy0qpBSw1ErWzX8xUtJiRReHGjlHokthun0e+njjmkwTx0oaPb+Dk1tnnyW FiV/wiAwusJ2pN2Lo5iU2/t8gN9Lggi5C+ex7Km4KnzEX7WY94yY2xlFDcudAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUQgnP+7cQxIko8flfN4AllGadvNgwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzMTM1MmUzODM1 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDM3MzAzNDM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 1A9VMA0GCSqGSIb3DQEBCwUAA4IBAQBXXfNmQIlvW9Nfx/F2aRobLseMTWINFlfm oldOsF+qcNm+FiOVyPGDdjCxzin44BRFm9iS/Dc5irq2xwpQGpf/Of8qtXD6qr/X ztGzNQt4KVCKInwCwQwjWfXYK3LCvitxH3JJ+r4V2a07lcxguNk1Pqu9GQqc7GQ/ QlI4iDcnf6uqIgFqPInqn+9AXfbWsHTEIH8PDN5pt6s/ZqPrKUL3nBsylOFnKRab lAzpvHsK6slO9xYv1k98MF90KSHdcJ8SOPinF9bWMtVtao7+zSMZT4+9xVcggXeN v+/X+fVHL/ldS5lyMd6pvj3rC9IrlffZ/YHhdpIcHnQlRzdJHIWg -----END CERTIFICATE-----Generated at Sat Dec 20 00:58:54 2025 by rpki-client