This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38372e302f32342d3234203d3e20313336373837.roa File: 3231322e31352e38372e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: TYpzInDxBIliAyROEOHO57MCEvEzF8CUVy+FNO54OCQ= Subject key identifier: B9:06:4C:23:FF:6B:75:1D:A7:C2:38:B4:C4:76:AD:DD:DC:9A:80:F7 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 319D9A317B3AAC3467F81AA7E9CAB0392A602848 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38372e302f32342d3234203d3e20313336373837.roa Signing time: Thu 18 Dec 2025 10:50:19 +0000 ROA not before: Thu 18 Dec 2025 10:45:19 +0000 ROA not after: Thu 17 Dec 2026 10:50:19 +0000 asID: 136787 IP address blocks: 212.15.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:9d:9a:31:7b:3a:ac:34:67:f8:1a:a7:e9:ca:b0:39:2a:60:28:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 18 10:45:19 2025 GMT Not After : Dec 17 10:50:19 2026 GMT Subject: CN=B9064C23FF6B751DA7C238B4C476ADDDDC9A80F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8c:4a:cd:a0:35:d8:c1:2d:a6:47:33:19:ae: 68:41:32:ec:c0:59:92:07:c7:0e:a1:fd:1a:23:8c: b4:b4:10:f7:de:08:c3:82:4d:9d:6f:24:d0:18:bf: d3:f1:e2:e6:f0:24:89:98:c1:df:36:f8:f9:8c:d1: e8:78:0c:e5:c5:9e:3c:18:6f:37:3b:69:7d:7a:6a: e6:b2:c1:21:b4:80:67:4d:d4:19:43:d2:9e:f5:e8: 0c:5b:c0:5e:0f:b7:c3:7f:48:82:ea:c2:da:17:65: 4f:ec:33:7e:3c:0e:b3:0c:0e:03:f5:8b:19:7d:8d: 59:1d:9c:6e:d7:3a:f9:67:e1:c8:47:53:b9:09:65: 2a:90:e3:e7:44:30:9d:41:4f:9c:68:33:a9:a1:c7: 7b:b2:f0:75:fa:77:5f:6b:7d:e3:77:f1:f7:fe:ea: 30:0b:2f:80:07:dd:a3:c3:e0:de:46:aa:d1:e7:37: 34:df:0c:ae:1e:2c:7d:e1:cd:ee:26:9d:89:a8:46: 95:15:e1:36:5d:91:2d:bb:61:11:e4:8c:dd:06:1f: 3c:75:6a:65:9a:d5:50:ce:e1:e5:e3:fe:a7:b8:4f: 3f:28:7b:d5:fa:7e:08:7c:82:43:9f:9c:5a:aa:aa: 2d:1d:91:5b:eb:7d:eb:d2:b3:83:eb:53:61:09:96: 5e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:06:4C:23:FF:6B:75:1D:A7:C2:38:B4:C4:76:AD:DD:DC:9A:80:F7 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38372e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.15.87.0/24 Signature Algorithm: sha256WithRSAEncryption 07:e9:c0:fe:bf:7a:74:2d:84:85:51:5d:03:b8:fb:dd:f4:ce: 2f:0a:f6:b4:ad:c4:63:eb:17:f2:de:81:0a:83:2c:e3:bf:10: 98:3b:80:ef:2d:54:22:f1:cd:ec:5f:ec:ce:26:7a:cc:f0:93: f4:20:9f:6c:e6:d1:89:42:79:ac:d7:64:f5:7f:47:a7:ef:d3: 98:08:e1:ae:f7:2c:04:e0:3d:c0:b0:88:11:23:84:d5:51:05: 52:1e:b2:98:2f:88:0e:55:2a:b8:c0:ae:1c:5b:8e:f1:cd:ac: d3:29:f9:8d:fc:b3:94:07:cf:44:33:28:b2:9e:de:99:e0:e1: 21:88:6d:59:8c:a7:49:df:00:ed:37:01:dd:06:e7:00:a9:ef: 7e:c6:85:6c:6f:ce:f4:73:bc:ee:09:c7:62:4b:e2:7e:32:73: 1b:ad:28:21:f7:4d:65:37:bb:73:53:0d:c8:30:d3:82:1d:96: 89:42:d6:14:06:fe:e5:f9:88:77:95:42:d6:15:49:a1:82:08: 66:2c:e6:b8:d9:dd:38:ea:f4:12:41:f3:a2:37:b5:eb:ba:6a: ab:59:0a:7b:04:43:b5:d1:4e:07:54:03:77:cd:9b:31:88:08: aa:73:51:64:fb:44:aa:d0:c2:41:b9:49:ab:33:d1:61:ef:69: ca:77:66:19 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUMZ2aMXs6rDRn+Bqn6cqwOSpgKEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMTgxMDQ1MTlaFw0yNjEyMTcxMDUwMTlaMDMxMTAvBgNV BAMTKEI5MDY0QzIzRkY2Qjc1MURBN0MyMzhCNEM0NzZBREREREM5QTgwRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHjErNoDXYwS2mRzMZrmhBMuzA WZIHxw6h/RojjLS0EPfeCMOCTZ1vJNAYv9Px4ubwJImYwd82+PmM0eh4DOXFnjwY bzc7aX16auaywSG0gGdN1BlD0p716AxbwF4Pt8N/SILqwtoXZU/sM348DrMMDgP1 ixl9jVkdnG7XOvln4chHU7kJZSqQ4+dEMJ1BT5xoM6mhx3uy8HX6d19rfeN38ff+ 6jALL4AH3aPD4N5GqtHnNzTfDK4eLH3hze4mnYmoRpUV4TZdkS27YRHkjN0GHzx1 amWa1VDO4eXj/qe4Tz8oe9X6fgh8gkOfnFqqqi0dkVvrfevSs4PrU2EJll6jAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUuQZMI/9rdR2nwji0xHat3dyagPcwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzMTM1MmUzODM3 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 1A9XMA0GCSqGSIb3DQEBCwUAA4IBAQAH6cD+v3p0LYSFUV0DuPvd9M4vCva0rcRj 6xfy3oEKgyzjvxCYO4DvLVQi8c3sX+zOJnrM8JP0IJ9s5tGJQnms12T1f0en79OY COGu9ywE4D3AsIgRI4TVUQVSHrKYL4gOVSq4wK4cW47xzazTKfmN/LOUB89EMyiy nt6Z4OEhiG1ZjKdJ3wDtNwHdBucAqe9+xoVsb870c7zuCcdiS+J+MnMbrSgh901l N7tzUw3IMNOCHZaJQtYUBv7l+Yh3lULWFUmhgghmLOa42d046vQSQfOiN7Xrumqr WQp7BEO10U4HVAN3zZsxiAiqc1Fk+0Sq0MJBuUmrM9Fh72nKd2YZ -----END CERTIFICATE-----Generated at Fri Dec 19 23:25:42 2025 by rpki-client