This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36332e302f32342d3234203d3e20323037313337.roa
File: 39332e3131342e36332e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: zotReoZ9ZpUAS7O7qNewmDRES3kb+Uj/dKLENPuQNRs=
Subject key identifier: 79:72:73:8B:9A:89:76:40:18:42:38:BA:27:22:56:01:57:F5:28:7F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 69E73E8C34C5746016EDFE1D1746EB71690CEE23
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36332e302f32342d3234203d3e20323037313337.roa
Signing time: Thu 18 Dec 2025 10:50:20 +0000
ROA not before: Thu 18 Dec 2025 10:45:20 +0000
ROA not after: Thu 17 Dec 2026 10:50:20 +0000
asID: 207137
IP address blocks: 93.114.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 06:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:e7:3e:8c:34:c5:74:60:16:ed:fe:1d:17:46:eb:71:69:0c:ee:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 18 10:45:20 2025 GMT
Not After : Dec 17 10:50:20 2026 GMT
Subject: CN=7972738B9A897640184238BA2722560157F5287F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d3:8b:74:ae:d1:32:f1:04:06:9d:43:51:74:
6f:d3:e2:0a:16:ca:86:b1:9d:7b:39:75:9c:21:5d:
41:21:2e:db:61:d0:b8:43:99:4a:8d:ec:e9:a1:fd:
1f:af:c1:fd:14:5d:3f:b9:4a:b5:5f:ee:97:2f:a3:
74:6a:4c:d8:ae:67:55:80:4b:24:36:df:74:62:b6:
55:37:62:82:d6:82:90:7e:36:1d:89:98:f4:d7:6a:
8a:ea:25:38:7d:45:57:96:68:44:de:e5:5a:8a:00:
9f:16:51:1c:6a:0d:da:57:04:44:d5:3b:cf:6b:ac:
3c:77:2b:f9:39:f0:13:d6:5e:e7:fd:0d:92:9c:70:
06:e7:ef:be:96:e1:f9:c3:ba:37:56:c4:b1:3e:c4:
6c:b3:2c:5e:ed:e7:86:9f:0e:b0:c0:28:b4:44:bf:
90:e6:e7:33:1a:18:fd:35:c5:3e:1f:e0:50:40:c3:
c6:b5:ba:e3:d3:80:52:c3:2f:8c:66:75:b5:b0:a6:
93:23:cd:5a:44:e9:1b:b2:26:ce:b5:01:7d:96:0d:
59:0d:82:94:79:b4:76:4b:14:3e:14:95:d2:b0:4d:
dc:f4:67:38:1c:9f:f9:de:ac:0e:3c:61:dc:c0:e2:
6b:70:d3:9d:ce:41:32:a8:fa:1f:f6:f1:c7:de:b3:
20:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:72:73:8B:9A:89:76:40:18:42:38:BA:27:22:56:01:57:F5:28:7F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36332e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:88:53:b4:a8:b6:70:b5:4e:08:fa:96:8e:f5:f9:ca:b9:20:
81:2a:90:99:5d:b1:50:b6:b3:95:62:c1:6c:73:68:f8:b9:d8:
35:6e:a2:12:8d:be:94:3f:c9:d9:38:0d:87:9e:08:43:fd:ae:
b2:e9:fa:51:08:f5:55:65:dd:c1:2a:46:15:50:dd:f1:50:21:
0a:ad:dc:2a:a9:b6:68:1c:86:25:f2:01:c5:57:6d:fb:15:b1:
5d:71:33:dd:2c:a6:ec:68:a9:63:ab:e5:23:3d:c0:74:e9:a8:
f8:33:bb:52:7b:bb:5b:ce:16:c6:42:b3:8c:58:b2:15:8b:83:
f1:b5:a7:c8:c6:44:d5:61:4d:27:c2:ea:8c:9d:69:b5:23:3e:
32:a5:c1:84:52:3c:8b:73:d6:7e:1a:97:f0:1d:84:8e:43:c5:
f5:a3:73:08:e2:3c:5c:74:6f:c9:27:21:1d:71:59:23:ae:c2:
72:dd:96:0c:83:a2:d6:78:30:d0:7a:b0:0b:47:16:64:58:c3:
72:c7:90:1a:87:7e:54:dc:50:38:1c:aa:9c:cd:68:38:1c:89:
e4:09:5e:09:68:56:c8:a2:06:4d:97:a3:84:7c:39:39:75:c8:
a1:9b:93:fd:5c:68:d7:5f:00:67:ce:2d:d2:94:53:b5:fe:28:
e7:b8:91:2c
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUaec+jDTFdGAW7f4dF0brcWkM7iMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTEyMTgxMDQ1MjBaFw0yNjEyMTcxMDUwMjBaMDMxMTAvBgNV
BAMTKDc5NzI3MzhCOUE4OTc2NDAxODQyMzhCQTI3MjI1NjAxNTdGNTI4N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo04t0rtEy8QQGnUNRdG/T4goW
yoaxnXs5dZwhXUEhLtth0LhDmUqN7Omh/R+vwf0UXT+5SrVf7pcvo3RqTNiuZ1WA
SyQ233RitlU3YoLWgpB+Nh2JmPTXaorqJTh9RVeWaETe5VqKAJ8WURxqDdpXBETV
O89rrDx3K/k58BPWXuf9DZKccAbn776W4fnDujdWxLE+xGyzLF7t54afDrDAKLRE
v5Dm5zMaGP01xT4f4FBAw8a1uuPTgFLDL4xmdbWwppMjzVpE6RuyJs61AX2WDVkN
gpR5tHZLFD4UldKwTdz0Zzgcn/nerA48YdzA4mtw053OQTKo+h/28cfesyCPAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUeXJzi5qJdkAYQji6JyJWAVf1KH8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzMzJlMzEzMTM0MmUzNjMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM3MzEzMzM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
XXI/MA0GCSqGSIb3DQEBCwUAA4IBAQAaiFO0qLZwtU4I+paO9fnKuSCBKpCZXbFQ
trOVYsFsc2j4udg1bqISjb6UP8nZOA2HnghD/a6y6fpRCPVVZd3BKkYVUN3xUCEK
rdwqqbZoHIYl8gHFV237FbFdcTPdLKbsaKljq+UjPcB06aj4M7tSe7tbzhbGQrOM
WLIVi4PxtafIxkTVYU0nwuqMnWm1Iz4ypcGEUjyLc9Z+GpfwHYSOQ8X1o3MI4jxc
dG/JJyEdcVkjrsJy3ZYMg6LWeDDQerALRxZkWMNyx5Aah35U3FA4HKqczWg4HInk
CV4JaFbIogZNl6OEfDk5dcihm5P9XGjXXwBnzi3SlFO1/ijnuJEs
-----END CERTIFICATE-----
Generated at Fri Dec 19 21:25:28 2025 by rpki-client