This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33382e302f32342d3234203d3e20323134303235.roa File: 3231322e37342e33382e302f32342d3234203d3e20323134303235.roa (raw, json) Hash identifier: W4EE9mfeu+ZQcpo7RhcMm/5iUOCnXVX5HMH4scHR++Q= Subject key identifier: 82:53:29:0A:7B:C9:09:58:13:44:10:D2:59:79:CD:35:81:E4:44:45 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 50C1D97985002549F8D6B10D7E2C305BA1F48DA0 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33382e302f32342d3234203d3e20323134303235.roa Signing time: Mon 08 Dec 2025 12:17:16 +0000 ROA not before: Mon 08 Dec 2025 12:12:16 +0000 ROA not after: Mon 07 Dec 2026 12:17:16 +0000 asID: 214025 IP address blocks: 212.74.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c1:d9:79:85:00:25:49:f8:d6:b1:0d:7e:2c:30:5b:a1:f4:8d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Dec 8 12:12:16 2025 GMT Not After : Dec 7 12:17:16 2026 GMT Subject: CN=8253290A7BC90958134410D25979CD3581E44445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:29:f3:ec:79:61:37:c9:51:91:ec:c5:e9:14: 4d:96:a0:8e:f5:c4:2d:69:b9:e8:09:c3:96:65:ca: d1:46:08:cc:c4:bf:bc:2c:d1:6b:c8:24:cb:f7:44: e4:5e:fc:5e:1d:fa:89:ab:29:84:4c:0e:82:d8:10: 58:09:fd:31:42:a4:5c:7d:6f:dc:e3:2e:44:99:9f: da:45:e5:d5:b9:92:6a:6e:f9:74:46:a1:3f:23:3f: 1b:3c:65:87:e8:37:8a:a7:a7:89:9b:4e:74:17:94: 71:43:21:c7:60:af:a7:33:df:0b:73:9b:43:a0:8d: c3:13:d6:13:9c:3e:b1:f1:19:b8:8c:64:67:67:70: d5:92:35:c3:38:ec:36:2b:e7:5c:c5:d0:6b:8a:73: 40:f7:ad:73:00:4e:14:7f:37:59:19:42:ec:fd:ea: f0:24:ab:67:88:57:3d:e7:28:e3:9d:aa:bb:77:77: c7:01:6b:60:24:fa:19:6c:11:24:70:ed:4c:88:fd: 71:d3:1f:31:49:f3:2d:5f:6b:e8:2a:51:56:16:1b: f7:0b:c3:9e:0c:18:f0:17:cc:94:1a:cb:c1:ff:59: 17:3a:aa:76:ef:13:99:2e:22:43:11:47:ca:63:d7: a4:85:d8:7a:1d:cb:fd:56:37:a5:6b:ba:88:4e:95: 3b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:53:29:0A:7B:C9:09:58:13:44:10:D2:59:79:CD:35:81:E4:44:45 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33382e302f32342d3234203d3e20323134303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.38.0/24 Signature Algorithm: sha256WithRSAEncryption c4:1e:b3:cb:f3:a4:f4:17:a1:68:60:74:c7:d5:7b:a4:e7:a6: 88:dd:14:68:2f:7f:2a:80:64:fd:9b:f2:52:10:1e:ac:82:44: d0:5f:ac:f8:3b:76:8e:79:f1:b5:5b:f5:50:f3:17:1f:6b:8b: 14:b5:c5:8a:0c:64:9b:03:82:56:ff:d0:98:c5:02:f2:bb:4f: ef:da:0b:2d:d5:ae:ea:c9:5f:b7:47:5c:e7:78:10:3e:bc:bd: b2:88:f8:e0:f0:c1:23:08:ef:e5:bc:e2:4d:3c:2d:d0:06:ed: bc:f3:a9:3f:e7:d3:18:71:23:b4:bc:ca:74:f5:44:05:35:93: 1e:80:d2:af:ff:26:1f:02:7e:7b:d1:b2:28:e3:91:64:56:8b: 26:63:22:45:30:08:6c:3c:6b:60:88:b9:a7:9c:99:3e:8c:a1: 3b:64:fc:49:e9:4a:89:fa:e0:6a:ab:32:01:6a:73:a8:37:86: 1c:a0:cf:d5:c6:50:0a:8a:8f:a5:02:2e:f4:be:58:ee:b6:59: 3f:41:e3:a3:0a:35:29:3f:63:f1:54:e1:a9:04:6d:f5:3f:ad: ce:cc:25:df:4a:ee:ab:13:35:fe:22:ea:46:cb:44:20:81:32: 08:fe:34:4b:bf:76:ed:72:6c:d4:b4:06:6d:4f:79:59:bc:eb: e1:cf:d7:13 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUUMHZeYUAJUn41rENfiwwW6H0jaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTEyMDgxMjEyMTZaFw0yNjEyMDcxMjE3MTZaMDMxMTAvBgNV BAMTKDgyNTMyOTBBN0JDOTA5NTgxMzQ0MTBEMjU5NzlDRDM1ODFFNDQ0NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrKfPseWE3yVGR7MXpFE2WoI71 xC1puegJw5ZlytFGCMzEv7ws0WvIJMv3RORe/F4d+omrKYRMDoLYEFgJ/TFCpFx9 b9zjLkSZn9pF5dW5kmpu+XRGoT8jPxs8ZYfoN4qnp4mbTnQXlHFDIcdgr6cz3wtz m0OgjcMT1hOcPrHxGbiMZGdncNWSNcM47DYr51zF0GuKc0D3rXMAThR/N1kZQuz9 6vAkq2eIVz3nKOOdqrt3d8cBa2Ak+hlsESRw7UyI/XHTHzFJ8y1fa+gqUVYWG/cL w54MGPAXzJQay8H/WRc6qnbvE5kuIkMRR8pj16SF2Hody/1WN6VruohOlTvHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUglMpCnvJCVgTRBDSWXnNNYHkREUwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzMzM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM0MzAzMjM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 1EomMA0GCSqGSIb3DQEBCwUAA4IBAQDEHrPL86T0F6FoYHTH1Xuk56aI3RRoL38q gGT9m/JSEB6sgkTQX6z4O3aOefG1W/VQ8xcfa4sUtcWKDGSbA4JW/9CYxQLyu0/v 2gst1a7qyV+3R1zneBA+vL2yiPjg8MEjCO/lvOJNPC3QBu2886k/59MYcSO0vMp0 9UQFNZMegNKv/yYfAn570bIo45FkVosmYyJFMAhsPGtgiLmnnJk+jKE7ZPxJ6UqJ +uBqqzIBanOoN4YcoM/VxlAKio+lAi70vljutlk/QeOjCjUpP2PxVOGpBG31P63O zCXfSu6rEzX+IupGy0QggTII/jRLv3btcmzUtAZtT3lZvOvhz9cT -----END CERTIFICATE-----Generated at Wed Dec 17 15:24:06 2025 by rpki-client