This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34342e302f32342d3234203d3e20323133393138.roa File: 3231322e3130332e34342e302f32342d3234203d3e20323133393138.roa (raw, json) Hash identifier: F1RkOWECkAmSdkjYg8tjRjwarhccF70PLpA+y3IKrcs= Subject key identifier: 74:46:75:89:70:28:FC:42:77:B2:04:3A:6E:A5:15:59:FB:D8:5E:96 Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Certificate serial: 415446DAAF7D567F9111A25E9166AA132F0CDE11 Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34342e302f32342d3234203d3e20323133393138.roa Signing time: Fri 28 Nov 2025 12:55:12 +0000 ROA not before: Fri 28 Nov 2025 12:50:12 +0000 ROA not after: Fri 27 Nov 2026 12:55:12 +0000 asID: 213918 IP address blocks: 212.103.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:54:46:da:af:7d:56:7f:91:11:a2:5e:91:66:aa:13:2f:0c:de:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Validity Not Before: Nov 28 12:50:12 2025 GMT Not After : Nov 27 12:55:12 2026 GMT Subject: CN=744675897028FC4277B2043A6EA51559FBD85E96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:44:ce:29:aa:88:60:a3:d7:18:fc:83:81: 46:d1:19:f3:95:91:c9:0d:78:ae:62:4b:dd:fd:53: 4a:56:c9:46:ec:44:df:fd:9f:b9:36:56:7e:0b:ab: 26:c4:a9:82:4c:85:31:7d:a7:8a:83:75:c3:b8:67: 43:f5:96:b8:76:e8:61:2f:fd:2c:78:84:2d:19:59: 11:3d:dc:53:54:e5:e2:f8:75:ef:32:7a:7c:b8:68: 66:65:e4:af:28:9c:cf:e0:8c:cc:7a:c9:ed:b6:69: 5f:f0:ec:bc:e7:ed:2e:c5:9d:ed:6f:af:2c:27:d8: f4:98:cc:26:12:32:96:b9:39:7d:c1:0a:e4:a3:04: 71:60:a2:fc:81:90:af:47:67:de:57:c7:5e:7d:8b: 82:ca:71:9d:f3:f1:bf:0c:e2:9b:3a:1f:48:84:65: aa:df:f9:84:50:6b:4d:bc:57:42:91:d6:ab:e4:27: 1c:f3:57:24:43:4b:d6:a0:22:c7:cc:b0:40:29:e6: 38:69:e7:10:2b:d0:9d:23:9c:31:16:8d:aa:75:df: 1b:66:39:71:79:95:c9:fc:0d:f8:d2:f6:3e:1e:44: 71:20:73:b8:82:18:45:66:0b:2f:72:1f:ce:04:19: 99:2c:3c:eb:6e:68:c1:f7:9d:f3:d5:59:bd:2e:9c: e0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:46:75:89:70:28:FC:42:77:B2:04:3A:6E:A5:15:59:FB:D8:5E:96 X509v3 Authority Key Identifier: keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34342e302f32342d3234203d3e20323133393138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.103.44.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:c5:dd:e0:8b:14:44:21:05:db:b9:c5:af:68:57:ad:b2:31: 14:81:15:d5:f4:d6:74:22:b1:ca:ae:2d:64:c6:6e:5b:21:0f: 62:3f:27:f5:37:60:2f:ab:04:6b:bd:43:f8:b2:05:d4:8f:e3: cb:bf:aa:ef:d6:4a:fc:97:60:b2:3e:cf:d3:01:cd:2c:17:e0: 20:8d:fa:2a:eb:f0:06:5f:90:96:64:41:00:c2:d2:11:dd:17: 2d:5d:c5:ca:52:24:e5:96:14:cb:5f:be:db:62:da:6a:6f:db: be:32:48:a9:e9:b5:8e:81:64:0e:08:6e:41:a0:1b:17:d1:ee: f8:04:96:70:13:df:6a:c5:db:0f:73:6a:7a:43:d6:5e:48:5a: a1:80:aa:91:f9:d6:1f:e2:7b:7d:28:34:11:1c:3e:58:96:f3: 0f:63:76:55:d3:a3:94:22:93:b7:67:79:1e:86:9e:b8:84:b7: df:51:eb:6d:c0:ea:60:9a:4f:f7:fe:7c:6d:6a:1a:a4:de:b8: 07:49:43:6b:48:d1:f1:f2:e5:df:1b:2e:71:55:71:70:71:6e: 00:81:de:d2:dc:dc:21:ca:6f:25:f4:28:fd:5c:e1:d5:07:27: 0b:30:30:0d:c8:45:2b:bd:94:88:19:9b:40:a0:bc:16:4c:ef: da:17:01:a8 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUQVRG2q99Vn+REaJekWaqEy8M3hEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj ZTIzYWQ4YjAeFw0yNTExMjgxMjUwMTJaFw0yNjExMjcxMjU1MTJaMDMxMTAvBgNV BAMTKDc0NDY3NTg5NzAyOEZDNDI3N0IyMDQzQTZFQTUxNTU5RkJEODVFOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnl0TOKaqIYKPXGPyDgUbRGfOV kckNeK5iS939U0pWyUbsRN/9n7k2Vn4LqybEqYJMhTF9p4qDdcO4Z0P1lrh26GEv /Sx4hC0ZWRE93FNU5eL4de8yeny4aGZl5K8onM/gjMx6ye22aV/w7Lzn7S7Fne1v rywn2PSYzCYSMpa5OX3BCuSjBHFgovyBkK9HZ95Xx159i4LKcZ3z8b8M4ps6H0iE Zarf+YRQa028V0KR1qvkJxzzVyRDS9agIsfMsEAp5jhp5xAr0J0jnDEWjap13xtm OXF5lcn8DfjS9j4eRHEgc7iCGEVmCy9yH84EGZksPOtuaMH3nfPVWb0unOA7AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUdEZ1iXAo/EJ3sgQ6bqUVWfvYXpYwHwYDVR0j BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0 anJZcy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGJmZDY4ODIt ZDZiMy00YWE4LWJjMGEtNzExZDY4YmQxOThiLzAvMzIzMTMyMmUzMTMwMzMyZTM0 MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzMzOTMxMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADUZywwDQYJKoZIhvcNAQELBQADggEBACvF3eCLFEQhBdu5xa9oV62yMRSBFdX0 1nQiscquLWTGblshD2I/J/U3YC+rBGu9Q/iyBdSP48u/qu/WSvyXYLI+z9MBzSwX 4CCN+irr8AZfkJZkQQDC0hHdFy1dxcpSJOWWFMtfvtti2mpv274ySKnptY6BZA4I bkGgGxfR7vgElnAT32rF2w9zanpD1l5IWqGAqpH51h/ie30oNBEcPliW8w9jdlXT o5Qik7dneR6GnriEt99R623A6mCaT/f+fG1qGqTeuAdJQ2tI0fHy5d8bLnFVcXBx bgCB3tLc3CHKbyX0KP1c4dUHJwswMA3IRSu9lIgZm0CgvBZM79oXAag= -----END CERTIFICATE-----Generated at Sat Dec 6 14:58:11 2025 by rpki-client