This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e20383334.roa File: 3231332e3133392e37352e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: z9CPny6nhgtZZGPT8rcekjUdrdeSYtnhljPFj7clwUI= Subject key identifier: 1B:3C:B9:D7:4B:8E:8C:3F:1C:FB:09:45:20:96:9D:2A:55:A0:60:8C Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e Certificate serial: 6FF43016F43E422092407D5A9825A0AF05A79DC2 Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e20383334.roa Signing time: Thu 11 Dec 2025 00:03:20 +0000 ROA not before: Wed 10 Dec 2025 23:58:20 +0000 ROA not after: Thu 10 Dec 2026 00:03:20 +0000 asID: 834 IP address blocks: 213.139.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f4:30:16:f4:3e:42:20:92:40:7d:5a:98:25:a0:af:05:a7:9d:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e Validity Not Before: Dec 10 23:58:20 2025 GMT Not After : Dec 10 00:03:20 2026 GMT Subject: CN=1B3CB9D74B8E8C3F1CFB094520969D2A55A0608C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5e:c5:75:d4:6d:dc:45:8c:89:2f:a7:ab:67: e7:cd:7b:bb:a8:e4:df:ab:fe:ca:0c:c2:82:81:c3: f2:63:d0:3f:e0:b7:fa:51:8f:fd:8a:77:2e:77:23: c1:dc:ea:69:cc:50:7b:e6:45:d0:7a:d4:81:01:0c: ea:ac:90:1c:e2:b3:89:7f:0f:75:37:05:60:18:49: 31:f1:66:f2:d4:7b:21:01:b5:38:f9:71:76:6d:ca: a3:3d:f7:36:5f:e0:32:0a:6c:96:ad:7c:5d:f3:f5: 3b:0d:7a:45:d9:98:bf:c5:4e:8b:52:ad:ff:b9:e5: b5:45:fb:7e:d9:a8:cb:7f:fa:1b:eb:0f:a3:73:ef: 06:84:2e:6e:47:32:e5:18:db:d4:db:28:b5:8f:69: da:e9:ee:ee:0c:8c:fb:36:2c:d6:10:08:a6:4c:27: aa:51:ba:29:39:95:73:a7:6c:2e:ab:01:29:e7:2c: be:63:83:4e:72:e2:ca:89:a2:6f:c7:a7:6b:07:7a: eb:a3:9d:d3:3b:a6:c6:70:7c:7b:9b:b3:ad:f5:95: e8:ee:eb:73:55:f7:c0:6d:04:76:08:2e:7c:32:12: ca:f3:e9:9c:a7:37:2e:71:96:3a:83:97:32:e4:87: 0d:52:e3:6a:d2:9c:d9:95:88:7d:ba:0e:47:04:92: f1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3C:B9:D7:4B:8E:8C:3F:1C:FB:09:45:20:96:9D:2A:55:A0:60:8C X509v3 Authority Key Identifier: keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.139.75.0/24 Signature Algorithm: sha256WithRSAEncryption 75:0a:f3:58:26:5f:1a:d2:61:67:fb:e4:d1:20:33:e7:df:b2: 11:68:a2:d7:45:43:7a:8c:ec:e4:c8:1b:ad:02:74:de:18:9a: cc:0c:10:52:30:5c:cd:23:4a:a5:9c:7b:b8:25:a9:b0:d9:87: a2:fd:2c:2f:d2:49:66:55:81:86:a0:30:8b:47:6d:6c:c6:c1: 03:fc:dd:5e:55:a1:35:c2:05:de:18:c8:ab:b5:80:66:cd:3e: 1d:07:c0:2d:35:05:8d:f9:94:ba:8d:c5:cc:78:08:8e:a4:fe: b5:a1:bb:9c:27:96:88:35:91:72:8e:85:df:78:eb:79:72:65: 64:43:a8:3b:38:63:2a:09:5a:c2:fc:3d:a0:84:b4:66:74:ed: 63:8f:6f:3e:ba:8a:64:c7:67:f8:e8:61:87:63:2b:59:96:01: d0:5a:35:0d:09:1f:61:48:d7:7d:64:8e:8c:96:d6:3f:18:6b: a2:dd:7d:26:4b:f9:fc:9e:66:08:f2:92:3d:90:cc:11:f3:3d: f6:4e:06:bf:13:1f:97:3a:43:77:dc:21:af:da:d9:5b:8b:26: d1:9b:8b:ba:a8:fc:7b:95:a0:31:21:76:b9:59:bc:f4:08:fa: 5d:c5:e2:48:4b:1f:68:e4:bd:6d:2b:3a:c0:6c:03:d6:26:ab: 45:64:61:d3 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUb/QwFvQ+QiCSQH1amCWgrwWnncIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk NDhjN2QzZTAeFw0yNTEyMTAyMzU4MjBaFw0yNjEyMTAwMDAzMjBaMDMxMTAvBgNV BAMTKDFCM0NCOUQ3NEI4RThDM0YxQ0ZCMDk0NTIwOTY5RDJBNTVBMDYwOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFXsV11G3cRYyJL6erZ+fNe7uo 5N+r/soMwoKBw/Jj0D/gt/pRj/2Kdy53I8Hc6mnMUHvmRdB61IEBDOqskBzis4l/ D3U3BWAYSTHxZvLUeyEBtTj5cXZtyqM99zZf4DIKbJatfF3z9TsNekXZmL/FTotS rf+55bVF+37ZqMt/+hvrD6Nz7waELm5HMuUY29TbKLWPadrp7u4MjPs2LNYQCKZM J6pRuik5lXOnbC6rASnnLL5jg05y4sqJom/Hp2sHeuujndM7psZwfHubs631leju 63NV98BtBHYILnwyEsrz6ZynNy5xljqDlzLkhw1S42rSnNmViH26DkcEkvETAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUGzy510uOjD8c+wlFIJadKlWgYIwwHwYDVR0j BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT TWZUNC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM3 MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADVi0sw DQYJKoZIhvcNAQELBQADggEBAHUK81gmXxrSYWf75NEgM+ffshFootdFQ3qM7OTI G60CdN4YmswMEFIwXM0jSqWce7glqbDZh6L9LC/SSWZVgYagMItHbWzGwQP83V5V oTXCBd4YyKu1gGbNPh0HwC01BY35lLqNxcx4CI6k/rWhu5wnlog1kXKOhd9463ly ZWRDqDs4YyoJWsL8PaCEtGZ07WOPbz66imTHZ/joYYdjK1mWAdBaNQ0JH2FI131k joyW1j8Ya6LdfSZL+fyeZgjykj2QzBHzPfZOBr8TH5c6Q3fcIa/a2VuLJtGbi7qo /HuVoDEhdrlZvPQI+l3F4khLH2jkvW0rOsBsA9Ymq0VkYdM= -----END CERTIFICATE-----Generated at Mon Dec 15 17:23:08 2025 by rpki-client