This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa File: 3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa (raw, json) Hash identifier: HOJUjQHw3n3vLOp4ELlcKmpXxBRTpyVDdnuOO/DKcpY= Subject key identifier: 53:55:26:B5:B9:BC:F8:6B:FC:AF:FF:F7:72:01:B6:A9:7A:70:18:8F Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e Certificate serial: 5E47C9B822FD0C0B888D587030A90022CB3A946B Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa Signing time: Tue 09 Dec 2025 22:55:14 +0000 ROA not before: Tue 09 Dec 2025 22:50:14 +0000 ROA not after: Tue 08 Dec 2026 22:55:14 +0000 asID: 207388 IP address blocks: 213.139.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:47:c9:b8:22:fd:0c:0b:88:8d:58:70:30:a9:00:22:cb:3a:94:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e Validity Not Before: Dec 9 22:50:14 2025 GMT Not After : Dec 8 22:55:14 2026 GMT Subject: CN=535526B5B9BCF86BFCAFFFF77201B6A97A70188F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:2f:e2:15:14:b5:b7:e2:55:31:ba:34:96: 5c:02:01:bc:fa:eb:f8:a7:b8:c6:c9:73:18:e8:e2: 40:68:2e:6d:dd:33:7e:d9:33:59:83:4c:18:f7:63: dc:be:43:16:7b:43:a8:2b:89:0d:a3:52:e0:f9:e4: e9:f0:53:15:71:ea:0f:56:03:4a:1e:24:a6:03:c5: 8c:db:85:dc:77:55:fc:ba:c3:bd:81:7a:47:7c:88: c5:14:77:cd:7d:19:7d:3b:43:3f:3d:74:d2:d8:97: 8a:80:41:3c:8e:68:42:28:f5:23:5e:67:75:12:43: d7:e8:aa:82:77:95:bb:87:d0:8f:fb:5b:71:17:85: 9e:82:a2:cc:cc:31:e6:3a:3e:81:29:db:65:3e:b3: 41:2a:b7:0f:4c:9c:99:1a:fa:38:6c:ec:85:80:00: 66:05:c9:dc:08:90:c5:fb:72:44:6e:04:f9:65:c9: fa:e0:03:6b:73:06:16:89:ed:ec:88:b0:89:52:9f: 9a:f4:c8:b5:7f:35:a9:69:87:5e:84:6f:96:0a:64: 39:81:51:01:81:76:5e:42:27:a3:28:e9:36:13:7a: de:d3:34:07:31:71:65:83:0d:70:11:0a:ac:cf:5c: e6:5e:97:04:e8:5a:fe:db:38:27:33:28:83:aa:8d: 40:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:55:26:B5:B9:BC:F8:6B:FC:AF:FF:F7:72:01:B6:A9:7A:70:18:8F X509v3 Authority Key Identifier: keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.139.79.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:aa:4f:0f:83:03:12:6c:f4:f7:e9:f8:a5:91:a5:ad:8e:d5: 80:61:91:56:58:5a:72:80:bb:0f:45:fc:75:9a:c5:88:61:84: c6:52:cc:d0:04:83:fa:9c:32:ce:28:d6:ee:84:4e:9c:ee:cf: 75:a1:bb:80:83:0d:b7:89:cb:bc:d0:84:ef:3c:f0:e1:36:5d: 6a:6d:fd:14:cc:30:27:eb:c9:79:2d:32:7b:99:4f:76:17:59: 00:16:a2:e3:14:25:96:b9:6d:6f:b6:5b:04:6c:b6:86:20:d2: 16:68:c3:0e:63:28:c7:8f:b4:da:90:dd:16:71:3b:f3:41:ad: 46:55:3e:e2:7f:a1:0d:d8:98:a8:8b:d5:12:e1:20:c2:1e:83: eb:6c:e6:94:f0:ca:01:cf:f8:9c:76:07:a2:2e:1e:96:ec:13: 5c:43:57:d1:01:6a:59:22:af:9a:c9:7f:54:6e:62:34:dd:b5: af:8f:29:36:f6:9f:37:13:60:18:79:d6:89:fb:6a:e7:71:76: 6f:a5:3b:71:4b:41:9e:d7:3f:60:22:39:6b:fa:f5:e2:d6:e2: 96:59:d5:75:0b:c6:f2:ab:83:9a:f6:88:e9:fc:fc:97:23:6c: 6d:af:45:17:30:6d:ac:75:1e:09:a6:8a:9d:f3:49:d2:ec:dd: c9:87:5c:29 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUXkfJuCL9DAuIjVhwMKkAIss6lGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk NDhjN2QzZTAeFw0yNTEyMDkyMjUwMTRaFw0yNjEyMDgyMjU1MTRaMDMxMTAvBgNV BAMTKDUzNTUyNkI1QjlCQ0Y4NkJGQ0FGRkZGNzcyMDFCNkE5N0E3MDE4OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKS/iFRS1t+JVMbo0llwCAbz6 6/inuMbJcxjo4kBoLm3dM37ZM1mDTBj3Y9y+QxZ7Q6griQ2jUuD55OnwUxVx6g9W A0oeJKYDxYzbhdx3Vfy6w72Bekd8iMUUd819GX07Qz89dNLYl4qAQTyOaEIo9SNe Z3USQ9foqoJ3lbuH0I/7W3EXhZ6CoszMMeY6PoEp22U+s0Eqtw9MnJka+jhs7IWA AGYFydwIkMX7ckRuBPllyfrgA2tzBhaJ7eyIsIlSn5r0yLV/Nalph16Eb5YKZDmB UQGBdl5CJ6Mo6TYTet7TNAcxcWWDDXARCqzPXOZelwToWv7bOCczKIOqjUC5AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUU1Umtbm8+Gv8r//3cgG2qXpwGI8wHwYDVR0j BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT TWZUNC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM3 MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzczMzM4Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADVi08wDQYJKoZIhvcNAQELBQADggEBAHuqTw+DAxJs9Pfp+KWRpa2O1YBhkVZY WnKAuw9F/HWaxYhhhMZSzNAEg/qcMs4o1u6ETpzuz3Whu4CDDbeJy7zQhO888OE2 XWpt/RTMMCfryXktMnuZT3YXWQAWouMUJZa5bW+2WwRstoYg0hZoww5jKMePtNqQ 3RZxO/NBrUZVPuJ/oQ3YmKiL1RLhIMIeg+ts5pTwygHP+Jx2B6IuHpbsE1xDV9EB alkir5rJf1RuYjTdta+PKTb2nzcTYBh51on7audxdm+lO3FLQZ7XP2AiOWv69eLW 4pZZ1XULxvKrg5r2iOn8/JcjbG2vRRcwbax1Hgmmip3zSdLs3cmHXCk= -----END CERTIFICATE-----Generated at Wed Dec 17 17:53:34 2025 by rpki-client