This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132332e302f32342d3234203d3e20323035383836.roa File: 3231332e3135372e3132332e302f32342d3234203d3e20323035383836.roa (raw, json) Hash identifier: 7VQoOdpqpVmjCELFW51uez7QJpyJbjW4JNhtOxfsg8E= Subject key identifier: 0B:CD:D5:17:7C:52:3E:42:22:FC:BA:FB:DC:7A:69:C0:8E:12:35:85 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 0969BAF54D52BB4A0A40FF5C195FD0098777C728 Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132332e302f32342d3234203d3e20323035383836.roa Signing time: Wed 05 Nov 2025 05:34:18 +0000 ROA not before: Wed 05 Nov 2025 05:29:18 +0000 ROA not after: Wed 04 Nov 2026 05:34:18 +0000 asID: 205886 IP address blocks: 213.157.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:69:ba:f5:4d:52:bb:4a:0a:40:ff:5c:19:5f:d0:09:87:77:c7:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Nov 5 05:29:18 2025 GMT Not After : Nov 4 05:34:18 2026 GMT Subject: CN=0BCDD5177C523E4222FCBAFBDC7A69C08E123585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f9:ab:64:2d:d6:fd:7d:20:9c:b4:08:62:f0: 62:a2:90:34:28:8d:f1:f5:e8:64:07:29:fd:2b:63: fa:0e:df:da:2e:79:07:15:0b:ec:f7:ea:5d:29:18: 13:2a:6e:aa:23:a3:34:84:ae:b7:20:aa:95:99:8e: cc:a0:92:18:27:e0:12:3d:57:3c:57:aa:3e:f0:bb: c8:d8:20:52:f0:c1:51:e7:4a:52:2f:50:f7:5a:c4: f7:5f:f7:6b:e5:cf:59:52:57:8a:1e:de:ee:1e:16: 8c:f7:df:dc:19:aa:c7:06:71:d0:fd:db:f6:a5:3f: 8d:e3:1d:36:0e:d9:b5:21:79:99:be:94:3c:ce:34: 94:b4:d5:a4:f5:6d:fa:3d:ff:4e:27:99:4a:9e:2c: e8:6b:18:0a:18:05:0f:a2:21:33:23:a1:a8:1d:89: ba:1b:a3:a9:b1:40:1d:80:9d:36:62:c8:a0:7e:b5: d3:95:2c:1b:03:89:2f:e0:e4:71:a8:ef:38:79:16: 1b:99:c2:56:7b:5c:99:54:82:c9:86:ef:4e:17:25: 47:3f:07:07:86:fe:d3:31:bc:05:f1:16:68:a7:db: 92:12:ba:f7:cb:90:0a:7a:18:e9:ee:16:ca:91:ac: fe:30:4c:be:ca:48:34:7e:6f:30:97:5c:6d:20:55: 0e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:CD:D5:17:7C:52:3E:42:22:FC:BA:FB:DC:7A:69:C0:8E:12:35:85 X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132332e302f32342d3234203d3e20323035383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.157.123.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:59:3f:fb:1a:61:14:06:f9:2f:1c:c9:1e:a3:53:ad:fe:d6: 00:4f:00:ac:2f:ae:d3:49:53:96:87:eb:80:0e:63:6a:33:cc: b8:3a:3e:7d:99:67:d6:a0:45:7a:46:24:80:c8:b8:cd:b2:ff: 4f:dc:c6:70:c4:dc:aa:34:12:bd:35:47:8e:c5:ba:75:8e:d7: 39:0e:06:a5:dd:ae:46:9b:3c:6a:d7:fd:7c:07:41:b9:2e:12: 04:e2:6c:c6:29:b9:ca:5f:7c:f8:d1:aa:f5:ae:8b:90:49:42: b8:b7:8e:88:f2:b5:10:18:4a:83:74:8e:72:31:62:a3:b0:05: 04:ac:49:15:d2:40:d8:47:10:a9:ff:15:99:68:99:7b:00:3a: 4a:1b:78:30:5b:d6:25:a0:5f:86:2d:3d:c3:26:ce:41:19:62: 6b:1d:98:7e:ca:34:eb:e9:af:13:6d:51:77:aa:8b:d5:c6:d6: 06:8b:ee:f4:e3:d0:55:eb:c5:81:b7:77:08:6d:7f:b3:1c:49: 3e:bb:d6:3e:97:a6:48:a0:b1:87:c6:dd:6e:96:8d:8e:1f:d5: 22:13:2a:a3:85:c7:d0:1d:29:3b:55:9f:e7:3b:7a:03:9d:45: ed:77:27:10:c6:4d:13:9d:85:25:ef:37:b9:dd:7b:b9:cb:42: 01:9e:c9:3f -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUCWm69U1Su0oKQP9cGV/QCYd3xygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNTExMDUwNTI5MThaFw0yNjExMDQwNTM0MThaMDMxMTAvBgNV BAMTKDBCQ0RENTE3N0M1MjNFNDIyMkZDQkFGQkRDN0E2OUMwOEUxMjM1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT+atkLdb9fSCctAhi8GKikDQo jfH16GQHKf0rY/oO39oueQcVC+z36l0pGBMqbqojozSErrcgqpWZjsygkhgn4BI9 VzxXqj7wu8jYIFLwwVHnSlIvUPdaxPdf92vlz1lSV4oe3u4eFoz339wZqscGcdD9 2/alP43jHTYO2bUheZm+lDzONJS01aT1bfo9/04nmUqeLOhrGAoYBQ+iITMjoagd ibobo6mxQB2AnTZiyKB+tdOVLBsDiS/g5HGo7zh5FhuZwlZ7XJlUgsmG704XJUc/ BweG/tMxvAXxFmin25ISuvfLkAp6GOnuFsqRrP4wTL7KSDR+bzCXXG0gVQ4PAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUC83VF3xSPkIi/Lr73HppwI4SNYUwHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUt MGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJiZTI1LzAvMzIzMTMzMmUzMTM1MzcyZTMx MzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNTM4MzgzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANWdezANBgkqhkiG9w0BAQsFAAOCAQEAj1k/+xphFAb5LxzJHqNTrf7WAE8A rC+u00lTlofrgA5jajPMuDo+fZln1qBFekYkgMi4zbL/T9zGcMTcqjQSvTVHjsW6 dY7XOQ4Gpd2uRps8atf9fAdBuS4SBOJsxim5yl98+NGq9a6LkElCuLeOiPK1EBhK g3SOcjFio7AFBKxJFdJA2EcQqf8VmWiZewA6Sht4MFvWJaBfhi09wybOQRliax2Y fso06+mvE21Rd6qL1cbWBovu9OPQVevFgbd3CG1/sxxJPrvWPpemSKCxh8bdbpaN jh/VIhMqo4XH0B0pO1Wf5zt6A51F7XcnEMZNE52FJe83ud17uctCAZ7JPw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:41 2025 by rpki-client