This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3137302e36322e3139302e302f32342d3234203d3e203438393235.roa File: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (raw, json) Hash identifier: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo= Subject key identifier: 93:02:2B:C9:36:3F:55:D5:E2:8A:D6:D6:37:9E:03:1E:64:5D:09:1B Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 1252C619A0277A7C0A9E45728682566A25AE75E6 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3137302e36322e3139302e302f32342d3234203d3e203438393235.roa Signing time: Tue 25 Nov 2025 14:55:12 +0000 ROA not before: Tue 25 Nov 2025 14:50:12 +0000 ROA not after: Tue 24 Nov 2026 14:55:12 +0000 asID: 48925 IP address blocks: 170.62.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:52:c6:19:a0:27:7a:7c:0a:9e:45:72:86:82:56:6a:25:ae:75:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Nov 25 14:50:12 2025 GMT Not After : Nov 24 14:55:12 2026 GMT Subject: CN=93022BC9363F55D5E28AD6D6379E031E645D091B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:05:0a:62:5e:8d:cf:42:34:72:a3:4e:f5:48: 4c:cc:9b:55:5f:5c:01:c3:ff:b3:39:a6:e5:df:2d: b7:31:3c:18:f7:17:76:a2:1e:15:20:bc:6c:45:84: f7:ba:f2:14:e9:c2:57:bb:0f:68:22:67:b6:1d:db: 29:3e:f8:46:a5:08:d7:f2:de:b7:ae:0b:96:9f:89: f9:75:21:71:bd:15:61:49:b8:f8:fc:54:f4:e5:5b: e4:4d:74:20:cf:c9:61:3a:24:26:8d:7e:07:c7:5c: 09:79:a4:db:d6:fb:ee:88:f2:27:2a:37:c9:8d:43: ce:14:8b:2c:53:c5:bd:56:5f:fa:f4:ac:22:10:50: 9e:8a:76:7e:08:ac:8c:1f:6c:97:82:ba:f7:b1:7b: 0c:8b:07:cc:c2:e3:31:cd:35:33:20:34:15:67:5c: 78:94:5e:57:8f:22:60:a3:d1:7e:0f:88:ed:59:57: 5d:7d:ad:38:1a:74:37:f3:9a:99:4f:d8:a7:2f:b2: e8:7d:57:45:c4:0c:c1:88:db:1d:98:cc:89:85:3b: a9:83:57:20:b0:ef:4b:99:d7:14:25:95:7d:6e:d4: 9e:fb:78:ff:9d:3d:24:cf:16:d0:bc:54:17:90:f7: f6:6a:e6:96:ab:66:20:e7:9a:dc:0a:4d:9c:0c:10: 3e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:02:2B:C9:36:3F:55:D5:E2:8A:D6:D6:37:9E:03:1E:64:5D:09:1B X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3137302e36322e3139302e302f32342d3234203d3e203438393235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.62.190.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:47:e9:d1:28:d1:90:15:ff:6f:d1:28:fa:2b:f2:74:72:90: f3:db:81:8b:42:d2:da:fd:25:90:06:c7:97:ea:cd:8d:c1:43: ab:b8:72:18:bb:1b:08:3c:3d:98:a1:1f:e8:07:7e:a8:b6:33: 6a:72:1f:0e:77:e9:d9:eb:54:e8:6c:28:54:3e:f0:9c:fa:a3: 83:13:5a:02:f8:c1:47:48:8e:2c:73:b5:12:cd:91:38:d7:98: 5e:26:7d:47:b0:54:0e:9d:bc:07:92:3e:65:cc:a7:09:16:2b: e9:be:96:82:a4:aa:28:37:50:11:78:1a:14:c6:cf:c2:da:f2: dd:e6:8d:84:14:72:27:b3:71:c0:5f:d2:09:37:da:8b:01:75: da:03:99:44:bc:ba:50:0d:77:20:11:d6:21:4e:d3:25:00:85: 46:f2:72:9d:92:83:06:37:71:d6:1e:a8:df:e1:f2:11:fa:0e: 2b:24:77:84:2a:62:47:47:38:08:7d:8e:97:a4:3c:65:75:32: fe:13:d5:26:2f:04:c6:83:29:35:a3:91:4a:09:28:bb:4d:59: 02:7a:e1:5d:8b:4e:8e:02:0b:d5:fb:df:d2:d4:43:a7:df:24: ef:9b:d7:6c:14:15:f9:73:5e:44:40:5f:19:ec:6d:88:18:7f: a7:20:92:2b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUElLGGaAnenwKnkVyhoJWaiWudeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNTExMjUxNDUwMTJaFw0yNjExMjQxNDU1MTJaMDMxMTAvBgNV BAMTKDkzMDIyQkM5MzYzRjU1RDVFMjhBRDZENjM3OUUwMzFFNjQ1RDA5MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBBQpiXo3PQjRyo071SEzMm1Vf XAHD/7M5puXfLbcxPBj3F3aiHhUgvGxFhPe68hTpwle7D2giZ7Yd2yk++EalCNfy 3reuC5afifl1IXG9FWFJuPj8VPTlW+RNdCDPyWE6JCaNfgfHXAl5pNvW++6I8icq N8mNQ84UiyxTxb1WX/r0rCIQUJ6Kdn4IrIwfbJeCuvexewyLB8zC4zHNNTMgNBVn XHiUXlePImCj0X4PiO1ZV119rTgadDfzmplP2Kcvsuh9V0XEDMGI2x2YzImFO6mD VyCw70uZ1xQllX1u1J77eP+dPSTPFtC8VBeQ9/Zq5parZiDnmtwKTZwMED5JAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUkwIryTY/VdXiitbWN54DHmRdCRswHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgt YmZlMC00MjM1LWFmYjQtZDUzZWRmYmFjZGQyLzAvMzEzNzMwMmUzNjMyMmUzMTM5 MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzkzMjM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA qj6+MA0GCSqGSIb3DQEBCwUAA4IBAQB/R+nRKNGQFf9v0Sj6K/J0cpDz24GLQtLa /SWQBseX6s2NwUOruHIYuxsIPD2YoR/oB36otjNqch8Od+nZ61TobChUPvCc+qOD E1oC+MFHSI4sc7USzZE415heJn1HsFQOnbwHkj5lzKcJFivpvpaCpKooN1AReBoU xs/C2vLd5o2EFHIns3HAX9IJN9qLAXXaA5lEvLpQDXcgEdYhTtMlAIVG8nKdkoMG N3HWHqjf4fIR+g4rJHeEKmJHRzgIfY6XpDxldTL+E9UmLwTGgyk1o5FKCSi7TVkC euFdi06OAgvV+9/S1EOn3yTvm9dsFBX5c15EQF8Z7G2IGH+nIJIr -----END CERTIFICATE-----Generated at Sun Dec 7 00:29:12 2025 by rpki-client