This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e20383334.roa File: 3130392e3131302e3137312e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: 3D9I3AOfSiRIK4LjO/tPOTOS0YN4s2OplwmsbeXcwBw= Subject key identifier: 61:69:1E:DE:55:D6:A3:2B:43:D4:CD:16:E8:4E:19:08:5E:11:06:E2 Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Certificate serial: 3CE4D74D07E930248D6AEA5CB0434669805DD7CA Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e20383334.roa Signing time: Fri 05 Dec 2025 13:15:52 +0000 ROA not before: Fri 05 Dec 2025 13:10:52 +0000 ROA not after: Fri 04 Dec 2026 13:15:52 +0000 asID: 834 IP address blocks: 109.110.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e4:d7:4d:07:e9:30:24:8d:6a:ea:5c:b0:43:46:69:80:5d:d7:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Validity Not Before: Dec 5 13:10:52 2025 GMT Not After : Dec 4 13:15:52 2026 GMT Subject: CN=61691EDE55D6A32B43D4CD16E84E19085E1106E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:72:f9:2e:d7:8a:62:6a:ff:b3:03:4c:d9:bb: d4:5d:6d:70:8c:0d:f6:bb:ce:18:7d:6e:d1:94:aa: f3:d7:e4:a9:c1:3e:28:16:28:d8:e2:e6:bd:97:44: 0b:1e:d3:0a:25:ae:a9:14:02:b7:b4:b5:ad:2a:57: 0f:df:1d:94:c9:9b:55:e7:1f:55:a4:38:c5:09:21: ac:1c:33:92:f9:4d:85:42:9f:10:17:c6:34:23:d3: 46:77:64:25:b7:e1:3d:7e:31:0f:ee:95:8e:c6:ce: 20:70:4f:99:1c:cd:8b:bc:11:89:bc:55:0d:e3:fd: 7c:e8:26:0a:c5:f5:bc:dc:e3:ce:1e:9d:80:b8:50: 13:bb:70:cc:84:de:60:22:9f:1e:5f:cd:81:05:f4: 3c:ed:88:64:0e:32:8f:18:7f:cf:12:a0:0e:a0:74: fb:d6:38:b0:34:d2:dd:2c:dc:92:2b:8e:47:d5:63: c7:a1:83:72:22:68:74:e1:6f:6e:62:d1:86:09:8e: 61:25:04:35:a1:1d:e9:7e:2b:d2:ab:65:e5:c4:9c: aa:05:cc:96:51:63:b1:dd:ef:68:a6:cb:6a:e1:f0: 60:bd:5b:c8:af:13:e7:38:71:62:9c:13:22:11:6c: 38:57:81:bf:7a:c6:50:97:b8:ec:a2:e9:3c:a0:2a: 4a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:69:1E:DE:55:D6:A3:2B:43:D4:CD:16:E8:4E:19:08:5E:11:06:E2 X509v3 Authority Key Identifier: keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.110.171.0/24 Signature Algorithm: sha256WithRSAEncryption 58:7f:33:8a:08:6e:aa:a7:dd:a0:91:ae:fc:23:f4:46:93:23: e0:d3:4c:c9:3a:dd:43:43:b4:5d:ca:10:d5:0f:aa:2a:7e:3a: 93:eb:02:f1:c5:60:25:fa:43:3b:e7:0e:1e:f6:a0:51:a1:61: d1:0e:25:2b:5a:94:78:4c:30:0c:b0:36:3c:b2:86:f2:01:b3: f4:f4:8e:a9:02:bf:88:0a:e7:b0:59:af:7a:5c:54:6f:ea:e9: f4:28:8f:e0:2a:fb:74:b3:e1:5d:a4:73:aa:26:55:bf:2f:af: 58:12:68:bb:70:d8:ab:d1:2e:71:88:93:a6:32:c9:8f:56:a5: fe:2b:f7:47:27:07:de:9a:5d:83:a0:80:2f:ab:54:b7:14:3d: 42:e6:aa:40:54:2f:44:e8:11:26:4b:b8:2a:34:3b:f5:9e:4e: 18:b4:16:92:5e:b1:af:bd:d0:a7:7f:9a:56:13:1e:a8:a4:74: d0:5c:de:01:20:af:ac:29:aa:1d:8a:39:ab:02:d2:12:a0:2e: 8d:14:74:3c:82:f1:65:9c:57:c4:3f:11:e6:d2:a8:80:1e:d9: 75:81:1e:af:8e:b3:ce:e0:32:f5:55:58:e9:f4:d5:8c:5d:94: 78:b3:78:b9:be:dd:c7:ff:52:93:e0:b2:91:f4:53:ea:47:8b: bf:bf:14:49 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUPOTXTQfpMCSNaupcsENGaYBd18owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl ODZlMGVmYzAeFw0yNTEyMDUxMzEwNTJaFw0yNjEyMDQxMzE1NTJaMDMxMTAvBgNV BAMTKDYxNjkxRURFNTVENkEzMkI0M0Q0Q0QxNkU4NEUxOTA4NUUxMTA2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCscvku14piav+zA0zZu9RdbXCM Dfa7zhh9btGUqvPX5KnBPigWKNji5r2XRAse0wolrqkUAre0ta0qVw/fHZTJm1Xn H1WkOMUJIawcM5L5TYVCnxAXxjQj00Z3ZCW34T1+MQ/ulY7GziBwT5kczYu8EYm8 VQ3j/XzoJgrF9bzc484enYC4UBO7cMyE3mAinx5fzYEF9DztiGQOMo8Yf88SoA6g dPvWOLA00t0s3JIrjkfVY8ehg3IiaHThb25i0YYJjmElBDWhHel+K9KrZeXEnKoF zJZRY7Hd72imy2rh8GC9W8ivE+c4cWKcEyIRbDhXgb96xlCXuOyi6TygKkrJAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUYWke3lXWoytD1M0W6E4ZCF4RBuIwHwYDVR0j BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo dUR2dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx MzczMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1u qzANBgkqhkiG9w0BAQsFAAOCAQEAWH8zighuqqfdoJGu/CP0RpMj4NNMyTrdQ0O0 XcoQ1Q+qKn46k+sC8cVgJfpDO+cOHvagUaFh0Q4lK1qUeEwwDLA2PLKG8gGz9PSO qQK/iArnsFmvelxUb+rp9CiP4Cr7dLPhXaRzqiZVvy+vWBJou3DYq9EucYiTpjLJ j1al/iv3RycH3ppdg6CAL6tUtxQ9QuaqQFQvROgRJku4KjQ79Z5OGLQWkl6xr73Q p3+aVhMeqKR00FzeASCvrCmqHYo5qwLSEqAujRR0PILxZZxXxD8R5tKogB7ZdYEe r46zzuAy9VVY6fTVjF2UeLN4ub7dx/9Sk+CykfRT6keLv78USQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:19 2025 by rpki-client