This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138322e302f32342d3234203d3e20383334.roa File: 3130392e3131302e3138322e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: P1IWLTsqwIMq3u0VmhDc+j+4KH3rUmmJGzeR5hMqhfA= Subject key identifier: 96:86:E5:1B:25:2B:D4:37:F8:F9:B9:8D:E8:B3:51:E6:37:53:EE:30 Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Certificate serial: 6E1EC9209F27539F3FB7790AA3A32FF4DF5EA912 Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138322e302f32342d3234203d3e20383334.roa Signing time: Mon 15 Dec 2025 00:10:53 +0000 ROA not before: Mon 15 Dec 2025 00:05:53 +0000 ROA not after: Mon 14 Dec 2026 00:10:53 +0000 asID: 834 IP address blocks: 109.110.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 00:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:1e:c9:20:9f:27:53:9f:3f:b7:79:0a:a3:a3:2f:f4:df:5e:a9:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Validity Not Before: Dec 15 00:05:53 2025 GMT Not After : Dec 14 00:10:53 2026 GMT Subject: CN=9686E51B252BD437F8F9B98DE8B351E63753EE30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e7:74:ce:97:8b:31:0e:a7:75:80:cb:aa:f1: 69:72:4b:7c:d9:02:29:ce:aa:fa:52:ee:88:02:11: 96:16:a8:73:25:91:8d:8e:aa:ce:28:cf:b6:2a:57: 36:67:e1:62:e1:53:45:1d:0f:76:01:2b:65:e8:13: 2a:37:a3:40:52:b8:e3:c1:0b:6c:06:35:05:fe:a9: bf:43:39:5f:e6:57:c9:df:ea:94:6c:dc:b2:5d:f5: b6:79:cc:80:93:ba:9a:32:4d:20:3c:67:d6:78:44: c0:6e:25:e7:8c:11:dc:f0:00:de:0b:5d:75:ed:f9: c1:c7:f5:cb:bd:5c:15:c6:49:11:69:cc:d5:25:8d: c4:e0:5e:0b:7f:d5:e0:00:7d:7a:49:bc:81:1f:56: f2:94:3c:8e:96:bb:b4:cd:78:36:8c:5e:1e:69:29: c7:eb:d4:f0:7f:97:5d:07:18:f1:c8:b7:e3:2a:62: 3b:15:d1:05:9d:01:21:43:10:46:2a:c6:77:9e:17: c7:08:61:b8:89:7f:f3:d1:41:52:50:ca:a3:f9:11: 5b:a0:74:03:be:1d:d3:f5:ca:9b:3b:ed:52:08:42: 16:b9:15:c7:fc:80:0c:67:5a:10:85:30:ed:f1:fa: f0:65:6f:1e:56:ee:86:ea:19:b2:8e:05:c0:ef:82: 4c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:86:E5:1B:25:2B:D4:37:F8:F9:B9:8D:E8:B3:51:E6:37:53:EE:30 X509v3 Authority Key Identifier: keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138322e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.110.182.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:5c:a7:c9:88:52:7b:f9:44:1d:84:13:4b:05:5c:34:91:aa: 43:78:c5:91:58:25:b0:1b:88:7d:b3:47:d6:21:f7:ce:92:50: 6e:1a:2f:8c:56:ca:47:c5:ee:22:80:50:f8:9a:c8:52:0b:d2: 91:eb:f0:06:7d:bb:e9:95:57:f6:2e:e6:e9:f4:d2:e7:06:c9: e0:7a:66:f0:64:7f:1e:a8:7f:9e:40:c6:98:92:71:ff:35:39: 59:19:2f:36:a7:20:65:8a:29:eb:34:17:47:71:8b:fd:15:9a: 6f:8c:a5:b6:63:2d:98:59:f9:f5:71:fe:57:8d:11:3d:46:76: 58:b0:c9:b4:5d:61:8f:e9:78:cf:33:0f:fe:29:41:75:c2:37: 51:45:99:bf:2c:a6:20:b1:2a:c7:72:36:8f:f8:2b:80:2e:23: c7:88:64:68:9c:de:a4:c3:c8:ed:4b:6e:f9:a3:8d:0c:7a:65: 89:29:e2:5d:15:34:fe:4a:61:45:42:8f:b6:c6:9b:b8:7c:9a: 06:d7:ed:6f:f3:64:82:cd:3e:ec:69:c5:f9:6d:cf:07:e3:ad: 80:d0:1d:26:8e:00:8a:ca:47:1b:7e:c7:5b:c7:ed:31:5a:fd: 9b:ad:43:c4:b7:5b:fd:84:3f:88:ec:64:ac:d2:38:7a:0d:8b: 9f:0d:8b:4f -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUbh7JIJ8nU58/t3kKo6Mv9N9eqRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl ODZlMGVmYzAeFw0yNTEyMTUwMDA1NTNaFw0yNjEyMTQwMDEwNTNaMDMxMTAvBgNV BAMTKDk2ODZFNTFCMjUyQkQ0MzdGOEY5Qjk4REU4QjM1MUU2Mzc1M0VFMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu53TOl4sxDqd1gMuq8WlyS3zZ AinOqvpS7ogCEZYWqHMlkY2Oqs4oz7YqVzZn4WLhU0UdD3YBK2XoEyo3o0BSuOPB C2wGNQX+qb9DOV/mV8nf6pRs3LJd9bZ5zICTupoyTSA8Z9Z4RMBuJeeMEdzwAN4L XXXt+cHH9cu9XBXGSRFpzNUljcTgXgt/1eAAfXpJvIEfVvKUPI6Wu7TNeDaMXh5p Kcfr1PB/l10HGPHIt+MqYjsV0QWdASFDEEYqxneeF8cIYbiJf/PRQVJQyqP5EVug dAO+HdP1yps77VIIQha5Fcf8gAxnWhCFMO3x+vBlbx5W7obqGbKOBcDvgkzpAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUloblGyUr1Df4+bmN6LNR5jdT7jAwHwYDVR0j BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo dUR2dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx MzgzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1u tjANBgkqhkiG9w0BAQsFAAOCAQEAflynyYhSe/lEHYQTSwVcNJGqQ3jFkVglsBuI fbNH1iH3zpJQbhovjFbKR8XuIoBQ+JrIUgvSkevwBn276ZVX9i7m6fTS5wbJ4Hpm 8GR/Hqh/nkDGmJJx/zU5WRkvNqcgZYop6zQXR3GL/RWab4yltmMtmFn59XH+V40R PUZ2WLDJtF1hj+l4zzMP/ilBdcI3UUWZvyymILEqx3I2j/grgC4jx4hkaJzepMPI 7Utu+aONDHpliSniXRU0/kphRUKPtsabuHyaBtftb/Nkgs0+7GnF+W3PB+OtgNAd Jo4AispHG37HW8ftMVr9m61DxLdb/YQ/iOxkrNI4eg2Lnw2LTw== -----END CERTIFICATE-----Generated at Mon Dec 15 17:23:44 2025 by rpki-client