This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa File: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (raw, json) Hash identifier: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8= Subject key identifier: F9:E0:6B:0E:C6:62:4D:D6:1D:27:03:99:68:CF:2F:8A:C3:BC:D3:FD Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4 Certificate serial: 617446F2F467D274E8B7D577415B5DF0C7C70F24 Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa Signing time: Sun 16 Nov 2025 16:55:11 +0000 ROA not before: Sun 16 Nov 2025 16:50:11 +0000 ROA not after: Sun 15 Nov 2026 16:55:11 +0000 asID: 215727 IP address blocks: 130.193.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:74:46:f2:f4:67:d2:74:e8:b7:d5:77:41:5b:5d:f0:c7:c7:0f:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4 Validity Not Before: Nov 16 16:50:11 2025 GMT Not After : Nov 15 16:55:11 2026 GMT Subject: CN=F9E06B0EC6624DD61D27039968CF2F8AC3BCD3FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7b:3d:0e:5f:9d:3c:3e:79:23:48:31:80:52: 40:cc:2d:18:4e:9f:b1:07:32:87:f5:51:53:2a:9c: ea:65:52:56:7d:4e:7c:e9:48:7d:16:70:ed:38:ec: bf:5c:07:bb:34:35:76:a5:47:cd:68:ff:37:48:a2: 8d:73:1a:a9:dc:28:83:50:0b:58:51:d6:7f:73:4d: e2:ce:4e:e4:a7:95:5f:e9:4a:d8:75:2f:08:b6:80: 97:a7:8f:b8:54:c4:71:0e:0d:79:27:ef:49:2d:9a: 94:50:a4:c7:e5:27:7c:91:29:e0:0f:4d:a5:fd:dd: d1:f3:f2:1f:ca:cd:b7:9d:9b:f6:88:44:b7:da:55: 9f:a6:cb:8f:4f:38:ec:c9:c9:33:86:f6:82:1f:b1: 61:5b:91:21:31:f4:a3:f6:1a:70:b8:7f:bf:bd:6d: f4:ab:15:3a:b2:5b:a1:05:9a:40:59:59:77:c2:27: 7e:0b:85:1d:27:86:62:67:94:7c:13:cd:21:a4:30: 5d:c9:cb:a7:c1:12:b5:68:cf:4b:dd:97:c5:41:2d: bc:48:fe:4a:53:01:58:c7:1e:83:2e:5f:7b:1d:b3: 76:d6:41:ae:4a:dd:43:03:1f:4d:9d:67:d6:75:22: 98:88:5a:10:91:48:f7:a9:e8:de:1b:cc:dd:ef:7f: 36:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E0:6B:0E:C6:62:4D:D6:1D:27:03:99:68:CF:2F:8A:C3:BC:D3:FD X509v3 Authority Key Identifier: keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.193.75.0/24 Signature Algorithm: sha256WithRSAEncryption 65:13:28:e3:24:a3:12:17:11:44:9c:2f:07:a7:4c:48:be:c8: 8f:21:ad:19:ae:15:b5:7b:af:9c:6b:6d:41:0f:a9:97:a9:d0: 73:02:1b:80:d5:e1:8d:ad:d6:b6:c8:0d:4a:54:c5:ee:48:42: fe:4e:29:92:98:0a:e6:4f:ea:05:a5:03:b8:49:1e:30:74:48: 51:e2:53:f8:de:df:0a:ae:36:f7:28:db:e7:14:53:40:17:af: bc:bf:d2:18:61:1e:a8:6b:51:b6:af:95:0d:32:ae:5f:5e:d1: a1:ae:1f:46:de:5d:fd:28:a5:97:b9:2c:94:61:0b:84:17:fc: 2b:25:40:d7:0b:51:8c:0d:cb:a5:8e:7f:44:4b:9b:10:e1:16: ea:7d:f4:4a:a9:af:01:6e:1a:e5:b3:59:2d:dd:bc:32:0e:f2: fd:46:7d:a6:ca:1d:ec:e7:e6:cd:cf:ca:3d:fe:87:62:89:20: b7:58:3b:fc:3a:75:4f:a8:bf:bb:ef:35:11:1f:18:78:56:7e: ed:57:90:d2:2d:fe:ad:77:d6:c4:e0:fa:7c:a4:d4:20:6c:36: b7:f1:17:74:a4:b7:19:74:1f:51:b5:a0:40:c6:98:85:6d:27: ef:1e:1e:f2:0e:ff:56:81:9f:90:8b:3a:70:38:0f:18:c3:32: 25:f8:19:5a -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUYXRG8vRn0nTot9V3QVtd8MfHDyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm NTg3M2RjNDAeFw0yNTExMTYxNjUwMTFaFw0yNjExMTUxNjU1MTFaMDMxMTAvBgNV BAMTKEY5RTA2QjBFQzY2MjRERDYxRDI3MDM5OTY4Q0YyRjhBQzNCQ0QzRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ez0OX508PnkjSDGAUkDMLRhO n7EHMof1UVMqnOplUlZ9TnzpSH0WcO047L9cB7s0NXalR81o/zdIoo1zGqncKINQ C1hR1n9zTeLOTuSnlV/pSth1Lwi2gJenj7hUxHEODXkn70ktmpRQpMflJ3yRKeAP TaX93dHz8h/Kzbedm/aIRLfaVZ+my49POOzJyTOG9oIfsWFbkSEx9KP2GnC4f7+9 bfSrFTqyW6EFmkBZWXfCJ34LhR0nhmJnlHwTzSGkMF3Jy6fBErVoz0vdl8VBLbxI /kpTAVjHHoMuX3sds3bWQa5K3UMDH02dZ9Z1IpiIWhCRSPep6N4bzN3vfzYlAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU+eBrDsZiTdYdJwOZaM8visO80/0wHwYDVR0j BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX SFBjUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzEzMzMwMmUzMTM5MzMyZTM3 MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzNzMyMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACCwUswDQYJKoZIhvcNAQELBQADggEBAGUTKOMkoxIXEUScLwenTEi+yI8hrRmu FbV7r5xrbUEPqZep0HMCG4DV4Y2t1rbIDUpUxe5IQv5OKZKYCuZP6gWlA7hJHjB0 SFHiU/je3wquNvco2+cUU0AXr7y/0hhhHqhrUbavlQ0yrl9e0aGuH0beXf0opZe5 LJRhC4QX/CslQNcLUYwNy6WOf0RLmxDhFup99EqprwFuGuWzWS3dvDIO8v1GfabK Hezn5s3Pyj3+h2KJILdYO/w6dU+ov7vvNREfGHhWfu1XkNIt/q131sTg+nyk1CBs NrfxF3Sktxl0H1G1oEDGmIVtJ+8eHvIO/1aBn5CLOnA4DxjDMiX4GVo= -----END CERTIFICATE-----Generated at Sat Dec 6 17:13:08 2025 by rpki-client