This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa File: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (raw, json) Hash identifier: SUmtopgHH8Nww5p/xP0ODKmemVjaFc93EIAThLWzp7U= Subject key identifier: 42:4A:E1:87:66:CD:5F:8F:1B:EC:D1:AA:33:61:5F:51:7E:B7:0D:D4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 403BA967E534E1D5B73DD292E2DDB8FBCAD381B0 Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa Signing time: Thu 20 Nov 2025 15:55:12 +0000 ROA not before: Thu 20 Nov 2025 15:50:12 +0000 ROA not after: Thu 19 Nov 2026 15:55:12 +0000 asID: 49468 IP address blocks: 193.203.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:3b:a9:67:e5:34:e1:d5:b7:3d:d2:92:e2:dd:b8:fb:ca:d3:81:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Nov 20 15:50:12 2025 GMT Not After : Nov 19 15:55:12 2026 GMT Subject: CN=424AE18766CD5F8F1BECD1AA33615F517EB70DD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:75:27:8f:ec:a3:06:51:48:bd:81:3b:0d:e0: cc:66:3d:ee:5e:5b:71:14:67:e3:bd:98:f2:95:f9: 71:34:27:9a:3b:e6:4e:45:ff:86:dd:35:0d:58:36: 4b:e3:3c:dc:32:37:34:02:ed:b4:dd:76:86:13:82: b5:de:88:d5:b4:d1:eb:67:44:23:b1:9a:b4:f9:80: bb:e3:66:51:41:f1:a9:dc:fe:73:1f:70:24:ba:7c: 47:fc:a4:d5:c1:a5:de:f3:97:fd:58:a6:4e:4f:47: a2:c4:e6:18:95:ae:15:78:9f:07:48:07:4c:e7:0f: 9e:e6:0e:7b:28:24:d0:bd:43:d8:9b:de:a9:38:31: 38:36:0c:6f:55:20:19:d2:79:32:7e:d6:0e:b3:9d: 65:bd:07:02:13:4e:da:05:d1:16:42:7d:d4:97:7c: 0e:94:40:24:8d:b4:26:e3:d1:0f:f8:7b:22:56:9d: 1d:0c:be:eb:d9:73:04:43:f4:71:5d:8f:ea:c5:bc: b3:4b:c1:d9:a0:3d:fa:e3:a6:30:ec:8a:4f:a9:fe: e6:e0:37:79:6d:dc:e2:47:01:75:a3:01:7b:a0:19: 31:9d:bb:01:dd:42:4f:23:cd:98:66:f7:e6:b0:57: 26:e2:1d:ca:8b:0c:4b:13:68:21:fc:e6:03:b5:93: 9d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4A:E1:87:66:CD:5F:8F:1B:EC:D1:AA:33:61:5F:51:7E:B7:0D:D4 X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.204.0/23 Signature Algorithm: sha256WithRSAEncryption 13:11:57:96:d0:b8:df:38:42:b1:84:29:96:cd:1e:24:12:61: 93:f6:64:17:90:29:2e:c5:23:9c:25:3c:64:64:98:fe:b3:0e: 4a:70:4c:0a:36:7d:d2:da:79:22:b6:40:6c:bf:86:a2:5b:a6: 91:d1:cf:09:d1:f2:0b:d6:28:92:ed:bb:8e:87:6e:8f:5e:06: 5c:bc:ab:a8:97:78:2c:05:8f:1d:85:bd:64:bd:88:42:0b:0e: da:cf:64:1c:11:65:fe:fa:ed:eb:61:b6:ac:43:a0:04:80:c6: dd:4f:bd:88:9f:3f:50:44:15:1e:f7:31:eb:34:2a:f6:4a:4e: 19:d7:a5:cd:c1:82:bc:2c:9f:b0:c4:3a:5a:fa:f6:96:42:4e: 78:5b:6b:0c:33:8e:68:8a:62:16:2f:72:e3:14:c5:73:da:45: 5e:7b:c6:d8:47:99:60:a0:8f:28:b7:2a:c9:a8:4e:2c:6a:cf: fb:63:a7:d2:ac:1e:4d:ec:50:4e:c7:0d:66:8b:04:c9:a8:41: 96:08:10:1a:47:8c:8d:62:07:bd:66:4a:5a:84:35:0e:dc:01: c2:90:59:09:c3:0b:f2:88:aa:d1:44:08:d4:92:09:7d:70:64: 26:e2:a8:7b:34:b6:52:d7:c7:0d:33:e7:ee:91:7b:cf:0a:1d: b9:52:c1:d4 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUQDupZ+U04dW3PdKS4t24+8rTgbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNTExMjAxNTUwMTJaFw0yNjExMTkxNTU1MTJaMDMxMTAvBgNV BAMTKDQyNEFFMTg3NjZDRDVGOEYxQkVDRDFBQTMzNjE1RjUxN0VCNzBERDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkdSeP7KMGUUi9gTsN4MxmPe5e W3EUZ+O9mPKV+XE0J5o75k5F/4bdNQ1YNkvjPNwyNzQC7bTddoYTgrXeiNW00etn RCOxmrT5gLvjZlFB8anc/nMfcCS6fEf8pNXBpd7zl/1Ypk5PR6LE5hiVrhV4nwdI B0znD57mDnsoJNC9Q9ib3qk4MTg2DG9VIBnSeTJ+1g6znWW9BwITTtoF0RZCfdSX fA6UQCSNtCbj0Q/4eyJWnR0MvuvZcwRD9HFdj+rFvLNLwdmgPfrjpjDsik+p/ubg N3lt3OJHAXWjAXugGTGduwHdQk8jzZhm9+awVybiHcqLDEsTaCH85gO1k53BAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUQkrhh2bNX48b7NGqM2FfUX63DdQwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWEwZGU5N2Yt N2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQzYzc5LzAvMzEzOTMzMmUzMjMwMzMyZTMy MzAzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM0MzkzNDM2Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHBy8wwDQYJKoZIhvcNAQELBQADggEBABMRV5bQuN84QrGEKZbNHiQSYZP2ZBeQ KS7FI5wlPGRkmP6zDkpwTAo2fdLaeSK2QGy/hqJbppHRzwnR8gvWKJLtu46Hbo9e Bly8q6iXeCwFjx2FvWS9iEILDtrPZBwRZf767ethtqxDoASAxt1PvYifP1BEFR73 Mes0KvZKThnXpc3Bgrwsn7DEOlr69pZCTnhbawwzjmiKYhYvcuMUxXPaRV57xthH mWCgjyi3KsmoTixqz/tjp9KsHk3sUE7HDWaLBMmoQZYIEBpHjI1iB71mSlqENQ7c AcKQWQnDC/KIqtFECNSSCX1wZCbiqHs0tlLXxw0z5+6Re88KHblSwdQ= -----END CERTIFICATE-----Generated at Sat Dec 6 18:16:44 2025 by rpki-client