This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa File: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (raw, json) Hash identifier: QWu7fHTZ3PYuiSQam7CYDAJC5NNcXBc6g5huH6iiI3k= Subject key identifier: 65:07:62:4C:A5:1A:16:BA:FE:E0:E3:67:50:A0:40:47:67:62:96:4F Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 6F65AD604342D109134B727FDE0CEC6ECD5C19B9 Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa Signing time: Thu 20 Nov 2025 15:55:12 +0000 ROA not before: Thu 20 Nov 2025 15:50:12 +0000 ROA not after: Thu 19 Nov 2026 15:55:12 +0000 asID: 49468 IP address blocks: 193.203.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:65:ad:60:43:42:d1:09:13:4b:72:7f:de:0c:ec:6e:cd:5c:19:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Nov 20 15:50:12 2025 GMT Not After : Nov 19 15:55:12 2026 GMT Subject: CN=6507624CA51A16BAFEE0E36750A040476762964F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:63:8d:23:37:2e:17:dd:96:a9:38:14:12:f0: 12:5b:78:03:5b:76:ee:e6:d2:06:ce:13:c5:48:38: ea:be:fe:fb:69:19:f1:49:71:d2:f3:c7:22:50:47: 80:24:69:03:5b:4c:3c:8b:a2:40:3c:a4:4e:ef:2e: 39:8d:e4:9f:e1:e0:20:9a:18:98:fd:1e:7e:25:aa: b4:79:0e:93:7f:81:8f:a4:15:de:c8:0d:3d:91:f9: 86:46:05:11:9f:ce:c4:af:e6:c4:5c:58:7c:79:87: 0d:02:84:4a:12:a4:d9:bc:c8:a8:3e:70:fa:2c:d7: dc:bb:96:80:da:b5:b7:39:4e:50:85:4a:b9:f6:0f: 9c:1a:e3:e5:2e:18:76:64:56:ac:bf:e4:81:99:cd: 58:23:f7:f8:fe:1d:f6:9b:d9:10:47:3f:e0:3d:79: cc:42:e4:8b:65:d0:7d:47:c7:49:9f:02:69:08:8d: 88:79:37:04:e7:11:fa:c2:28:f8:cc:7d:4d:c5:66: b3:98:51:61:f0:8d:73:6d:d4:1d:f4:62:6e:72:57: 85:60:8b:03:ec:2d:f1:7e:74:6c:cb:66:fb:85:b3: b2:d8:9e:0e:87:d0:9c:25:df:0e:90:e5:e3:93:8d: 4d:df:ba:6e:42:55:7a:fc:84:e8:93:ff:1a:2d:1a: 8d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:07:62:4C:A5:1A:16:BA:FE:E0:E3:67:50:A0:40:47:67:62:96:4F X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.204.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:ad:79:88:ad:4a:3e:55:ff:b0:e7:19:90:46:6f:23:fc:39: 02:16:a6:f2:13:6c:0a:01:db:c3:98:3a:e1:2d:a8:5a:ee:f3: 26:0c:cc:f7:40:34:6b:02:4b:df:75:9e:f4:0b:46:33:6f:71: b6:e9:85:7a:80:0e:df:84:1a:c1:30:ce:fb:e8:82:0c:7b:00: c4:2a:19:73:ba:c8:0c:16:f2:ca:9f:ae:6c:81:fc:87:1d:a1: 7a:bd:8a:b7:a9:e3:5d:6e:d3:41:ce:50:e1:e9:a9:7b:00:f0: c2:83:ff:a7:c6:40:48:55:f6:58:ce:8c:a1:bf:ac:3a:43:9f: f3:7b:ab:72:e4:ae:e8:c5:6d:a3:a1:41:7a:49:fa:ba:00:98: 79:72:37:f5:12:27:34:5a:9c:23:8f:07:be:d3:c4:e3:ea:4a: 3f:47:a9:4c:12:3c:7d:2e:16:eb:68:ac:34:fe:0e:71:fc:f0: d4:de:10:51:9e:58:83:b2:c9:b8:26:39:30:f1:8f:6d:a8:d2: 31:b1:a6:4b:53:cb:4c:25:10:df:b5:80:ba:87:1f:45:5b:ae: 60:51:6a:37:14:57:30:41:4a:84:c1:51:d3:f1:7a:52:b4:8c: 1b:05:2b:d0:04:cd:73:85:3c:e8:70:3f:55:d2:96:7b:40:d9: 2a:7d:d8:74 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUb2WtYENC0QkTS3J/3gzsbs1cGbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNTExMjAxNTUwMTJaFw0yNjExMTkxNTU1MTJaMDMxMTAvBgNV BAMTKDY1MDc2MjRDQTUxQTE2QkFGRUUwRTM2NzUwQTA0MDQ3Njc2Mjk2NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBY40jNy4X3ZapOBQS8BJbeANb du7m0gbOE8VIOOq+/vtpGfFJcdLzxyJQR4AkaQNbTDyLokA8pE7vLjmN5J/h4CCa GJj9Hn4lqrR5DpN/gY+kFd7IDT2R+YZGBRGfzsSv5sRcWHx5hw0ChEoSpNm8yKg+ cPos19y7loDatbc5TlCFSrn2D5wa4+UuGHZkVqy/5IGZzVgj9/j+Hfab2RBHP+A9 ecxC5Itl0H1Hx0mfAmkIjYh5NwTnEfrCKPjMfU3FZrOYUWHwjXNt1B30Ym5yV4Vg iwPsLfF+dGzLZvuFs7LYng6H0Jwl3w6Q5eOTjU3fum5CVXr8hOiT/xotGo0BAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUZQdiTKUaFrr+4ONnUKBAR2dilk8wHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWEwZGU5N2Yt N2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQzYzc5LzAvMzEzOTMzMmUzMjMwMzMyZTMy MzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzkzNDM2Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADBy8wwDQYJKoZIhvcNAQELBQADggEBAIuteYitSj5V/7DnGZBGbyP8OQIWpvIT bAoB28OYOuEtqFru8yYMzPdANGsCS991nvQLRjNvcbbphXqADt+EGsEwzvvoggx7 AMQqGXO6yAwW8sqfrmyB/IcdoXq9irep411u00HOUOHpqXsA8MKD/6fGQEhV9ljO jKG/rDpDn/N7q3LkrujFbaOhQXpJ+roAmHlyN/USJzRanCOPB77TxOPqSj9HqUwS PH0uFutorDT+DnH88NTeEFGeWIOyybgmOTDxj22o0jGxpktTy0wlEN+1gLqHH0Vb rmBRajcUVzBBSoTBUdPxelK0jBsFK9AEzXOFPOhwP1XSlntA2Sp92HQ= -----END CERTIFICATE-----Generated at Sat Dec 6 16:33:14 2025 by rpki-client