This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130342e302f32342d3234203d3e20313938303230.roa File: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (raw, json) Hash identifier: 2c/Q6mL57WPxOvD74dnFYEhVwjt0QpjY04YbOcxeQJ8= Subject key identifier: 67:AF:B6:34:14:09:98:54:17:73:26:7D:DE:1B:B8:47:C9:4C:79:D2 Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 07C5153935BC6628150278F0F2050C67B832A59C Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130342e302f32342d3234203d3e20313938303230.roa Signing time: Mon 24 Nov 2025 10:55:12 +0000 ROA not before: Mon 24 Nov 2025 10:50:12 +0000 ROA not after: Mon 23 Nov 2026 10:55:12 +0000 asID: 198020 IP address blocks: 31.22.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c5:15:39:35:bc:66:28:15:02:78:f0:f2:05:0c:67:b8:32:a5:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Nov 24 10:50:12 2025 GMT Not After : Nov 23 10:55:12 2026 GMT Subject: CN=67AFB634140998541773267DDE1BB847C94C79D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:15:5b:93:a0:5c:5b:a2:85:e5:bb:22:c0:ea: 7e:16:b8:6d:fc:81:53:2e:09:a2:69:01:04:ca:d1: 28:a3:2c:5f:25:87:db:76:9e:ce:1f:6c:8f:9e:ac: 40:06:be:57:27:a7:3c:4e:3e:24:47:ff:61:4c:d3: 44:b7:32:06:a8:44:43:75:8b:e2:1a:8a:f2:e6:3c: 0e:47:35:41:fe:ca:38:d8:db:09:6a:00:5b:95:fe: d1:54:05:b6:e8:98:bd:f3:01:4c:25:4c:65:14:da: b5:5c:75:ed:d3:49:81:0b:a2:93:6a:09:fd:86:7b: 29:25:46:e6:22:08:52:a3:12:06:af:56:7b:95:10: 0f:0d:86:c2:a5:0e:e5:72:a3:21:db:b9:0c:77:89: 7d:02:48:34:73:08:1b:fa:8a:2b:be:7e:77:f5:43: fa:aa:db:5a:4e:33:4f:c6:90:a8:cf:24:5b:72:f8: 7b:b0:2d:60:5a:73:17:d2:c3:66:b2:63:ba:76:16: 9c:d3:4d:66:67:82:60:64:a3:1c:7f:0f:02:a7:2c: ec:32:13:47:8f:c0:57:1f:57:be:9c:ed:85:45:69: 94:bf:18:03:bf:23:70:1f:a6:80:c3:d7:aa:3a:ca: 78:b2:0c:e9:87:f7:64:36:ba:ae:19:2a:f0:e7:ff: fd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AF:B6:34:14:09:98:54:17:73:26:7D:DE:1B:B8:47:C9:4C:79:D2 X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130342e302f32342d3234203d3e20313938303230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.104.0/24 Signature Algorithm: sha256WithRSAEncryption 31:b8:70:de:13:e1:c4:ad:d8:21:e4:f4:20:70:71:e9:3b:75: 7d:42:46:eb:c3:56:9b:9e:cd:a8:90:40:73:9e:a0:fc:ce:be: fb:01:30:87:c0:69:1a:33:d9:2d:f6:f8:e7:67:f9:5c:57:3a: 0f:74:1a:c5:4c:28:e5:23:7a:70:9d:f0:bb:88:ca:b3:23:a3: 69:b6:05:55:23:cb:7a:5d:6f:af:e9:bc:57:53:70:2c:5b:b0: 82:ba:d5:06:3a:bc:42:31:ef:24:00:da:b9:ad:6d:a0:bc:89: 55:c9:13:8b:73:97:41:68:fe:16:ba:4f:0d:b7:30:c6:b0:e6: b8:2f:1c:97:90:e8:dd:98:92:6f:e2:47:c3:79:1e:1b:a4:8f: f3:25:29:35:cf:cf:6b:94:38:06:95:1e:3e:f3:41:86:67:fc: 3e:9c:f2:f6:00:c3:9f:64:03:02:cf:67:d9:08:c6:40:35:00: 79:82:94:4c:16:fe:07:43:9a:f9:b0:8a:17:27:9d:d6:80:79: 5f:4d:88:7a:6d:b1:33:03:40:13:27:af:7a:e7:c8:76:36:df: d2:6b:24:9f:34:7a:20:e7:bf:dd:43:4c:63:3d:a1:f7:ed:f8: c1:2c:0d:00:79:8f:5d:c5:e3:28:f4:f8:15:90:4b:31:a4:6d: e8:0e:d8:b6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUB8UVOTW8ZigVAnjw8gUMZ7gypZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNTExMjQxMDUwMTJaFw0yNjExMjMxMDU1MTJaMDMxMTAvBgNV BAMTKDY3QUZCNjM0MTQwOTk4NTQxNzczMjY3RERFMUJCODQ3Qzk0Qzc5RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeFVuToFxbooXluyLA6n4WuG38 gVMuCaJpAQTK0SijLF8lh9t2ns4fbI+erEAGvlcnpzxOPiRH/2FM00S3MgaoREN1 i+IaivLmPA5HNUH+yjjY2wlqAFuV/tFUBbbomL3zAUwlTGUU2rVcde3TSYELopNq Cf2GeyklRuYiCFKjEgavVnuVEA8NhsKlDuVyoyHbuQx3iX0CSDRzCBv6iiu+fnf1 Q/qq21pOM0/GkKjPJFty+HuwLWBacxfSw2ayY7p2FpzTTWZngmBkoxx/DwKnLOwy E0ePwFcfV76c7YVFaZS/GAO/I3AfpoDD16o6yniyDOmH92Q2uq4ZKvDn//2JAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUZ6+2NBQJmFQXcyZ93hu4R8lMedIwHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQt NmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2NjIwLzAvMzMzMTJlMzIzMjJlMzEzMDM0 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM4MzAzMjMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA HxZoMA0GCSqGSIb3DQEBCwUAA4IBAQAxuHDeE+HErdgh5PQgcHHpO3V9Qkbrw1ab ns2okEBznqD8zr77ATCHwGkaM9kt9vjnZ/lcVzoPdBrFTCjlI3pwnfC7iMqzI6Np tgVVI8t6XW+v6bxXU3AsW7CCutUGOrxCMe8kANq5rW2gvIlVyROLc5dBaP4Wuk8N tzDGsOa4LxyXkOjdmJJv4kfDeR4bpI/zJSk1z89rlDgGlR4+80GGZ/w+nPL2AMOf ZAMCz2fZCMZANQB5gpRMFv4HQ5r5sIoXJ53WgHlfTYh6bbEzA0ATJ69658h2Nt/S aySfNHog57/dQ0xjPaH37fjBLA0AeY9dxeMo9PgVkEsxpG3oDti2 -----END CERTIFICATE-----Generated at Sat Dec 6 15:11:32 2025 by rpki-client