This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231322e3130332e36332e302f32342d3234203d3e20313734.roa File: 3231322e3130332e36332e302f32342d3234203d3e20313734.roa (raw, json) Hash identifier: BBjwLMhl6DauizM1s+1nR7ipA3FYfq7IiedPDuAF7Lw= Subject key identifier: 5C:F3:1E:59:61:3A:48:43:B1:A7:1C:F0:99:03:77:85:8D:DB:35:CD Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7D0C0317B6677DC101D921FA8EF63D2DEF187CB1 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231322e3130332e36332e302f32342d3234203d3e20313734.roa Signing time: Fri 28 Nov 2025 11:49:48 +0000 ROA not before: Fri 28 Nov 2025 11:44:48 +0000 ROA not after: Fri 27 Nov 2026 11:49:48 +0000 asID: 174 IP address blocks: 212.103.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:0c:03:17:b6:67:7d:c1:01:d9:21:fa:8e:f6:3d:2d:ef:18:7c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:48 2025 GMT Not After : Nov 27 11:49:48 2026 GMT Subject: CN=5CF31E59613A4843B1A71CF0990377858DDB35CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:44:49:7d:f2:35:b8:d8:cd:0e:28:58:ed:23: 71:4a:0e:b7:38:b0:c7:9f:c3:08:7e:f0:3c:77:0c: a4:3a:6f:3b:8a:a7:6f:fe:3c:06:4c:9f:b7:ca:8a: 8f:89:64:72:08:2e:ec:96:04:5f:c6:0d:db:88:2d: 15:87:f2:49:5e:b6:de:45:af:86:a6:45:52:bb:9b: fa:21:5f:fc:96:2d:ed:bc:b0:42:6f:8c:25:65:97: 08:c1:ef:c4:56:0c:72:9e:9d:a4:03:f3:4f:21:23: ba:1f:59:db:a6:24:a2:75:4f:18:bf:bc:63:72:cf: 30:1c:12:f4:68:1b:a4:8a:92:78:d4:29:1a:72:c2: 07:05:ed:f3:72:74:40:05:2b:26:d8:25:f7:a9:cd: f1:14:3e:a2:18:2d:86:83:a2:67:a7:21:85:1c:a5: e8:fa:2d:15:4f:c0:42:01:5c:9d:88:56:0f:49:ce: 0e:2b:b1:ce:c5:ae:3e:af:87:54:cd:57:fc:e0:fd: d2:4a:0a:d8:40:61:dd:58:5b:9c:12:5f:7c:ff:be: 1b:b6:2b:89:44:48:af:3c:d6:a7:98:87:5e:f6:aa: e9:cc:03:b4:89:4d:55:4c:c6:9c:7d:9a:81:a0:c8: a2:88:16:a7:69:cd:80:50:9c:63:95:14:61:1c:91: 6b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F3:1E:59:61:3A:48:43:B1:A7:1C:F0:99:03:77:85:8D:DB:35:CD X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231322e3130332e36332e302f32342d3234203d3e20313734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.103.63.0/24 Signature Algorithm: sha256WithRSAEncryption 90:c2:0e:b1:bd:e7:ec:c4:56:4d:53:00:94:6b:fc:c8:1b:55: 4f:af:31:fc:9e:21:e1:47:06:df:ad:85:d7:8b:76:da:ff:8a: 60:02:1a:90:c6:11:bc:86:bb:d6:5d:f8:8d:31:34:12:2b:82: 95:e7:4c:82:01:c0:02:7c:44:6f:fa:da:62:de:28:43:3f:9a: ce:0d:59:db:f0:e1:93:d0:8f:9b:0b:23:f0:1e:e2:06:17:f1: 06:e7:08:23:11:82:08:ec:34:72:f7:be:de:86:40:40:2e:76: 82:03:62:0b:e0:46:99:73:65:0c:e0:b7:c6:f8:f2:f4:1f:b6: ab:11:0a:6b:54:10:1d:c0:bf:ae:76:2d:6c:cc:4e:d0:61:b1: 2e:84:a1:24:e6:58:7d:d3:91:4d:0f:d5:05:58:14:99:58:77: 14:9c:3d:42:d8:69:c1:b1:2b:57:a0:72:b5:80:98:b7:6c:68: 98:61:4f:0c:f6:0c:89:d5:dc:75:69:90:af:da:15:51:80:e2: b7:d3:b8:d7:be:65:32:e0:18:92:a2:02:5b:e5:5f:74:2b:e4: 0d:46:79:c8:44:dd:ad:c9:1d:d6:73:0a:17:b9:76:53:87:3e: 7b:3b:9a:a8:d8:2e:18:9d:80:11:8a:2c:49:04:b5:a6:cf:06: 96:a0:67:45 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUfQwDF7ZnfcEB2SH6jvY9Le8YfLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDhaFw0yNjExMjcxMTQ5NDhaMDMxMTAvBgNV BAMTKDVDRjMxRTU5NjEzQTQ4NDNCMUE3MUNGMDk5MDM3Nzg1OEREQjM1Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvREl98jW42M0OKFjtI3FKDrc4 sMefwwh+8Dx3DKQ6bzuKp2/+PAZMn7fKio+JZHIILuyWBF/GDduILRWH8klett5F r4amRVK7m/ohX/yWLe28sEJvjCVllwjB78RWDHKenaQD808hI7ofWdumJKJ1Txi/ vGNyzzAcEvRoG6SKknjUKRpywgcF7fNydEAFKybYJfepzfEUPqIYLYaDomenIYUc pej6LRVPwEIBXJ2IVg9Jzg4rsc7Frj6vh1TNV/zg/dJKCthAYd1YW5wSX3z/vhu2 K4lESK881qeYh172qunMA7SJTVVMxpx9moGgyKKIFqdpzYBQnGOVFGEckWuNAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUXPMeWWE6SEOxpxzwmQN3hY3bNc0wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjMxMzIyZTMxMzAz MzJlMzYzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzczNC5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ANRnPzANBgkqhkiG9w0BAQsFAAOCAQEAkMIOsb3n7MRWTVMAlGv8yBtVT68x/J4h 4UcG362F14t22v+KYAIakMYRvIa71l34jTE0EiuCledMggHAAnxEb/raYt4oQz+a zg1Z2/Dhk9CPmwsj8B7iBhfxBucIIxGCCOw0cve+3oZAQC52ggNiC+BGmXNlDOC3 xvjy9B+2qxEKa1QQHcC/rnYtbMxO0GGxLoShJOZYfdORTQ/VBVgUmVh3FJw9Qthp wbErV6BytYCYt2xomGFPDPYMidXcdWmQr9oVUYDit9O4175lMuAYkqICW+VfdCvk DUZ5yETdrckd1nMKF7l2U4c+ezuaqNguGJ2AEYosSQS1ps8GlqBnRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:12:15 2025 by rpki-client