This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231322e3130332e36332e302f32342d3234203d3e20333938373831.roa File: 3231322e3130332e36332e302f32342d3234203d3e20333938373831.roa (raw, json) Hash identifier: ILqgTqVTqQ3E56WE5HzEg1SO3knEGlLLti1iQLbv35I= Subject key identifier: 80:3A:1A:29:7D:8B:F6:4D:1A:4A:D2:57:1C:62:91:D5:10:CD:C5:D0 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2DE78F187633C0B9C04DCD8B6A572D659D501D23 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231322e3130332e36332e302f32342d3234203d3e20333938373831.roa Signing time: Sat 06 Dec 2025 05:50:13 +0000 ROA not before: Sat 06 Dec 2025 05:45:13 +0000 ROA not after: Sat 05 Dec 2026 05:50:13 +0000 asID: 398781 IP address blocks: 212.103.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e7:8f:18:76:33:c0:b9:c0:4d:cd:8b:6a:57:2d:65:9d:50:1d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Dec 6 05:45:13 2025 GMT Not After : Dec 5 05:50:13 2026 GMT Subject: CN=803A1A297D8BF64D1A4AD2571C6291D510CDC5D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d5:00:f3:31:05:0b:7a:ba:46:be:27:cb:67: db:98:09:3a:72:81:76:b8:f5:c5:bf:a1:a4:c7:b2: 29:d8:34:a3:46:d8:0f:45:ff:c4:91:0e:21:89:93: 17:ec:79:a1:3f:0e:01:66:8f:c9:09:8f:8d:b9:d7: eb:f2:2f:e2:8e:eb:0c:df:7f:49:bd:e9:29:e7:f7: 61:63:13:9c:ca:1e:5e:1b:a8:98:77:c0:56:4d:20: 7c:36:35:c3:89:2d:e6:9b:5a:31:39:cd:98:c1:bb: ad:16:93:0e:09:55:10:5d:9d:b9:41:4e:9f:cc:a6: 2f:b4:15:a8:bc:cc:1b:1a:41:d0:3e:44:71:94:ed: 59:e9:06:e4:6f:e3:d9:70:e0:71:02:8f:6b:c7:83: 69:e7:95:0b:c9:75:56:8b:71:75:1d:81:b2:76:f0: 2b:c7:f7:4c:9b:40:2f:0d:85:0c:24:98:21:d6:89: 2e:58:38:f0:5c:ad:86:e7:80:f5:9c:98:b8:ca:77: fa:df:19:8b:60:63:a7:94:cb:f3:0e:2c:9c:75:ea: 81:c2:19:20:ee:e1:45:dc:49:ce:9a:f7:81:dc:68: 69:93:21:7c:38:ae:dc:5f:85:18:ea:c6:7d:f3:4a: 58:65:44:f6:25:8c:4d:86:89:a6:9f:a4:3e:fa:f8: 1e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3A:1A:29:7D:8B:F6:4D:1A:4A:D2:57:1C:62:91:D5:10:CD:C5:D0 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231322e3130332e36332e302f32342d3234203d3e20333938373831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.103.63.0/24 Signature Algorithm: sha256WithRSAEncryption 46:93:28:b1:63:a6:37:aa:d8:e6:cc:0c:0c:cc:02:1d:d8:44: 3b:e4:9a:35:50:62:37:2f:48:0e:d1:4f:fc:0a:0f:0a:35:46: c4:aa:ec:13:b8:c1:f0:61:42:53:bb:5a:62:6f:59:ce:7a:9c: 58:8d:97:34:84:48:70:a3:ee:d4:a9:19:ba:12:41:d0:c2:f5: 19:fa:c6:c1:d6:68:ed:2f:26:73:d7:99:23:c6:f8:35:a2:a4: be:09:bb:9a:28:b6:85:27:13:00:ae:42:33:2a:9b:24:06:9e: b4:d9:99:30:4a:65:e7:3e:3c:a7:14:cd:de:3b:57:a7:c5:30: 6b:13:14:ae:be:6d:3c:de:57:4f:31:dd:1a:69:05:82:3f:7c: 07:96:ef:86:b3:af:4c:35:81:7b:4c:5b:7b:b3:61:90:1c:9e: 45:ab:21:0d:ad:db:15:a4:0d:71:6b:d9:fb:63:1d:be:16:00: 74:50:4b:fc:54:71:16:e3:48:aa:73:26:aa:ca:e8:e3:d2:d8: b7:f1:2b:25:42:79:09:88:21:eb:f6:59:4d:8e:f0:6f:89:d7: 92:a0:88:c8:9f:e5:3c:40:54:98:0b:d7:7d:28:05:2f:40:58: 7b:97:13:f6:f5:0b:8f:51:54:3c:25:d2:e7:ab:d9:e4:a5:15: 3f:d4:4f:c5 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIULeePGHYzwLnATc2LalctZZ1QHSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTEyMDYwNTQ1MTNaFw0yNjEyMDUwNTUwMTNaMDMxMTAvBgNV BAMTKDgwM0ExQTI5N0Q4QkY2NEQxQTRBRDI1NzFDNjI5MUQ1MTBDREM1RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK1QDzMQULerpGvifLZ9uYCTpy gXa49cW/oaTHsinYNKNG2A9F/8SRDiGJkxfseaE/DgFmj8kJj4251+vyL+KO6wzf f0m96Snn92FjE5zKHl4bqJh3wFZNIHw2NcOJLeabWjE5zZjBu60Wkw4JVRBdnblB Tp/Mpi+0Fai8zBsaQdA+RHGU7VnpBuRv49lw4HECj2vHg2nnlQvJdVaLcXUdgbJ2 8CvH90ybQC8NhQwkmCHWiS5YOPBcrYbngPWcmLjKd/rfGYtgY6eUy/MOLJx16oHC GSDu4UXcSc6a94HcaGmTIXw4rtxfhRjqxn3zSlhlRPYljE2GiaafpD76+B5/AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUgDoaKX2L9k0aStJXHGKR1RDNxdAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjMxMzIyZTMxMzAz MzJlMzYzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzODM3MzgzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANRnPzANBgkqhkiG9w0BAQsFAAOCAQEARpMosWOmN6rY5swMDMwCHdhE O+SaNVBiNy9IDtFP/AoPCjVGxKrsE7jB8GFCU7taYm9ZznqcWI2XNIRIcKPu1KkZ uhJB0ML1GfrGwdZo7S8mc9eZI8b4NaKkvgm7mii2hScTAK5CMyqbJAaetNmZMEpl 5z48pxTN3jtXp8UwaxMUrr5tPN5XTzHdGmkFgj98B5bvhrOvTDWBe0xbe7NhkBye RashDa3bFaQNcWvZ+2MdvhYAdFBL/FRxFuNIqnMmqsro49LYt/ErJUJ5CYgh6/ZZ TY7wb4nXkqCIyJ/lPEBUmAvXfSgFL0BYe5cT9vULj1FUPCXS56vZ5KUVP9RPxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:24 2025 by rpki-client