This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36382e302f32342d3234203d3e20313336373837.roa File: 3231322e39372e36382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: F8k9Q5wIvXIRMVJ3FC+QDOVE6i6hGnXFjKgqRpGCUE0= Subject key identifier: F6:A7:E9:54:7C:6B:9E:8E:C4:48:D5:26:82:1B:8B:E0:4A:C5:F1:ED Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 4A71BDE9DBFBD421F6C48E5A6DDC904C3AE20C7D Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36382e302f32342d3234203d3e20313336373837.roa Signing time: Tue 02 Dec 2025 19:50:12 +0000 ROA not before: Tue 02 Dec 2025 19:45:12 +0000 ROA not after: Tue 01 Dec 2026 19:50:12 +0000 asID: 136787 IP address blocks: 212.97.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:71:bd:e9:db:fb:d4:21:f6:c4:8e:5a:6d:dc:90:4c:3a:e2:0c:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 2 19:45:12 2025 GMT Not After : Dec 1 19:50:12 2026 GMT Subject: CN=F6A7E9547C6B9E8EC448D526821B8BE04AC5F1ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:21:d2:e9:fe:21:db:05:69:45:83:b0:e1:48: 61:68:d1:c1:2b:97:ac:22:64:aa:3e:12:46:a8:ae: 38:2f:73:0a:48:b2:cf:6e:ed:41:4f:3f:d3:2c:57: 8b:44:bf:27:ff:42:e4:59:6b:f8:fa:d1:4c:61:cd: 90:a2:03:62:c0:5f:bc:fb:c8:ab:5a:40:ea:c3:1e: 60:d2:e4:df:37:16:f6:88:da:bc:d9:d5:f5:b3:d0: f5:b4:d5:fd:37:53:a7:6c:d8:8f:df:cc:a1:ad:be: 7b:cc:ee:7f:4e:43:48:20:8a:8e:cf:31:f6:0d:b2: 8f:f2:9f:80:cf:eb:94:82:ad:8c:9b:81:f5:e7:69: 5d:57:e5:7d:32:a1:d5:0c:2d:9b:89:32:bd:a9:1e: 6f:ff:35:52:f8:87:1f:e8:94:56:df:79:cd:21:0b: f9:d7:c9:de:43:04:46:69:c9:5f:8d:82:e5:cf:6d: 67:c1:cc:83:07:6d:e8:bc:cd:7e:53:cb:ce:62:a0: 29:f7:b9:2d:6d:17:e7:d6:16:8a:c6:8e:ef:b3:25: 06:d8:2d:d6:6f:7e:08:20:a3:9c:80:94:c0:e6:a5: 3b:fc:e3:df:63:e3:8e:92:d7:91:a2:a7:2c:2d:21: 78:dd:0e:3f:88:d6:27:73:b3:48:f9:75:ce:ce:1d: cd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A7:E9:54:7C:6B:9E:8E:C4:48:D5:26:82:1B:8B:E0:4A:C5:F1:ED X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.97.68.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:73:ce:a5:2c:22:a0:f3:b0:50:48:17:de:07:62:d8:56:f5: 8b:c6:bc:a4:dd:48:61:bf:f4:60:0d:22:f9:c1:43:0a:83:c7: bd:a7:a1:8e:d9:4f:b0:b8:97:05:83:ad:b2:42:5e:ec:9f:64: fc:a3:c9:83:1c:a7:9f:fc:e8:23:69:3d:9a:43:f0:9e:e5:50: 21:6e:6c:85:95:85:22:3c:fe:5f:19:e5:22:6d:29:0e:3e:d0: d8:79:9b:37:ac:8b:2c:a2:f5:30:1b:eb:6a:82:a8:1b:ee:a4: 4d:3d:18:0e:f4:a1:0b:8e:cd:ba:77:db:ba:a1:99:ef:6c:ba: 95:d3:c3:a3:01:d0:fe:e2:fa:9c:64:1c:e7:fd:b9:0c:bf:1c: 0a:b5:39:b7:d6:08:02:b1:4a:ac:f8:a1:70:c5:93:7e:6e:d8: a2:ee:aa:d6:33:af:27:42:55:5b:74:5c:e0:ed:58:75:e8:e1: 3e:83:c1:5a:ee:53:36:85:7f:3f:75:30:0a:6c:42:bd:06:b6: c5:20:30:b0:db:73:94:88:ac:0f:83:c3:8a:01:69:cc:d9:8f: 3d:fd:81:30:0b:16:2a:c6:71:f1:ca:04:af:c5:bf:ce:47:7d: 39:0b:fb:6c:06:62:36:d5:45:66:c8:ae:a2:23:f7:c8:98:a9: 04:09:1a:b5 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUSnG96dv71CH2xI5abdyQTDriDH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMDIxOTQ1MTJaFw0yNjEyMDExOTUwMTJaMDMxMTAvBgNV BAMTKEY2QTdFOTU0N0M2QjlFOEVDNDQ4RDUyNjgyMUI4QkUwNEFDNUYxRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTIdLp/iHbBWlFg7DhSGFo0cEr l6wiZKo+EkaorjgvcwpIss9u7UFPP9MsV4tEvyf/QuRZa/j60UxhzZCiA2LAX7z7 yKtaQOrDHmDS5N83FvaI2rzZ1fWz0PW01f03U6ds2I/fzKGtvnvM7n9OQ0ggio7P MfYNso/yn4DP65SCrYybgfXnaV1X5X0yodUMLZuJMr2pHm//NVL4hx/olFbfec0h C/nXyd5DBEZpyV+NguXPbWfBzIMHbei8zX5Ty85ioCn3uS1tF+fWForGju+zJQbY LdZvfgggo5yAlMDmpTv8499j446S15GipywtIXjdDj+I1idzs0j5dc7OHc1/AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU9qfpVHxrno7ESNUmghuL4ErF8e0wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzOTM3MmUzNjM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 1GFEMA0GCSqGSIb3DQEBCwUAA4IBAQAsc86lLCKg87BQSBfeB2LYVvWLxryk3Uhh v/RgDSL5wUMKg8e9p6GO2U+wuJcFg62yQl7sn2T8o8mDHKef/OgjaT2aQ/Ce5VAh bmyFlYUiPP5fGeUibSkOPtDYeZs3rIssovUwG+tqgqgb7qRNPRgO9KELjs26d9u6 oZnvbLqV08OjAdD+4vqcZBzn/bkMvxwKtTm31ggCsUqs+KFwxZN+btii7qrWM68n QlVbdFzg7Vh16OE+g8Fa7lM2hX8/dTAKbEK9BrbFIDCw23OUiKwPg8OKAWnM2Y89 /YEwCxYqxnHxygSvxb/OR305C/tsBmI21UVmyK6iI/fImKkECRq1 -----END CERTIFICATE-----Generated at Sat Dec 6 16:07:46 2025 by rpki-client