This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132302e302f32342d3234203d3e20323035383836.roa File: 3138352e3136392e3132302e302f32342d3234203d3e20323035383836.roa (raw, json) Hash identifier: Kl3yirtS/GQk6rUyZlPSoy//aSSwc7ETiQPS/ovJvdA= Subject key identifier: F5:AE:27:87:2C:20:8F:0F:88:74:83:AE:EB:A5:7A:54:7B:97:96:99 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 78A67131D9315FF2F9DAC48FCC63E8F1FC86BAE4 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132302e302f32342d3234203d3e20323035383836.roa Signing time: Thu 13 Nov 2025 07:12:56 +0000 ROA not before: Thu 13 Nov 2025 07:07:56 +0000 ROA not after: Thu 12 Nov 2026 07:12:56 +0000 asID: 205886 IP address blocks: 185.169.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a6:71:31:d9:31:5f:f2:f9:da:c4:8f:cc:63:e8:f1:fc:86:ba:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 13 07:07:56 2025 GMT Not After : Nov 12 07:12:56 2026 GMT Subject: CN=F5AE27872C208F0F887483AEEBA57A547B979699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:36:91:f8:1b:bc:4c:36:b4:c4:e5:d5:e9:db: 03:2f:66:32:70:64:98:63:54:a9:bb:77:cf:bc:27: 80:06:7a:c5:a6:5a:0c:a7:0f:b5:b0:5c:e1:d8:61: 96:ab:bf:4d:8e:09:d4:2e:ae:1f:ea:fa:28:38:11: ff:ef:b9:40:1f:e0:1b:85:d5:25:63:f8:a9:37:a5: b3:6c:29:ad:9c:2a:1e:85:d7:c9:a5:58:68:36:7b: a7:e0:dd:57:e7:54:8b:19:8f:9a:4f:76:d0:9d:13: bb:d0:42:4b:d2:3f:13:16:aa:88:94:07:b5:d0:39: ab:14:c6:e3:d4:10:a4:af:33:28:35:55:e5:dc:64: 00:aa:e4:5b:43:79:9c:d9:05:39:e5:dd:06:72:6b: f4:b3:8c:f2:70:1d:f6:43:60:6f:94:36:fe:c8:2c: fc:40:ed:18:6d:e9:34:b9:7b:80:67:e6:43:2d:12: 49:37:ca:67:7c:87:63:21:13:66:0d:4e:61:3d:7e: 5b:33:aa:73:b5:f6:3a:92:2a:3b:71:af:9d:7c:f8: 6e:4f:c3:07:a2:39:f9:3e:d0:5d:46:c7:07:91:f1: 8a:4e:d6:bb:8e:49:9a:9a:7f:e0:d7:e7:50:e4:4f: c3:3f:8f:94:8d:76:3f:dd:99:d2:46:27:26:d6:61: 7a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AE:27:87:2C:20:8F:0F:88:74:83:AE:EB:A5:7A:54:7B:97:96:99 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132302e302f32342d3234203d3e20323035383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.120.0/24 Signature Algorithm: sha256WithRSAEncryption 94:fe:9a:1b:7b:fc:95:17:b9:c7:3b:2c:ff:85:8f:f9:d7:3b: 66:a3:35:79:3a:7c:77:45:86:c6:66:e0:9e:de:cc:cc:59:78: 56:f5:ba:49:cf:74:47:41:f8:23:60:4c:9a:ca:a9:8b:6a:a1: e3:52:e9:62:d6:0e:59:6a:33:b2:95:5d:11:11:a8:02:51:51: 26:a9:5d:ef:e4:e6:df:d7:12:f0:e4:43:21:f8:b0:77:61:4c: 9b:4a:de:e3:12:56:3d:8b:d3:61:f1:a3:ed:22:74:e7:2e:b8: d6:8a:3d:86:61:fc:20:ed:c0:16:84:0e:b5:77:2f:56:a3:e2: f9:ff:e0:0c:56:6e:1c:b3:18:0f:d1:66:60:f3:68:e8:ea:19: 42:c2:a8:d9:2f:a2:d4:ef:9d:d4:02:59:e2:83:41:b5:75:6a: 5f:5a:5d:59:1c:76:f1:c1:c1:83:0a:5a:6c:ca:46:6f:64:02: 11:91:02:01:0c:a7:ce:fb:8d:da:0e:f4:84:ae:22:c9:8a:cb: 97:2f:51:92:28:38:a9:96:49:4b:13:58:b5:15:30:7e:fd:52: 6e:59:15:a5:48:59:cf:8a:63:f4:cc:8c:49:aa:af:63:5b:f5: 4e:89:f0:68:60:bf:9b:c8:43:18:54:bc:ad:13:28:3b:95:09: 01:64:38:cf -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUeKZxMdkxX/L52sSPzGPo8fyGuuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTMwNzA3NTZaFw0yNjExMTIwNzEyNTZaMDMxMTAvBgNV BAMTKEY1QUUyNzg3MkMyMDhGMEY4ODc0ODNBRUVCQTU3QTU0N0I5Nzk2OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQNpH4G7xMNrTE5dXp2wMvZjJw ZJhjVKm7d8+8J4AGesWmWgynD7WwXOHYYZarv02OCdQurh/q+ig4Ef/vuUAf4BuF 1SVj+Kk3pbNsKa2cKh6F18mlWGg2e6fg3VfnVIsZj5pPdtCdE7vQQkvSPxMWqoiU B7XQOasUxuPUEKSvMyg1VeXcZACq5FtDeZzZBTnl3QZya/SzjPJwHfZDYG+UNv7I LPxA7Rht6TS5e4Bn5kMtEkk3ymd8h2MhE2YNTmE9flszqnO19jqSKjtxr518+G5P wweiOfk+0F1GxweR8YpO1ruOSZqaf+DX51DkT8M/j5SNdj/dmdJGJybWYXq/AgMB AAGjggJBMIICPTAdBgNVHQ4EFgQU9a4nhywgjw+IdIOu66V6VHuXlpkwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzEzODM1MmUzMTM2MzkyZTMx MzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNTM4MzgzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALmpeDANBgkqhkiG9w0BAQsFAAOCAQEAlP6aG3v8lRe5xzss/4WP+dc7ZqM1 eTp8d0WGxmbgnt7MzFl4VvW6Sc90R0H4I2BMmsqpi2qh41LpYtYOWWozspVdERGo AlFRJqld7+Tm39cS8ORDIfiwd2FMm0re4xJWPYvTYfGj7SJ05y641oo9hmH8IO3A FoQOtXcvVqPi+f/gDFZuHLMYD9FmYPNo6OoZQsKo2S+i1O+d1AJZ4oNBtXVqX1pd WRx28cHBgwpabMpGb2QCEZECAQynzvuN2g70hK4iyYrLly9Rkig4qZZJSxNYtRUw fv1SblkVpUhZz4pj9MyMSaqvY1v1TonwaGC/m8hDGFS8rRMoO5UJAWQ4zw== -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:49 2025 by rpki-client