This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132302e302f32342d3234203d3e203235313938.roa File: 3138352e3136392e3132302e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: NhwNgSRRC4ze1vFyna1H6oipTAX1WYy4vfkJyAyZaok= Subject key identifier: 28:53:60:5A:A2:DE:9C:06:82:83:3D:00:BA:77:54:49:5B:E3:5B:BB Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 3CABE82BAD9689C58E8BA1F26D1D4B8747724FA1 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132302e302f32342d3234203d3e203235313938.roa Signing time: Mon 17 Nov 2025 04:25:14 +0000 ROA not before: Mon 17 Nov 2025 04:20:14 +0000 ROA not after: Mon 16 Nov 2026 04:25:14 +0000 asID: 25198 IP address blocks: 185.169.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ab:e8:2b:ad:96:89:c5:8e:8b:a1:f2:6d:1d:4b:87:47:72:4f:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 17 04:20:14 2025 GMT Not After : Nov 16 04:25:14 2026 GMT Subject: CN=2853605AA2DE9C0682833D00BA7754495BE35BBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b5:f3:be:68:3b:52:5b:ab:aa:e4:3a:13:e0: 63:d5:ac:f6:6b:40:f0:78:66:b0:11:6b:34:77:fc: 8a:30:7c:bf:28:83:1f:3d:21:1e:3b:b4:08:b7:fe: 28:da:bf:5a:92:93:2c:98:ab:79:bd:0b:2d:5f:99: 79:11:c4:1c:01:bf:9f:29:00:6d:8d:b8:50:e5:d6: 91:4e:1f:7c:22:bc:a1:e0:b9:cc:03:af:fe:b6:d8: 90:b5:11:07:b2:1c:cb:28:bf:a4:20:f0:13:7e:81: e6:a9:89:b2:de:0f:ca:f2:9e:00:8e:2b:05:41:68: 28:7d:9a:7a:6a:86:a3:01:96:bc:fe:53:7e:87:d1: fd:fb:2e:9a:72:a9:6f:57:ac:57:0f:83:16:81:c1: e3:ac:14:97:9f:1d:dd:c0:74:30:09:0b:e9:81:d2: eb:a3:71:2b:e9:42:13:a3:67:9f:35:3e:bf:fb:37: fb:a3:26:f3:f8:b4:eb:15:91:09:1f:87:08:85:13: 0d:02:ea:dc:4b:fb:15:4f:2a:0d:a5:b2:91:71:a6: 0b:68:be:f5:6a:6a:06:81:6b:6a:fa:65:9c:80:8e: 52:d5:1b:90:ca:19:5d:3d:ee:b0:5b:e4:af:4b:23: a2:96:f4:6e:3d:e1:77:03:9b:e3:6f:83:e2:d0:40: 0c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:53:60:5A:A2:DE:9C:06:82:83:3D:00:BA:77:54:49:5B:E3:5B:BB X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132302e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.120.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:a1:d4:4a:c3:91:84:53:8d:71:1a:3b:1f:93:b5:48:d0:3c: 6d:2f:a2:c1:a1:24:e2:db:6b:6c:2f:34:8f:60:24:34:28:de: 4e:37:79:b6:67:c1:15:ed:29:13:1f:e5:35:96:57:0d:7c:db: cc:72:a2:51:a0:7a:d6:80:74:f2:00:dc:4c:d6:fb:70:62:b0: 33:e5:12:d4:4a:34:0c:11:c3:7d:a5:fd:75:9e:cd:05:ee:e7: 41:87:e4:86:ca:9e:ea:66:96:2a:40:3b:a4:71:79:3d:4c:eb: 79:13:f7:72:e3:33:95:7c:ac:77:b3:77:11:2d:9f:1c:24:98: de:37:0b:dd:48:9f:93:02:bf:47:6a:9f:d9:5a:1c:ea:b2:28: 6a:1a:e5:2c:34:60:92:21:21:c4:32:e0:a0:d2:7d:95:54:4d: fc:e6:3a:63:ae:e5:75:5b:de:9f:e9:c2:c7:99:39:0b:34:7e: d9:9e:e8:2e:ac:c3:2c:00:c9:67:74:e3:e6:2e:4b:6c:8d:0a: c7:be:0b:0a:6e:af:ff:17:fc:9b:e2:ad:6d:c3:c8:76:8f:fe: 67:b3:54:79:d9:5d:87:f4:37:47:9c:3d:19:20:71:0f:cb:6d: c6:2c:fa:88:c0:51:0d:0e:16:84:fb:4e:0a:4b:7f:5e:bb:db: b1:e0:2f:de -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUPKvoK62WicWOi6HybR1Lh0dyT6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTcwNDIwMTRaFw0yNjExMTYwNDI1MTRaMDMxMTAvBgNV BAMTKDI4NTM2MDVBQTJERTlDMDY4MjgzM0QwMEJBNzc1NDQ5NUJFMzVCQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXtfO+aDtSW6uq5DoT4GPVrPZr QPB4ZrARazR3/IowfL8ogx89IR47tAi3/ijav1qSkyyYq3m9Cy1fmXkRxBwBv58p AG2NuFDl1pFOH3wivKHgucwDr/622JC1EQeyHMsov6Qg8BN+geapibLeD8ryngCO KwVBaCh9mnpqhqMBlrz+U36H0f37LppyqW9XrFcPgxaBweOsFJefHd3AdDAJC+mB 0uujcSvpQhOjZ581Pr/7N/ujJvP4tOsVkQkfhwiFEw0C6txL+xVPKg2lspFxpgto vvVqagaBa2r6ZZyAjlLVG5DKGV097rBb5K9LI6KW9G494XcDm+Nvg+LQQAyDAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUKFNgWqLenAaCgz0AundUSVvjW7swHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzEzODM1MmUzMTM2MzkyZTMx MzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzUzMTM5Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5qXgwDQYJKoZIhvcNAQELBQADggEBAAqh1ErDkYRTjXEaOx+TtUjQPG0vosGh JOLba2wvNI9gJDQo3k43ebZnwRXtKRMf5TWWVw1828xyolGgetaAdPIA3EzW+3Bi sDPlEtRKNAwRw32l/XWezQXu50GH5IbKnupmlipAO6RxeT1M63kT93LjM5V8rHez dxEtnxwkmN43C91In5MCv0dqn9laHOqyKGoa5Sw0YJIhIcQy4KDSfZVUTfzmOmOu 5XVb3p/pwseZOQs0ftme6C6swywAyWd04+YuS2yNCse+Cwpur/8X/JvirW3DyHaP /mezVHnZXYf0N0ecPRkgcQ/LbcYs+ojAUQ0OFoT7TgpLf16727HgL94= -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:49 2025 by rpki-client