This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132312e302f32342d3234203d3e20383334.roa File: 3138352e3136392e3132312e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: 5ydZXyEJMLgmPqqodM7OR8o4h7aXX+g+j21lBhF51Hk= Subject key identifier: 1A:DB:07:11:2A:28:3E:9C:AD:28:B0:18:73:FF:39:59:6D:36:34:A9 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 1314B3FF02C0501B6916B1E87B0829765DC9991D Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132312e302f32342d3234203d3e20383334.roa Signing time: Thu 13 Nov 2025 07:14:14 +0000 ROA not before: Thu 13 Nov 2025 07:09:14 +0000 ROA not after: Thu 12 Nov 2026 07:14:14 +0000 asID: 834 IP address blocks: 185.169.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:14:b3:ff:02:c0:50:1b:69:16:b1:e8:7b:08:29:76:5d:c9:99:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 13 07:09:14 2025 GMT Not After : Nov 12 07:14:14 2026 GMT Subject: CN=1ADB07112A283E9CAD28B01873FF39596D3634A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ad:ff:6e:58:16:4d:66:18:85:57:0e:74:15: 0c:fa:6f:eb:18:6b:f5:e9:86:d0:b4:00:e4:4f:81: 99:b8:74:7f:6c:a2:c1:ec:2f:a4:20:a7:ce:c0:81: a8:ac:5e:f8:b3:bf:d2:59:1b:b3:48:de:99:63:48: ef:69:7a:dd:47:4d:f2:ed:70:eb:26:f7:8f:49:70: 05:c4:a0:41:73:6c:b5:bb:54:76:1c:2f:db:07:45: e7:aa:da:1e:ca:1d:31:9e:a2:08:43:01:0c:d1:35: e4:fd:ad:1b:be:a4:60:ab:9d:a4:bb:ab:69:71:70: b1:e7:4c:2a:68:f5:6d:84:6c:96:db:e0:87:a3:f2: 74:f8:56:90:1e:67:14:3f:2a:85:65:48:4b:57:56: 5e:41:a8:9c:74:e5:c2:03:ef:09:f9:7d:b0:19:07: e6:87:aa:c9:4d:77:c5:19:05:62:8a:94:83:b9:ad: 9c:68:19:44:b0:71:30:41:03:96:25:c3:d1:3f:b3: f2:3d:38:24:b6:8b:44:ec:c5:26:70:b5:f9:ff:7c: 49:89:02:4d:a9:f4:97:6b:93:b9:8c:99:74:77:fc: d2:fb:91:32:8b:74:2d:b6:38:ed:c9:95:8e:0d:e6: 40:99:2f:08:cf:94:0c:08:6f:be:18:6b:d3:fb:7c: 75:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DB:07:11:2A:28:3E:9C:AD:28:B0:18:73:FF:39:59:6D:36:34:A9 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132312e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.121.0/24 Signature Algorithm: sha256WithRSAEncryption 51:ef:27:13:d4:5e:f3:75:7d:23:93:34:78:ec:84:16:ce:bf: 88:ce:46:06:02:d4:60:d6:f3:4a:31:d6:fe:c3:d1:a1:ab:13: 12:8d:05:ff:11:b7:93:01:62:7b:4d:a7:5c:f0:76:7b:75:d1: 64:86:e6:5e:d0:96:30:8f:d1:6d:2c:e0:b0:3f:f9:77:ae:5d: f4:15:45:6a:d8:29:57:ef:64:5d:27:61:00:ca:75:2f:31:4a: ed:eb:65:f5:39:52:c0:02:54:9d:d3:03:65:0c:c7:92:3e:cc: 62:f9:6d:fa:38:a8:ae:93:06:b3:2d:c7:01:05:81:3e:8a:50: 1c:0f:9e:b1:de:b0:6d:95:b2:d9:b6:85:e7:9f:35:ef:40:d1: de:f7:ab:79:7c:ca:2b:cb:f4:f2:2c:30:19:99:c3:bd:a8:93: 45:22:04:e6:9e:9c:59:91:b5:53:66:85:52:7e:a5:30:52:01: d9:6a:41:43:66:8f:e3:fd:df:8d:9c:72:79:82:11:eb:7f:8d: 9a:68:a0:94:ad:4a:55:fc:58:0d:d7:e1:75:b6:44:3b:63:d9: 2d:d3:69:4a:c9:f1:f8:54:f7:c2:9a:4d:6f:2c:ca:fe:2d:c9: 3b:a6:39:da:b9:91:84:e9:19:27:34:f2:3f:e8:28:56:83:96: 25:c9:6e:10 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUExSz/wLAUBtpFrHoewgpdl3JmR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTMwNzA5MTRaFw0yNjExMTIwNzE0MTRaMDMxMTAvBgNV BAMTKDFBREIwNzExMkEyODNFOUNBRDI4QjAxODczRkYzOTU5NkQzNjM0QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtrf9uWBZNZhiFVw50FQz6b+sY a/XphtC0AORPgZm4dH9sosHsL6Qgp87AgaisXvizv9JZG7NI3pljSO9pet1HTfLt cOsm949JcAXEoEFzbLW7VHYcL9sHReeq2h7KHTGeoghDAQzRNeT9rRu+pGCrnaS7 q2lxcLHnTCpo9W2EbJbb4Iej8nT4VpAeZxQ/KoVlSEtXVl5BqJx05cID7wn5fbAZ B+aHqslNd8UZBWKKlIO5rZxoGUSwcTBBA5Ylw9E/s/I9OCS2i0TsxSZwtfn/fEmJ Ak2p9Jdrk7mMmXR3/NL7kTKLdC22OO3JlY4N5kCZLwjPlAwIb74Ya9P7fHVfAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUGtsHESooPpytKLAYc/85WW02NKkwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzEzODM1MmUzMTM2MzkyZTMx MzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmp eTANBgkqhkiG9w0BAQsFAAOCAQEAUe8nE9Re83V9I5M0eOyEFs6/iM5GBgLUYNbz SjHW/sPRoasTEo0F/xG3kwFie02nXPB2e3XRZIbmXtCWMI/RbSzgsD/5d65d9BVF atgpV+9kXSdhAMp1LzFK7etl9TlSwAJUndMDZQzHkj7MYvlt+jiorpMGsy3HAQWB PopQHA+esd6wbZWy2baF558170DR3vereXzKK8v08iwwGZnDvaiTRSIE5p6cWZG1 U2aFUn6lMFIB2WpBQ2aP4/3fjZxyeYIR63+NmmiglK1KVfxYDdfhdbZEO2PZLdNp Ssnx+FT3wppNbyzK/i3JO6Y52rmRhOkZJzTyP+goVoOWJcluEA== -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:44 2025 by rpki-client