This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132322e302f32332d3234203d3e20383334.roa File: 3138352e3136392e3132322e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: aXWqN/HcMi5rwS89QTRH6kRhHZM2kHEpsguc93dpxdA= Subject key identifier: 6A:7F:17:3C:87:65:94:BE:FC:ED:0B:A1:13:10:8A:45:64:61:1E:07 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 59E55F72A7EEA1D65924E10F41708D871E3D354F Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132322e302f32332d3234203d3e20383334.roa Signing time: Wed 24 Dec 2025 16:50:47 +0000 ROA not before: Wed 24 Dec 2025 16:45:47 +0000 ROA not after: Wed 23 Dec 2026 16:50:47 +0000 asID: 834 IP address blocks: 185.169.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:e5:5f:72:a7:ee:a1:d6:59:24:e1:0f:41:70:8d:87:1e:3d:35:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Dec 24 16:45:47 2025 GMT Not After : Dec 23 16:50:47 2026 GMT Subject: CN=6A7F173C876594BEFCED0BA113108A4564611E07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:aa:5d:03:7f:f6:58:b1:f3:49:c1:3c:54: 59:c1:78:74:fc:72:0e:b5:7f:be:ca:13:a7:43:a9: cd:e7:0e:c5:b2:5e:71:48:8b:b1:0c:a0:53:f5:45: fb:a4:89:a1:7a:ce:e2:06:3c:71:24:71:40:d3:e8: 24:3e:34:39:c2:09:04:4d:72:76:d4:d2:79:d6:97: d2:9e:8e:8d:c3:0c:aa:19:9a:76:38:19:33:bc:69: 5f:cd:53:1d:74:29:e4:41:99:f0:5f:9d:c1:54:cd: ae:83:c2:97:c6:50:63:7a:2f:c7:7e:08:b9:ed:10: 19:83:ad:ce:08:c2:d8:71:0e:78:e7:33:40:e4:70: 38:3c:e7:e2:a2:63:7d:84:b9:bd:40:fb:5f:2c:f0: eb:3a:a6:35:32:79:b4:ff:ac:3a:46:aa:b5:ef:0c: 4d:d7:5b:c6:8b:6a:95:44:06:88:83:01:59:13:72: e7:2c:fc:1e:32:d8:4e:0e:88:36:c5:61:e8:15:c5: e9:d0:17:e9:f5:60:b6:d2:cd:e7:ab:6f:3c:2e:00: 22:d3:b1:9c:02:11:91:e5:df:4b:90:eb:e3:04:6a: bd:be:bc:e6:1a:4d:1d:72:79:dc:7c:c2:84:d6:dc: 9a:6a:af:a6:94:d4:0a:6c:2e:65:0d:2f:11:0a:d9: e9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7F:17:3C:87:65:94:BE:FC:ED:0B:A1:13:10:8A:45:64:61:1E:07 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132322e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.122.0/23 Signature Algorithm: sha256WithRSAEncryption a7:31:41:55:75:58:7a:41:e6:7d:7f:aa:31:8a:04:09:c8:b8: 75:0d:8e:d9:82:f8:8c:f3:81:41:30:73:ec:f7:fb:a4:e2:e8: 70:91:be:0e:c2:32:8f:bf:b6:d7:62:21:01:90:78:b3:6e:a1: 3f:5a:e3:02:d1:76:94:2d:39:46:c1:91:01:61:c7:84:39:a2: fb:46:e4:c3:a6:1c:f4:4d:de:b1:48:40:fb:68:ce:19:a4:f6: 9a:40:e8:c7:0e:12:a6:c3:94:04:0c:69:05:18:10:c7:4f:7b: e8:83:f0:ce:8d:1e:af:83:a9:26:ed:1a:94:b3:85:57:98:61: 20:71:e7:86:38:d9:9f:b4:83:a2:df:32:b2:10:af:d5:2b:bd: f6:39:31:39:5e:51:ca:d1:74:94:29:95:01:37:60:9e:db:cd: dd:6d:91:99:de:07:d0:87:ae:c2:40:98:26:48:73:d9:de:8f: 64:e6:1a:ec:e5:65:4d:66:a2:48:4b:db:a3:06:4d:ee:39:58: 86:ea:ad:ab:12:87:93:e8:44:68:07:72:4d:45:a2:c0:d3:6b: c5:c3:ed:15:0d:e1:f9:62:67:a8:72:6b:98:4c:f2:c4:d0:7c: ee:fc:0e:ac:43:5b:ad:00:23:ec:72:d5:89:dc:af:44:91:10: 8d:13:47:bc -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUWeVfcqfuodZZJOEPQXCNhx49NU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTEyMjQxNjQ1NDdaFw0yNjEyMjMxNjUwNDdaMDMxMTAvBgNV BAMTKDZBN0YxNzNDODc2NTk0QkVGQ0VEMEJBMTEzMTA4QTQ1NjQ2MTFFMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCih6pdA3/2WLHzScE8VFnBeHT8 cg61f77KE6dDqc3nDsWyXnFIi7EMoFP1RfukiaF6zuIGPHEkcUDT6CQ+NDnCCQRN cnbU0nnWl9Kejo3DDKoZmnY4GTO8aV/NUx10KeRBmfBfncFUza6DwpfGUGN6L8d+ CLntEBmDrc4IwthxDnjnM0DkcDg85+KiY32Eub1A+18s8Os6pjUyebT/rDpGqrXv DE3XW8aLapVEBoiDAVkTcucs/B4y2E4OiDbFYegVxenQF+n1YLbSzeerbzwuACLT sZwCEZHl30uQ6+MEar2+vOYaTR1yedx8woTW3Jpqr6aU1ApsLmUNLxEK2emrAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUan8XPIdllL787QuhExCKRWRhHgcwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzEzODM1MmUzMTM2MzkyZTMx MzIzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbmp ejANBgkqhkiG9w0BAQsFAAOCAQEApzFBVXVYekHmfX+qMYoECci4dQ2O2YL4jPOB QTBz7Pf7pOLocJG+DsIyj7+212IhAZB4s26hP1rjAtF2lC05RsGRAWHHhDmi+0bk w6Yc9E3esUhA+2jOGaT2mkDoxw4SpsOUBAxpBRgQx0976IPwzo0er4OpJu0alLOF V5hhIHHnhjjZn7SDot8yshCv1Su99jkxOV5RytF0lCmVATdgntvN3W2Rmd4H0Ieu wkCYJkhz2d6PZOYa7OVlTWaiSEvbowZN7jlYhuqtqxKHk+hEaAdyTUWiwNNrxcPt FQ3h+WJnqHJrmEzyxNB87vwOrENbrQAj7HLVidyvRJEQjRNHvA== -----END CERTIFICATE-----Generated at Tue Dec 30 21:06:29 2025 by rpki-client