This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132332e302f32342d3234203d3e20323035383836.roa File: 3138352e3136392e3132332e302f32342d3234203d3e20323035383836.roa (raw, json) Hash identifier: sDe2VEOoKOG9mo4SeRNP3ZSs87O2mhleKKu6HFE3PpI= Subject key identifier: 95:37:9B:DF:9E:1B:51:5A:4C:F6:14:C9:8C:99:61:C3:78:06:99:27 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 61CF4301F38DCCECB5094C415B2EDDFDD80E61B9 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132332e302f32342d3234203d3e20323035383836.roa Signing time: Fri 14 Nov 2025 10:22:57 +0000 ROA not before: Fri 14 Nov 2025 10:17:57 +0000 ROA not after: Fri 13 Nov 2026 10:22:57 +0000 asID: 205886 IP address blocks: 185.169.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:cf:43:01:f3:8d:cc:ec:b5:09:4c:41:5b:2e:dd:fd:d8:0e:61:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 14 10:17:57 2025 GMT Not After : Nov 13 10:22:57 2026 GMT Subject: CN=95379BDF9E1B515A4CF614C98C9961C378069927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c8:cf:50:d5:cd:a1:d5:9c:d6:b9:b1:ef:b0: 37:3e:3e:a9:ca:8e:8b:66:3a:2a:87:b4:71:41:db: 78:d8:bf:04:3a:f4:fc:e5:60:ef:90:cb:40:42:b3: 43:e7:b0:1f:8c:a1:60:00:b0:69:bf:fb:61:ce:58: 63:7d:59:e6:3e:13:15:07:2f:d5:ae:1c:0c:37:4f: eb:a7:16:bf:f6:42:62:77:31:9e:cd:9d:d3:b0:7f: b3:6f:11:5c:13:1a:f4:02:e0:2c:80:83:07:4f:27: 5a:da:26:eb:65:67:37:78:65:8a:01:1c:16:9a:67: df:34:0f:e5:89:9e:23:05:41:8d:b8:ff:6b:2c:94: 57:5a:e5:f6:22:d0:8b:d3:df:ea:18:93:cf:fa:d0: 8e:8c:11:ac:4d:06:0b:38:83:57:42:1c:e1:54:34: 49:48:d6:6c:a0:46:27:00:f9:1f:06:0c:f1:39:2a: 1c:f4:5e:c4:86:6e:13:25:ce:b7:b2:e7:e0:f9:fa: 46:f8:22:c0:d2:1c:e8:97:75:1a:c9:8d:50:7f:55: 21:0d:43:88:6f:ed:bd:9d:81:af:2c:ca:72:f4:66: eb:c9:71:38:e9:b9:4d:a7:ee:99:f8:56:d4:fb:a7: fe:b2:ad:69:cd:f8:65:9b:55:59:e1:54:e0:18:26: c6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:37:9B:DF:9E:1B:51:5A:4C:F6:14:C9:8C:99:61:C3:78:06:99:27 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132332e302f32342d3234203d3e20323035383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.123.0/24 Signature Algorithm: sha256WithRSAEncryption d5:50:da:51:19:ab:28:eb:0a:f7:a7:61:29:05:ce:0c:8f:4a: 37:5f:e8:13:42:a8:74:e1:58:22:e4:e7:65:c7:55:ee:42:4f: f9:64:ab:47:f9:5e:86:86:78:b4:4f:0a:44:37:b3:03:41:4d: 5d:5f:b5:c6:fb:78:04:01:1d:66:b2:e9:69:11:2a:0c:81:6a: f9:90:38:8b:3e:76:f4:73:5b:eb:6d:73:ef:aa:55:c2:39:50: 78:c5:5a:00:1b:2a:4e:19:5d:45:60:10:4d:bd:dc:53:71:d5: c9:2d:c2:5e:d1:d5:50:40:77:05:65:28:67:44:89:b3:dd:d7: ff:b0:17:f0:ee:71:34:e4:fc:08:b4:67:29:d6:a2:b1:1f:7d: eb:9a:59:96:8a:3e:77:70:1d:1b:32:ef:e5:2e:a2:25:13:e2: 19:14:7e:4e:33:09:97:61:af:e2:d8:84:45:bc:de:5f:3a:30: c6:61:6b:b9:72:69:69:f0:61:bc:b0:cf:37:1d:99:de:94:88: c9:84:dd:0d:9d:fd:3a:72:5d:66:7d:85:eb:5d:cd:b9:5c:62: 1b:b6:d9:b5:05:69:5b:c1:3b:c7:29:0c:aa:91:13:77:82:f5: 2e:18:56:48:cc:25:94:15:74:06:c8:eb:72:34:46:bd:2a:9d: 77:1d:ca:bf -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUYc9DAfONzOy1CUxBWy7d/dgOYbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTQxMDE3NTdaFw0yNjExMTMxMDIyNTdaMDMxMTAvBgNV BAMTKDk1Mzc5QkRGOUUxQjUxNUE0Q0Y2MTRDOThDOTk2MUMzNzgwNjk5MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfyM9Q1c2h1ZzWubHvsDc+PqnK jotmOiqHtHFB23jYvwQ69PzlYO+Qy0BCs0PnsB+MoWAAsGm/+2HOWGN9WeY+ExUH L9WuHAw3T+unFr/2QmJ3MZ7NndOwf7NvEVwTGvQC4CyAgwdPJ1raJutlZzd4ZYoB HBaaZ980D+WJniMFQY24/2sslFda5fYi0IvT3+oYk8/60I6MEaxNBgs4g1dCHOFU NElI1mygRicA+R8GDPE5Khz0XsSGbhMlzrey5+D5+kb4IsDSHOiXdRrJjVB/VSEN Q4hv7b2dga8synL0ZuvJcTjpuU2n7pn4VtT7p/6yrWnN+GWbVVnhVOAYJsbpAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUlTeb354bUVpM9hTJjJlhw3gGmScwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzEzODM1MmUzMTM2MzkyZTMx MzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNTM4MzgzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALmpezANBgkqhkiG9w0BAQsFAAOCAQEA1VDaURmrKOsK96dhKQXODI9KN1/o E0KodOFYIuTnZcdV7kJP+WSrR/lehoZ4tE8KRDezA0FNXV+1xvt4BAEdZrLpaREq DIFq+ZA4iz529HNb621z76pVwjlQeMVaABsqThldRWAQTb3cU3HVyS3CXtHVUEB3 BWUoZ0SJs93X/7AX8O5xNOT8CLRnKdaisR9965pZloo+d3AdGzLv5S6iJRPiGRR+ TjMJl2Gv4tiERbzeXzowxmFruXJpafBhvLDPNx2Z3pSIyYTdDZ39OnJdZn2F613N uVxiG7bZtQVpW8E7xykMqpETd4L1LhhWSMwllBV0BsjrcjRGvSqddx3Kvw== -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:36 2025 by rpki-client