This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132332e302f32342d3234203d3e20383334.roa File: 3138352e3136392e3132332e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: kSHvBvtlv3RXwvxGbfq6vBQ6yXO5jco/yFvhWMJFo14= Subject key identifier: 16:BB:33:2B:32:03:A3:94:7F:A6:10:9F:C6:CB:FD:CB:68:86:2E:78 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 3C06DB57B1B509DE6264A0BCF910490B6BA9655F Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132332e302f32342d3234203d3e20383334.roa Signing time: Sun 14 Dec 2025 10:13:47 +0000 ROA not before: Sun 14 Dec 2025 10:08:47 +0000 ROA not after: Sun 13 Dec 2026 10:13:47 +0000 asID: 834 IP address blocks: 185.169.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:06:db:57:b1:b5:09:de:62:64:a0:bc:f9:10:49:0b:6b:a9:65:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Dec 14 10:08:47 2025 GMT Not After : Dec 13 10:13:47 2026 GMT Subject: CN=16BB332B3203A3947FA6109FC6CBFDCB68862E78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:56:ae:20:2c:34:87:aa:35:8b:85:04:83:20: f9:2c:54:97:6e:b2:60:d5:0b:6d:22:47:68:7f:65: 9d:db:e8:d0:45:91:48:0c:66:6a:59:d5:6d:00:45: 08:83:8c:f0:be:6b:c3:ee:25:94:36:f7:4d:2d:51: 72:33:df:6b:34:22:8d:2a:3f:84:54:98:c0:50:e2: ae:6f:fa:5b:29:02:f7:4b:23:b6:fe:18:03:d3:32: fd:41:81:36:68:9b:36:d1:48:c9:32:4e:da:b3:89: c9:06:cc:8c:8b:13:58:16:1f:4c:1a:43:35:24:e6: 35:8d:5b:e3:da:f2:c0:11:d4:60:90:84:10:60:e3: 48:df:70:b8:2f:fe:a3:2e:ea:65:77:47:09:7b:e3: 10:8a:78:65:a8:3f:b0:a5:d6:3b:fa:33:17:62:9c: d0:f7:3b:10:20:64:68:77:2c:8a:f8:10:b1:4f:3d: 6f:63:cb:44:e3:84:c8:82:09:57:82:33:13:e2:7e: 60:1a:d5:f1:b9:a7:d7:48:05:ec:a7:d6:ac:d9:05: ba:c8:e8:fc:80:a4:53:03:50:53:ee:31:2f:fa:f7: 1a:41:42:6d:75:dc:18:76:12:59:98:56:6c:30:7d: d1:09:cb:05:4e:d9:82:2d:b3:ef:a3:40:8c:07:f3: b0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BB:33:2B:32:03:A3:94:7F:A6:10:9F:C6:CB:FD:CB:68:86:2E:78 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132332e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.123.0/24 Signature Algorithm: sha256WithRSAEncryption 00:79:8a:bf:e2:22:ed:48:4f:23:17:6a:5a:09:e4:aa:b3:fd: 8e:51:0c:95:fd:74:f2:d8:66:0a:7b:75:16:10:4d:68:f5:9c: 11:c2:dc:2a:1f:e9:00:5c:7d:bb:6f:d0:04:fd:32:b5:d7:69: 61:2d:cc:45:e9:12:95:bb:e0:4b:ae:a1:de:f8:bc:38:54:e2: dc:0f:97:26:9c:a8:b0:75:0c:b0:1e:55:25:9b:09:8f:a2:ed: 9e:82:1b:1f:2a:96:3b:65:6f:8b:fc:c3:51:1a:e0:49:a1:91: df:7e:3d:f8:a2:bf:a1:17:fb:7d:5d:b0:12:0a:fb:ac:a1:94: 6f:09:d9:25:88:2c:7d:17:8c:55:43:51:08:a6:af:f3:be:60: 7c:ce:87:0a:c9:16:48:0a:c5:2b:d3:24:4b:ea:06:41:67:94: 9e:66:6a:22:d4:8f:ac:f2:9d:4b:8e:39:96:1f:3a:e1:ce:e4: 73:c1:b5:a0:7f:20:32:44:17:0a:49:60:3c:a5:35:46:7d:3f: 68:e0:d0:4d:73:88:29:1c:77:b8:e2:3a:93:db:c8:1f:92:02: eb:17:5d:74:00:7e:ad:57:6c:3b:d9:d0:8e:69:bc:35:4b:a1: 64:69:d7:b0:88:b0:13:59:91:63:ea:53:e7:ec:44:19:33:2b: 02:12:21:8e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUPAbbV7G1Cd5iZKC8+RBJC2upZV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTEyMTQxMDA4NDdaFw0yNjEyMTMxMDEzNDdaMDMxMTAvBgNV BAMTKDE2QkIzMzJCMzIwM0EzOTQ3RkE2MTA5RkM2Q0JGRENCNjg4NjJFNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkVq4gLDSHqjWLhQSDIPksVJdu smDVC20iR2h/ZZ3b6NBFkUgMZmpZ1W0ARQiDjPC+a8PuJZQ2900tUXIz32s0Io0q P4RUmMBQ4q5v+lspAvdLI7b+GAPTMv1BgTZomzbRSMkyTtqzickGzIyLE1gWH0wa QzUk5jWNW+Pa8sAR1GCQhBBg40jfcLgv/qMu6mV3Rwl74xCKeGWoP7Cl1jv6Mxdi nND3OxAgZGh3LIr4ELFPPW9jy0TjhMiCCVeCMxPifmAa1fG5p9dIBeyn1qzZBbrI 6PyApFMDUFPuMS/69xpBQm113Bh2ElmYVmwwfdEJywVO2YIts++jQIwH87BlAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUFrszKzIDo5R/phCfxsv9y2iGLngwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzEzODM1MmUzMTM2MzkyZTMx MzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmp ezANBgkqhkiG9w0BAQsFAAOCAQEAAHmKv+Ii7UhPIxdqWgnkqrP9jlEMlf108thm Cnt1FhBNaPWcEcLcKh/pAFx9u2/QBP0ytddpYS3MRekSlbvgS66h3vi8OFTi3A+X JpyosHUMsB5VJZsJj6LtnoIbHyqWO2Vvi/zDURrgSaGR3349+KK/oRf7fV2wEgr7 rKGUbwnZJYgsfReMVUNRCKav875gfM6HCskWSArFK9MkS+oGQWeUnmZqItSPrPKd S445lh864c7kc8G1oH8gMkQXCklgPKU1Rn0/aODQTXOIKRx3uOI6k9vIH5IC6xdd dAB+rVdsO9nQjmm8NUuhZGnXsIiwE1mRY+pT5+xEGTMrAhIhjg== -----END CERTIFICATE-----Generated at Mon Dec 15 23:26:59 2025 by rpki-client