This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131322e302f32342d3234203d3e20383334.roa File: 3138352e39312e3131322e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: XesoIFDmsJmrSdpgdAV0vhyomNLwoypYQnvo40xyQgs= Subject key identifier: FF:90:5A:0B:D5:3A:52:22:5E:98:ED:27:34:AE:63:13:4B:BA:55:6B Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9 Certificate serial: 01EB51A1FF6B3C7E90C509B7291024C2ABCD3F5A Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131322e302f32342d3234203d3e20383334.roa Signing time: Tue 18 Nov 2025 08:54:09 +0000 ROA not before: Tue 18 Nov 2025 08:49:09 +0000 ROA not after: Tue 17 Nov 2026 08:54:09 +0000 asID: 834 IP address blocks: 185.91.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 08:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:eb:51:a1:ff:6b:3c:7e:90:c5:09:b7:29:10:24:c2:ab:cd:3f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9 Validity Not Before: Nov 18 08:49:09 2025 GMT Not After : Nov 17 08:54:09 2026 GMT Subject: CN=FF905A0BD53A52225E98ED2734AE63134BBA556B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:42:08:59:6f:bb:63:7f:1c:95:58:90:f5:25: 0a:1a:49:96:17:9c:b4:07:0e:e3:85:61:b0:11:1a: 37:23:66:11:98:13:8c:d7:1b:b7:13:ac:de:9d:68: c2:9a:cc:d6:ac:ca:d7:7e:a8:22:0d:41:e2:c9:20: a4:0f:4e:73:19:e6:79:13:3c:27:78:4e:f8:3a:64: 74:b4:ca:b6:a0:d5:1b:dc:e4:2c:55:87:00:7c:3f: 60:19:d2:b8:59:3a:7d:ca:2e:b0:ae:ba:2a:04:60: 6b:2a:4d:d3:9b:8b:f6:d7:e4:a1:c9:5f:e9:51:b3: a3:4a:b7:b8:12:75:96:35:29:63:2e:eb:4b:df:0c: a6:ef:8b:a2:3c:a2:fd:8e:d6:f4:f5:cc:8d:51:d0: b7:69:64:b0:8f:75:0b:84:92:62:d7:36:ed:96:92: cc:6a:ab:1b:b8:50:51:98:ef:85:31:ec:85:32:78: 96:46:e9:41:6d:80:23:3e:4b:27:ad:b1:8e:2a:85: d0:be:68:8a:35:65:e0:6f:48:49:21:90:67:04:eb: 85:85:e1:60:6f:78:a3:86:eb:d7:07:be:06:a6:84: de:cf:f8:c9:c0:b7:d6:58:6d:c6:c0:99:df:4c:f2: e7:76:86:f8:5f:67:d3:db:28:e9:35:4d:ff:0a:78: 97:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:90:5A:0B:D5:3A:52:22:5E:98:ED:27:34:AE:63:13:4B:BA:55:6B X509v3 Authority Key Identifier: keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131322e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.91.112.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:c6:fe:c5:8d:cf:0f:d6:c3:e9:19:bd:36:53:b9:91:bd:c2: 47:12:63:d9:fa:89:5b:ae:a7:49:72:a3:90:e2:e0:9f:8b:c2: 04:b7:df:aa:b7:cd:d0:6b:e5:ef:42:29:a3:b9:de:ad:f0:59: 3e:d2:c4:d0:0c:cd:16:90:bb:10:a3:f8:2f:6f:4c:f1:00:2b: 81:3e:53:f9:e8:2b:c7:89:3b:22:d7:4e:01:76:35:4b:81:79: e7:68:db:60:10:1f:b0:55:45:c7:b9:08:98:0b:ed:df:9c:ca: f3:7d:6a:e4:10:e6:50:83:b6:10:9c:4a:aa:ee:0f:f4:65:2b: 2a:55:31:cd:5b:44:af:a5:32:be:2c:69:8f:ee:3a:29:53:e5: 46:9c:68:99:64:86:f1:65:fc:b1:09:25:fb:93:65:6e:ac:9d: 1e:be:4a:c2:aa:4a:00:2e:1e:70:6b:e8:89:31:12:0e:45:42: dc:26:07:b9:6e:c8:b9:e2:3e:85:44:57:28:c6:20:b3:41:28: 0d:b7:ef:2a:26:2f:84:a3:86:c3:1c:37:b5:28:d3:aa:ca:35: de:9d:e0:be:f7:ce:c6:21:bf:03:19:a7:35:0f:11:f7:4a:8f: cb:e1:14:d0:32:39:d9:e8:ee:d0:b3:fe:c6:de:99:f0:32:19: 06:91:9d:89 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUAetRof9rPH6QxQm3KRAkwqvNP1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5ODE0MTgxOTExMmI4NDQ2YzJkNGEzMTExZjUzMDM4 ZjA1ZGJlOTAeFw0yNTExMTgwODQ5MDlaFw0yNjExMTcwODU0MDlaMDMxMTAvBgNV BAMTKEZGOTA1QTBCRDUzQTUyMjI1RTk4RUQyNzM0QUU2MzEzNEJCQTU1NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWQghZb7tjfxyVWJD1JQoaSZYX nLQHDuOFYbARGjcjZhGYE4zXG7cTrN6daMKazNasytd+qCINQeLJIKQPTnMZ5nkT PCd4Tvg6ZHS0yrag1Rvc5CxVhwB8P2AZ0rhZOn3KLrCuuioEYGsqTdObi/bX5KHJ X+lRs6NKt7gSdZY1KWMu60vfDKbvi6I8ov2O1vT1zI1R0LdpZLCPdQuEkmLXNu2W ksxqqxu4UFGY74Ux7IUyeJZG6UFtgCM+SyetsY4qhdC+aIo1ZeBvSEkhkGcE64WF 4WBveKOG69cHvgamhN7P+MnAt9ZYbcbAmd9M8ud2hvhfZ9PbKOk1Tf8KeJeRAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU/5BaC9U6UiJemO0nNK5jE0u6VWswHwYDVR0j BBgwFoAUFJgUGBkRK4RGwtSjER9TA48F2+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQtZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5 ODk3LzAvMTQ5ODE0MTgxOTExMkI4NDQ2QzJENEEzMTExRjUzMDM4RjA1REJFOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ZKZ1VHQmtSSzRSR3d0U2pFUjlUQTQ4 RjItay5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQt ZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5ODk3LzAvMzEzODM1MmUzOTMxMmUzMTMx MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5W3Aw DQYJKoZIhvcNAQELBQADggEBAGrG/sWNzw/Ww+kZvTZTuZG9wkcSY9n6iVuup0ly o5Di4J+LwgS336q3zdBr5e9CKaO53q3wWT7SxNAMzRaQuxCj+C9vTPEAK4E+U/no K8eJOyLXTgF2NUuBeedo22AQH7BVRce5CJgL7d+cyvN9auQQ5lCDthCcSqruD/Rl KypVMc1bRK+lMr4saY/uOilT5UacaJlkhvFl/LEJJfuTZW6snR6+SsKqSgAuHnBr 6IkxEg5FQtwmB7luyLniPoVEVyjGILNBKA237yomL4SjhsMcN7Uo06rKNd6d4L73 zsYhvwMZpzUPEfdKj8vhFNAyOdno7tCz/sbemfAyGQaRnYk= -----END CERTIFICATE-----Generated at Sun Dec 14 18:52:15 2025 by rpki-client