This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3234382e302f32342d3234203d3e203235313938.roa File: 3138352e3231332e3234382e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: sZxo3uMJdWqVPeybtzRbPRus3n/g4Q3Q2K1jBCVUZj0= Subject key identifier: C6:71:0D:73:AC:A0:DA:06:32:8E:4E:D5:9D:BF:80:81:C1:8C:B4:87 Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 33292C6967C3494F8763E30E32CB9190C4A227C3 Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3234382e302f32342d3234203d3e203235313938.roa Signing time: Sun 09 Nov 2025 07:53:28 +0000 ROA not before: Sun 09 Nov 2025 07:48:28 +0000 ROA not after: Sun 08 Nov 2026 07:53:28 +0000 asID: 25198 IP address blocks: 185.213.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:29:2c:69:67:c3:49:4f:87:63:e3:0e:32:cb:91:90:c4:a2:27:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Nov 9 07:48:28 2025 GMT Not After : Nov 8 07:53:28 2026 GMT Subject: CN=C6710D73ACA0DA06328E4ED59DBF8081C18CB487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0f:a0:43:e3:02:d4:a8:b9:35:46:f6:10:91: 4b:a8:34:06:79:3b:3c:4e:54:19:47:7e:fe:e5:e1: 93:1b:37:ff:b2:c1:42:10:86:17:dc:aa:e0:72:a8: 8f:12:9f:b0:f7:ad:87:03:0b:2f:13:7f:85:41:ce: b2:a9:26:e3:ad:c4:d8:b5:90:ef:bd:35:c3:6c:8f: 32:9b:f3:c0:22:db:dc:7a:cd:10:a7:6d:8c:53:6f: c7:f2:2a:a7:df:d9:34:bc:18:4e:57:88:a6:25:8e: d3:92:60:04:34:86:4f:6c:fb:5a:27:5e:94:7b:e7: 63:f5:ec:a1:8f:b1:e1:2a:36:92:f2:90:76:7d:63: 32:b8:c4:33:88:91:58:45:c1:a4:47:69:3f:d2:97: e5:45:a9:74:da:0f:d0:d9:aa:13:f2:32:79:11:a8: 06:bd:a1:6e:7d:da:60:08:e7:46:7f:f7:d8:fc:50: 02:1e:00:8e:24:45:b2:90:78:64:a8:81:d1:10:78: 64:dc:62:e0:20:27:28:91:25:ef:3d:3b:84:f8:fc: 11:88:f7:f5:e5:3e:af:8d:bd:4e:a6:a9:28:45:11: 0d:df:df:15:67:d8:54:bf:27:03:6f:67:8f:43:d5: 4d:ef:f2:d9:1d:f5:26:2a:ad:de:6c:ac:ef:23:39: e7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:71:0D:73:AC:A0:DA:06:32:8E:4E:D5:9D:BF:80:81:C1:8C:B4:87 X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3234382e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.248.0/24 Signature Algorithm: sha256WithRSAEncryption 09:dc:fc:11:88:b7:3f:3b:55:01:fa:08:74:3f:6b:02:41:d3: c2:af:61:5a:81:42:42:17:f9:59:a5:3d:fb:a0:ec:2e:bf:62: 9b:4d:98:66:2b:6d:3c:58:eb:42:8f:f1:97:bb:9e:70:94:82: fc:43:43:22:a3:60:3e:e1:8a:8f:3f:c1:85:5d:1f:fa:1e:0d: 6c:02:28:ac:75:0a:2b:91:e3:c0:eb:a4:7c:df:d1:83:7f:d5: 61:bd:11:49:cf:71:0e:aa:fa:62:e4:77:4b:d1:ba:e2:a3:81: 02:cd:75:0a:59:11:ea:ff:d4:d3:45:5a:5e:9a:69:67:33:2e: fa:5c:b1:04:2c:bf:d0:84:ec:b8:51:26:66:5b:ba:c9:63:20: 96:54:b0:d7:1e:9b:e7:6d:a3:a4:cb:c1:82:bc:17:76:e3:5c: fc:ef:7b:a6:cd:67:8a:99:74:3a:43:ce:ed:90:fd:25:a8:30: 89:8f:2f:39:8a:ff:af:3b:1e:90:24:4d:ac:5b:ee:df:35:98: ff:c3:64:15:9c:19:68:0d:7d:3d:03:b7:f7:30:eb:71:f1:ff: 39:4d:8e:af:cd:26:7e:6e:a9:c7:14:b7:e2:59:80:c5:13:fb: e8:52:82:54:86:d6:0d:22:eb:37:7e:6a:4e:d7:9a:9a:78:5d: 24:ff:de:2c -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUMyksaWfDSU+HY+MOMsuRkMSiJ8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNTExMDkwNzQ4MjhaFw0yNjExMDgwNzUzMjhaMDMxMTAvBgNV BAMTKEM2NzEwRDczQUNBMERBMDYzMjhFNEVENTlEQkY4MDgxQzE4Q0I0ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiD6BD4wLUqLk1RvYQkUuoNAZ5 OzxOVBlHfv7l4ZMbN/+ywUIQhhfcquByqI8Sn7D3rYcDCy8Tf4VBzrKpJuOtxNi1 kO+9NcNsjzKb88Ai29x6zRCnbYxTb8fyKqff2TS8GE5XiKYljtOSYAQ0hk9s+1on XpR752P17KGPseEqNpLykHZ9YzK4xDOIkVhFwaRHaT/Sl+VFqXTaD9DZqhPyMnkR qAa9oW592mAI50Z/99j8UAIeAI4kRbKQeGSogdEQeGTcYuAgJyiRJe89O4T4/BGI 9/XlPq+NvU6mqShFEQ3f3xVn2FS/JwNvZ49D1U3v8tkd9SYqrd5srO8jOedLAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUxnENc6yg2gYyjk7Vnb+AgcGMtIcwHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzODM1MmUzMjMxMzMyZTMy MzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzUzMTM5Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC51fgwDQYJKoZIhvcNAQELBQADggEBAAnc/BGItz87VQH6CHQ/awJB08KvYVqB QkIX+VmlPfug7C6/YptNmGYrbTxY60KP8Ze7nnCUgvxDQyKjYD7hio8/wYVdH/oe DWwCKKx1CiuR48DrpHzf0YN/1WG9EUnPcQ6q+mLkd0vRuuKjgQLNdQpZEer/1NNF Wl6aaWczLvpcsQQsv9CE7LhRJmZbusljIJZUsNcem+dto6TLwYK8F3bjXPzve6bN Z4qZdDpDzu2Q/SWoMImPLzmK/687HpAkTaxb7t81mP/DZBWcGWgNfT0Dt/cw63Hx /zlNjq/NJn5uqccUt+JZgMUT++hSglSG1g0i6zd+ak7Xmpp4XST/3iw= -----END CERTIFICATE-----Generated at Fri Dec 5 09:27:17 2025 by rpki-client