This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3235312e302f32342d3234203d3e20323032373336.roa File: 3138352e3231332e3235312e302f32342d3234203d3e20323032373336.roa (raw, json) Hash identifier: k9NutrpE73eF9M1MGDaqB2MjGcD60li8mT4JnvFIELA= Subject key identifier: AB:1B:41:E0:AB:9F:A2:8A:AE:20:D0:08:C8:36:C1:09:11:55:58:39 Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 07381EA8C7CFA7873EA9118EC4B49B1646608B2F Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3235312e302f32342d3234203d3e20323032373336.roa Signing time: Tue 30 Dec 2025 08:05:29 +0000 ROA not before: Tue 30 Dec 2025 08:00:29 +0000 ROA not after: Tue 29 Dec 2026 08:05:29 +0000 asID: 202736 IP address blocks: 185.213.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:38:1e:a8:c7:cf:a7:87:3e:a9:11:8e:c4:b4:9b:16:46:60:8b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Dec 30 08:00:29 2025 GMT Not After : Dec 29 08:05:29 2026 GMT Subject: CN=AB1B41E0AB9FA28AAE20D008C836C10911555839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:84:7b:2a:89:58:4e:8e:e9:f7:a2:9c:14:ed: fc:a5:d4:7d:3c:97:03:15:51:f8:f8:66:5b:ab:e6: 46:a3:bc:7f:82:ad:ff:02:82:fd:0c:39:ee:8b:9b: 55:8b:e0:ad:05:fc:02:e8:79:56:77:fd:95:b9:bc: cb:d6:82:c5:6c:17:32:73:2f:0e:bc:93:9c:d5:9a: c8:5b:9f:b4:02:d9:8a:43:63:cf:8c:a2:ae:5c:8d: 6e:61:de:6f:f3:82:58:b6:1e:43:ca:75:26:fc:c2: e9:43:36:d9:ff:c6:37:0d:fd:72:19:fb:6f:af:3d: b3:fa:10:0c:fb:68:e6:65:50:45:c8:78:d1:5e:8d: ad:e6:d3:3f:65:e1:c3:b6:31:b2:8d:47:2b:75:f8: cf:32:12:dd:c9:7c:3b:ef:a3:16:6c:04:5f:57:3a: a2:39:91:68:97:f3:fc:87:cb:e5:f1:b2:d3:38:6d: 0d:c0:00:fe:6e:e3:b9:8e:23:cd:cb:bf:ef:80:23: 1b:34:9b:da:3c:e7:c0:3c:d0:5c:30:5b:58:15:f8: 5a:b3:3d:06:e2:88:de:9d:84:fc:27:fa:e8:c9:46: bb:b8:0b:c1:ec:e7:d6:79:94:17:30:3d:9b:f3:73: fc:9c:66:b6:27:dc:ec:e9:a2:1b:45:42:c0:f9:92: 9b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1B:41:E0:AB:9F:A2:8A:AE:20:D0:08:C8:36:C1:09:11:55:58:39 X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3235312e302f32342d3234203d3e20323032373336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.251.0/24 Signature Algorithm: sha256WithRSAEncryption 46:fc:3b:c2:87:38:e7:ac:dd:2c:ee:0c:3d:bd:fe:be:08:31: f3:1f:61:b5:69:1a:3d:03:97:b5:77:01:eb:f6:6a:f7:f6:d3: e6:93:1e:10:3a:f2:70:2d:ef:cf:55:44:b6:58:c9:83:bb:5d: c9:16:73:77:ea:a5:fa:f6:43:c5:2d:66:dd:3b:56:91:3f:75: ba:94:e1:b6:94:78:3d:8a:69:7f:50:18:b0:eb:96:38:e2:ea: fb:89:9a:49:41:bc:4c:31:6b:42:d3:af:6e:18:66:38:66:4f: 8b:b8:93:31:24:d7:8c:cc:d4:1a:51:95:48:af:cb:d4:61:0b: d2:02:e6:3c:dc:d9:cc:6c:75:6d:f5:7d:d9:eb:f6:8a:90:c0: 12:27:49:cb:d1:f4:04:46:4d:01:67:db:19:6d:e3:53:3b:40: 16:75:fa:8d:a3:f2:a1:c5:7b:df:ea:b0:71:4a:fb:fc:b2:aa: ee:9d:08:a6:e3:64:0a:5b:e4:c6:26:dc:a0:3c:31:50:ce:f2: 7a:26:f9:2b:90:5a:ac:5b:5c:02:ad:60:a8:ed:96:a4:4d:1c: f3:dd:e0:99:81:8e:b1:c2:68:d1:f7:d1:53:08:33:ac:22:31: 54:b7:21:e7:2c:4c:a7:9a:25:97:92:b5:2e:18:3b:3d:74:0c: c8:10:94:01 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUBzgeqMfPp4c+qRGOxLSbFkZgiy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNTEyMzAwODAwMjlaFw0yNjEyMjkwODA1MjlaMDMxMTAvBgNV BAMTKEFCMUI0MUUwQUI5RkEyOEFBRTIwRDAwOEM4MzZDMTA5MTE1NTU4MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQhHsqiVhOjun3opwU7fyl1H08 lwMVUfj4Zlur5kajvH+Crf8Cgv0MOe6Lm1WL4K0F/ALoeVZ3/ZW5vMvWgsVsFzJz Lw68k5zVmshbn7QC2YpDY8+Moq5cjW5h3m/zgli2HkPKdSb8wulDNtn/xjcN/XIZ +2+vPbP6EAz7aOZlUEXIeNFeja3m0z9l4cO2MbKNRyt1+M8yEt3JfDvvoxZsBF9X OqI5kWiX8/yHy+XxstM4bQ3AAP5u47mOI83Lv++AIxs0m9o858A80FwwW1gV+Fqz PQbiiN6dhPwn+ujJRru4C8Hs59Z5lBcwPZvzc/ycZrYn3OzpohtFQsD5kpvHAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUqxtB4KufooquINAIyDbBCRFVWDkwHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzODM1MmUzMjMxMzMyZTMy MzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMjM3MzMzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALnV+zANBgkqhkiG9w0BAQsFAAOCAQEARvw7woc456zdLO4MPb3+vggx8x9h tWkaPQOXtXcB6/Zq9/bT5pMeEDrycC3vz1VEtljJg7tdyRZzd+ql+vZDxS1m3TtW kT91upThtpR4PYppf1AYsOuWOOLq+4maSUG8TDFrQtOvbhhmOGZPi7iTMSTXjMzU GlGVSK/L1GEL0gLmPNzZzGx1bfV92ev2ipDAEidJy9H0BEZNAWfbGW3jUztAFnX6 jaPyocV73+qwcUr7/LKq7p0IpuNkClvkxibcoDwxUM7yeib5K5BarFtcAq1gqO2W pE0c893gmYGOscJo0ffRUwgzrCIxVLch5yxMp5oll5K1Lhg7PXQMyBCUAQ== -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:20 2026 by rpki-client