This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3232392e302f32342d3234203d3e20313439313037.roa File: 38352e3131372e3232392e302f32342d3234203d3e20313439313037.roa (raw, json) Hash identifier: Mdj3IIZJ097ibJGhSOfHP4GOBLdG4jAp1zNpVSxesFg= Subject key identifier: B8:7B:C5:29:0B:47:1B:C6:E0:38:46:60:05:43:89:83:C6:AD:90:AF Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 7387640FCD40FA3C70E401C946BD11562281BF08 Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3232392e302f32342d3234203d3e20313439313037.roa Signing time: Mon 15 Dec 2025 05:30:04 +0000 ROA not before: Mon 15 Dec 2025 05:25:04 +0000 ROA not after: Mon 14 Dec 2026 05:30:04 +0000 asID: 149107 IP address blocks: 85.117.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:87:64:0f:cd:40:fa:3c:70:e4:01:c9:46:bd:11:56:22:81:bf:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Dec 15 05:25:04 2025 GMT Not After : Dec 14 05:30:04 2026 GMT Subject: CN=B87BC5290B471BC6E038466005438983C6AD90AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:eb:b6:8b:6c:33:47:3c:2d:69:e5:7a:ff:c1: 08:69:b5:93:a2:65:8a:28:bb:e8:f0:55:38:ce:19: 17:9c:e6:aa:1b:0f:ff:b7:06:a9:9c:ef:be:7b:67: 70:d3:22:f4:6c:2d:04:a9:df:55:07:53:ec:56:69: 10:a1:f9:96:ef:fe:0a:9d:36:f3:7e:36:e1:78:d3: ef:46:c7:b4:c0:d1:fe:29:6d:67:68:cd:ca:13:65: 0a:e3:4c:cf:f7:c5:8c:05:8f:70:bb:d3:e2:4d:ee: 28:f9:9c:ed:6c:8a:d0:1e:95:07:93:87:eb:eb:0a: 70:f3:2d:c4:e9:b2:3d:46:d0:0c:14:07:c6:f6:1c: 4c:23:a8:ee:cc:3b:0a:9e:ec:0e:3b:d5:70:e9:81: d9:5f:19:11:6a:b4:d8:3f:2a:64:af:82:07:6e:e1: a9:09:99:64:26:da:ac:0f:74:41:03:28:b9:b6:14: 18:96:5f:18:e0:17:2b:b6:72:a7:db:eb:92:1a:cd: 55:b3:88:cf:8e:73:27:7d:be:7f:90:73:4e:4e:f0: 97:0d:63:4c:79:68:2d:86:f3:54:d0:69:e9:5d:8f: 92:f6:23:b1:bb:bf:44:20:ec:8b:9b:f9:ac:71:18: a1:11:9f:7f:4d:44:cd:14:05:d8:8a:68:f5:58:5b: 86:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7B:C5:29:0B:47:1B:C6:E0:38:46:60:05:43:89:83:C6:AD:90:AF X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3232392e302f32342d3234203d3e20313439313037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.229.0/24 Signature Algorithm: sha256WithRSAEncryption 39:90:ae:60:23:41:cc:b4:82:17:49:b6:44:0f:09:0b:5d:32: 66:80:fe:52:fb:f2:b4:1d:f3:50:b0:14:77:81:2b:f8:9d:90: 39:82:29:fe:37:cd:19:b4:d4:a9:1f:00:d3:b4:32:c2:e3:8b: 47:44:12:b1:03:a2:37:1c:87:83:c8:bf:f4:d3:ab:7a:e1:75: ae:1a:3f:61:8d:ed:36:d6:c0:01:74:93:04:25:dc:e4:3a:b2: b0:ea:0b:99:c6:b3:4b:61:db:0d:2f:b7:b7:d9:01:ab:b1:9d: e7:85:6a:ca:df:25:bd:5d:37:67:f3:43:3f:20:93:0b:49:5c: bb:93:8b:0a:31:85:5e:ed:63:e0:9a:50:5e:62:a6:90:ed:af: a2:f4:47:45:e3:f9:45:f1:f3:80:8c:25:4a:ba:30:2c:15:32: 21:07:4d:0c:b7:ee:ae:36:9b:90:11:a3:50:36:59:19:fc:ee: d7:02:0e:4f:46:00:17:12:2e:3b:12:8f:56:84:10:24:2e:ca: 93:26:f5:5f:e0:1c:cb:7f:37:06:cd:be:bd:6e:7b:de:7f:a0: 0d:d4:4f:c4:be:cd:e9:9e:31:44:f9:c2:e5:ca:3f:7e:f5:d2: d4:07:1b:19:ba:b9:f4:0a:68:8f:15:d8:08:d6:4f:24:89:51: de:b2:8f:1a -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUc4dkD81A+jxw5AHJRr0RViKBvwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNTEyMTUwNTI1MDRaFw0yNjEyMTQwNTMwMDRaMDMxMTAvBgNV BAMTKEI4N0JDNTI5MEI0NzFCQzZFMDM4NDY2MDA1NDM4OTgzQzZBRDkwQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH67aLbDNHPC1p5Xr/wQhptZOi ZYoou+jwVTjOGRec5qobD/+3Bqmc7757Z3DTIvRsLQSp31UHU+xWaRCh+Zbv/gqd NvN+NuF40+9Gx7TA0f4pbWdozcoTZQrjTM/3xYwFj3C70+JN7ij5nO1sitAelQeT h+vrCnDzLcTpsj1G0AwUB8b2HEwjqO7MOwqe7A471XDpgdlfGRFqtNg/KmSvggdu 4akJmWQm2qwPdEEDKLm2FBiWXxjgFyu2cqfb65IazVWziM+Ocyd9vn+Qc05O8JcN Y0x5aC2G81TQaeldj5L2I7G7v0Qg7Iub+axxGKERn39NRM0UBdiKaPVYW4ZNAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUuHvFKQtHG8bgOEZgBUOJg8atkK8wHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzgzNTJlMzEzMTM3MmUzMjMy MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMTMwMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABVdeUwDQYJKoZIhvcNAQELBQADggEBADmQrmAjQcy0ghdJtkQPCQtdMmaA/lL7 8rQd81CwFHeBK/idkDmCKf43zRm01KkfANO0MsLji0dEErEDojcch4PIv/TTq3rh da4aP2GN7TbWwAF0kwQl3OQ6srDqC5nGs0th2w0vt7fZAauxneeFasrfJb1dN2fz Qz8gkwtJXLuTiwoxhV7tY+CaUF5ippDtr6L0R0Xj+UXx84CMJUq6MCwVMiEHTQy3 7q42m5ARo1A2WRn87tcCDk9GABcSLjsSj1aEECQuypMm9V/gHMt/NwbNvr1ue95/ oA3UT8S+zemeMUT5wuXKP3710tQHGxm6ufQKaI8V2AjWTySJUd6yjxo= -----END CERTIFICATE-----Generated at Thu Dec 18 11:35:54 2025 by rpki-client