This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3232392e302f32342d3234203d3e203138353236.roa File: 38352e3131372e3232392e302f32342d3234203d3e203138353236.roa (raw, json) Hash identifier: VL0qbnMthkW/z4M9i7RCycr128NaCWPDKcNp8MPhOx8= Subject key identifier: 7B:76:68:03:94:10:C0:CA:5C:BE:D1:EF:54:3D:46:A4:4C:11:A2:6E Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 5B9D428E4906DCA55A2438064DB332EDC15295FB Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3232392e302f32342d3234203d3e203138353236.roa Signing time: Fri 12 Dec 2025 00:10:16 +0000 ROA not before: Fri 12 Dec 2025 00:05:16 +0000 ROA not after: Fri 11 Dec 2026 00:10:16 +0000 asID: 18526 IP address blocks: 85.117.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9d:42:8e:49:06:dc:a5:5a:24:38:06:4d:b3:32:ed:c1:52:95:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Dec 12 00:05:16 2025 GMT Not After : Dec 11 00:10:16 2026 GMT Subject: CN=7B7668039410C0CA5CBED1EF543D46A44C11A26E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:20:e9:bc:a4:86:6b:8e:c8:64:4d:b9:75:2b: 6e:dd:60:f5:c0:33:81:ff:5c:5a:23:ca:be:c7:df: d1:3a:5e:de:44:48:67:9a:76:04:c9:ce:97:91:6e: eb:5d:5f:2e:f0:f1:e6:06:9f:67:9d:ca:e7:3d:b6: 40:e0:48:9b:04:2b:bc:9b:95:3e:14:6b:11:95:c6: 72:94:40:e7:c4:eb:6b:6b:98:5f:2b:6e:18:72:48: 51:23:e0:57:af:8f:80:9f:94:59:67:a4:7e:d0:cf: 6e:16:69:c3:c0:46:2c:c0:55:1f:73:52:ef:8a:a2: 85:51:93:7b:cc:09:ad:25:db:4b:28:b7:d0:9a:d8: ed:6e:d2:24:2d:31:cd:37:39:0f:56:ae:1f:96:49: 19:1d:6e:a6:1c:90:52:b0:0e:88:29:88:06:92:5f: 7c:51:c7:0f:9c:f3:05:36:ef:c8:5e:ad:b6:d6:be: 04:6e:59:71:e5:22:ea:7d:c3:a3:98:40:ea:f1:47: 87:a7:3b:51:0e:80:4c:f7:b6:4a:52:5a:47:9f:ac: b7:51:a8:56:2f:9e:44:e9:8e:f2:5a:66:6e:21:fc: 71:b1:5a:88:c4:71:0f:42:34:fc:35:64:ed:e6:7e: 46:df:c9:5c:f3:87:d4:d4:1e:b4:f6:1d:2c:d6:7b: 71:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:76:68:03:94:10:C0:CA:5C:BE:D1:EF:54:3D:46:A4:4C:11:A2:6E X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3232392e302f32342d3234203d3e203138353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.229.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:36:2a:8b:5e:14:51:a3:e7:b7:20:a2:44:bc:1d:ee:d8:74: b0:e7:9c:94:b7:3d:b0:15:24:b0:dc:6a:b1:7f:51:0a:ad:cc: 25:3f:5f:42:ee:76:d6:e9:b1:92:f6:ef:9a:2f:9c:ef:32:3c: 6e:21:a0:11:e8:f6:d6:c2:a3:2f:66:9d:64:07:29:96:92:3a: a5:40:d7:e4:72:1b:f5:9b:91:8f:67:d6:f7:c5:1d:9b:55:ea: 29:a1:b1:91:f3:7b:1b:23:b8:5a:01:db:26:1f:92:26:d2:ed: d0:b3:fc:6f:e7:c3:1b:8a:5f:d0:f2:93:ee:e6:0b:c5:2e:68: a3:3a:e4:57:d5:ca:4f:83:dc:70:f5:c3:e2:6e:dd:25:cc:ce: d3:d3:87:5f:07:86:9d:0d:07:86:ca:90:bf:ff:c7:65:43:9e: 45:79:bb:77:70:91:6f:50:a3:79:ca:de:e5:dd:80:9b:81:d2: e9:1a:dd:e2:a5:7b:b6:cb:e3:1a:8b:f7:be:ed:e5:ba:7b:a9: c8:b0:f4:4f:ee:be:29:6d:bf:54:31:c7:88:eb:7b:b2:b8:ed: 9e:e7:23:50:94:40:a0:fd:37:ec:b0:cb:ae:42:88:e0:d8:a4: 76:74:3d:78:49:de:e4:c9:8e:48:b9:39:c2:9b:35:3d:78:8c: de:00:2a:3b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUW51CjkkG3KVaJDgGTbMy7cFSlfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNTEyMTIwMDA1MTZaFw0yNjEyMTEwMDEwMTZaMDMxMTAvBgNV BAMTKDdCNzY2ODAzOTQxMEMwQ0E1Q0JFRDFFRjU0M0Q0NkE0NEMxMUEyNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqIOm8pIZrjshkTbl1K27dYPXA M4H/XFojyr7H39E6Xt5ESGeadgTJzpeRbutdXy7w8eYGn2edyuc9tkDgSJsEK7yb lT4UaxGVxnKUQOfE62trmF8rbhhySFEj4Fevj4CflFlnpH7Qz24WacPARizAVR9z Uu+KooVRk3vMCa0l20sot9Ca2O1u0iQtMc03OQ9Wrh+WSRkdbqYckFKwDogpiAaS X3xRxw+c8wU278herbbWvgRuWXHlIup9w6OYQOrxR4enO1EOgEz3tkpSWkefrLdR qFYvnkTpjvJaZm4h/HGxWojEcQ9CNPw1ZO3mfkbfyVzzh9TUHrT2HSzWe3FfAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUe3ZoA5QQwMpcvtHvVD1GpEwRom4wHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzgzNTJlMzEzMTM3MmUzMjMy MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM4MzUzMjM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA VXXlMA0GCSqGSIb3DQEBCwUAA4IBAQALNiqLXhRRo+e3IKJEvB3u2HSw55yUtz2w FSSw3Gqxf1EKrcwlP19C7nbW6bGS9u+aL5zvMjxuIaAR6PbWwqMvZp1kBymWkjql QNfkchv1m5GPZ9b3xR2bVeopobGR83sbI7haAdsmH5Im0u3Qs/xv58Mbil/Q8pPu 5gvFLmijOuRX1cpPg9xw9cPibt0lzM7T04dfB4adDQeGypC//8dlQ55Febt3cJFv UKN5yt7l3YCbgdLpGt3ipXu2y+Mai/e+7eW6e6nIsPRP7r4pbb9UMceI63uyuO2e 5yNQlECg/TfssMuuQojg2KR2dD14Sd7kyY5IuTnCmzU9eIzeACo7 -----END CERTIFICATE-----Generated at Thu Dec 18 11:35:54 2025 by rpki-client