This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133372e302f32342d3234203d3e203631333137.roa File: 3138352e3135302e3133372e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: vYlRJxk5RmAs+DflFA562r8GXQiwF/fAhll4uu+tT1o= Subject key identifier: 47:F2:3D:6D:71:43:7D:FA:FC:ED:00:68:EB:16:84:D1:8E:AC:62:CB Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 430639F906BB95465F49B4BB317E717F7873E696 Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133372e302f32342d3234203d3e203631333137.roa Signing time: Sat 22 Nov 2025 12:55:12 +0000 ROA not before: Sat 22 Nov 2025 12:50:12 +0000 ROA not after: Sat 21 Nov 2026 12:55:12 +0000 asID: 61317 IP address blocks: 185.150.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 19:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:06:39:f9:06:bb:95:46:5f:49:b4:bb:31:7e:71:7f:78:73:e6:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Nov 22 12:50:12 2025 GMT Not After : Nov 21 12:55:12 2026 GMT Subject: CN=47F23D6D71437DFAFCED0068EB1684D18EAC62CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b2:64:10:a5:df:42:99:7e:74:30:bc:ff:8a: 77:76:89:f3:fa:19:c9:32:85:74:8c:a1:9c:a6:1c: fb:e6:3c:ca:e3:eb:20:e2:fa:80:59:9c:4a:1a:f5: 9f:19:6e:b1:61:07:92:e1:02:fa:4a:e6:0d:c6:db: af:95:7d:82:1e:bc:01:d4:ff:cd:43:8e:9f:58:1b: a2:3e:a0:00:3a:20:c7:76:37:36:a0:db:3e:f5:78: b2:90:0c:a9:33:8d:6d:50:ab:34:0a:c5:72:da:98: 58:5d:fa:4b:00:98:41:ed:b9:ed:3f:06:71:c2:e8: f3:0a:92:0a:6a:85:59:9b:2b:75:fa:1b:17:76:f6: a3:8c:0d:2a:59:92:12:f5:fc:5c:94:3e:66:f4:58: ab:9a:6c:c6:dc:e4:28:2b:4e:18:e7:b4:4e:2c:a9: 48:e5:6e:8d:d6:8d:8d:ac:57:42:80:f5:d5:20:3b: c1:b3:e4:28:cc:ee:28:32:b8:ad:2e:a0:2e:de:57: 72:72:69:2e:dc:84:eb:ae:24:0c:68:26:c3:32:25: 49:c7:a8:85:4c:71:24:67:f9:cf:10:e0:d9:e0:10: 68:9c:81:50:8b:a8:ba:35:fe:e9:aa:69:8a:40:9e: de:db:69:1b:26:57:50:82:ee:48:da:dd:a6:19:3d: 28:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F2:3D:6D:71:43:7D:FA:FC:ED:00:68:EB:16:84:D1:8E:AC:62:CB X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133372e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.137.0/24 Signature Algorithm: sha256WithRSAEncryption 51:81:75:57:e3:3e:55:cb:7f:27:9d:77:f5:cd:45:96:28:0e: 36:02:72:07:64:2c:0a:5b:81:02:cf:ce:e2:fd:d2:50:09:74: 1c:95:ed:90:e7:86:33:b0:5b:60:d4:80:0e:22:4e:26:f1:21: 72:cf:ee:b6:b9:95:f3:61:a8:0b:23:ef:71:0d:ca:d4:1e:87: 57:79:e3:a9:76:9c:20:08:42:80:63:f2:39:85:15:9b:32:3d: 63:4d:92:c9:86:79:5c:fe:5a:cc:af:2e:9e:95:50:14:ce:2c: 40:f6:a8:60:ee:72:63:13:6e:e3:2a:83:c9:bc:63:14:d1:fe: 20:c5:42:0a:03:57:a1:16:85:a9:51:32:2a:8b:5f:f1:13:5d: 67:f2:b3:07:93:f6:57:d6:5e:e3:ab:0b:33:59:02:e6:76:ed: 77:7f:87:c8:4c:a9:78:2a:a4:a2:ad:da:7e:dc:e6:69:53:22: b6:76:a3:fe:9c:32:b8:ab:bc:03:09:ba:af:93:5f:82:c4:66: e1:79:ef:41:d5:9f:08:8b:6e:72:7a:d9:e1:ab:4e:82:71:95: c0:82:da:ea:00:76:3c:50:7b:7b:52:64:f6:87:96:0f:29:e2: 16:55:f3:a7:bd:03:ff:7a:da:5e:01:ce:d8:47:70:92:b7:9e: a9:a2:bb:bb -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUQwY5+Qa7lUZfSbS7MX5xf3hz5pYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTExMjIxMjUwMTJaFw0yNjExMjExMjU1MTJaMDMxMTAvBgNV BAMTKDQ3RjIzRDZENzE0MzdERkFGQ0VEMDA2OEVCMTY4NEQxOEVBQzYyQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYsmQQpd9CmX50MLz/ind2ifP6 GckyhXSMoZymHPvmPMrj6yDi+oBZnEoa9Z8ZbrFhB5LhAvpK5g3G26+VfYIevAHU /81Djp9YG6I+oAA6IMd2Nzag2z71eLKQDKkzjW1QqzQKxXLamFhd+ksAmEHtue0/ BnHC6PMKkgpqhVmbK3X6Gxd29qOMDSpZkhL1/FyUPmb0WKuabMbc5CgrThjntE4s qUjlbo3WjY2sV0KA9dUgO8Gz5CjM7igyuK0uoC7eV3JyaS7chOuuJAxoJsMyJUnH qIVMcSRn+c8Q4NngEGicgVCLqLo1/umqaYpAnt7baRsmV1CC7kja3aYZPShTAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUR/I9bXFDffr87QBo6xaE0Y6sYsswHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzODM1MmUzMTM1MzAyZTMx MzMzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5lokwDQYJKoZIhvcNAQELBQADggEBAFGBdVfjPlXLfyedd/XNRZYoDjYCcgdk LApbgQLPzuL90lAJdByV7ZDnhjOwW2DUgA4iTibxIXLP7ra5lfNhqAsj73ENytQe h1d546l2nCAIQoBj8jmFFZsyPWNNksmGeVz+WsyvLp6VUBTOLED2qGDucmMTbuMq g8m8YxTR/iDFQgoDV6EWhalRMiqLX/ETXWfysweT9lfWXuOrCzNZAuZ27Xd/h8hM qXgqpKKt2n7c5mlTIrZ2o/6cMrirvAMJuq+TX4LEZuF570HVnwiLbnJ62eGrToJx lcCC2uoAdjxQe3tSZPaHlg8p4hZV86e9A/962l4BzthHcJK3nqmiu7s= -----END CERTIFICATE-----Generated at Sun Nov 23 05:27:51 2025 by rpki-client