This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133382e302f32342d3234203d3e203633313530.roa File: 3138352e3135302e3133382e302f32342d3234203d3e203633313530.roa (raw, json) Hash identifier: fmUC5ktSfw89s55svML051R14TsE2ZqhbpRROM7OY0o= Subject key identifier: 69:84:54:BB:83:EC:F9:49:58:8E:6D:46:52:01:06:38:CE:EC:31:BA Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 0A787EEFC79A03849214419EF8861510EFD3D2E5 Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133382e302f32342d3234203d3e203633313530.roa Signing time: Mon 24 Nov 2025 04:55:12 +0000 ROA not before: Mon 24 Nov 2025 04:50:12 +0000 ROA not after: Mon 23 Nov 2026 04:55:12 +0000 asID: 63150 IP address blocks: 185.150.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:78:7e:ef:c7:9a:03:84:92:14:41:9e:f8:86:15:10:ef:d3:d2:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Nov 24 04:50:12 2025 GMT Not After : Nov 23 04:55:12 2026 GMT Subject: CN=698454BB83ECF949588E6D4652010638CEEC31BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e0:7d:42:96:cf:37:b2:d2:63:ce:dd:25:d6: 05:10:eb:37:ef:86:01:65:03:d6:c1:dd:f7:f8:59: fa:e6:8a:97:9a:32:c9:b8:97:ca:b4:56:08:d4:1a: ea:0b:b1:b8:d4:13:61:c7:d4:b6:08:6d:f2:1c:f8: 77:89:a6:cc:ed:08:26:17:db:d3:76:d2:a4:64:be: 7c:74:87:12:e0:be:8d:d9:8d:8b:81:73:d6:4a:c7: ab:d2:20:d9:fa:e4:b0:4a:4f:5f:d8:25:48:76:7c: 4c:48:05:bc:af:f8:57:70:ff:79:23:66:5d:c1:4e: f4:68:ce:be:6e:46:90:9a:1c:2c:87:b0:17:d6:5f: d8:74:bb:58:c0:72:4c:44:f2:6a:2c:c2:0c:8d:c2: 4f:07:da:4e:99:3c:b5:d2:40:ed:b9:1b:4b:b8:aa: de:e2:4b:7b:42:77:24:f6:45:26:be:eb:31:90:fe: 84:8f:21:2e:19:23:11:84:cf:e5:8d:d2:28:89:6c: 26:1b:ea:b6:6a:eb:c6:30:be:6e:7f:26:69:a0:9b: ff:3b:53:8e:5b:20:3d:21:8d:37:32:9c:b8:ba:e3: d7:b1:2c:df:78:3d:d8:db:62:31:9a:09:e8:03:61: 92:b8:b9:ce:b1:b5:d7:7b:b2:4f:25:1e:fd:ae:7e: d4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:84:54:BB:83:EC:F9:49:58:8E:6D:46:52:01:06:38:CE:EC:31:BA X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133382e302f32342d3234203d3e203633313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.138.0/24 Signature Algorithm: sha256WithRSAEncryption a2:53:47:c4:63:80:1e:2e:7e:6d:a3:2c:19:21:e1:57:de:bf: 73:bd:29:82:10:0a:f6:74:d9:6b:23:e2:0d:5c:32:9a:af:44: 57:a1:a0:b9:4d:aa:00:40:57:16:c7:70:ec:69:a9:ef:43:9c: 9e:e1:f1:0b:00:39:e3:c3:8f:e1:ce:35:eb:08:90:f9:62:e7: 21:1d:67:5a:02:99:e3:2e:97:9c:38:3c:32:7f:28:33:b2:8e: a6:c1:a7:1d:7a:4e:eb:6c:fc:e3:72:29:18:44:58:22:fe:2e: 06:a1:c8:2a:fd:5e:52:a3:25:d8:6a:3d:72:23:e7:77:66:0a: 8d:f7:49:5a:2c:00:6c:ea:79:03:78:24:f1:35:36:d5:a9:6d: 74:42:1c:86:be:5e:c4:a3:86:ab:19:5b:4e:fc:f4:47:c5:82: a8:f4:46:ad:cd:ae:c7:01:57:40:f4:59:9e:65:ac:da:66:d8: bb:4f:4f:04:97:2e:3c:96:28:7e:48:60:93:8d:3e:fa:7b:6b: ff:e0:41:a1:84:47:fa:93:9e:f9:6f:8f:26:26:6b:ce:61:67: 4d:ba:6f:5e:8d:d5:e2:c3:58:3c:85:4a:17:1c:03:cd:8e:58: 04:6d:b4:19:3e:4c:4a:b4:73:c5:67:86:5f:4d:39:31:1d:32: 5c:4b:08:06 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUCnh+78eaA4SSFEGe+IYVEO/T0uUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTExMjQwNDUwMTJaFw0yNjExMjMwNDU1MTJaMDMxMTAvBgNV BAMTKDY5ODQ1NEJCODNFQ0Y5NDk1ODhFNkQ0NjUyMDEwNjM4Q0VFQzMxQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq4H1Cls83stJjzt0l1gUQ6zfv hgFlA9bB3ff4WfrmipeaMsm4l8q0VgjUGuoLsbjUE2HH1LYIbfIc+HeJpsztCCYX 29N20qRkvnx0hxLgvo3ZjYuBc9ZKx6vSINn65LBKT1/YJUh2fExIBbyv+Fdw/3kj Zl3BTvRozr5uRpCaHCyHsBfWX9h0u1jAckxE8moswgyNwk8H2k6ZPLXSQO25G0u4 qt7iS3tCdyT2RSa+6zGQ/oSPIS4ZIxGEz+WN0iiJbCYb6rZq68Ywvm5/Jmmgm/87 U45bID0hjTcynLi649exLN94PdjbYjGaCegDYZK4uc6xtdd7sk8lHv2uftRZAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUaYRUu4Ps+UlYjm1GUgEGOM7sMbowHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzODM1MmUzMTM1MzAyZTMx MzMzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzMzMTM1MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5loowDQYJKoZIhvcNAQELBQADggEBAKJTR8RjgB4ufm2jLBkh4Vfev3O9KYIQ CvZ02Wsj4g1cMpqvRFehoLlNqgBAVxbHcOxpqe9DnJ7h8QsAOePDj+HONesIkPli 5yEdZ1oCmeMul5w4PDJ/KDOyjqbBpx16Tuts/ONyKRhEWCL+LgahyCr9XlKjJdhq PXIj53dmCo33SVosAGzqeQN4JPE1NtWpbXRCHIa+XsSjhqsZW0789EfFgqj0Rq3N rscBV0D0WZ5lrNpm2LtPTwSXLjyWKH5IYJONPvp7a//gQaGER/qTnvlvjyYma85h Z026b16N1eLDWDyFShccA82OWARttBk+TEq0c8Vnhl9NOTEdMlxLCAY= -----END CERTIFICATE-----Generated at Sat Dec 6 01:33:17 2025 by rpki-client