This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133392e302f32342d3234203d3e20313335343032.roa File: 3138352e3135302e3133392e302f32342d3234203d3e20313335343032.roa (raw, json) Hash identifier: gwCTNovsK2IEt1sYqr/r4uA0+BsAAJF73gd9wZYI9Vo= Subject key identifier: 76:45:F2:14:43:BC:A4:32:8E:AB:9C:8D:8D:7A:53:89:3D:8B:23:EF Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 4F50CEA8154C5E105D336C67108C82ED5EF545EC Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133392e302f32342d3234203d3e20313335343032.roa Signing time: Thu 27 Nov 2025 02:55:12 +0000 ROA not before: Thu 27 Nov 2025 02:50:12 +0000 ROA not after: Thu 26 Nov 2026 02:55:12 +0000 asID: 135402 IP address blocks: 185.150.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:50:ce:a8:15:4c:5e:10:5d:33:6c:67:10:8c:82:ed:5e:f5:45:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Nov 27 02:50:12 2025 GMT Not After : Nov 26 02:55:12 2026 GMT Subject: CN=7645F21443BCA4328EAB9C8D8D7A53893D8B23EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:df:eb:b8:b1:fb:81:ee:46:59:86:df:ca:2f: 50:81:f5:53:78:55:0d:0d:f0:f8:87:c1:43:5b:7a: 27:7a:bc:af:64:08:60:10:8a:6d:48:0c:4c:b3:1e: 20:5f:de:a9:ac:ee:fd:b9:d4:55:a9:3a:41:42:f4: 5e:2b:59:e8:06:4d:65:b1:ec:47:1b:dc:6f:5e:ec: 1c:00:2f:ac:f5:4b:01:1c:ff:b7:73:6a:1b:3a:2d: c6:ca:2b:7b:f9:22:bd:f2:49:d8:27:91:9e:3c:63: 1a:c9:10:6a:3c:0a:94:69:6e:fc:1e:df:96:df:3d: 37:9b:ff:1d:d6:58:9e:db:5d:3c:7e:12:ac:09:37: 65:53:8c:07:7b:8a:fa:66:ac:97:fd:5e:4e:23:07: 82:69:81:90:22:f6:aa:6f:f3:b7:06:cc:d9:78:b7: d7:07:6b:f8:e0:75:06:26:48:99:90:43:3d:cf:b1: 73:15:1e:ea:a2:49:0b:16:5c:6c:3b:d7:99:f7:e8: bd:fc:1c:89:a1:ef:46:69:55:db:61:2d:57:8f:f8: 3a:93:1b:3e:09:3c:7e:56:86:88:c2:03:f2:26:c9: 0e:3f:2a:7d:34:de:35:48:97:84:94:7f:50:fc:be: ac:73:84:60:97:72:cf:e4:38:7b:64:c1:d7:c1:4c: a4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:45:F2:14:43:BC:A4:32:8E:AB:9C:8D:8D:7A:53:89:3D:8B:23:EF X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133392e302f32342d3234203d3e20313335343032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.139.0/24 Signature Algorithm: sha256WithRSAEncryption a1:c7:37:03:d9:c3:8b:5d:2d:31:38:2c:14:4f:be:bd:8a:b8: b7:0a:f1:07:6c:61:b7:b0:04:94:ee:69:25:38:b9:73:d1:52: 31:35:bc:ca:82:7e:de:9d:a3:22:71:4d:da:f4:d5:c0:3d:77: db:e4:51:48:97:1e:50:77:76:7f:e4:50:a3:13:65:4d:68:b7: d0:c7:f6:d9:49:34:ad:a9:b2:66:d9:52:0c:98:5d:3b:cc:60: 07:b1:f1:d6:14:b6:dc:3b:d9:7f:dd:4f:79:29:69:fc:d1:e0: e6:40:cc:be:aa:2e:2c:66:6e:1c:f9:e1:93:4e:c4:74:52:00: 67:85:de:5b:3d:44:20:59:24:01:8c:c0:77:fe:c9:c6:6d:98: 7e:43:2a:10:a1:9c:77:aa:da:ab:e7:58:51:ce:46:6a:ef:d4: 8b:88:ce:64:c6:f7:3b:fb:c1:a1:45:d1:32:d1:1d:70:c1:51: 3a:cb:67:5b:7f:90:b3:bb:c8:e5:24:db:b3:9a:05:fd:b9:e9: 2e:49:7d:1c:7d:a2:ac:c3:75:7e:b4:54:f5:a8:0b:bc:b4:1a: 6f:37:fa:55:0d:71:cd:6d:20:8c:ec:57:9d:fe:85:00:b5:51: 44:82:95:c4:7a:3b:4e:21:71:9e:3e:8f:6f:8c:5d:ef:da:c0: 06:35:8d:42 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUT1DOqBVMXhBdM2xnEIyC7V71RewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTExMjcwMjUwMTJaFw0yNjExMjYwMjU1MTJaMDMxMTAvBgNV BAMTKDc2NDVGMjE0NDNCQ0E0MzI4RUFCOUM4RDhEN0E1Mzg5M0Q4QjIzRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs3+u4sfuB7kZZht/KL1CB9VN4 VQ0N8PiHwUNbeid6vK9kCGAQim1IDEyzHiBf3qms7v251FWpOkFC9F4rWegGTWWx 7Ecb3G9e7BwAL6z1SwEc/7dzahs6LcbKK3v5Ir3ySdgnkZ48YxrJEGo8CpRpbvwe 35bfPTeb/x3WWJ7bXTx+EqwJN2VTjAd7ivpmrJf9Xk4jB4JpgZAi9qpv87cGzNl4 t9cHa/jgdQYmSJmQQz3PsXMVHuqiSQsWXGw715n36L38HImh70ZpVdthLVeP+DqT Gz4JPH5WhojCA/ImyQ4/Kn003jVIl4SUf1D8vqxzhGCXcs/kOHtkwdfBTKRfAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUdkXyFEO8pDKOq5yNjXpTiT2LI+8wHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzODM1MmUzMTM1MzAyZTMx MzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzAzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALmWizANBgkqhkiG9w0BAQsFAAOCAQEAocc3A9nDi10tMTgsFE++vYq4twrx B2xht7AElO5pJTi5c9FSMTW8yoJ+3p2jInFN2vTVwD132+RRSJceUHd2f+RQoxNl TWi30Mf22Uk0ramyZtlSDJhdO8xgB7Hx1hS23DvZf91PeSlp/NHg5kDMvqouLGZu HPnhk07EdFIAZ4XeWz1EIFkkAYzAd/7Jxm2YfkMqEKGcd6raq+dYUc5Gau/Ui4jO ZMb3O/vBoUXRMtEdcMFROstnW3+Qs7vI5STbs5oF/bnpLkl9HH2irMN1frRU9agL vLQabzf6VQ1xzW0gjOxXnf6FALVRRIKVxHo7TiFxnj6Pb4xd79rABjWNQg== -----END CERTIFICATE-----Generated at Fri Dec 5 04:58:18 2025 by rpki-client