This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e20383334.roa File: 3138352e32392e3136342e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: EUBYtBIVJDes9RuLe8BxYjxQS9aeYs1t4D1QNelYnHc= Subject key identifier: 84:B2:0E:A4:16:21:93:4A:ED:76:57:47:D2:81:34:2F:4A:38:D1:BD Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 2B9B819E23EEB82222B4E8B91FBB8DAD8C207E6F Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e20383334.roa Signing time: Sat 22 Nov 2025 02:22:03 +0000 ROA not before: Sat 22 Nov 2025 02:17:03 +0000 ROA not after: Sat 21 Nov 2026 02:22:03 +0000 asID: 834 IP address blocks: 185.29.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:9b:81:9e:23:ee:b8:22:22:b4:e8:b9:1f:bb:8d:ad:8c:20:7e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Nov 22 02:17:03 2025 GMT Not After : Nov 21 02:22:03 2026 GMT Subject: CN=84B20EA41621934AED765747D281342F4A38D1BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:79:b2:26:86:6e:e9:89:cf:6a:92:7b:05:5e: 8c:f3:96:8d:9b:b1:2f:3c:24:f7:57:dd:c2:d6:8c: e0:1c:2d:5e:91:a2:1c:0f:73:a8:a4:e9:f8:b8:a6: 9c:d1:32:1f:f4:f5:f1:fe:fa:97:f3:0e:f1:b1:d5: 25:6e:b4:7d:69:e9:13:77:3a:e5:84:22:9e:53:a2: 7d:ac:92:c4:0a:4f:46:bc:24:46:db:00:20:21:01: df:c8:02:a1:d6:d2:f3:fa:ff:4e:a2:9a:ae:3e:07: e3:11:9c:33:70:59:6a:6e:40:94:33:bf:44:60:96: 82:8f:fc:79:5c:2a:be:70:08:88:6c:b8:45:3c:8f: 07:5e:bc:ac:b6:bb:34:c4:16:83:ce:a4:92:d2:54: 29:af:22:10:88:27:d5:08:43:6f:c6:6f:3b:ae:b3: a6:b9:f0:cc:20:84:09:6b:da:78:d4:95:10:50:a1: e6:93:4c:2a:41:b9:50:0a:02:7f:e3:fb:b4:fa:91: f0:91:d6:17:ef:ae:17:a9:fc:ea:80:62:fd:f8:d1: 51:e8:59:e2:80:9f:f9:ec:af:12:8f:05:3f:ec:a9: 23:18:0b:d7:7e:c1:3a:73:73:8c:0f:34:93:ef:cf: 87:34:21:a1:f0:40:db:8f:ad:ab:69:ea:85:05:4f: 77:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B2:0E:A4:16:21:93:4A:ED:76:57:47:D2:81:34:2F:4A:38:D1:BD X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.29.164.0/24 Signature Algorithm: sha256WithRSAEncryption 56:6c:9d:0f:4c:27:8c:c6:20:67:d2:ea:b5:e7:7e:f6:af:f5: ca:75:d9:07:bb:77:8a:54:87:16:0d:cb:c6:8a:30:26:34:0e: d6:e2:38:0d:b1:4f:9b:99:50:82:b8:cc:48:a3:6e:23:ca:0c: ce:4c:14:af:06:94:bf:67:42:6f:53:dd:c0:93:bd:e1:a8:0b: 38:cc:73:73:a8:b0:f6:6b:ba:12:7c:e3:fa:93:b6:67:3a:fc: b9:6b:38:2b:b8:16:34:b3:f2:ed:e2:78:19:32:d3:ac:81:2e: 00:a5:7b:27:a9:37:9b:29:bd:f0:57:bf:bc:c3:76:50:c2:46: fd:a1:30:50:4d:d2:f8:4e:3d:45:20:93:ba:0f:9c:22:d7:ca: 2b:93:69:e3:f0:48:26:55:b1:9e:97:fd:16:64:4a:98:b6:14: b8:11:f7:8b:87:55:fe:43:96:5d:3b:7c:41:d2:83:92:d5:1e: 3e:6d:48:15:f3:b5:8a:8f:91:50:05:95:fa:90:7b:d3:0d:1a: 1f:45:c8:5d:dd:c3:c1:ee:9e:ae:d3:f6:ef:bd:61:bf:fe:a1: ad:88:6b:79:27:99:3d:d4:99:1a:0e:27:84:b6:29:ad:b8:d1: ee:fb:07:0b:e4:7f:e4:91:e1:c6:06:f7:4f:80:60:c6:05:c1: 42:3d:9f:22 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUK5uBniPuuCIitOi5H7uNrYwgfm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTExMjIwMjE3MDNaFw0yNjExMjEwMjIyMDNaMDMxMTAvBgNV BAMTKDg0QjIwRUE0MTYyMTkzNEFFRDc2NTc0N0QyODEzNDJGNEEzOEQxQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWebImhm7pic9qknsFXozzlo2b sS88JPdX3cLWjOAcLV6RohwPc6ik6fi4ppzRMh/09fH++pfzDvGx1SVutH1p6RN3 OuWEIp5Ton2sksQKT0a8JEbbACAhAd/IAqHW0vP6/06imq4+B+MRnDNwWWpuQJQz v0RgloKP/HlcKr5wCIhsuEU8jwdevKy2uzTEFoPOpJLSVCmvIhCIJ9UIQ2/Gbzuu s6a58MwghAlr2njUlRBQoeaTTCpBuVAKAn/j+7T6kfCR1hfvrhep/OqAYv340VHo WeKAn/nsrxKPBT/sqSMYC9d+wTpzc4wPNJPvz4c0IaHwQNuPratp6oUFT3e3AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUhLIOpBYhk0rtdldH0oE0L0o40b0wHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzODM1MmUzMjM5MmUzMTM2 MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5HaQw DQYJKoZIhvcNAQELBQADggEBAFZsnQ9MJ4zGIGfS6rXnfvav9cp12Qe7d4pUhxYN y8aKMCY0DtbiOA2xT5uZUIK4zEijbiPKDM5MFK8GlL9nQm9T3cCTveGoCzjMc3Oo sPZruhJ84/qTtmc6/LlrOCu4FjSz8u3ieBky06yBLgCleyepN5spvfBXv7zDdlDC Rv2hMFBN0vhOPUUgk7oPnCLXyiuTaePwSCZVsZ6X/RZkSpi2FLgR94uHVf5Dll07 fEHSg5LVHj5tSBXztYqPkVAFlfqQe9MNGh9FyF3dw8Hunq7T9u+9Yb/+oa2Ia3kn mT3UmRoOJ4S2Ka240e77Bwvkf+SR4cYG90+AYMYFwUI9nyI= -----END CERTIFICATE-----Generated at Fri Dec 5 04:54:06 2025 by rpki-client