This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa
File: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (raw, json)
Hash identifier: 64uxD3jQtXWcavfYFljDhJHJgbOPhGll/0DiDk/jIuA=
Subject key identifier: 54:C1:93:AC:D8:91:AC:4B:69:50:DE:14:56:E5:EF:4D:5D:B3:69:DB
Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac
Certificate serial: 15825A78D91B56A1625A63F34CAF66C1B829E989
Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa
Signing time: Sun 16 Nov 2025 10:55:11 +0000
ROA not before: Sun 16 Nov 2025 10:50:11 +0000
ROA not after: Sun 15 Nov 2026 10:55:11 +0000
asID: 215703
IP address blocks: 185.186.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl
rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Dec 2025 22:53:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:82:5a:78:d9:1b:56:a1:62:5a:63:f3:4c:af:66:c1:b8:29:e9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac
Validity
Not Before: Nov 16 10:50:11 2025 GMT
Not After : Nov 15 10:55:11 2026 GMT
Subject: CN=54C193ACD891AC4B6950DE1456E5EF4D5DB369DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:37:51:16:fb:3b:ed:a1:82:af:1e:24:3f:df:
57:df:9f:d6:5d:47:81:7c:44:ba:ed:94:0b:3e:f8:
fb:b9:7e:57:71:61:2a:30:ac:69:f4:4d:3c:81:c1:
5d:df:ac:b8:4b:e7:49:1e:25:86:2c:a1:43:5c:41:
93:e3:00:7a:e7:30:ef:05:99:7f:88:24:92:83:9e:
91:55:72:93:bc:14:9d:40:07:d1:16:ae:47:22:01:
d6:69:01:cf:3b:3e:d9:31:11:3a:ba:50:77:4b:1c:
7d:65:db:19:3e:bd:a2:d1:83:33:da:21:38:ca:19:
03:30:c8:48:fe:e3:89:53:16:c3:51:16:c2:90:97:
d8:2e:ce:53:a4:e4:64:a7:57:ef:c2:0d:2c:6b:d1:
bc:85:8d:cd:ee:8c:61:b3:bd:57:70:74:11:1f:2c:
49:58:af:06:ed:6d:19:94:27:9b:1a:65:93:e0:9b:
6f:52:01:6c:13:ae:dc:84:e0:d7:2a:a0:4f:a3:c5:
2e:39:79:7f:92:84:10:a1:78:3c:58:76:dd:b8:62:
90:e8:00:de:4b:99:9d:29:12:f8:f2:7d:d5:61:a0:
fd:49:7a:b4:ec:39:c5:dc:bd:84:2d:b4:9d:43:dd:
a2:45:09:00:d0:c3:63:b4:3b:6c:f9:cd:89:2e:bf:
a5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C1:93:AC:D8:91:AC:4B:69:50:DE:14:56:E5:EF:4D:5D:B3:69:DB
X509v3 Authority Key Identifier:
keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.26.0/24
Signature Algorithm: sha256WithRSAEncryption
73:c1:c8:7e:a2:53:f1:ab:b3:c6:f5:9b:ae:97:5d:f1:0c:70:
92:3d:a6:1b:b4:7d:54:15:f1:41:69:fa:40:1a:5b:15:d9:45:
51:28:65:22:82:d6:f6:12:6c:62:21:f7:19:c5:be:df:f2:d4:
d8:27:bd:ee:a7:ac:9f:e7:3c:77:68:d7:30:4d:45:68:69:57:
3f:28:a7:da:5c:f3:b3:5b:4c:67:2c:e8:1d:72:46:da:62:6d:
6f:0d:a8:67:20:a0:9d:33:14:64:fc:c0:e3:79:3b:ba:55:7e:
eb:3c:5e:14:6d:09:63:37:3e:bf:6a:c7:f7:ae:6d:be:eb:40:
22:1b:da:89:06:bc:40:2f:0c:e3:ec:6a:b1:e8:ca:7f:fd:4b:
6c:a4:c2:e3:1b:03:97:d0:4d:22:f0:b4:86:cd:6c:75:c0:7c:
0f:9a:f9:83:8b:5e:bb:cc:7c:70:da:50:21:98:f2:79:6e:bf:
d7:ef:38:88:4f:47:81:a6:32:90:32:bf:7a:59:db:7a:ca:12:
13:e4:fb:ba:c6:55:c1:15:37:4c:00:cf:13:47:b3:6c:ee:b8:
e7:cf:c4:dc:3d:bb:3b:5d:a5:7e:08:6d:52:c3:11:66:ae:20:
31:94:68:35:f8:bb:f1:d0:ba:4f:cd:18:93:b6:b5:c8:8c:39:
be:c5:c2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 07:29:06 2025 by rpki-client