This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130352e302f32342d3234203d3e203235313938.roa File: 33312e3138352e3130352e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: kyh+2zEsw4AdBrsVJKPPyxUgwYv7z5eoBZj4rdm+U0I= Subject key identifier: 8D:58:B2:F9:46:CD:0A:AC:70:23:00:EB:41:96:54:2B:41:54:C4:F3 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 667CAA9DF7030D63D81D75ABDE0A534C72B3E6B5 Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130352e302f32342d3234203d3e203235313938.roa Signing time: Wed 19 Nov 2025 09:50:43 +0000 ROA not before: Wed 19 Nov 2025 09:45:43 +0000 ROA not after: Wed 18 Nov 2026 09:50:43 +0000 asID: 25198 IP address blocks: 31.185.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:7c:aa:9d:f7:03:0d:63:d8:1d:75:ab:de:0a:53:4c:72:b3:e6:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Nov 19 09:45:43 2025 GMT Not After : Nov 18 09:50:43 2026 GMT Subject: CN=8D58B2F946CD0AAC702300EB4196542B4154C4F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b7:dc:46:33:de:02:f9:ab:15:5a:bc:9f:fe: 97:db:d4:ea:24:1d:bd:05:80:aa:cc:a0:51:0b:5a: e5:2b:ff:ed:5d:95:fc:97:80:6a:98:0d:4b:9b:86: 22:e4:c0:29:76:d4:8b:e0:83:b3:5b:fe:1d:b0:8b: e8:39:22:b4:65:14:65:1e:5e:11:a6:9b:d7:42:5a: 77:2a:38:f0:92:20:ad:d5:ac:54:70:b0:7e:da:58: dd:5b:d7:7b:1c:22:21:8e:36:9b:49:0d:0d:ec:50: c8:00:ec:0f:89:31:58:35:e5:ec:4e:fd:93:bb:49: 6c:73:37:fd:03:e0:0b:7e:be:f2:ae:ee:69:4a:04: 1e:33:99:ee:14:3b:72:d7:c7:3c:cd:02:2c:65:6e: ee:af:dc:c5:2c:82:36:39:62:c7:77:42:56:a6:7d: fd:da:38:ab:03:61:2e:8c:70:bc:e5:8c:fb:5b:42: 0e:60:c9:96:fe:37:97:a4:e1:8e:22:e9:0e:a6:dd: fe:c0:d9:f9:c3:81:36:02:17:b6:08:33:bb:28:4a: 54:45:5b:ac:a2:64:ec:63:0f:5c:2d:17:a1:b3:fd: 44:d7:70:fb:0b:1a:17:f1:ca:b8:3f:b3:2f:ec:25: de:d1:c7:9f:5d:2f:68:8d:a3:ec:3a:b5:7d:67:e8: d6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:58:B2:F9:46:CD:0A:AC:70:23:00:EB:41:96:54:2B:41:54:C4:F3 X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130352e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.185.105.0/24 Signature Algorithm: sha256WithRSAEncryption b9:be:ee:f1:b2:14:a3:41:35:76:9f:dc:6f:d7:ce:c8:b1:26: 9a:cf:fb:1a:bd:80:e2:20:31:3b:08:ad:fc:10:6a:3f:ed:6d: 50:1a:a6:2f:d7:c7:11:07:33:5e:02:bb:af:6c:e1:6c:15:03: af:43:30:b1:98:7a:46:44:d0:d2:75:2f:a1:aa:a7:1c:ca:69: 5d:ab:20:15:3c:97:41:28:93:94:e6:ed:2f:1d:b2:6a:cc:fa: cb:59:6f:ea:0a:06:d0:ce:15:ef:61:87:ea:0e:e2:27:12:23: 99:f3:ea:98:8f:41:9f:34:8e:36:88:6b:03:b1:ee:ea:be:88: a2:f5:4b:4e:39:f2:bb:f8:21:b9:26:cd:49:cc:fc:c0:5c:6b: 0b:4a:da:d7:45:7b:ac:d8:b7:8a:5a:26:53:b5:79:32:11:2d: 97:6f:ee:d1:c4:be:fb:fe:fc:1b:1e:d3:ba:5f:41:df:99:7f: a5:7c:22:1f:f2:17:9f:63:9e:5d:ba:fc:cf:af:00:34:e9:95: 58:86:3d:86:d0:bb:f7:be:14:fd:73:47:ed:ec:4c:58:0a:eb: 79:ed:03:1f:ed:4d:a6:b1:39:9f:28:f0:fa:24:c3:ea:a3:8f: 86:97:99:2f:81:02:2f:88:91:cc:f7:b7:57:92:90:ee:47:0d: 74:e8:8a:03 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUZnyqnfcDDWPYHXWr3gpTTHKz5rUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNTExMTkwOTQ1NDNaFw0yNjExMTgwOTUwNDNaMDMxMTAvBgNV BAMTKDhENThCMkY5NDZDRDBBQUM3MDIzMDBFQjQxOTY1NDJCNDE1NEM0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbt9xGM94C+asVWryf/pfb1Ook Hb0FgKrMoFELWuUr/+1dlfyXgGqYDUubhiLkwCl21Ivgg7Nb/h2wi+g5IrRlFGUe XhGmm9dCWncqOPCSIK3VrFRwsH7aWN1b13scIiGONptJDQ3sUMgA7A+JMVg15exO /ZO7SWxzN/0D4At+vvKu7mlKBB4zme4UO3LXxzzNAixlbu6v3MUsgjY5Ysd3Qlam ff3aOKsDYS6McLzljPtbQg5gyZb+N5ek4Y4i6Q6m3f7A2fnDgTYCF7YIM7soSlRF W6yiZOxjD1wtF6Gz/UTXcPsLGhfxyrg/sy/sJd7Rx59dL2iNo+w6tX1n6NbZAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUjViy+UbNCqxwIwDrQZZUK0FUxPMwHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTgyYzY1Yjkt NzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZmOWI4LzAvMzMzMTJlMzEzODM1MmUzMTMw MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM1MzEzOTM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA H7lpMA0GCSqGSIb3DQEBCwUAA4IBAQC5vu7xshSjQTV2n9xv187IsSaaz/savYDi IDE7CK38EGo/7W1QGqYv18cRBzNeAruvbOFsFQOvQzCxmHpGRNDSdS+hqqccymld qyAVPJdBKJOU5u0vHbJqzPrLWW/qCgbQzhXvYYfqDuInEiOZ8+qYj0GfNI42iGsD se7qvoii9UtOOfK7+CG5Js1JzPzAXGsLStrXRXus2LeKWiZTtXkyES2Xb+7RxL77 /vwbHtO6X0HfmX+lfCIf8hefY55duvzPrwA06ZVYhj2G0Lv3vhT9c0ft7ExYCut5 7QMf7U2msTmfKPD6JMPqo4+Gl5kvgQIviJHM97dXkpDuRw106IoD -----END CERTIFICATE-----Generated at Wed Dec 3 20:17:28 2025 by rpki-client