This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232322e302f32342d3234203d3e20383334.roa File: 3138352e3230352e3232322e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: mHg1GluVMZ38XlKAqyTLzFvhkd9W9T8QkO9PsgQVquI= Subject key identifier: DC:20:54:73:21:B4:B8:ED:2C:CA:A4:7F:1A:0A:A8:0A:D4:AE:3F:F1 Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Certificate serial: 3630DD48AECB0F5A246A7D49C2605E1C9ADF032B Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232322e302f32342d3234203d3e20383334.roa Signing time: Mon 15 Dec 2025 00:07:41 +0000 ROA not before: Mon 15 Dec 2025 00:02:41 +0000 ROA not after: Mon 14 Dec 2026 00:07:41 +0000 asID: 834 IP address blocks: 185.205.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:30:dd:48:ae:cb:0f:5a:24:6a:7d:49:c2:60:5e:1c:9a:df:03:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Validity Not Before: Dec 15 00:02:41 2025 GMT Not After : Dec 14 00:07:41 2026 GMT Subject: CN=DC20547321B4B8ED2CCAA47F1A0AA80AD4AE3FF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fc:d0:1b:5c:fb:df:df:1a:ef:a3:85:f7:31: 47:31:3b:f2:82:81:39:75:e3:48:5f:76:97:f2:ed: 14:aa:df:32:2a:28:b0:ba:ea:ee:1e:70:c0:b2:03: c6:4f:27:30:e6:b4:c1:07:7d:26:3b:43:50:1e:21: 31:5b:48:c8:05:cb:6b:e5:cc:7f:e2:04:82:e3:ba: 71:54:e6:17:7f:83:93:69:cd:40:8e:c0:2d:d1:9f: 64:f9:07:c6:a3:ca:2b:36:38:1a:9b:93:2d:ab:57: 3f:77:04:67:07:f7:11:0e:2e:2a:6a:a4:2a:ce:a9: 38:b9:2a:f5:23:7f:a4:97:f6:a1:04:aa:47:84:09: fe:87:d4:c7:6a:09:38:18:f7:69:91:e8:78:6e:c4: b8:c9:c9:e8:e2:97:b2:51:75:d1:34:6a:d6:d6:f2: 39:3f:bf:46:82:0e:0d:f2:0d:f2:b4:04:b5:2a:fa: a3:f1:53:c7:e0:bf:bc:5f:f1:37:98:39:46:85:59: fd:46:fd:e7:65:b6:db:1b:cd:9f:59:52:08:8b:32: f2:0b:f4:98:2a:8b:5a:19:c1:23:33:3a:ca:15:3a: 16:6b:12:c1:cf:1d:fe:46:88:81:63:7c:8b:30:bc: d3:84:92:72:0f:c7:ac:1d:5b:5f:da:db:6e:e7:32: e9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:20:54:73:21:B4:B8:ED:2C:CA:A4:7F:1A:0A:A8:0A:D4:AE:3F:F1 X509v3 Authority Key Identifier: keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232322e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.222.0/24 Signature Algorithm: sha256WithRSAEncryption 97:a7:09:0f:9f:e7:13:d9:7d:64:86:fa:72:a8:7e:3c:89:f1: 58:5a:5a:20:b7:2c:32:27:0a:bd:6f:17:80:d2:f7:e3:c8:59: 69:47:37:09:95:9c:6a:41:a5:da:f5:9b:f7:0e:a6:aa:c6:06: 29:57:a0:14:ad:5e:37:19:20:9d:c0:f3:e5:5a:83:9c:75:18: 14:99:81:8d:0e:ae:40:20:33:e2:99:55:59:16:af:b7:85:4b: 37:c3:45:44:65:00:17:1a:15:ae:e0:9c:db:ca:f9:bd:23:d2: 4b:15:e3:2a:58:60:3d:17:97:99:31:27:0c:32:4d:76:6b:33: b8:fd:7f:a4:75:51:35:77:60:76:d9:e3:83:40:fd:44:10:a8: 12:5e:77:22:72:d9:6b:00:79:b1:5d:35:68:fd:e7:98:6a:0f: 6e:f0:9f:9a:03:09:95:4f:94:aa:2d:d9:65:fe:e8:68:8f:e4: 69:ba:12:ea:ca:b8:e4:28:1a:15:4c:74:91:d8:08:4f:ae:f4: 52:7e:ae:8c:ac:dc:25:6f:02:af:12:a0:34:6d:10:11:20:26: 76:05:af:65:f5:d8:8b:bf:03:09:f1:a5:18:53:a0:be:db:e6: c6:4c:f3:dc:0c:dc:ab:b3:3f:bc:ce:7d:c6:69:ac:e5:69:f5: 17:7b:83:9f -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUNjDdSK7LD1okan1JwmBeHJrfAyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl ODZlMGVmYzAeFw0yNTEyMTUwMDAyNDFaFw0yNjEyMTQwMDA3NDFaMDMxMTAvBgNV BAMTKERDMjA1NDczMjFCNEI4RUQyQ0NBQTQ3RjFBMEFBODBBRDRBRTNGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/NAbXPvf3xrvo4X3MUcxO/KC gTl140hfdpfy7RSq3zIqKLC66u4ecMCyA8ZPJzDmtMEHfSY7Q1AeITFbSMgFy2vl zH/iBILjunFU5hd/g5NpzUCOwC3Rn2T5B8ajyis2OBqbky2rVz93BGcH9xEOLipq pCrOqTi5KvUjf6SX9qEEqkeECf6H1MdqCTgY92mR6HhuxLjJyejil7JRddE0atbW 8jk/v0aCDg3yDfK0BLUq+qPxU8fgv7xf8TeYOUaFWf1G/edlttsbzZ9ZUgiLMvIL 9Jgqi1oZwSMzOsoVOhZrEsHPHf5GiIFjfIswvNOEknIPx6wdW1/a227nMunnAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU3CBUcyG0uO0syqR/GgqoCtSuP/EwHwYDVR0j BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo dUR2dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzODM1MmUzMjMwMzUyZTMy MzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnN 3jANBgkqhkiG9w0BAQsFAAOCAQEAl6cJD5/nE9l9ZIb6cqh+PInxWFpaILcsMicK vW8XgNL348hZaUc3CZWcakGl2vWb9w6mqsYGKVegFK1eNxkgncDz5VqDnHUYFJmB jQ6uQCAz4plVWRavt4VLN8NFRGUAFxoVruCc28r5vSPSSxXjKlhgPReXmTEnDDJN dmszuP1/pHVRNXdgdtnjg0D9RBCoEl53InLZawB5sV01aP3nmGoPbvCfmgMJlU+U qi3ZZf7oaI/kaboS6sq45CgaFUx0kdgIT670Un6ujKzcJW8CrxKgNG0QESAmdgWv ZfXYi78DCfGlGFOgvtvmxkzz3Azcq7M/vM59xmms5Wn1F3uDnw== -----END CERTIFICATE-----Generated at Mon Dec 15 23:27:56 2025 by rpki-client