This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32332d3234203d3e203531383437.roa File: 3138352e322e3136322e302f32332d3234203d3e203531383437.roa (raw, json) Hash identifier: breC5Ek41qDRBKS2wQZurpJCqHLgY68sHvSK/et8bfI= Subject key identifier: 8C:4E:68:DF:4F:13:82:17:55:10:B4:C7:0C:57:F0:5A:86:17:E8:DA Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 71FAB0C61C128E9FED742D66CEB64BB8EBC8D9B9 Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32332d3234203d3e203531383437.roa Signing time: Fri 07 Nov 2025 00:11:07 +0000 ROA not before: Fri 07 Nov 2025 00:06:07 +0000 ROA not after: Fri 06 Nov 2026 00:11:07 +0000 asID: 51847 IP address blocks: 185.2.162.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 15:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:fa:b0:c6:1c:12:8e:9f:ed:74:2d:66:ce:b6:4b:b8:eb:c8:d9:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Nov 7 00:06:07 2025 GMT Not After : Nov 6 00:11:07 2026 GMT Subject: CN=8C4E68DF4F1382175510B4C70C57F05A8617E8DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5a:24:9a:c8:8c:cc:48:6f:d1:52:16:2c:e2: 98:93:34:d7:7e:db:74:5f:11:a7:95:e3:a1:d3:a6: 9d:8e:3f:35:6b:0f:a9:d5:ca:07:d7:f2:dc:e6:dc: 58:b4:f4:88:aa:cd:a3:7f:7d:d5:b5:82:f0:51:b7: aa:56:5d:a4:f9:d4:ce:92:10:48:5c:56:09:33:1c: 45:df:7d:d5:28:70:91:d6:3b:ad:f8:a0:86:fb:ab: 51:4a:ca:39:cc:78:f0:84:d7:7b:31:11:ae:81:01: 7c:a2:e5:14:ca:5f:22:e4:1f:49:83:75:c4:89:ac: 77:c5:88:cd:ae:3f:6b:53:f9:80:85:7d:1c:43:f6: dc:22:31:ae:12:4e:9f:af:97:12:e3:a9:69:73:ae: 94:24:0f:18:1c:23:f4:af:99:76:5b:fb:03:e3:80: 8b:b5:82:b7:75:ed:9d:ae:44:74:d7:31:f0:f1:48: f7:3f:58:b5:c3:49:e2:97:0e:8f:d0:80:71:fe:a8: 24:a7:15:d2:ab:5e:30:3e:fd:5d:ff:ba:c0:a6:d8: 24:fa:e0:92:0a:3d:e6:5c:2c:80:44:3e:a9:84:ee: 51:96:db:2c:9e:28:75:3e:09:c8:fb:43:38:01:83: 68:21:df:c6:34:54:90:51:f5:cd:08:7e:66:c9:e0: dc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4E:68:DF:4F:13:82:17:55:10:B4:C7:0C:57:F0:5A:86:17:E8:DA X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32332d3234203d3e203531383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.2.162.0/23 Signature Algorithm: sha256WithRSAEncryption 05:aa:72:fd:f6:9e:6d:81:97:5d:72:6f:cb:47:54:2e:01:42: d7:7f:1d:5f:a0:ea:6f:ed:c5:87:bb:b2:50:3b:b5:09:52:9a: 03:57:e4:d0:c9:32:40:bb:c3:c4:50:0e:a8:b5:2f:d1:45:25: 6f:fe:d0:af:6f:71:be:8b:83:49:67:af:1b:9c:99:02:5e:99: d6:e3:fb:f5:3a:62:a9:07:9e:c8:e8:a4:63:a5:92:82:d4:b3: 0e:6d:35:0a:db:6b:80:24:ff:fd:d5:c2:86:05:a6:0a:cd:b3: cf:8b:38:99:22:37:3a:d8:17:eb:84:3a:d2:08:f7:92:98:82: 80:c9:e9:4c:bc:44:5d:74:82:5d:25:b2:ce:ea:db:31:7b:28: f7:09:67:39:41:27:95:b1:42:88:93:5d:0c:7b:cb:17:45:2a: 4a:a9:9d:af:23:04:ee:b3:f0:3d:42:ab:1c:64:54:22:91:73: 19:f9:5d:50:48:1a:3f:82:e2:73:a3:08:c7:24:4b:96:11:2c: 79:cf:da:33:40:15:de:c6:1e:09:18:82:8b:69:dc:f4:a7:37: d5:26:89:2e:9a:8a:48:7d:fb:af:aa:d1:af:d5:8c:68:47:61: 37:e9:bb:60:96:f5:23:30:c1:1c:31:8a:6b:ca:56:96:c2:cb: 16:69:e1:78 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUcfqwxhwSjp/tdC1mzrZLuOvI2bkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNTExMDcwMDA2MDdaFw0yNjExMDYwMDExMDdaMDMxMTAvBgNV BAMTKDhDNEU2OERGNEYxMzgyMTc1NTEwQjRDNzBDNTdGMDVBODYxN0U4REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3WiSayIzMSG/RUhYs4piTNNd+ 23RfEaeV46HTpp2OPzVrD6nVygfX8tzm3Fi09IiqzaN/fdW1gvBRt6pWXaT51M6S EEhcVgkzHEXffdUocJHWO634oIb7q1FKyjnMePCE13sxEa6BAXyi5RTKXyLkH0mD dcSJrHfFiM2uP2tT+YCFfRxD9twiMa4STp+vlxLjqWlzrpQkDxgcI/SvmXZb+wPj gIu1grd17Z2uRHTXMfDxSPc/WLXDSeKXDo/QgHH+qCSnFdKrXjA+/V3/usCm2CT6 4JIKPeZcLIBEPqmE7lGW2yyeKHU+Ccj7QzgBg2gh38Y0VJBR9c0IfmbJ4NwFAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUjE5o308TghdVELTHDFfwWoYX6NowHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQt NDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3ODEzLzAvMzEzODM1MmUzMjJlMzEzNjMy MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzMTM4MzQzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbkC ojANBgkqhkiG9w0BAQsFAAOCAQEABapy/faebYGXXXJvy0dULgFC138dX6Dqb+3F h7uyUDu1CVKaA1fk0MkyQLvDxFAOqLUv0UUlb/7Qr29xvouDSWevG5yZAl6Z1uP7 9TpiqQeeyOikY6WSgtSzDm01CttrgCT//dXChgWmCs2zz4s4mSI3OtgX64Q60gj3 kpiCgMnpTLxEXXSCXSWyzurbMXso9wlnOUEnlbFCiJNdDHvLF0UqSqmdryME7rPw PUKrHGRUIpFzGfldUEgaP4Lic6MIxyRLlhEsec/aM0AV3sYeCRiCi2nc9Kc31SaJ LpqKSH37r6rRr9WMaEdhN+m7YJb1IzDBHDGKa8pWlsLLFmnheA== -----END CERTIFICATE-----Generated at Wed Dec 3 18:54:03 2025 by rpki-client