This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230302e302f32342d3234203d3e20313335343032.roa File: 3138352e3232392e3230302e302f32342d3234203d3e20313335343032.roa (raw, json) Hash identifier: +dPRMdq4kTZhc1HP4XUoHFPE1GHvKzT91NAn4oQHjN8= Subject key identifier: AB:24:97:B6:24:8F:8F:96:8A:9F:60:92:DB:ED:4C:DE:0A:20:4E:86 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 5B62C5F4140061354A285F2C44C42832999D7401 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230302e302f32342d3234203d3e20313335343032.roa Signing time: Mon 24 Nov 2025 03:24:38 +0000 ROA not before: Mon 24 Nov 2025 03:19:38 +0000 ROA not after: Mon 23 Nov 2026 03:24:38 +0000 asID: 135402 IP address blocks: 185.229.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:62:c5:f4:14:00:61:35:4a:28:5f:2c:44:c4:28:32:99:9d:74:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Nov 24 03:19:38 2025 GMT Not After : Nov 23 03:24:38 2026 GMT Subject: CN=AB2497B6248F8F968A9F6092DBED4CDE0A204E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f7:c8:2f:1f:fd:b2:dd:77:b9:97:f0:1c:5e: cb:c8:7c:e9:25:dc:8a:a8:5b:00:56:56:9d:b9:da: 23:ad:9a:ac:a5:7a:ab:73:bf:20:5f:c4:22:e7:d0: 45:ce:c8:ed:c3:59:22:97:37:a7:77:d6:ed:6e:d6: 74:5e:8f:1e:84:1b:a5:77:e3:57:d0:eb:4d:36:24: e9:c9:0f:f8:06:c7:87:37:1d:92:50:ef:f5:ae:0b: dd:e3:9d:ef:88:57:5b:67:40:d7:cb:1e:c8:43:d8: 8e:18:a8:9f:63:1d:8d:aa:a7:a3:be:c3:f0:1c:8e: 59:40:4d:bf:29:80:90:89:8f:e6:78:e3:7e:0b:07: 28:89:66:61:04:d8:90:07:df:a5:66:0b:a6:77:4e: b6:f7:52:c7:88:e1:f2:eb:3a:1a:cf:b6:22:0d:d8: dc:00:b5:c7:35:dd:31:9d:6c:a3:82:66:20:12:27: 93:1b:1d:a9:ae:eb:17:95:fa:6f:a1:2b:e9:b3:a5: e6:5b:05:b6:2e:2c:47:08:11:e0:c3:df:db:a7:10: b6:97:6b:8f:d1:42:ae:cc:9a:94:3b:30:db:22:0d: da:f2:f0:89:e6:50:10:8b:77:82:1c:88:2a:14:bd: 05:a8:30:9b:43:90:b8:47:59:78:0d:d0:c1:ea:a0: 83:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:24:97:B6:24:8F:8F:96:8A:9F:60:92:DB:ED:4C:DE:0A:20:4E:86 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230302e302f32342d3234203d3e20313335343032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.200.0/24 Signature Algorithm: sha256WithRSAEncryption b9:34:40:53:ff:a7:d6:48:39:6f:98:09:b3:29:32:4a:15:3d: 90:68:b1:93:37:3c:89:a6:07:f5:2a:b1:7d:e7:6a:3a:c7:5c: 7f:71:5f:c2:c7:59:64:dc:29:32:31:33:9a:17:87:94:84:fc: 12:97:50:4a:7d:33:b1:33:aa:e8:8b:fe:f4:84:56:d2:0f:45: fd:6a:e4:3d:77:58:6e:af:e3:73:a7:84:dc:e2:d0:70:c6:9a: 93:f3:e7:02:d5:56:83:42:10:e0:0b:54:6e:fb:0a:4d:8e:81: 53:0f:9d:f3:97:08:47:83:df:fa:b0:0e:f9:c7:99:17:d4:3a: 8c:14:54:eb:be:9d:4a:a8:3d:e1:fd:34:1a:e3:e1:c8:5f:7b: 8f:47:0c:aa:f3:2d:09:cf:ff:90:a3:f3:72:d3:d7:ef:50:c2: 2f:6e:5d:cb:70:4b:19:27:f4:3e:04:82:73:b6:56:82:e2:34: ee:31:ca:7c:28:91:a5:08:a6:61:5b:64:a3:bb:0c:40:a9:82: 08:8e:cd:dd:16:eb:ee:9b:63:0e:57:fd:d7:ad:ef:4f:19:96: 18:ef:a6:b9:34:e5:c4:c4:e2:28:a9:0f:8e:d9:a4:8d:b3:15: 53:8e:63:c4:8c:c1:05:71:58:bc:68:c1:5b:1c:0d:77:4a:f8: 84:2e:7b:8e -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUW2LF9BQAYTVKKF8sRMQoMpmddAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNTExMjQwMzE5MzhaFw0yNjExMjMwMzI0MzhaMDMxMTAvBgNV BAMTKEFCMjQ5N0I2MjQ4RjhGOTY4QTlGNjA5MkRCRUQ0Q0RFMEEyMDRFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl98gvH/2y3Xe5l/AcXsvIfOkl 3IqoWwBWVp252iOtmqyleqtzvyBfxCLn0EXOyO3DWSKXN6d31u1u1nRejx6EG6V3 41fQ6002JOnJD/gGx4c3HZJQ7/WuC93jne+IV1tnQNfLHshD2I4YqJ9jHY2qp6O+ w/AcjllATb8pgJCJj+Z4434LByiJZmEE2JAH36VmC6Z3Trb3UseI4fLrOhrPtiIN 2NwAtcc13TGdbKOCZiASJ5MbHamu6xeV+m+hK+mzpeZbBbYuLEcIEeDD39unELaX a4/RQq7MmpQ7MNsiDdry8InmUBCLd4IciCoUvQWoMJtDkLhHWXgN0MHqoINRAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUqySXtiSPj5aKn2CS2+1M3gogToYwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzEzODM1MmUzMjMyMzkyZTMy MzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzAzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALnlyDANBgkqhkiG9w0BAQsFAAOCAQEAuTRAU/+n1kg5b5gJsykyShU9kGix kzc8iaYH9SqxfedqOsdcf3FfwsdZZNwpMjEzmheHlIT8EpdQSn0zsTOq6Iv+9IRW 0g9F/WrkPXdYbq/jc6eE3OLQcMaak/PnAtVWg0IQ4AtUbvsKTY6BUw+d85cIR4Pf +rAO+ceZF9Q6jBRU676dSqg94f00GuPhyF97j0cMqvMtCc//kKPzctPX71DCL25d y3BLGSf0PgSCc7ZWguI07jHKfCiRpQimYVtko7sMQKmCCI7N3Rbr7ptjDlf9163v TxmWGO+muTTlxMTiKKkPjtmkjbMVU45jxIzBBXFYvGjBWxwNd0r4hC57jg== -----END CERTIFICATE-----Generated at Fri Dec 5 15:47:45 2025 by rpki-client