This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135362e302f32342d3234203d3e20323133323832.roa File: 3138352e3132332e3135362e302f32342d3234203d3e20323133323832.roa (raw, json) Hash identifier: HI1VX16qX1LTsAjuvQN0eR8x1ZQ2WlG9l18ZWZhTnXQ= Subject key identifier: A2:2F:97:BE:7F:30:0C:58:31:57:FB:B5:3A:77:C1:C8:6D:4D:99:48 Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Certificate serial: 7136FE08E13864B6A1FA0AD797C1D6A843BEF16E Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135362e302f32342d3234203d3e20323133323832.roa Signing time: Wed 03 Dec 2025 06:40:14 +0000 ROA not before: Wed 03 Dec 2025 06:35:14 +0000 ROA not after: Wed 02 Dec 2026 06:40:14 +0000 asID: 213282 IP address blocks: 185.123.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:36:fe:08:e1:38:64:b6:a1:fa:0a:d7:97:c1:d6:a8:43:be:f1:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Validity Not Before: Dec 3 06:35:14 2025 GMT Not After : Dec 2 06:40:14 2026 GMT Subject: CN=A22F97BE7F300C583157FBB53A77C1C86D4D9948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2d:88:82:83:2a:d2:1d:0f:c8:53:6c:33:a9: 31:e2:0e:44:7b:3a:ad:21:05:de:78:42:41:6a:c0: 33:9a:ed:e3:8f:28:e7:6f:e9:52:72:fb:fc:23:84: 9f:57:d1:0d:b4:62:e9:10:66:a9:c4:63:9d:ac:6b: f3:83:bc:14:00:c2:12:14:29:00:1a:fb:ff:1c:38: 44:12:8b:fc:74:43:5f:48:88:15:94:20:c2:42:23: 66:14:a7:01:45:9d:7b:1a:29:87:85:90:e0:c8:30: 31:72:8f:17:0a:59:21:a3:35:ea:c9:33:e3:8c:86: 55:bf:95:b0:71:80:79:af:37:b8:76:30:35:46:a2: 2c:b1:79:1f:c0:6e:40:94:fd:e3:04:71:5d:c7:0c: 40:75:2d:87:13:cb:6c:2f:1a:ad:0e:20:fa:c2:a1: 27:0d:3c:ae:fa:2c:9b:a0:81:23:94:7c:5e:b8:cf: 43:ae:61:e8:77:1f:9b:3c:22:e6:84:17:75:c4:b9: e3:c7:11:54:ab:a7:fe:40:c6:72:83:60:2f:63:32: 4f:ce:41:40:74:6a:41:81:2c:46:b6:2f:c5:a3:b7: 5e:59:87:29:bf:5e:86:39:e2:24:0e:4f:1c:01:bf: 02:18:7b:fc:34:82:57:4f:99:8c:04:4d:2b:79:6f: 05:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2F:97:BE:7F:30:0C:58:31:57:FB:B5:3A:77:C1:C8:6D:4D:99:48 X509v3 Authority Key Identifier: keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135362e302f32342d3234203d3e20323133323832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.123.156.0/24 Signature Algorithm: sha256WithRSAEncryption 89:30:73:cf:d2:ba:4d:fb:4b:55:a4:22:70:27:fe:0b:f9:21: d2:b5:98:fd:f2:aa:f9:7b:c7:eb:6d:f7:73:20:2a:49:c9:5d: 75:03:52:81:e0:83:ca:f5:80:dd:2c:58:bc:d4:12:bd:87:09: 84:95:68:00:99:7e:d1:96:7c:70:33:a4:13:79:5c:66:63:2f: d0:78:7a:25:75:96:4a:19:c0:e5:1d:4b:17:f9:b5:6c:82:93: 47:62:01:e1:55:d2:32:e9:42:cc:f0:ec:91:85:86:4a:78:07: ef:e9:8d:f7:12:00:95:fd:38:08:3c:5d:2b:7b:fc:d5:fa:7d: 89:a1:d5:33:00:3b:3a:53:e4:85:71:14:ed:e4:6e:32:86:7e: a1:20:d3:f9:a3:b0:ca:a8:f1:4f:64:17:f1:39:24:30:31:e1: 64:7c:e6:80:0d:f3:4f:9b:90:18:3c:d8:b0:25:4d:93:35:ed: 94:c3:64:2f:86:45:c7:0e:fc:37:41:34:11:8e:e7:79:ea:6a: 2b:10:e9:8c:90:36:df:84:32:77:1e:86:07:3d:63:db:09:33: 2b:be:98:d4:65:2f:3e:2c:47:75:d9:68:aa:38:5b:7b:d4:2e: b6:f3:98:87:10:63:15:49:1d:4a:dc:30:ed:8a:f8:e9:19:dd: f8:c7:48:c8 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUcTb+COE4ZLah+grXl8HWqEO+8W4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTFmMzUxMmY1MWRjNDJiYjllYjEyYWJjMGJiNTI5NjY4 YjJlZGVlNDAeFw0yNTEyMDMwNjM1MTRaFw0yNjEyMDIwNjQwMTRaMDMxMTAvBgNV BAMTKEEyMkY5N0JFN0YzMDBDNTgzMTU3RkJCNTNBNzdDMUM4NkQ0RDk5NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdLYiCgyrSHQ/IU2wzqTHiDkR7 Oq0hBd54QkFqwDOa7eOPKOdv6VJy+/wjhJ9X0Q20YukQZqnEY52sa/ODvBQAwhIU KQAa+/8cOEQSi/x0Q19IiBWUIMJCI2YUpwFFnXsaKYeFkODIMDFyjxcKWSGjNerJ M+OMhlW/lbBxgHmvN7h2MDVGoiyxeR/AbkCU/eMEcV3HDEB1LYcTy2wvGq0OIPrC oScNPK76LJuggSOUfF64z0OuYeh3H5s8IuaEF3XEuePHEVSrp/5AxnKDYC9jMk/O QUB0akGBLEa2L8Wjt15Zhym/XoY54iQOTxwBvwIYe/w0gldPmYwETSt5bwXVAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUoi+Xvn8wDFgxV/u1OnfByG1NmUgwHwYDVR0j BBgwFoAU4fNRL1HcQruesSq8C7UpZosu3uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgtZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3 OWE3LzAvRTFGMzUxMkY1MURDNDJCQjlFQjEyQUJDMEJCNTI5NjY4QjJFREVFNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmTlJMMUhjUXJ1ZXNTcThDN1VwWm9z dTN1US5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgt ZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3OWE3LzAvMzEzODM1MmUzMTMyMzMyZTMx MzUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMzMyMzgzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALl7nDANBgkqhkiG9w0BAQsFAAOCAQEAiTBzz9K6TftLVaQicCf+C/kh0rWY /fKq+XvH6233cyAqSclddQNSgeCDyvWA3SxYvNQSvYcJhJVoAJl+0ZZ8cDOkE3lc ZmMv0Hh6JXWWShnA5R1LF/m1bIKTR2IB4VXSMulCzPDskYWGSngH7+mN9xIAlf04 CDxdK3v81fp9iaHVMwA7OlPkhXEU7eRuMoZ+oSDT+aOwyqjxT2QX8TkkMDHhZHzm gA3zT5uQGDzYsCVNkzXtlMNkL4ZFxw78N0E0EY7neepqKxDpjJA234Qydx6GBz1j 2wkzK76Y1GUvPixHddloqjhbe9QutvOYhxBjFUkdStww7Yr46Rnd+MdIyA== -----END CERTIFICATE-----Generated at Fri Dec 5 09:32:35 2025 by rpki-client