This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137372e302f32342d3234203d3e2030.roa File: 3138352e3136322e3137372e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: pXGL6Ylkg/a8RE2/h4mmXqSiT6qT6xF23I4QHA58rgg= Subject key identifier: C6:BD:F7:3D:FD:C4:C8:26:E9:DD:EA:0E:48:94:0A:A2:AB:EE:C0:1F Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Certificate serial: 33B8D6420E239EB0E0C6E735E701860592F8457C Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137372e302f32342d3234203d3e2030.roa Signing time: Mon 22 Dec 2025 16:05:59 +0000 ROA not before: Mon 22 Dec 2025 16:00:59 +0000 ROA not after: Mon 21 Dec 2026 16:05:59 +0000 asID: 0 IP address blocks: 185.162.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 10:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b8:d6:42:0e:23:9e:b0:e0:c6:e7:35:e7:01:86:05:92:f8:45:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Validity Not Before: Dec 22 16:00:59 2025 GMT Not After : Dec 21 16:05:59 2026 GMT Subject: CN=C6BDF73DFDC4C826E9DDEA0E48940AA2ABEEC01F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b8:31:d7:ee:fc:65:36:15:ea:3c:a3:e9:26: ec:4f:06:b0:dc:90:ad:29:42:96:46:94:ec:0b:a1: 5d:b3:64:d0:06:b4:5d:e7:c8:84:e0:5d:dd:2f:87: 23:41:d6:be:ab:3e:61:56:bc:a4:9a:32:12:1c:26: 4e:5e:af:d2:3d:6a:17:92:fb:24:7d:22:03:d9:2a: 27:ce:c1:6e:a1:5f:e2:22:f0:9c:10:ce:61:d8:9b: 18:01:14:4b:64:09:4f:02:01:45:a4:d6:4c:e5:9e: dd:b4:94:d8:50:d4:da:2e:cd:b9:45:41:61:e7:a0: ff:25:a8:aa:7a:a2:f9:6b:1c:7e:71:18:3e:48:57: 1a:05:79:e9:d7:a4:87:e9:98:03:83:12:9e:81:ca: 33:f9:6d:e3:44:1a:d0:06:f2:80:51:d1:e5:fc:6f: e1:66:7f:d8:33:af:27:f3:f8:ef:09:4f:5a:c7:e5: 16:9a:5d:5c:52:a7:c0:e3:e3:fc:2c:50:28:1f:ad: f1:3f:65:a0:af:3d:8c:a7:da:37:a7:56:0f:b5:53: b4:1f:fa:d1:2b:dd:a8:44:e1:f2:cc:24:24:5e:6a: 03:30:09:2f:b3:29:c8:c7:11:02:31:05:0c:4f:13: 83:f1:0a:8f:f7:e3:9c:31:a0:27:14:d7:13:48:38: 90:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BD:F7:3D:FD:C4:C8:26:E9:DD:EA:0E:48:94:0A:A2:AB:EE:C0:1F X509v3 Authority Key Identifier: keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137372e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.177.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:ad:9c:9b:94:2a:e8:6d:de:a3:27:c7:e9:7e:f2:6e:62:11: 18:f2:cf:52:30:0d:2b:b3:0c:74:12:10:9b:06:16:87:45:20: 41:34:6a:ab:bc:75:8d:3f:9f:73:e8:36:30:e3:c7:8c:57:c8: 99:48:db:f5:7e:45:33:05:04:0b:c5:1b:9b:4a:2a:5c:2f:45: bb:10:3d:33:b1:3f:f0:ae:b5:e4:83:f5:16:5b:4e:34:d9:9c: 24:ef:71:00:cf:2c:97:b5:6a:95:99:af:8b:02:9b:f5:48:e8: 77:c8:a4:f0:a5:f0:3e:2e:c6:62:1a:59:25:7f:c1:01:c7:80: 36:52:62:9f:2c:87:8b:da:f2:a5:26:ba:94:51:9f:32:32:70: 71:d1:33:03:e8:b5:39:0f:4c:a0:a7:99:fe:2d:22:09:53:de: 7a:7d:db:ca:3a:25:b9:61:29:0f:b0:9e:5c:c5:c8:3b:77:4e: 96:6c:d2:49:b0:e8:e9:e8:c9:9f:5f:70:ba:db:a6:f4:b5:9f: 7e:e5:b9:27:9f:38:ac:c2:ca:89:91:36:9c:b1:6c:48:90:55: 7c:75:ee:58:88:0f:8f:8b:46:8f:ca:4e:7a:a2:d6:30:83:fc: 84:ed:b9:88:b4:94:22:80:b9:b7:e2:d4:64:08:5c:a0:0d:e1: 70:ea:2f:3a -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUM7jWQg4jnrDgxuc15wGGBZL4RXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTFmMzUxMmY1MWRjNDJiYjllYjEyYWJjMGJiNTI5NjY4 YjJlZGVlNDAeFw0yNTEyMjIxNjAwNTlaFw0yNjEyMjExNjA1NTlaMDMxMTAvBgNV BAMTKEM2QkRGNzNERkRDNEM4MjZFOURERUEwRTQ4OTQwQUEyQUJFRUMwMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiuDHX7vxlNhXqPKPpJuxPBrDc kK0pQpZGlOwLoV2zZNAGtF3nyITgXd0vhyNB1r6rPmFWvKSaMhIcJk5er9I9aheS +yR9IgPZKifOwW6hX+Ii8JwQzmHYmxgBFEtkCU8CAUWk1kzlnt20lNhQ1NouzblF QWHnoP8lqKp6ovlrHH5xGD5IVxoFeenXpIfpmAODEp6ByjP5beNEGtAG8oBR0eX8 b+Fmf9gzryfz+O8JT1rH5RaaXVxSp8Dj4/wsUCgfrfE/ZaCvPYyn2jenVg+1U7Qf +tEr3ahE4fLMJCReagMwCS+zKcjHEQIxBQxPE4PxCo/345wxoCcU1xNIOJAHAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUxr33Pf3EyCbp3eoOSJQKoqvuwB8wHwYDVR0j BBgwFoAU4fNRL1HcQruesSq8C7UpZosu3uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgtZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3 OWE3LzAvRTFGMzUxMkY1MURDNDJCQjlFQjEyQUJDMEJCNTI5NjY4QjJFREVFNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmTlJMMUhjUXJ1ZXNTcThDN1VwWm9z dTN1US5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgt ZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3OWE3LzAvMzEzODM1MmUzMTM2MzIyZTMx MzczNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaKxMA0G CSqGSIb3DQEBCwUAA4IBAQCarZyblCrobd6jJ8fpfvJuYhEY8s9SMA0rswx0EhCb BhaHRSBBNGqrvHWNP59z6DYw48eMV8iZSNv1fkUzBQQLxRubSipcL0W7ED0zsT/w rrXkg/UWW0402Zwk73EAzyyXtWqVma+LApv1SOh3yKTwpfA+LsZiGlklf8EBx4A2 UmKfLIeL2vKlJrqUUZ8yMnBx0TMD6LU5D0ygp5n+LSIJU956fdvKOiW5YSkPsJ5c xcg7d06WbNJJsOjp6MmfX3C626b0tZ9+5bknnziswsqJkTacsWxIkFV8de5YiA+P i0aPyk56otYwg/yE7bmItJQigLm34tRkCFygDeFw6i86 -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:44 2026 by rpki-client