This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/38392e3135302e34392e302f32342d3234203d3e20323037343833.roa File: 38392e3135302e34392e302f32342d3234203d3e20323037343833.roa (raw, json) Hash identifier: UHfALFZeGaG39fIDYXNUOima3HE5nXGXgn3i20cHJr0= Subject key identifier: 15:85:FF:C6:85:A8:19:E2:B2:56:1B:81:39:0E:E7:64:AB:60:F1:E1 Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Certificate serial: 2D3ACCAA32B7F263362B84EF982D68758104F97B Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/38392e3135302e34392e302f32342d3234203d3e20323037343833.roa Signing time: Fri 12 Dec 2025 22:03:06 +0000 ROA not before: Fri 12 Dec 2025 21:58:06 +0000 ROA not after: Fri 11 Dec 2026 22:03:06 +0000 asID: 207483 IP address blocks: 89.150.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:3a:cc:aa:32:b7:f2:63:36:2b:84:ef:98:2d:68:75:81:04:f9:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Validity Not Before: Dec 12 21:58:06 2025 GMT Not After : Dec 11 22:03:06 2026 GMT Subject: CN=1585FFC685A819E2B2561B81390EE764AB60F1E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3d:43:5f:b8:12:9c:67:8d:07:5d:81:b3:c0: 4b:88:4f:ac:09:9e:96:d5:55:12:08:58:71:c8:5e: c1:17:cd:98:9e:ab:b6:c4:2e:52:8d:09:e8:e9:18: 1a:98:2b:35:10:32:3c:ab:96:2f:13:4a:2e:67:13: fa:7a:39:d0:85:ec:e4:c5:15:99:43:c4:05:83:26: 09:1a:f5:19:b7:4e:ed:3b:08:c8:1a:14:51:88:e3: 05:87:ee:83:9a:65:35:cd:25:ca:2f:c2:13:3b:f7: 03:52:dd:1c:91:8a:b1:7e:cd:8d:a0:45:10:7b:25: 53:4d:0c:58:d1:6a:e3:e0:8d:1b:81:35:18:79:15: 0a:75:9f:65:02:74:3d:96:5f:56:97:e7:f1:16:ae: 4c:6b:9a:dd:ab:1b:54:17:89:31:d1:84:ce:e1:b8: 86:59:b4:0b:42:64:59:0f:b2:11:83:36:66:ad:a6: da:2f:ae:f5:d5:3b:57:8f:50:87:c8:ea:06:35:04: 0f:8d:12:0c:c5:4b:a9:87:df:b9:e7:aa:6d:bb:03: b5:de:5e:71:c4:91:c0:2b:c4:2e:2b:90:0c:5d:9f: b9:44:b7:46:bc:2f:62:9e:72:ad:6b:9a:24:a7:9c: 7e:69:78:aa:b9:2f:ec:a6:06:3a:0c:b3:05:96:5a: 60:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:85:FF:C6:85:A8:19:E2:B2:56:1B:81:39:0E:E7:64:AB:60:F1:E1 X509v3 Authority Key Identifier: keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/38392e3135302e34392e302f32342d3234203d3e20323037343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.150.49.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:a8:ed:e8:dc:99:88:f3:df:5f:81:ea:ce:f0:41:c8:d0:ba: eb:b9:17:13:f0:98:89:a1:75:97:00:13:36:07:d5:09:d9:c3: db:f6:36:75:0a:49:9d:f3:f0:bf:74:87:fa:cf:a5:75:93:f7: 89:4e:d9:a0:b1:a1:39:35:ce:ca:fe:71:23:bd:a6:2a:c6:59: 31:15:07:fb:d4:d4:21:ff:5a:b8:3d:09:97:97:d7:84:cc:d6: bf:44:f0:c0:c0:81:ed:58:a7:53:1b:ac:96:38:c6:87:59:d2: c7:53:45:61:2c:9c:d4:b5:1a:05:8a:60:cb:8d:48:e8:8a:98: 92:5b:47:fa:08:56:96:94:7f:35:21:4f:6d:9d:96:51:aa:24: a7:47:07:ee:d9:4b:7c:06:e6:6c:0f:aa:b0:b3:fc:47:4d:ac: e4:f0:bb:33:da:eb:5d:e9:38:e3:ca:69:d0:fc:77:b7:ce:0a: d3:9c:2e:e9:c1:1c:a9:39:db:53:70:7c:7f:4f:da:ef:77:18: 21:13:f5:c5:1c:90:9b:6b:7a:2f:d7:c5:b2:51:f7:ae:92:0a: c9:7f:2e:f2:fe:34:33:43:45:4c:86:36:2b:06:03:a2:0b:c8: 03:f0:d3:9b:07:a4:ae:c4:1d:81:f6:8f:1a:e4:39:b1:3d:27: f1:f5:36:8c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIULTrMqjK38mM2K4TvmC1odYEE+XswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTFmMzUxMmY1MWRjNDJiYjllYjEyYWJjMGJiNTI5NjY4 YjJlZGVlNDAeFw0yNTEyMTIyMTU4MDZaFw0yNjEyMTEyMjAzMDZaMDMxMTAvBgNV BAMTKDE1ODVGRkM2ODVBODE5RTJCMjU2MUI4MTM5MEVFNzY0QUI2MEYxRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjPUNfuBKcZ40HXYGzwEuIT6wJ npbVVRIIWHHIXsEXzZieq7bELlKNCejpGBqYKzUQMjyrli8TSi5nE/p6OdCF7OTF FZlDxAWDJgka9Rm3Tu07CMgaFFGI4wWH7oOaZTXNJcovwhM79wNS3RyRirF+zY2g RRB7JVNNDFjRauPgjRuBNRh5FQp1n2UCdD2WX1aX5/EWrkxrmt2rG1QXiTHRhM7h uIZZtAtCZFkPshGDNmatptovrvXVO1ePUIfI6gY1BA+NEgzFS6mH37nnqm27A7Xe XnHEkcArxC4rkAxdn7lEt0a8L2Kecq1rmiSnnH5peKq5L+ymBjoMswWWWmC5AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUFYX/xoWoGeKyVhuBOQ7nZKtg8eEwHwYDVR0j BBgwFoAU4fNRL1HcQruesSq8C7UpZosu3uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgtZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3 OWE3LzAvRTFGMzUxMkY1MURDNDJCQjlFQjEyQUJDMEJCNTI5NjY4QjJFREVFNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmTlJMMUhjUXJ1ZXNTcThDN1VwWm9z dTN1US5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgt ZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3OWE3LzAvMzgzOTJlMzEzNTMwMmUzNDM5 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM3MzQzODMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA WZYxMA0GCSqGSIb3DQEBCwUAA4IBAQCPqO3o3JmI899fgerO8EHI0LrruRcT8JiJ oXWXABM2B9UJ2cPb9jZ1Ckmd8/C/dIf6z6V1k/eJTtmgsaE5Nc7K/nEjvaYqxlkx FQf71NQh/1q4PQmXl9eEzNa/RPDAwIHtWKdTG6yWOMaHWdLHU0VhLJzUtRoFimDL jUjoipiSW0f6CFaWlH81IU9tnZZRqiSnRwfu2Ut8BuZsD6qws/xHTazk8Lsz2utd 6TjjymnQ/He3zgrTnC7pwRypOdtTcHx/T9rvdxghE/XFHJCba3ov18WyUfeukgrJ fy7y/jQzQ0VMhjYrBgOiC8gD8NObB6SuxB2B9o8a5DmxPSfx9TaM -----END CERTIFICATE-----Generated at Mon Dec 15 23:43:26 2025 by rpki-client