This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3138352e33382e32352e302f32342d3234203d3e203133333335.roa
File: 3138352e33382e32352e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: 8Dov3dsVRdYA9hssq4paEGEc00JaP1eCascbI1uHeu4=
Subject key identifier: E8:E7:21:EC:4A:E0:73:A6:8D:D5:31:6B:9C:3A:41:5E:51:07:71:00
Certificate issuer: /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
Certificate serial: 19E10AB51C48A15D9F270EEC96E2D7EB8A904C48
Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3138352e33382e32352e302f32342d3234203d3e203133333335.roa
Signing time: Wed 04 Feb 2026 13:43:40 +0000
ROA not before: Wed 04 Feb 2026 13:38:40 +0000
ROA not after: Wed 03 Feb 2027 13:43:40 +0000
asID: 13335
IP address blocks: 185.38.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl
rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e1:0a:b5:1c:48:a1:5d:9f:27:0e:ec:96:e2:d7:eb:8a:90:4c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
Validity
Not Before: Feb 4 13:38:40 2026 GMT
Not After : Feb 3 13:43:40 2027 GMT
Subject: CN=E8E721EC4AE073A68DD5316B9C3A415E51077100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:42:45:4e:a6:a1:5b:58:8f:8b:fb:59:ad:a3:
ce:d3:a6:83:a6:67:8f:40:f5:30:df:87:26:8d:e4:
96:a7:36:59:4f:c4:ac:91:e8:0c:13:7e:5a:b2:22:
28:c5:3a:26:71:62:7a:aa:da:0e:ef:64:14:eb:5e:
4d:73:83:cc:9f:52:36:1b:20:1a:b7:9e:a6:d2:fd:
ad:eb:7c:87:d9:98:d7:aa:d3:3e:f0:93:39:7a:b7:
17:99:6f:28:bf:4e:cc:b4:54:e9:85:f0:ac:4f:f9:
b6:f4:54:ac:4b:30:a2:94:68:c2:0c:55:f4:e7:23:
4e:ca:f6:56:62:de:64:04:c2:5d:ea:d4:b4:19:e1:
12:7a:ef:2e:b5:7f:9f:54:fc:ff:54:cc:64:fe:12:
ee:06:d4:95:df:0f:8a:63:ce:56:9e:7e:77:b7:b9:
17:73:a4:b3:58:a5:26:e3:73:7b:22:37:a6:f2:08:
37:5b:49:ca:11:5b:a5:9d:d8:24:f5:e0:4d:c4:ed:
12:39:f2:2e:8d:3d:1f:be:59:8a:f4:36:fd:8a:5b:
36:d3:a3:2e:0e:93:22:31:b0:42:5b:f9:f3:97:21:
cf:92:02:ae:63:76:d7:57:bc:8a:73:57:60:d5:f8:
ed:5a:91:20:59:fa:a4:dc:cc:ee:61:70:ed:51:ea:
87:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E7:21:EC:4A:E0:73:A6:8D:D5:31:6B:9C:3A:41:5E:51:07:71:00
X509v3 Authority Key Identifier:
keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3138352e33382e32352e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.25.0/24
Signature Algorithm: sha256WithRSAEncryption
83:87:17:44:9c:48:57:22:b5:93:b1:e0:e6:bf:de:3d:ec:9a:
86:ef:52:d0:2c:c8:d4:5a:89:f0:a3:d2:87:00:c7:96:bf:50:
55:03:05:8e:5e:d1:e5:a5:65:ad:e7:33:82:44:3d:92:26:a4:
88:80:50:6a:f4:c6:4c:4e:68:52:7e:fc:50:d9:19:82:5f:54:
d5:09:2f:b6:5b:4d:c2:5f:be:ca:14:35:f1:14:db:0e:f6:fa:
99:fd:26:10:e8:23:b0:36:67:9c:e3:7c:be:06:94:47:d2:e3:
bd:f6:bc:14:b1:5c:3e:d6:b7:bf:b3:37:fb:43:69:45:6c:ac:
13:49:3c:6b:48:28:a8:1a:b3:e9:a6:5b:6a:fe:4c:3c:a3:68:
1a:bd:ca:7e:29:da:f8:e4:95:7b:ad:7e:b7:70:3b:7f:1e:3c:
63:e0:49:80:8f:7e:89:ad:1f:bb:82:ec:e4:39:c9:a0:97:50:
99:d5:44:f9:f0:be:ad:e7:66:9f:a8:d7:98:3b:6f:3c:07:7e:
c1:25:41:28:1d:21:41:4a:19:a4:ca:66:4c:29:c8:35:f3:14:
39:c5:25:13:80:72:e7:f9:22:8b:a7:3f:7d:eb:42:25:75:4d:
45:8a:0f:c4:97:0e:5a:11:2f:d7:fc:dc:f9:18:5d:cd:2a:18:
4e:cd:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:51:57 2026 by rpki-client