This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138332e3138312e302f32342d3234203d3e20323033333830.roa File: 3138352e3138332e3138312e302f32342d3234203d3e20323033333830.roa (raw, json) Hash identifier: 43+5GnbE8WVMQIE5wtdftNhvrnjOwRZhGC+Awp1I670= Subject key identifier: 5B:80:11:C9:F7:00:6A:50:37:EC:6F:49:50:BE:C3:00:24:7A:AF:E7 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 39516ADA06E2E0897BFAD09F188106FDCAD6C5B1 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138332e3138312e302f32342d3234203d3e20323033333830.roa Signing time: Mon 01 Dec 2025 15:50:02 +0000 ROA not before: Mon 01 Dec 2025 15:45:02 +0000 ROA not after: Mon 30 Nov 2026 15:50:02 +0000 asID: 203380 IP address blocks: 185.183.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 12:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:51:6a:da:06:e2:e0:89:7b:fa:d0:9f:18:81:06:fd:ca:d6:c5:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:02 2025 GMT Not After : Nov 30 15:50:02 2026 GMT Subject: CN=5B8011C9F7006A5037EC6F4950BEC300247AAFE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fc:75:28:ce:e8:da:8e:c1:96:e4:47:65:a1: ef:19:cd:60:20:0b:60:e3:b5:d3:45:59:6c:a8:78: a0:8c:af:c2:27:15:44:8c:75:3b:6d:e5:a1:f1:ac: 20:8b:98:15:4f:3e:36:69:d9:d0:8f:08:21:05:2a: 49:4d:5c:74:7d:76:66:0c:f4:40:19:9f:65:25:75: 18:f4:81:f8:5b:27:c4:6e:df:53:fe:cb:a3:99:8f: 00:3f:8c:d9:92:ca:bb:85:ba:cf:03:38:b4:97:91: 8e:e6:8b:40:13:19:1c:88:4f:cf:42:fa:78:b1:3a: 16:ce:05:38:d7:91:a1:82:4e:64:c4:95:97:a6:8e: e2:95:eb:86:47:1e:42:d9:68:ec:d0:11:57:5d:48: 84:2c:c9:79:f3:c9:7e:5e:21:c9:15:2e:3f:f6:71: fa:40:97:fa:22:ae:ca:13:73:b9:4f:d4:76:78:77: a4:e4:4e:38:1a:9e:c8:98:5f:e2:64:5f:77:03:6f: f6:09:6a:41:9d:b8:bd:5d:21:c2:db:d6:af:e5:b3: 42:37:de:46:b8:59:9b:07:91:50:cd:bb:51:cf:1f: 55:77:c3:6d:2b:65:50:d9:97:27:88:03:4c:04:37: d6:72:3d:8e:0b:01:9e:45:03:02:1d:1f:6a:c4:10: 85:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:80:11:C9:F7:00:6A:50:37:EC:6F:49:50:BE:C3:00:24:7A:AF:E7 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138332e3138312e302f32342d3234203d3e20323033333830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.183.181.0/24 Signature Algorithm: sha256WithRSAEncryption 22:3a:10:a8:2a:63:4e:69:92:0e:36:fb:19:0d:28:d4:5e:b5: 61:a1:d3:ff:7d:25:16:22:07:2e:72:ef:5f:d6:e8:66:e3:0e: d4:2e:87:30:c6:fc:d4:57:18:c8:8e:2a:77:55:2b:76:b9:97: e9:bc:ff:7e:06:76:df:3a:29:12:ae:9e:2b:30:3e:7f:40:68: 24:05:13:a6:04:db:de:17:b5:c6:64:9d:9d:a3:91:45:7a:65: 4b:17:c9:d5:2b:e3:fe:44:8a:2a:bc:85:a0:9d:91:67:4d:a9: 02:96:23:18:9a:74:93:7c:78:21:f2:4d:70:fe:8c:b2:a5:3e: 21:b6:82:e8:d1:71:f5:29:bc:21:d7:88:90:97:11:ec:80:e5: e9:f9:57:03:9b:a9:25:39:a3:10:03:e4:fc:e8:c9:c2:cb:87: cd:13:4c:ee:4d:5c:c3:6c:48:40:b6:93:b4:28:63:84:b6:4b: b7:56:61:b0:50:85:67:a7:d0:df:d3:14:94:1a:6e:5e:1f:19: e5:f8:fc:a9:05:65:e7:27:80:68:5a:7a:db:68:be:e0:a9:32: d0:d5:ec:91:64:91:70:21:5f:83:8d:29:2b:2a:77:4c:8e:52: 67:bc:5e:44:7b:e1:a6:66:69:cc:e0:72:37:59:e5:42:95:a3: ad:75:9d:96 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUOVFq2gbi4Il7+tCfGIEG/crWxbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDJaFw0yNjExMzAxNTUwMDJaMDMxMTAvBgNV BAMTKDVCODAxMUM5RjcwMDZBNTAzN0VDNkY0OTUwQkVDMzAwMjQ3QUFGRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV/HUozujajsGW5Edloe8ZzWAg C2DjtdNFWWyoeKCMr8InFUSMdTtt5aHxrCCLmBVPPjZp2dCPCCEFKklNXHR9dmYM 9EAZn2UldRj0gfhbJ8Ru31P+y6OZjwA/jNmSyruFus8DOLSXkY7mi0ATGRyIT89C +nixOhbOBTjXkaGCTmTElZemjuKV64ZHHkLZaOzQEVddSIQsyXnzyX5eIckVLj/2 cfpAl/oirsoTc7lP1HZ4d6TkTjgansiYX+JkX3cDb/YJakGduL1dIcLb1q/ls0I3 3ka4WZsHkVDNu1HPH1V3w20rZVDZlyeIA0wEN9ZyPY4LAZ5FAwIdH2rEEIU3AgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUW4ARyfcAalA37G9JUL7DACR6r+cwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMTM4MzMyZTMx MzgzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMzMzMzgzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALm3tTANBgkqhkiG9w0BAQsFAAOCAQEAIjoQqCpjTmmSDjb7GQ0o1F61YaHT /30lFiIHLnLvX9boZuMO1C6HMMb81FcYyI4qd1UrdrmX6bz/fgZ23zopEq6eKzA+ f0BoJAUTpgTb3he1xmSdnaORRXplSxfJ1Svj/kSKKryFoJ2RZ02pApYjGJp0k3x4 IfJNcP6MsqU+IbaC6NFx9Sm8IdeIkJcR7IDl6flXA5upJTmjEAPk/OjJwsuHzRNM 7k1cw2xIQLaTtChjhLZLt1ZhsFCFZ6fQ39MUlBpuXh8Z5fj8qQVl5yeAaFp622i+ 4Kky0NXskWSRcCFfg40pKyp3TI5SZ7xeRHvhpmZpzOByN1nlQpWjrXWdlg== -----END CERTIFICATE-----Generated at Tue Dec 16 23:37:24 2025 by rpki-client