This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138332e3138322e302f32342d3234203d3e203333313832.roa File: 3138352e3138332e3138322e302f32342d3234203d3e203333313832.roa (raw, json) Hash identifier: Vb7hyyFJH7bwK/jHpa2tOz2woDk6xGVdLO2zF+wUl2w= Subject key identifier: 45:F3:0D:AB:0A:AF:56:1C:14:D4:CB:BA:43:A3:10:55:12:4C:C3:B0 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 4C508FE6DFB54AED8F57ADC54CDCD025BB74135A Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138332e3138322e302f32342d3234203d3e203333313832.roa Signing time: Mon 01 Dec 2025 15:50:09 +0000 ROA not before: Mon 01 Dec 2025 15:45:09 +0000 ROA not after: Mon 30 Nov 2026 15:50:09 +0000 asID: 33182 IP address blocks: 185.183.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:50:8f:e6:df:b5:4a:ed:8f:57:ad:c5:4c:dc:d0:25:bb:74:13:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:09 2025 GMT Not After : Nov 30 15:50:09 2026 GMT Subject: CN=45F30DAB0AAF561C14D4CBBA43A31055124CC3B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fa:29:25:91:6c:fe:7a:30:bf:0b:b7:24:0b: 85:61:52:e0:80:54:bf:eb:14:4c:44:1b:b6:17:59: f1:13:54:81:cc:7b:75:cb:93:0e:1c:d1:0b:47:72: 58:c4:02:99:0b:44:20:b4:97:f6:2b:c6:64:17:88: 33:1a:8b:97:67:c8:c1:d7:ea:f2:11:9c:b3:d8:e1: 58:e2:45:1e:18:7e:d5:ff:1c:f5:3b:e0:af:6c:76: 3c:e9:c9:15:e3:1b:c7:ed:46:3d:e5:4f:6f:06:5b: c5:20:bf:dc:1c:b1:fb:12:66:b7:6f:8a:e8:b0:29: f7:8f:9d:fc:2c:fb:85:0d:a4:2b:8a:02:5a:03:ad: 68:42:ab:cf:69:6b:34:15:19:8f:51:e6:c5:60:4a: 92:43:9e:08:96:90:68:0f:bb:e6:24:e3:2f:3f:a9: 14:6f:d0:7e:11:cb:d2:16:f9:96:0b:f6:e5:eb:23: 33:06:e0:e0:42:9a:e3:16:36:04:4d:e0:2e:63:99: 29:99:4d:79:c2:9d:7f:ea:95:35:ed:f6:9e:57:d2: e5:17:cb:5a:b6:f2:f9:e8:02:30:17:01:03:74:9d: 61:8f:d3:a7:e9:7c:43:fc:8c:4a:5a:f5:e6:76:df: 94:3c:4b:eb:e8:82:bf:c8:6e:7f:5b:5c:12:cc:72: 03:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F3:0D:AB:0A:AF:56:1C:14:D4:CB:BA:43:A3:10:55:12:4C:C3:B0 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138332e3138322e302f32342d3234203d3e203333313832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.183.182.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:df:8a:d3:6a:40:e9:93:8b:87:03:d6:8a:47:b9:45:8f:99: 30:b4:74:6c:42:30:1c:a3:a8:8b:fc:5f:91:34:bb:20:db:be: 9c:3e:b5:24:60:6e:56:08:ae:ad:4e:fa:1d:3e:73:fc:79:98: f5:26:0d:77:0c:04:8b:14:98:19:c9:5c:4b:be:98:34:21:b1: 8c:a8:d4:6a:99:9e:89:ad:06:d1:17:ed:79:7e:16:1f:97:32: cb:07:5d:83:94:10:ee:b0:14:5c:d1:f3:ed:0f:33:a5:dc:7e: a6:d0:d6:d4:af:50:ba:ae:47:43:80:72:79:9e:52:e2:46:e4: 0c:48:2f:1c:2e:8c:f2:1c:b1:23:20:22:a5:73:6e:5f:5f:38: 29:cd:c2:44:6f:dd:cd:4c:e3:4f:5d:c0:a7:8a:ec:31:16:44: 74:db:a4:bf:27:11:0c:31:06:ae:43:41:3f:39:51:5a:f2:7a: a6:49:93:8d:16:cd:dc:06:a8:96:44:89:d0:db:70:31:9b:94: 5f:0e:65:ae:ba:f5:14:8c:62:a2:54:e2:e6:da:9e:1e:99:bf: cb:42:48:d8:49:08:3c:7a:a3:3f:b2:f4:57:27:8a:c3:2e:e2: 4f:14:ff:33:70:0b:77:ef:a8:0f:58:11:4c:dd:52:f2:6d:8c: fb:da:af:4b -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUTFCP5t+1Su2PV63FTNzQJbt0E1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDlaFw0yNjExMzAxNTUwMDlaMDMxMTAvBgNV BAMTKDQ1RjMwREFCMEFBRjU2MUMxNEQ0Q0JCQTQzQTMxMDU1MTI0Q0MzQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo+iklkWz+ejC/C7ckC4VhUuCA VL/rFExEG7YXWfETVIHMe3XLkw4c0QtHcljEApkLRCC0l/YrxmQXiDMai5dnyMHX 6vIRnLPY4VjiRR4YftX/HPU74K9sdjzpyRXjG8ftRj3lT28GW8Ugv9wcsfsSZrdv iuiwKfePnfws+4UNpCuKAloDrWhCq89pazQVGY9R5sVgSpJDngiWkGgPu+Yk4y8/ qRRv0H4Ry9IW+ZYL9uXrIzMG4OBCmuMWNgRN4C5jmSmZTXnCnX/qlTXt9p5X0uUX y1q28vnoAjAXAQN0nWGP06fpfEP8jEpa9eZ235Q8S+vogr/Ibn9bXBLMcgPdAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQURfMNqwqvVhwU1Mu6Q6MQVRJMw7AwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMTM4MzMyZTMx MzgzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzMzMTM4MzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5t7YwDQYJKoZIhvcNAQELBQADggEBAF7fitNqQOmTi4cD1opHuUWPmTC0dGxC MByjqIv8X5E0uyDbvpw+tSRgblYIrq1O+h0+c/x5mPUmDXcMBIsUmBnJXEu+mDQh sYyo1GqZnomtBtEX7Xl+Fh+XMssHXYOUEO6wFFzR8+0PM6XcfqbQ1tSvULquR0OA cnmeUuJG5AxILxwujPIcsSMgIqVzbl9fOCnNwkRv3c1M409dwKeK7DEWRHTbpL8n EQwxBq5DQT85UVryeqZJk40WzdwGqJZEidDbcDGblF8OZa669RSMYqJU4ubanh6Z v8tCSNhJCDx6oz+y9FcnisMu4k8U/zNwC3fvqA9YEUzdUvJtjPvar0s= -----END CERTIFICATE-----Generated at Fri Dec 5 13:09:16 2025 by rpki-client