This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132372e302f32342d3234203d3e203439393831.roa File: 3138352e3138352e3132372e302f32342d3234203d3e203439393831.roa (raw, json) Hash identifier: 1QGGu08ZcTmsb60OLFECCD2GbudlUAxgq0TKcutUoQ8= Subject key identifier: E2:0A:CE:A4:7C:D4:65:63:6D:96:36:85:85:B2:5D:21:A1:A5:34:51 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 010C048DF62B7836BDCFFCF4F76F3A39A81713FF Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132372e302f32342d3234203d3e203439393831.roa Signing time: Mon 01 Dec 2025 15:50:09 +0000 ROA not before: Mon 01 Dec 2025 15:45:09 +0000 ROA not after: Mon 30 Nov 2026 15:50:09 +0000 asID: 49981 IP address blocks: 185.185.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0c:04:8d:f6:2b:78:36:bd:cf:fc:f4:f7:6f:3a:39:a8:17:13:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:09 2025 GMT Not After : Nov 30 15:50:09 2026 GMT Subject: CN=E20ACEA47CD465636D96368585B25D21A1A53451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:60:83:31:5c:2c:42:73:15:13:2d:f4:bf:de: 3d:96:a8:bb:48:22:c4:b1:85:5c:44:e7:b4:2a:61: 38:f3:f0:e0:0a:bc:7b:a7:91:0a:49:c5:ad:6c:40: 76:a3:da:32:00:9f:a2:63:ab:6e:6b:64:cc:37:a2: 30:be:b5:d2:14:77:bd:b3:5d:33:e1:e7:58:2e:97: 2c:b2:eb:62:5f:96:33:a1:bd:f0:85:5d:54:49:ef: 00:05:c3:4a:b2:52:a2:33:b1:35:68:90:1f:7d:f0: 64:00:3a:c2:ea:65:bb:a0:ad:df:96:99:48:dd:46: 32:1a:a5:75:72:a1:c4:56:d8:cb:c7:c6:f1:73:65: de:d2:6c:7d:19:cb:71:46:dc:82:08:a0:6a:cf:b3: 92:a3:7d:60:f2:56:98:d2:13:1b:38:fd:37:5a:07: 47:e7:73:03:fc:1f:61:8c:b3:6f:88:50:c5:79:1f: 0e:2a:e1:d6:76:40:e8:53:8d:f5:b7:01:5b:3e:4c: 4d:2a:44:9a:70:56:47:9e:29:6f:42:13:4c:5d:18: 95:e9:64:cb:92:94:c9:e9:41:f7:0c:be:e2:13:11: c0:cb:cf:15:23:41:be:dc:42:77:a9:87:a6:7c:85: 36:da:26:1c:85:8c:53:ee:40:d3:40:2a:87:e0:9c: d3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0A:CE:A4:7C:D4:65:63:6D:96:36:85:85:B2:5D:21:A1:A5:34:51 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132372e302f32342d3234203d3e203439393831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.185.127.0/24 Signature Algorithm: sha256WithRSAEncryption 00:30:83:08:62:b7:73:19:98:a8:53:76:52:6a:6e:8f:9e:5b: 83:5c:b6:27:9a:2e:25:5a:a8:e3:f7:84:e7:a1:e5:ac:42:8a: 63:1c:4c:27:a9:c5:a9:f0:5d:16:c8:70:83:ae:7f:8a:3a:74: 6a:b1:4e:0b:1b:17:51:6e:ca:5f:d7:8f:3d:78:28:81:a9:be: 4f:a4:eb:a8:e8:c8:0c:e5:8c:40:d8:e1:31:06:aa:06:9f:d7: 62:88:d8:3f:e0:f8:c7:6c:b0:86:e2:87:85:f5:b6:e1:8f:d5: cd:6d:18:9c:02:23:17:d7:2d:79:6d:11:94:46:08:a8:d2:a2: 7c:ff:97:04:af:ae:e5:3f:23:d9:0b:d9:33:35:93:64:d9:14: 10:fa:8b:b4:4f:e2:8c:75:af:76:d3:03:5a:f9:36:8d:92:fb: f4:47:6b:ca:8f:ff:3c:6b:0b:71:da:5a:be:8e:68:05:c1:86: 2c:77:36:56:78:bd:e8:d8:b3:02:ef:73:49:35:c3:66:1d:6e: 5f:91:d8:31:1b:9f:9f:8a:c9:64:88:e3:62:f1:f6:2e:36:c7: 43:29:3f:d4:16:d3:3d:93:7a:e9:c0:0f:83:4f:dd:7b:67:76: 7f:24:6b:dd:ec:97:e1:56:ff:c6:64:76:cf:95:76:95:4f:cb: 28:6c:4a:a5 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUAQwEjfYreDa9z/z09286OagXE/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDlaFw0yNjExMzAxNTUwMDlaMDMxMTAvBgNV BAMTKEUyMEFDRUE0N0NENDY1NjM2RDk2MzY4NTg1QjI1RDIxQTFBNTM0NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQYIMxXCxCcxUTLfS/3j2WqLtI IsSxhVxE57QqYTjz8OAKvHunkQpJxa1sQHaj2jIAn6Jjq25rZMw3ojC+tdIUd72z XTPh51gulyyy62JfljOhvfCFXVRJ7wAFw0qyUqIzsTVokB998GQAOsLqZbugrd+W mUjdRjIapXVyocRW2MvHxvFzZd7SbH0Zy3FG3IIIoGrPs5KjfWDyVpjSExs4/Tda B0fncwP8H2GMs2+IUMV5Hw4q4dZ2QOhTjfW3AVs+TE0qRJpwVkeeKW9CE0xdGJXp ZMuSlMnpQfcMvuITEcDLzxUjQb7cQneph6Z8hTbaJhyFjFPuQNNAKofgnNN9AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU4grOpHzUZWNtljaFhbJdIaGlNFEwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMTM4MzUyZTMx MzIzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzkzOTM4MzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5uX8wDQYJKoZIhvcNAQELBQADggEBAAAwgwhit3MZmKhTdlJqbo+eW4Nctiea LiVaqOP3hOeh5axCimMcTCepxanwXRbIcIOuf4o6dGqxTgsbF1Fuyl/Xjz14KIGp vk+k66joyAzljEDY4TEGqgaf12KI2D/g+MdssIbih4X1tuGP1c1tGJwCIxfXLXlt EZRGCKjSonz/lwSvruU/I9kL2TM1k2TZFBD6i7RP4ox1r3bTA1r5No2S+/RHa8qP /zxrC3HaWr6OaAXBhix3NlZ4vejYswLvc0k1w2Ydbl+R2DEbn5+KyWSI42Lx9i42 x0MpP9QW0z2TeunAD4NP3Xtndn8ka93sl+FW/8Zkds+VdpVPyyhsSqU= -----END CERTIFICATE-----Generated at Fri Dec 5 13:08:36 2025 by rpki-client