This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138392e32342e302f32342d3234203d3e20313336373837.roa File: 3138352e3138392e32342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: n6/P0eNI98oHv35Zri/3n1OYYOjAJbBTZKhve99WngM= Subject key identifier: 4C:BA:A3:A4:22:F9:0A:8C:94:A6:5A:0C:60:4D:08:3A:AE:A6:5F:B2 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 1B0C26CEAF95332305C3B235F39EFA5B160666B0 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138392e32342e302f32342d3234203d3e20313336373837.roa Signing time: Mon 01 Dec 2025 15:50:05 +0000 ROA not before: Mon 01 Dec 2025 15:45:05 +0000 ROA not after: Mon 30 Nov 2026 15:50:05 +0000 asID: 136787 IP address blocks: 185.189.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:0c:26:ce:af:95:33:23:05:c3:b2:35:f3:9e:fa:5b:16:06:66:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:05 2025 GMT Not After : Nov 30 15:50:05 2026 GMT Subject: CN=4CBAA3A422F90A8C94A65A0C604D083AAEA65FB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:ea:d8:e9:f2:9d:ba:88:60:04:b8:b0:ef: 91:6e:e8:2d:95:23:14:3e:b2:87:0b:44:22:69:80: 06:65:96:77:5c:13:18:f8:82:99:46:6f:7c:b6:a4: d8:ce:2f:ca:15:78:6d:ad:45:9f:b6:fe:63:fc:3e: 80:f4:35:04:a3:c9:2c:30:32:1d:ee:e1:b3:55:9c: 80:33:2a:69:19:a6:28:65:9b:c1:ce:8f:15:f3:99: 60:33:1d:2c:7a:45:97:a0:65:a3:c5:0a:b7:63:5d: 9f:bc:7c:52:0e:a4:8b:fe:36:78:28:ce:ce:32:ed: 75:08:14:e8:bf:bf:a8:86:57:ce:4d:93:c1:8d:f3: 31:cd:86:83:d2:be:8f:ae:75:89:bf:4f:96:76:58: ef:44:38:82:e0:ea:69:02:44:f9:5b:47:f4:90:7b: 4f:bb:0f:58:03:0b:18:81:6c:6a:87:17:6b:bb:8c: 04:e2:d7:a0:dd:97:b2:0e:ec:0f:4c:cb:23:a7:07: ad:f2:2e:62:93:9b:2e:8a:59:2d:76:50:84:be:5a: 51:03:f1:e8:06:dd:3e:f7:af:99:c6:b6:cd:b6:5d: ef:95:ec:41:63:eb:8e:68:11:e9:f9:cd:26:18:bf: 58:bd:46:77:79:42:ed:d2:f3:49:00:24:bd:a5:2e: 3a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BA:A3:A4:22:F9:0A:8C:94:A6:5A:0C:60:4D:08:3A:AE:A6:5F:B2 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138392e32342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.189.24.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:de:d1:1a:2a:87:7f:c3:84:cc:6e:c3:21:be:d2:ad:6d:80: 6d:bd:04:11:39:5f:03:b5:c0:1c:72:dd:47:d3:81:8a:e2:73: f6:b5:0b:24:8a:be:99:9b:b7:9d:be:92:a7:dc:ba:d1:40:b4: 1d:2c:27:a1:74:71:84:00:f4:c7:17:d9:45:c5:c8:c3:38:2a: 24:09:2e:9a:76:c3:e9:90:3a:4a:54:fa:a6:ff:36:0d:70:dd: c7:2e:32:ad:91:a1:a7:f4:99:e2:3c:2a:94:aa:3c:41:b3:99: 34:b9:79:e5:24:09:29:bb:83:1f:c1:fd:31:c9:97:35:68:bc: f1:01:b9:ca:28:55:27:46:d6:59:86:fa:20:17:3a:18:97:b1: f1:9b:1a:fe:cc:07:63:1e:10:c9:29:3f:4e:c4:d6:58:cd:b4: f7:92:3b:d4:95:58:a7:62:0d:c9:bd:7f:82:cc:5f:3b:df:73: 12:1f:e2:5a:1a:9c:b4:8b:83:cf:94:f2:41:0a:59:ef:7a:5e: af:9e:67:0b:7b:bd:2c:c7:01:f2:e6:d2:9e:d4:5d:51:ca:b2: 7b:94:71:50:01:89:67:71:b9:c9:15:3d:c2:c8:c6:a8:53:b1: f9:fc:56:9a:29:c7:57:9d:fa:53:15:47:5a:37:a7:9b:0f:8b: 48:54:3e:36 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUGwwmzq+VMyMFw7I18576WxYGZrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDVaFw0yNjExMzAxNTUwMDVaMDMxMTAvBgNV BAMTKDRDQkFBM0E0MjJGOTBBOEM5NEE2NUEwQzYwNEQwODNBQUVBNjVGQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEm+rY6fKduohgBLiw75Fu6C2V IxQ+socLRCJpgAZllndcExj4gplGb3y2pNjOL8oVeG2tRZ+2/mP8PoD0NQSjySww Mh3u4bNVnIAzKmkZpihlm8HOjxXzmWAzHSx6RZegZaPFCrdjXZ+8fFIOpIv+Nngo zs4y7XUIFOi/v6iGV85Nk8GN8zHNhoPSvo+udYm/T5Z2WO9EOILg6mkCRPlbR/SQ e0+7D1gDCxiBbGqHF2u7jATi16Ddl7IO7A9MyyOnB63yLmKTmy6KWS12UIS+WlED 8egG3T73r5nGts22Xe+V7EFj645oEen5zSYYv1i9Rnd5Qu3S80kAJL2lLjrhAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUTLqjpCL5CoyUploMYE0IOq6mX7IwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMTM4MzkyZTMy MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5vRgwDQYJKoZIhvcNAQELBQADggEBAF3e0Roqh3/DhMxuwyG+0q1tgG29BBE5 XwO1wBxy3UfTgYric/a1CySKvpmbt52+kqfcutFAtB0sJ6F0cYQA9McX2UXFyMM4 KiQJLpp2w+mQOkpU+qb/Ng1w3ccuMq2Roaf0meI8KpSqPEGzmTS5eeUkCSm7gx/B /THJlzVovPEBucooVSdG1lmG+iAXOhiXsfGbGv7MB2MeEMkpP07E1ljNtPeSO9SV WKdiDcm9f4LMXzvfcxIf4loanLSLg8+U8kEKWe96Xq+eZwt7vSzHAfLm0p7UXVHK snuUcVABiWdxuckVPcLIxqhTsfn8Vpopx1ed+lMVR1o3p5sPi0hUPjY= -----END CERTIFICATE-----Generated at Fri Dec 5 13:12:37 2025 by rpki-client