This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138392e32372e302f32342d3234203d3e203333313832.roa File: 3138352e3138392e32372e302f32342d3234203d3e203333313832.roa (raw, json) Hash identifier: dDHQ1RQxbMf07wPBOjj8VU2JQ5R3Cd5yblzSYH+uGgs= Subject key identifier: 65:C7:24:A0:2F:13:FD:FB:B5:BE:15:24:77:BE:48:B9:0F:46:6F:B5 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 588DD314076A7A3621F9A4C0EAB178C9ABA60982 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138392e32372e302f32342d3234203d3e203333313832.roa Signing time: Mon 01 Dec 2025 15:50:02 +0000 ROA not before: Mon 01 Dec 2025 15:45:02 +0000 ROA not after: Mon 30 Nov 2026 15:50:02 +0000 asID: 33182 IP address blocks: 185.189.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:8d:d3:14:07:6a:7a:36:21:f9:a4:c0:ea:b1:78:c9:ab:a6:09:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:02 2025 GMT Not After : Nov 30 15:50:02 2026 GMT Subject: CN=65C724A02F13FDFBB5BE152477BE48B90F466FB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:76:24:54:82:b7:be:ea:1a:b9:96:6e:b1:cf: a0:96:0c:7a:24:b6:96:50:d6:63:98:ad:db:4e:3b: 4e:0c:cf:d8:fa:7c:ca:22:5c:9a:26:64:68:0d:09: 89:9c:0b:d1:b1:e4:b0:45:b7:7c:55:7f:d5:20:c3: cd:85:2c:f5:f7:11:b4:51:64:d5:4f:f6:e6:8b:81: 5c:1c:89:22:bc:ec:7d:aa:6f:db:52:85:75:4a:34: 57:a3:09:39:a2:23:86:bf:22:a7:eb:60:2c:73:c4: 22:53:a7:fc:ea:e5:5d:58:69:bd:c4:cb:ea:84:d7: 72:08:1d:51:b5:a4:38:40:07:0a:46:61:31:e4:2e: aa:db:f8:9c:3e:94:90:79:ec:50:8d:8d:a9:b9:d6: 94:aa:28:fa:93:db:1f:cf:13:68:4a:be:e0:7f:bb: 87:54:4e:8e:a7:cc:68:58:a8:5b:68:56:2a:fc:a4: f6:c9:a6:a5:68:dd:6f:6e:64:b3:51:ee:22:63:04: 5d:85:a9:e6:1e:a2:2d:f5:41:1e:ef:c9:d6:83:a9: 7b:ec:10:02:e4:0c:6f:a0:5f:bb:f1:f0:f4:ef:48: d5:7b:c3:ed:67:71:13:82:6f:72:7a:a6:18:5d:53: 3a:44:28:d1:be:6e:61:6f:2c:af:0b:6a:a0:f7:78: b8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C7:24:A0:2F:13:FD:FB:B5:BE:15:24:77:BE:48:B9:0F:46:6F:B5 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138392e32372e302f32342d3234203d3e203333313832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.189.27.0/24 Signature Algorithm: sha256WithRSAEncryption 66:16:87:45:29:ac:bb:bd:25:43:37:c4:a7:ff:7f:f6:6c:78: 91:6d:72:41:c7:61:cb:a6:fc:09:6d:60:ef:b0:f4:fe:05:83: 3a:13:69:80:14:75:0e:50:df:aa:38:8d:91:4b:b4:f0:ae:f4: 76:67:b3:77:67:15:41:cb:f7:a8:b1:e4:96:c6:ce:e9:fa:3c: 4a:68:96:f4:62:71:b8:fd:be:a7:44:72:72:3c:5c:d4:d9:05: db:a2:1e:d9:4d:e2:77:1e:ba:f9:2a:1f:1a:41:f3:bf:a2:7a: ad:95:b4:31:ed:41:50:fc:e8:b7:58:ee:a5:9f:23:c0:46:cb: 0c:96:2e:2c:50:5c:77:10:47:d2:62:e4:72:71:00:a7:57:96: ae:c1:be:42:af:89:e8:1c:6d:6e:ca:1c:30:d9:8d:91:fa:f8: 17:6a:c5:32:0b:53:38:96:fa:70:2c:3a:9f:ab:fb:d9:bc:ff: fb:8a:98:e1:c4:8f:87:22:6a:a1:4a:7c:68:4b:53:8e:66:6f: 24:be:5e:31:7e:3a:c5:1b:8c:45:17:60:e7:d9:55:29:d1:8e: 6d:28:a0:54:88:48:33:55:40:ba:e9:33:eb:ac:0c:46:06:31: 5c:18:a0:ac:90:6c:b6:c0:79:2c:57:a4:ff:76:2d:bb:09:11: cb:23:75:6e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUWI3TFAdqejYh+aTA6rF4yaumCYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDJaFw0yNjExMzAxNTUwMDJaMDMxMTAvBgNV BAMTKDY1QzcyNEEwMkYxM0ZERkJCNUJFMTUyNDc3QkU0OEI5MEY0NjZGQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfdiRUgre+6hq5lm6xz6CWDHok tpZQ1mOYrdtOO04Mz9j6fMoiXJomZGgNCYmcC9Gx5LBFt3xVf9Ugw82FLPX3EbRR ZNVP9uaLgVwciSK87H2qb9tShXVKNFejCTmiI4a/IqfrYCxzxCJTp/zq5V1Yab3E y+qE13IIHVG1pDhABwpGYTHkLqrb+Jw+lJB57FCNjam51pSqKPqT2x/PE2hKvuB/ u4dUTo6nzGhYqFtoVir8pPbJpqVo3W9uZLNR7iJjBF2FqeYeoi31QR7vydaDqXvs EALkDG+gX7vx8PTvSNV7w+1ncROCb3J6phhdUzpEKNG+bmFvLK8LaqD3eLhlAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUZcckoC8T/fu1vhUkd75IuQ9Gb7UwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMTM4MzkyZTMy MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzMzMzEzODMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA ub0bMA0GCSqGSIb3DQEBCwUAA4IBAQBmFodFKay7vSVDN8Sn/3/2bHiRbXJBx2HL pvwJbWDvsPT+BYM6E2mAFHUOUN+qOI2RS7TwrvR2Z7N3ZxVBy/eoseSWxs7p+jxK aJb0YnG4/b6nRHJyPFzU2QXboh7ZTeJ3Hrr5Kh8aQfO/onqtlbQx7UFQ/Oi3WO6l nyPARssMli4sUFx3EEfSYuRycQCnV5auwb5Cr4noHG1uyhww2Y2R+vgXasUyC1M4 lvpwLDqfq/vZvP/7ipjhxI+HImqhSnxoS1OOZm8kvl4xfjrFG4xFF2Dn2VUp0Y5t KKBUiEgzVUC66TPrrAxGBjFcGKCskGy2wHksV6T/di27CRHLI3Vu -----END CERTIFICATE-----Generated at Fri Dec 5 13:09:15 2025 by rpki-client