This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139362e32332e302f32342d3234203d3e203230383630.roa File: 3138352e3139362e32332e302f32342d3234203d3e203230383630.roa (raw, json) Hash identifier: GdLkNtqhyRwYnmDMG/ZkREquadQVGxxIH4ZLs9tqufI= Subject key identifier: 19:71:79:5F:AD:EC:F2:FC:D5:0D:D0:71:5E:B5:0B:8C:C9:D4:5F:B0 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 2855413DBB7EF2A5989992C73184CC7F442B77E4 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139362e32332e302f32342d3234203d3e203230383630.roa Signing time: Mon 01 Dec 2025 15:50:09 +0000 ROA not before: Mon 01 Dec 2025 15:45:09 +0000 ROA not after: Mon 30 Nov 2026 15:50:09 +0000 asID: 20860 IP address blocks: 185.196.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:55:41:3d:bb:7e:f2:a5:98:99:92:c7:31:84:cc:7f:44:2b:77:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:09 2025 GMT Not After : Nov 30 15:50:09 2026 GMT Subject: CN=1971795FADECF2FCD50DD0715EB50B8CC9D45FB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d3:8a:22:6f:00:a7:21:fc:96:33:70:37:40: c9:19:b4:51:5b:24:c8:76:e2:8d:6b:aa:56:0d:fc: e1:ed:9f:5a:e7:f7:1b:b3:b3:8b:0e:f7:84:23:b5: b6:27:64:4e:c5:f4:cf:f0:f5:bd:35:b1:3a:b0:d2: 53:72:72:f6:46:5b:34:f2:56:9d:cc:3d:60:83:76: e8:6f:ed:b0:b6:bf:4e:9d:da:bf:b7:fc:66:27:84: 2b:74:b1:41:a7:e8:21:1f:30:e6:39:60:ab:26:fb: f4:91:41:49:a7:f8:12:ac:8f:c3:dd:48:8f:29:9b: 47:02:b0:7f:e3:df:9a:74:55:e5:64:05:57:d8:7f: bc:62:af:28:35:65:a5:7a:42:97:a1:be:f2:d9:c2: fc:70:50:1f:68:1e:05:ef:50:a5:8b:7c:96:c4:be: 00:af:90:04:a1:9e:70:61:53:b5:91:d3:a5:f3:c4: 9c:54:4b:75:61:e1:e9:9e:08:31:91:16:66:d8:22: be:47:e3:4c:e0:65:69:ce:b7:29:75:1d:53:23:7a: 7a:aa:cf:27:78:45:d5:e4:53:69:24:f8:d6:ad:75: df:0c:41:00:24:b1:c3:e0:57:dc:f3:b4:53:b6:d7: 75:e5:1e:18:90:00:69:53:60:27:a9:78:37:c7:03: a1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:71:79:5F:AD:EC:F2:FC:D5:0D:D0:71:5E:B5:0B:8C:C9:D4:5F:B0 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139362e32332e302f32342d3234203d3e203230383630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.23.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:49:a8:12:03:c8:6d:46:6d:b7:a6:91:33:89:02:c0:27:ff: 5c:1a:64:84:c2:44:be:2c:ab:7a:13:2d:1b:f0:e1:c2:bd:e0: d0:73:e0:5b:c2:ac:a4:bd:d1:96:d8:c4:3f:68:3a:3c:68:ac: 07:c1:3d:4e:64:46:d6:35:45:33:31:d4:ca:a0:33:a8:93:a8: 82:e7:11:73:e4:7c:03:8f:4c:5b:fa:3a:62:3f:04:86:43:8c: 9f:f1:08:98:7c:74:10:52:46:b6:0d:15:dc:59:e7:9f:79:2b: 45:c1:5f:e6:28:dc:4a:7f:50:0b:c8:f0:f0:8d:1e:31:96:6b: 3d:be:b1:88:1c:65:7f:6b:ce:2b:ad:de:65:03:15:cf:08:ef: 11:97:c8:d2:0f:06:bb:c3:43:8a:73:64:40:69:aa:2b:5a:00: 7e:c1:8c:24:17:2f:7f:55:a5:c7:5e:ea:df:1f:6f:b1:4d:fd: 6a:84:4b:af:87:76:c2:08:3c:4e:1c:64:fd:50:7d:95:62:bd: 4c:b9:ae:a3:90:05:37:b8:a1:96:9a:7d:a5:2d:80:f7:8c:12: 64:c4:0a:01:3c:94:31:03:63:9c:99:c1:70:04:35:b0:77:68: 16:b2:c2:ad:17:0d:23:98:01:df:da:28:c5:ac:a2:7b:5e:3d: 1b:fd:11:94 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUKFVBPbt+8qWYmZLHMYTMf0Qrd+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDlaFw0yNjExMzAxNTUwMDlaMDMxMTAvBgNV BAMTKDE5NzE3OTVGQURFQ0YyRkNENTBERDA3MTVFQjUwQjhDQzlENDVGQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY04oibwCnIfyWM3A3QMkZtFFb JMh24o1rqlYN/OHtn1rn9xuzs4sO94QjtbYnZE7F9M/w9b01sTqw0lNycvZGWzTy Vp3MPWCDduhv7bC2v06d2r+3/GYnhCt0sUGn6CEfMOY5YKsm+/SRQUmn+BKsj8Pd SI8pm0cCsH/j35p0VeVkBVfYf7xiryg1ZaV6QpehvvLZwvxwUB9oHgXvUKWLfJbE vgCvkAShnnBhU7WR06XzxJxUS3Vh4emeCDGRFmbYIr5H40zgZWnOtyl1HVMjenqq zyd4RdXkU2kk+Natdd8MQQAkscPgV9zztFO213XlHhiQAGlTYCepeDfHA6GvAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUGXF5X63s8vzVDdBxXrULjMnUX7AwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMTM5MzYyZTMy MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzgzNjMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA ucQXMA0GCSqGSIb3DQEBCwUAA4IBAQA+SagSA8htRm23ppEziQLAJ/9cGmSEwkS+ LKt6Ey0b8OHCveDQc+BbwqykvdGW2MQ/aDo8aKwHwT1OZEbWNUUzMdTKoDOok6iC 5xFz5HwDj0xb+jpiPwSGQ4yf8QiYfHQQUka2DRXcWeefeStFwV/mKNxKf1ALyPDw jR4xlms9vrGIHGV/a84rrd5lAxXPCO8Rl8jSDwa7w0OKc2RAaaorWgB+wYwkFy9/ VaXHXurfH2+xTf1qhEuvh3bCCDxOHGT9UH2VYr1Mua6jkAU3uKGWmn2lLYD3jBJk xAoBPJQxA2OcmcFwBDWwd2gWssKtFw0jmAHf2ijFrKJ7Xj0b/RGU -----END CERTIFICATE-----Generated at Mon Jan 19 17:35:19 2026 by rpki-client