This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230352e31332e302f32342d3234203d3e20313336373837.roa File: 3138352e3230352e31332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: /W0yc/n4JcpNOAaKP0Lj2zfVVy99ZfVXXfYO9QlwjDw= Subject key identifier: AA:3D:76:9A:5F:C6:CD:8B:C0:EA:08:98:12:B6:B6:87:9A:45:86:FB Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 274920689776CC288849BFA2298C6DDFC00C0E09 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230352e31332e302f32342d3234203d3e20313336373837.roa Signing time: Mon 01 Dec 2025 15:50:06 +0000 ROA not before: Mon 01 Dec 2025 15:45:06 +0000 ROA not after: Mon 30 Nov 2026 15:50:06 +0000 asID: 136787 IP address blocks: 185.205.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:49:20:68:97:76:cc:28:88:49:bf:a2:29:8c:6d:df:c0:0c:0e:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:06 2025 GMT Not After : Nov 30 15:50:06 2026 GMT Subject: CN=AA3D769A5FC6CD8BC0EA089812B6B6879A4586FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:98:1b:06:c0:19:f0:e5:cb:c4:8a:30:7e:35: c4:51:92:f2:e0:ad:24:3b:70:71:0e:05:c2:de:24: 51:fb:04:dc:c5:37:b7:e6:ed:e9:11:a9:e3:f9:3d: 84:07:c5:c9:2e:0d:bd:d4:78:ae:1b:28:5a:f9:22: c9:42:87:82:04:0d:cb:b6:99:79:19:d2:c8:8d:82: d1:32:1f:80:d8:39:30:3f:35:b3:1d:2c:18:bd:04: dc:6c:b7:e7:cd:29:e6:08:79:5f:b8:5e:04:4e:de: cf:f8:0e:e9:ea:66:41:b0:2e:8a:2d:ef:31:55:02: 5b:c2:34:f9:a1:49:b7:cd:e1:73:f9:08:ac:dd:48: 8b:fd:34:ba:22:6b:e4:95:33:2e:d6:2e:d7:01:b0: 63:10:c2:95:38:24:61:c9:d3:3c:a4:7f:18:87:8a: 4f:34:ef:54:3b:42:35:5d:44:7f:bb:ce:96:40:55: 5d:09:36:de:6a:e4:24:5b:45:75:d2:15:76:11:b3: 55:47:6f:8c:26:37:e9:db:28:f1:c4:8b:0f:8f:4d: 22:1b:4d:7b:f6:d9:75:26:85:85:dd:da:8d:ff:ab: 2b:25:87:f8:c8:5a:80:08:5b:0e:22:c0:44:16:3c: 07:f3:4e:c3:0a:27:e1:01:45:5f:31:1c:14:50:3d: f6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3D:76:9A:5F:C6:CD:8B:C0:EA:08:98:12:B6:B6:87:9A:45:86:FB X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230352e31332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.13.0/24 Signature Algorithm: sha256WithRSAEncryption 70:3f:f8:46:f3:7b:36:27:2e:78:a9:2d:4f:86:d1:e4:99:aa: b4:54:8b:d7:e8:57:96:dd:99:7f:71:8c:03:d3:71:28:e3:cf: 6d:b2:f9:49:61:ae:f3:58:6f:bd:7b:d3:b8:0a:c8:c6:a9:8c: 2d:60:5a:f5:90:ec:26:ed:8a:25:92:ab:be:5c:88:ec:aa:78: 3a:81:3f:1d:d3:b2:d4:e8:6a:f8:83:f8:59:22:ec:8e:ca:da: 1d:e5:d7:a1:bf:85:29:8c:b2:2f:2f:3a:d2:37:ff:9e:a7:c5: 85:9d:47:34:b8:3f:29:ef:d9:3e:a7:4b:e1:51:19:02:dd:fb: 6a:a0:5a:c2:6f:4f:df:34:51:18:89:c9:62:08:27:b7:c8:a5: 41:e4:c5:80:df:07:48:26:72:3e:71:e6:cb:f8:e8:89:25:d9: 30:85:7b:d9:74:3d:d9:90:fb:e1:f9:7d:6d:65:fc:a1:d5:f8: 5e:39:cd:4e:3e:dc:71:d0:06:7c:a3:f2:84:bb:2d:8a:8f:6e: 05:b6:e8:83:c3:7b:b7:22:3b:7d:33:fc:cf:d1:60:c3:80:55: 16:a5:ab:ba:69:7c:2b:23:cb:ce:b1:4a:75:64:69:07:68:41: 77:62:78:49:b6:55:ad:75:55:49:ae:3d:a2:39:41:f8:03:0d: bf:56:92:11 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUJ0kgaJd2zCiISb+iKYxt38AMDgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDZaFw0yNjExMzAxNTUwMDZaMDMxMTAvBgNV BAMTKEFBM0Q3NjlBNUZDNkNEOEJDMEVBMDg5ODEyQjZCNjg3OUE0NTg2RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDmBsGwBnw5cvEijB+NcRRkvLg rSQ7cHEOBcLeJFH7BNzFN7fm7ekRqeP5PYQHxckuDb3UeK4bKFr5IslCh4IEDcu2 mXkZ0siNgtEyH4DYOTA/NbMdLBi9BNxst+fNKeYIeV+4XgRO3s/4DunqZkGwLoot 7zFVAlvCNPmhSbfN4XP5CKzdSIv9NLoia+SVMy7WLtcBsGMQwpU4JGHJ0zykfxiH ik8071Q7QjVdRH+7zpZAVV0JNt5q5CRbRXXSFXYRs1VHb4wmN+nbKPHEiw+PTSIb TXv22XUmhYXd2o3/qyslh/jIWoAIWw4iwEQWPAfzTsMKJ+EBRV8xHBRQPfZtAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUqj12ml/GzYvA6giYEra2h5pFhvswHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMwMzUyZTMx MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5zQ0wDQYJKoZIhvcNAQELBQADggEBAHA/+EbzezYnLnipLU+G0eSZqrRUi9fo V5bdmX9xjAPTcSjjz22y+UlhrvNYb71707gKyMapjC1gWvWQ7CbtiiWSq75ciOyq eDqBPx3TstToaviD+Fki7I7K2h3l16G/hSmMsi8vOtI3/56nxYWdRzS4Pynv2T6n S+FRGQLd+2qgWsJvT980URiJyWIIJ7fIpUHkxYDfB0gmcj5x5sv46Ikl2TCFe9l0 PdmQ++H5fW1l/KHV+F45zU4+3HHQBnyj8oS7LYqPbgW26IPDe7ciO30z/M/RYMOA VRalq7ppfCsjy86xSnVkaQdoQXdieEm2Va11VUmuPaI5QfgDDb9WkhE= -----END CERTIFICATE-----Generated at Fri Dec 5 13:10:29 2025 by rpki-client