This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231312e33322e302f32342d3234203d3e20313336373837.roa File: 3138352e3231312e33322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 3CNp7bP9K9LxLopLSFTkPQrs24wEweEQeBsFANQUDSg= Subject key identifier: BD:BE:5B:7D:D7:3C:A1:74:B2:19:3F:56:5E:78:03:F7:6B:1A:3B:BC Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 0BABB2815B72824084B317BB9F98228524AB019E Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231312e33322e302f32342d3234203d3e20313336373837.roa Signing time: Mon 01 Dec 2025 15:50:08 +0000 ROA not before: Mon 01 Dec 2025 15:45:08 +0000 ROA not after: Mon 30 Nov 2026 15:50:08 +0000 asID: 136787 IP address blocks: 185.211.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ab:b2:81:5b:72:82:40:84:b3:17:bb:9f:98:22:85:24:ab:01:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:08 2025 GMT Not After : Nov 30 15:50:08 2026 GMT Subject: CN=BDBE5B7DD73CA174B2193F565E7803F76B1A3BBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:eb:55:65:78:e7:38:cb:2a:12:90:98:2e: a0:ac:8f:8c:31:3a:72:ef:69:09:94:78:a8:86:cd: fe:5f:df:3c:16:63:8d:40:e1:1f:94:ac:59:26:59: d6:c0:35:f9:f1:aa:bf:84:5f:78:7a:96:e2:f9:13: d0:ff:39:cb:49:c2:44:63:be:56:7f:ca:2d:bf:52: 4f:fa:dd:f3:2b:c0:96:e2:5a:e0:70:02:31:f3:d1: 74:17:cc:92:e2:f1:1a:d6:4c:5e:77:65:c9:b7:43: f5:4c:0c:4c:25:f0:01:cc:af:7a:5a:00:7d:1c:05: d4:dc:85:dc:bc:7e:09:57:8e:77:a6:68:e4:f9:64: 01:c4:7e:94:64:98:61:c9:af:ae:f8:9a:7a:d4:f3: 7d:b2:e6:77:10:6f:6d:c6:ab:4f:ef:75:4f:08:08: dc:aa:97:f4:76:d6:74:7a:49:24:de:7b:63:16:0b: 46:cd:8d:f7:8e:73:91:df:96:c0:1a:ca:4e:c5:09: cf:47:8f:f1:4d:11:14:d6:0e:90:6a:87:0a:6d:38: c1:1d:db:18:e9:34:cc:8f:90:46:db:81:fe:e8:6b: b3:a7:46:cb:8d:27:71:62:d9:06:c3:ef:51:7b:84: 2d:6d:36:68:69:84:5f:74:67:a6:ee:e9:a8:d5:66: 14:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BE:5B:7D:D7:3C:A1:74:B2:19:3F:56:5E:78:03:F7:6B:1A:3B:BC X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231312e33322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.32.0/24 Signature Algorithm: sha256WithRSAEncryption 96:57:0d:29:2f:c0:87:80:2b:c4:f9:57:7a:82:91:de:43:30: e4:6e:76:eb:43:fe:2d:67:2a:e6:cd:fd:20:9d:ee:47:e9:1f: 03:e4:39:35:89:f4:d6:56:08:97:4e:54:d6:dd:cb:db:8e:7e: fb:a8:da:01:3c:f8:ec:4c:20:12:30:90:3e:ea:a4:c6:96:c1: 3d:62:1c:07:cd:4d:fd:b3:4e:64:09:4b:0b:5a:c8:ea:ba:a5: 82:2f:d9:c2:a5:f2:89:ba:03:ea:94:76:ff:cc:a2:06:70:db: 42:c3:fc:bc:43:c8:03:a6:3a:30:83:61:08:84:79:bb:1c:69: e6:21:2d:26:e8:24:2e:30:0b:f6:c3:d1:b2:da:bb:0b:ec:c3: 6b:e5:35:78:bf:2e:d3:f9:e1:57:3c:1f:30:ea:46:43:61:45: dc:c0:ca:06:ae:b1:71:36:8c:be:85:bb:65:02:19:ad:20:1d: 63:60:e3:fa:94:54:8b:72:73:6f:d8:f6:fe:21:44:5a:2d:fb: 42:3b:3c:28:9e:3d:28:aa:4a:27:ee:e3:5d:d7:f6:7f:05:3f: c4:b8:ca:14:ed:b2:87:94:02:e6:7c:83:cf:c7:51:7d:02:e4: 18:db:ff:ab:ef:d3:e1:94:80:70:34:95:88:cd:af:a1:c3:a3: 0f:14:c3:8d -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUC6uygVtygkCEsxe7n5gihSSrAZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDhaFw0yNjExMzAxNTUwMDhaMDMxMTAvBgNV BAMTKEJEQkU1QjdERDczQ0ExNzRCMjE5M0Y1NjVFNzgwM0Y3NkIxQTNCQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1y+tVZXjnOMsqEpCYLqCsj4wx OnLvaQmUeKiGzf5f3zwWY41A4R+UrFkmWdbANfnxqr+EX3h6luL5E9D/OctJwkRj vlZ/yi2/Uk/63fMrwJbiWuBwAjHz0XQXzJLi8RrWTF53Zcm3Q/VMDEwl8AHMr3pa AH0cBdTchdy8fglXjnemaOT5ZAHEfpRkmGHJr674mnrU832y5ncQb23Gq0/vdU8I CNyql/R21nR6SSTee2MWC0bNjfeOc5HflsAayk7FCc9Hj/FNERTWDpBqhwptOMEd 2xjpNMyPkEbbgf7oa7OnRsuNJ3Fi2QbD71F7hC1tNmhphF90Z6bu6ajVZhRLAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUvb5bfdc8oXSyGT9WXngD92saO7wwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMxMzEyZTMz MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC50yAwDQYJKoZIhvcNAQELBQADggEBAJZXDSkvwIeAK8T5V3qCkd5DMORudutD /i1nKubN/SCd7kfpHwPkOTWJ9NZWCJdOVNbdy9uOfvuo2gE8+OxMIBIwkD7qpMaW wT1iHAfNTf2zTmQJSwtayOq6pYIv2cKl8om6A+qUdv/MogZw20LD/LxDyAOmOjCD YQiEebscaeYhLSboJC4wC/bD0bLauwvsw2vlNXi/LtP54Vc8HzDqRkNhRdzAygau sXE2jL6Fu2UCGa0gHWNg4/qUVItyc2/Y9v4hRFot+0I7PCiePSiqSifu413X9n8F P8S4yhTtsoeUAuZ8g8/HUX0C5Bjb/6vv0+GUgHA0lYjNr6HDow8Uw40= -----END CERTIFICATE-----Generated at Fri Dec 5 13:12:36 2025 by rpki-client