This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231312e33342e302f32342d3332203d3e20313336373837.roa File: 3138352e3231312e33342e302f32342d3332203d3e20313336373837.roa (raw, json) Hash identifier: J2LsXO0t3vekdSyymRwNHKh9cJuYjwACFxi4DUhKMTA= Subject key identifier: F5:AB:55:70:C4:A8:B4:E0:C2:ED:D3:14:6E:3C:C2:82:10:52:7D:89 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 779CE31601F3A3892E63247368E8DDAF7F4DEB87 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231312e33342e302f32342d3332203d3e20313336373837.roa Signing time: Mon 01 Dec 2025 15:50:10 +0000 ROA not before: Mon 01 Dec 2025 15:45:10 +0000 ROA not after: Mon 30 Nov 2026 15:50:10 +0000 asID: 136787 IP address blocks: 185.211.34.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:9c:e3:16:01:f3:a3:89:2e:63:24:73:68:e8:dd:af:7f:4d:eb:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:10 2025 GMT Not After : Nov 30 15:50:10 2026 GMT Subject: CN=F5AB5570C4A8B4E0C2EDD3146E3CC28210527D89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:00:80:41:6f:45:fc:ab:d2:1d:f0:7e:94:ea: ae:0b:c9:f2:a8:da:ce:c2:58:6a:92:f1:be:61:5b: ad:40:b3:9f:3d:f0:52:7d:30:0d:6e:51:0c:92:07: 08:cc:d2:9f:f8:c4:40:74:d5:a0:83:04:37:6f:d3: 21:1e:60:35:62:2f:2c:94:d8:09:4c:2b:d6:15:2a: 4c:eb:ef:38:36:35:45:7a:b3:5a:ee:85:41:b6:76: af:c1:8d:93:8b:00:f1:97:4d:c0:a4:df:62:8a:b2: 9d:35:9e:12:ab:f5:ba:12:39:ed:e6:2c:0c:3c:d8: 47:2a:e6:f3:0b:78:11:36:3d:b3:2a:4f:3a:bf:0b: 66:cd:ed:7c:a6:90:a3:ff:99:f5:09:3d:89:35:cc: b6:ce:22:ef:77:0b:29:68:a7:b2:3c:c3:c6:16:fd: 5e:0e:7b:a6:c7:90:f4:e8:1a:d0:c8:a7:22:2b:6f: f9:a2:85:50:0a:ef:d6:9b:ca:39:8f:2e:7d:db:60: b1:ce:40:29:54:20:81:40:fe:28:65:d7:13:ba:3c: 71:95:19:ee:ec:d0:65:4a:57:2e:fe:3f:97:0f:0c: 52:2e:44:91:95:9a:76:4a:75:82:ec:db:b9:a0:b2: 11:e2:9b:8a:d6:9a:f7:4b:2b:02:c9:1a:69:18:85: 5c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AB:55:70:C4:A8:B4:E0:C2:ED:D3:14:6E:3C:C2:82:10:52:7D:89 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231312e33342e302f32342d3332203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.34.0/24 Signature Algorithm: sha256WithRSAEncryption 69:bc:90:2c:19:51:84:70:bb:6b:e0:48:b7:81:6d:bf:11:36: 2a:fe:ca:a5:dd:67:cb:dd:1a:f9:9e:6e:31:9a:f4:04:c7:3f: 58:af:7b:a3:db:ca:4d:a1:a6:01:bb:64:ab:5b:42:e8:a0:9d: de:6e:96:46:32:66:85:c2:c6:e1:47:f6:59:84:20:13:0d:a0: b9:d9:ff:70:65:a6:2e:02:94:98:79:8f:88:56:31:a2:dd:62: c1:16:5c:cb:76:8f:43:6a:af:af:9a:0f:a6:ba:63:1d:d5:c9: 96:12:46:ea:83:32:47:b9:81:5b:2d:4d:46:e1:2b:25:f2:6b: 33:86:7c:0a:e7:6e:db:41:fa:73:8a:be:78:9f:1f:0d:a0:80: 98:bc:08:04:0e:c1:9b:7b:bf:34:06:cf:bb:35:e9:84:53:b9: 0c:84:ae:82:7b:8c:ac:c0:c8:6d:c9:0c:ca:5e:c2:6a:17:0a: 62:17:57:2a:46:47:c2:c1:ef:d3:9b:da:49:12:4f:85:7e:7f: a2:f9:49:6d:63:31:48:61:cd:07:eb:a1:ca:27:79:07:66:3f: 12:a3:f9:de:0a:5d:56:34:73:70:2c:87:f1:0b:01:72:0b:b3: 91:ff:46:b8:37:e7:3d:51:db:60:6e:1d:b8:f5:e1:c9:a9:2a: 68:96:eb:ed -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUd5zjFgHzo4kuYyRzaOjdr39N64cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MTBaFw0yNjExMzAxNTUwMTBaMDMxMTAvBgNV BAMTKEY1QUI1NTcwQzRBOEI0RTBDMkVERDMxNDZFM0NDMjgyMTA1MjdEODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5AIBBb0X8q9Id8H6U6q4LyfKo 2s7CWGqS8b5hW61As5898FJ9MA1uUQySBwjM0p/4xEB01aCDBDdv0yEeYDViLyyU 2AlMK9YVKkzr7zg2NUV6s1ruhUG2dq/BjZOLAPGXTcCk32KKsp01nhKr9boSOe3m LAw82Ecq5vMLeBE2PbMqTzq/C2bN7XymkKP/mfUJPYk1zLbOIu93Cylop7I8w8YW /V4Oe6bHkPToGtDIpyIrb/mihVAK79abyjmPLn3bYLHOQClUIIFA/ihl1xO6PHGV Ge7s0GVKVy7+P5cPDFIuRJGVmnZKdYLs27mgshHim4rWmvdLKwLJGmkYhVwLAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU9atVcMSotODC7dMUbjzCghBSfYkwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMxMzEyZTMz MzQyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC50yIwDQYJKoZIhvcNAQELBQADggEBAGm8kCwZUYRwu2vgSLeBbb8RNir+yqXd Z8vdGvmebjGa9ATHP1ive6Pbyk2hpgG7ZKtbQuignd5ulkYyZoXCxuFH9lmEIBMN oLnZ/3Blpi4ClJh5j4hWMaLdYsEWXMt2j0Nqr6+aD6a6Yx3VyZYSRuqDMke5gVst TUbhKyXyazOGfArnbttB+nOKvnifHw2ggJi8CAQOwZt7vzQGz7s16YRTuQyEroJ7 jKzAyG3JDMpewmoXCmIXVypGR8LB79Ob2kkST4V+f6L5SW1jMUhhzQfroconeQdm PxKj+d4KXVY0c3Ash/ELAXILs5H/Rrg35z1R22BuHbj14cmpKmiW6+0= -----END CERTIFICATE-----Generated at Fri Dec 5 13:10:59 2025 by rpki-client