This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231342e3132362e302f32332d3234203d3e203437353833.roa File: 3138352e3231342e3132362e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: X2tZ5E4u/K7VCFkhIELo5JPdTxxa6+b40uV9OAVK3IM= Subject key identifier: CD:B7:6B:72:C3:F6:57:18:C7:1C:94:D1:B9:57:1E:BF:86:31:A1:85 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 638C9D0445B52C75BADDFEA3698CE7C204722F2E Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231342e3132362e302f32332d3234203d3e203437353833.roa Signing time: Mon 01 Dec 2025 15:50:04 +0000 ROA not before: Mon 01 Dec 2025 15:45:04 +0000 ROA not after: Mon 30 Nov 2026 15:50:04 +0000 asID: 47583 IP address blocks: 185.214.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:8c:9d:04:45:b5:2c:75:ba:dd:fe:a3:69:8c:e7:c2:04:72:2f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:04 2025 GMT Not After : Nov 30 15:50:04 2026 GMT Subject: CN=CDB76B72C3F65718C71C94D1B9571EBF8631A185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2d:18:d8:22:ef:d4:d6:9f:a9:c5:93:c1:e9: 19:08:4d:04:6c:e7:9d:ad:96:6f:de:df:98:d5:e8: f7:eb:a1:12:9a:b3:c4:ae:b1:ea:7b:9b:28:3f:c6: 46:c9:09:1b:d8:8e:c9:07:41:c2:57:44:5c:12:8b: f6:9a:be:f4:bb:60:d7:9d:5f:19:6c:ea:50:a9:34: 7a:96:43:fd:26:67:7f:50:82:b2:20:8a:12:16:a3: 0a:9d:2a:f5:f3:a1:66:64:31:d5:2d:75:1a:a1:81: 38:40:18:68:93:cf:d9:f3:ed:8d:3d:e0:2d:ac:d7: 6e:12:48:4b:78:42:78:b2:57:25:1d:d6:46:af:fd: 32:d7:04:9f:20:69:85:d4:44:58:cd:bc:7d:9a:5e: f1:dd:2f:81:0d:f9:97:77:cf:4f:25:fb:6c:1d:48: be:8d:c7:ab:b6:7f:a1:9e:23:23:fc:d5:6a:47:01: 20:19:bc:8c:7c:34:e2:e3:ee:04:80:a1:39:00:83: e5:b5:b7:99:9d:51:e3:9c:d4:c6:27:d7:89:57:d5: a7:aa:06:1c:9a:41:81:7f:6b:a4:f7:ce:69:c9:19: d4:ee:1d:a0:f4:83:be:9f:b5:31:de:9d:ea:dd:1f: 3f:06:b1:aa:bd:b5:af:cb:5d:2b:c2:7a:4c:c4:8b: e5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B7:6B:72:C3:F6:57:18:C7:1C:94:D1:B9:57:1E:BF:86:31:A1:85 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231342e3132362e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.214.126.0/23 Signature Algorithm: sha256WithRSAEncryption b1:4f:dd:20:d6:8f:99:79:4e:d4:16:82:ee:89:8c:ee:c4:38: 35:49:03:ce:ef:84:17:db:85:c4:f7:bb:34:03:81:04:b3:5f: 02:6f:21:22:8d:b5:d6:48:6e:0c:4d:4d:09:86:bd:e6:82:65: 26:23:c3:cd:21:9f:ee:15:5f:f5:9e:b3:28:64:f2:01:0f:3b: 18:1a:ca:5e:15:5c:81:a4:45:d9:7a:7b:ac:0f:26:e1:1a:ac: 7b:7a:83:7b:a2:69:ac:f0:a4:fc:5d:88:df:da:54:d6:34:6c: 0e:7a:1f:eb:4c:3c:83:8f:6e:6b:03:8c:57:6f:d7:66:a4:c8: e8:aa:06:8c:1c:2b:29:6b:ad:68:40:4e:c7:70:f9:a1:1d:7f: 13:ce:3b:db:c7:c4:c7:a1:c1:fd:3c:11:17:a0:a8:51:aa:5b: 74:1d:0e:ae:1f:e3:31:c6:3a:2b:b0:7a:0d:bf:0d:a5:11:33: 69:30:13:a1:ec:90:f1:8e:f8:ca:9e:b1:bc:45:84:38:04:d3: f1:fe:02:9b:bb:92:73:a0:0b:c5:50:7c:72:08:f4:66:a9:a0: 58:30:9a:8f:2b:82:22:7a:2f:a1:2c:c4:02:7d:84:12:8d:46: 92:55:ae:cd:5b:3a:f8:53:de:d1:8b:de:ec:6b:db:d0:a1:3f: b0:32:5b:cc -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUY4ydBEW1LHW63f6jaYznwgRyLy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDRaFw0yNjExMzAxNTUwMDRaMDMxMTAvBgNV BAMTKENEQjc2QjcyQzNGNjU3MThDNzFDOTREMUI5NTcxRUJGODYzMUExODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMLRjYIu/U1p+pxZPB6RkITQRs 552tlm/e35jV6PfroRKas8Susep7myg/xkbJCRvYjskHQcJXRFwSi/aavvS7YNed Xxls6lCpNHqWQ/0mZ39QgrIgihIWowqdKvXzoWZkMdUtdRqhgThAGGiTz9nz7Y09 4C2s124SSEt4QniyVyUd1kav/TLXBJ8gaYXURFjNvH2aXvHdL4EN+Zd3z08l+2wd SL6Nx6u2f6GeIyP81WpHASAZvIx8NOLj7gSAoTkAg+W1t5mdUeOc1MYn14lX1aeq BhyaQYF/a6T3zmnJGdTuHaD0g76ftTHenerdHz8Gsaq9ta/LXSvCekzEi+X3AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUzbdrcsP2VxjHHJTRuVcev4YxoYUwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMxMzQyZTMx MzIzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAG51n4wDQYJKoZIhvcNAQELBQADggEBALFP3SDWj5l5TtQWgu6JjO7EODVJA87v hBfbhcT3uzQDgQSzXwJvISKNtdZIbgxNTQmGveaCZSYjw80hn+4VX/Wesyhk8gEP Oxgayl4VXIGkRdl6e6wPJuEarHt6g3uiaazwpPxdiN/aVNY0bA56H+tMPIOPbmsD jFdv12akyOiqBowcKylrrWhATsdw+aEdfxPOO9vHxMehwf08ERegqFGqW3QdDq4f 4zHGOiuweg2/DaURM2kwE6HskPGO+MqesbxFhDgE0/H+Apu7knOgC8VQfHII9Gap oFgwmo8rgiJ6L6EsxAJ9hBKNRpJVrs1bOvhT3tGL3uxr29ChP7AyW8w= -----END CERTIFICATE-----Generated at Fri Dec 5 13:10:59 2025 by rpki-client