This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231362e3233302e302f32342d3234203d3e20313336373837.roa File: 3138352e3231362e3233302e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: xA2nC2K+bhMZ7EcHGT5xXOzpxXI+sKCLi2TYR87WAFY= Subject key identifier: 83:14:01:B7:08:C8:07:34:75:75:9D:06:DB:71:32:BB:A7:68:E1:CD Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 4B6208632EAD6FA720F91046D9C1045C7A8D90A1 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231362e3233302e302f32342d3234203d3e20313336373837.roa Signing time: Mon 01 Dec 2025 15:50:06 +0000 ROA not before: Mon 01 Dec 2025 15:45:06 +0000 ROA not after: Mon 30 Nov 2026 15:50:06 +0000 asID: 136787 IP address blocks: 185.216.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:62:08:63:2e:ad:6f:a7:20:f9:10:46:d9:c1:04:5c:7a:8d:90:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:06 2025 GMT Not After : Nov 30 15:50:06 2026 GMT Subject: CN=831401B708C8073475759D06DB7132BBA768E1CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:20:09:6d:5c:52:34:48:36:fb:f8:30:8a:fc: c1:f9:f3:b1:ae:61:68:08:7e:06:85:a3:73:36:37: 73:2f:f7:43:d1:a2:33:de:9e:39:ee:1a:ca:73:8b: ee:fc:fb:31:54:83:48:10:e7:b8:d3:5d:0c:d2:c5: 26:fb:69:bc:c1:3a:40:65:9d:9b:06:99:55:42:df: 91:b5:a0:41:6d:fc:e7:18:9a:7c:82:83:c1:67:9b: b4:22:e4:a3:e9:1d:9e:a6:54:83:cf:48:cf:43:12: 63:cc:8d:aa:c5:bc:76:f3:6b:73:64:ce:bd:c3:d5: 83:bd:bf:0c:f5:bd:f4:f2:5e:2e:62:5c:62:1e:d1: 78:14:af:06:3b:bb:51:42:a1:12:c6:25:d4:55:7a: 03:78:be:c4:45:6c:6f:2b:8c:0f:3d:5b:6b:1f:7d: 2e:87:1f:4e:83:e2:a2:d6:33:e0:49:d1:ba:be:f7: 0b:2f:99:51:84:12:5a:fa:d8:e3:54:fd:5a:9c:2e: c3:42:e2:b5:f9:69:7f:ce:80:36:ea:ca:77:80:bf: d8:0a:97:4c:09:fa:f5:bb:0c:e4:d6:9b:82:77:1e: 14:52:dd:e7:c5:58:ce:9e:c9:99:c4:03:b9:93:89: 53:fc:04:d9:00:e4:9c:fb:78:d7:a3:f0:4e:2b:82: 30:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:14:01:B7:08:C8:07:34:75:75:9D:06:DB:71:32:BB:A7:68:E1:CD X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231362e3233302e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.216.230.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:15:56:a0:52:ff:f9:6f:ff:22:d8:18:32:e0:0d:da:a2:25: 02:c4:8f:c8:37:01:af:8a:4f:6a:86:ca:4d:11:17:34:59:8a: f9:a4:75:cb:ff:8e:3c:6e:13:24:71:cd:07:d5:72:d3:8b:23: 0a:fd:f7:f8:c3:14:91:00:97:e1:89:5a:ca:c6:d2:06:69:c8: ad:bb:54:3f:22:6e:8c:0b:b1:e7:97:10:22:9c:c4:3d:0a:b9: 98:5d:b8:0e:76:86:f6:e3:92:d4:d1:94:21:17:6f:83:f0:61: 55:77:11:bc:b2:38:07:57:9b:65:31:01:20:8c:5a:28:91:de: 42:4d:c9:35:da:ff:19:5a:39:1b:c2:df:db:ba:fa:5a:dc:0f: e6:e6:41:4a:fd:57:3c:57:70:66:e9:d8:4c:3e:19:83:cf:27: 86:af:2c:74:3d:a4:ca:16:c8:fd:f1:2a:e8:26:fa:10:90:79: 51:c5:45:9b:e1:b5:1e:2a:9c:06:37:da:a4:6e:ef:57:89:b5: d7:be:af:63:57:1a:da:8f:65:03:ab:3b:21:2d:90:ec:01:3e: b8:37:29:1f:f5:45:76:13:9c:5f:a4:74:34:45:a6:96:15:d9: ab:5d:b0:ec:3b:05:9d:53:b9:1b:4b:70:ae:07:fd:36:f1:dc: 4d:6c:16:20 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUS2IIYy6tb6cg+RBG2cEEXHqNkKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDZaFw0yNjExMzAxNTUwMDZaMDMxMTAvBgNV BAMTKDgzMTQwMUI3MDhDODA3MzQ3NTc1OUQwNkRCNzEzMkJCQTc2OEUxQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXIAltXFI0SDb7+DCK/MH587Gu YWgIfgaFo3M2N3Mv90PRojPenjnuGspzi+78+zFUg0gQ57jTXQzSxSb7abzBOkBl nZsGmVVC35G1oEFt/OcYmnyCg8Fnm7Qi5KPpHZ6mVIPPSM9DEmPMjarFvHbza3Nk zr3D1YO9vwz1vfTyXi5iXGIe0XgUrwY7u1FCoRLGJdRVegN4vsRFbG8rjA89W2sf fS6HH06D4qLWM+BJ0bq+9wsvmVGEElr62ONU/VqcLsNC4rX5aX/OgDbqyneAv9gK l0wJ+vW7DOTWm4J3HhRS3efFWM6eyZnEA7mTiVP8BNkA5Jz7eNej8E4rgjBjAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUgxQBtwjIBzR1dZ0G23Eyu6do4c0wHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMxMzYyZTMy MzMzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALnY5jANBgkqhkiG9w0BAQsFAAOCAQEAGhVWoFL/+W//ItgYMuAN2qIlAsSP yDcBr4pPaobKTREXNFmK+aR1y/+OPG4TJHHNB9Vy04sjCv33+MMUkQCX4YlaysbS BmnIrbtUPyJujAux55cQIpzEPQq5mF24DnaG9uOS1NGUIRdvg/BhVXcRvLI4B1eb ZTEBIIxaKJHeQk3JNdr/GVo5G8Lf27r6WtwP5uZBSv1XPFdwZunYTD4Zg88nhq8s dD2kyhbI/fEq6Cb6EJB5UcVFm+G1HiqcBjfapG7vV4m1176vY1ca2o9lA6s7IS2Q 7AE+uDcpH/VFdhOcX6R0NEWmlhXZq12w7DsFnVO5G0twrgf9NvHcTWwWIA== -----END CERTIFICATE-----Generated at Fri Dec 5 13:10:28 2025 by rpki-client