This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232382e342e302f32322d3234203d3e20323034313730.roa File: 3138352e3232382e342e302f32322d3234203d3e20323034313730.roa (raw, json) Hash identifier: zpQe9OHytZF50pryD7FPt17VQeSV9fuyKg3wy/BQdaI= Subject key identifier: 44:C2:18:66:E0:2D:46:C4:D3:A3:8A:B0:05:BC:0F:48:E8:37:85:26 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 160D26EE5675218A6A713507FE4C7DDF93182F2D Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232382e342e302f32322d3234203d3e20323034313730.roa Signing time: Mon 01 Dec 2025 15:50:02 +0000 ROA not before: Mon 01 Dec 2025 15:45:02 +0000 ROA not after: Mon 30 Nov 2026 15:50:02 +0000 asID: 204170 IP address blocks: 185.228.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:0d:26:ee:56:75:21:8a:6a:71:35:07:fe:4c:7d:df:93:18:2f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:02 2025 GMT Not After : Nov 30 15:50:02 2026 GMT Subject: CN=44C21866E02D46C4D3A38AB005BC0F48E8378526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:86:f0:c2:56:20:b3:96:e4:cb:1f:81:e9:b8: c6:2e:c6:ac:64:5a:e1:24:c2:65:21:5c:56:9f:d6: 6a:0c:43:bf:48:a7:15:ba:9b:87:de:95:89:28:05: fe:c1:5b:49:f6:46:b3:3f:17:2d:03:75:83:8f:3e: e5:de:70:2c:36:dd:fb:33:06:a6:16:43:e1:d2:57: 93:30:63:05:e4:55:dd:33:08:3e:df:6c:23:66:c5: 7b:6e:96:8f:b9:cc:f1:2a:9b:87:a2:ba:82:2c:0b: 86:d5:cc:73:13:d3:63:97:b2:42:68:db:69:5c:72: c8:e8:12:2a:c4:c0:36:1e:cc:28:6e:86:3f:07:74: 75:34:50:d9:45:60:62:37:c8:1a:6d:7e:71:3c:68: 46:b3:75:8e:13:fa:09:e1:f9:b7:e2:c9:c6:f5:fa: 7f:46:d9:38:c8:84:ec:a7:93:c8:5c:85:7d:6b:87: 32:39:d9:ad:b8:48:ac:3b:1c:1d:7b:fc:aa:e7:31: f7:b5:08:c0:a7:92:5b:b6:cd:1c:67:17:00:b9:76: d1:64:b0:83:a0:24:b0:e4:c4:fe:a9:77:46:c0:d8: df:cf:70:7e:d4:c1:f0:20:6d:f5:0e:9a:4f:da:2f: 9a:23:4a:f2:9d:94:45:fb:15:0b:1f:94:d7:c6:7f: 08:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C2:18:66:E0:2D:46:C4:D3:A3:8A:B0:05:BC:0F:48:E8:37:85:26 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232382e342e302f32322d3234203d3e20323034313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.4.0/22 Signature Algorithm: sha256WithRSAEncryption 18:2d:cf:b9:da:fb:b4:b9:f4:c6:a2:43:c7:dc:e6:02:dd:c2: 74:0a:8d:e9:5b:00:06:05:37:60:16:80:44:6b:71:9e:98:dd: ae:a7:7e:cc:b3:77:75:f3:85:03:38:63:35:72:96:76:21:3b: 89:3d:e3:25:79:bc:9a:8e:89:c8:da:41:e5:9a:1c:da:53:14: 25:2c:b1:64:81:fc:32:e5:eb:b1:43:c8:3e:15:e4:dd:da:59: 8e:76:c3:bb:a1:cd:ce:54:75:57:35:f2:1e:a1:bb:da:57:ec: 1a:12:e9:a3:e7:b5:22:07:62:8f:4a:85:6b:95:0a:9b:16:9f: 1a:3b:7e:4b:5a:34:71:8e:83:19:84:8b:e8:29:ae:90:86:5f: 2b:2d:86:91:0e:c6:c4:57:e2:b7:a6:49:1a:81:31:a3:46:fb: c8:a0:11:42:ed:c2:6d:57:16:ce:6e:f7:da:83:01:f7:fc:d3: 63:5b:72:58:9d:33:9f:c9:93:9d:17:0f:2d:0a:e3:63:07:0e: d8:49:36:f0:61:c0:21:6c:8e:ad:f7:3e:b6:65:21:d3:dd:c1: 31:28:69:81:18:78:97:06:b7:d0:a2:42:37:b2:b5:5e:a9:21: af:46:82:2c:f4:cb:14:0b:e6:c4:dd:2d:3d:6a:1f:c8:46:10: 6d:a5:6a:c5 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUFg0m7lZ1IYpqcTUH/kx935MYLy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDJaFw0yNjExMzAxNTUwMDJaMDMxMTAvBgNV BAMTKDQ0QzIxODY2RTAyRDQ2QzREM0EzOEFCMDA1QkMwRjQ4RTgzNzg1MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhvDCViCzluTLH4HpuMYuxqxk WuEkwmUhXFaf1moMQ79IpxW6m4felYkoBf7BW0n2RrM/Fy0DdYOPPuXecCw23fsz BqYWQ+HSV5MwYwXkVd0zCD7fbCNmxXtulo+5zPEqm4eiuoIsC4bVzHMT02OXskJo 22lccsjoEirEwDYezChuhj8HdHU0UNlFYGI3yBptfnE8aEazdY4T+gnh+bfiycb1 +n9G2TjIhOynk8hchX1rhzI52a24SKw7HB17/KrnMfe1CMCnklu2zRxnFwC5dtFk sIOgJLDkxP6pd0bA2N/PcH7UwfAgbfUOmk/aL5ojSvKdlEX7FQsflNfGfwhXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQURMIYZuAtRsTTo4qwBbwPSOg3hSYwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMyMzgyZTM0 MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMDM0MzEzNzMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC ueQEMA0GCSqGSIb3DQEBCwUAA4IBAQAYLc+52vu0ufTGokPH3OYC3cJ0Co3pWwAG BTdgFoBEa3GemN2up37Ms3d184UDOGM1cpZ2ITuJPeMlebyajonI2kHlmhzaUxQl LLFkgfwy5euxQ8g+FeTd2lmOdsO7oc3OVHVXNfIeobvaV+waEumj57UiB2KPSoVr lQqbFp8aO35LWjRxjoMZhIvoKa6Qhl8rLYaRDsbEV+K3pkkagTGjRvvIoBFC7cJt VxbObvfagwH3/NNjW3JYnTOfyZOdFw8tCuNjBw7YSTbwYcAhbI6t9z62ZSHT3cEx KGmBGHiXBrfQokI3srVeqSGvRoIs9MsUC+bE3S09ah/IRhBtpWrF -----END CERTIFICATE-----Generated at Fri Dec 5 13:09:27 2025 by rpki-client