This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232392e3131342e302f32332d3234203d3e203437353833.roa File: 3138352e3232392e3131342e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: BIuWUjKZbmCe7vO/B6OnDSIsE2We07cbSMt22JTtBwg= Subject key identifier: B0:83:A1:E6:C1:47:58:C4:96:CE:2D:77:CF:37:9C:A2:65:18:F5:5A Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 1FE3115D5208ED0108FEF1A42BB1C353FB770AAD Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232392e3131342e302f32332d3234203d3e203437353833.roa Signing time: Mon 01 Dec 2025 15:50:03 +0000 ROA not before: Mon 01 Dec 2025 15:45:03 +0000 ROA not after: Mon 30 Nov 2026 15:50:03 +0000 asID: 47583 IP address blocks: 185.229.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e3:11:5d:52:08:ed:01:08:fe:f1:a4:2b:b1:c3:53:fb:77:0a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:03 2025 GMT Not After : Nov 30 15:50:03 2026 GMT Subject: CN=B083A1E6C14758C496CE2D77CF379CA26518F55A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c7:69:7e:b6:c2:fc:4c:15:9b:a4:f2:6c:e8: 55:5b:83:4b:70:64:93:0f:fe:cd:d0:6d:28:0f:85: 46:a8:c9:69:84:c5:13:53:6b:9e:0a:df:4b:08:89: 65:9b:b8:ab:6c:22:d7:69:48:35:ef:1b:f7:ba:a9: 96:84:f0:dd:0f:d1:29:b6:46:c8:d9:0e:ea:f1:c9: 2c:52:f9:80:8e:d8:9b:ff:ee:9f:26:3a:78:98:32: 75:3d:bc:69:6b:48:b7:7b:6d:e3:f3:95:3e:43:40: bb:2b:a2:41:3a:3d:bc:3d:51:fe:50:5c:de:51:d7: b6:b9:fb:18:30:a6:bc:34:5e:ca:0e:dd:9e:b8:fc: 37:15:00:02:90:77:cd:61:a3:f8:c3:66:66:18:ca: bf:b4:18:07:07:5c:79:f8:11:a1:82:d6:3d:14:4d: 79:67:a3:fa:1f:de:39:5c:fd:8a:9f:f2:2c:ba:75: d9:a6:b1:42:43:c8:97:68:a5:1e:cb:ea:2d:8d:a6: 88:4b:ac:4e:f6:04:c6:14:d3:6e:a3:7d:9c:30:58: 43:ce:9a:7e:e8:f7:1a:2c:9b:b5:df:93:0b:69:54: 8c:83:6b:d9:8a:b2:ae:c0:70:c4:f1:36:d3:3f:7c: 1c:02:26:02:cb:55:8c:52:d7:6e:a5:5e:c8:e3:92: 8b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:83:A1:E6:C1:47:58:C4:96:CE:2D:77:CF:37:9C:A2:65:18:F5:5A X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232392e3131342e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.114.0/23 Signature Algorithm: sha256WithRSAEncryption ac:13:cc:e4:12:b9:24:0b:b2:a5:b1:c2:b2:59:bc:64:de:60: 65:f2:f0:ec:b0:11:e7:3b:ff:e5:e6:d2:36:a5:38:52:87:fc: 60:8c:06:6d:ae:69:e8:a3:cb:11:94:b6:97:56:77:a5:1b:35: bf:62:c1:97:bf:f3:17:d1:0a:90:04:12:94:5f:47:37:e2:82: 27:e5:dc:d4:2d:bd:b3:70:19:54:6a:e7:85:f8:56:0a:56:d3: 57:cd:83:ba:83:7b:5f:f4:9c:d8:71:07:a4:07:3c:f6:40:04: 88:b2:97:e2:12:e0:7a:7d:c1:75:69:42:95:d0:67:17:75:95: 5c:82:62:6b:11:ab:d5:f9:49:02:78:87:f8:32:24:76:1e:b7: de:9a:04:ca:cc:31:32:7c:6d:81:28:a2:c7:f3:ff:c0:26:49: e7:a4:a1:11:80:0c:fd:55:90:5c:5e:45:71:4f:05:a2:f1:3c: c9:ec:61:ba:1e:50:2a:55:d1:50:9e:58:dd:bb:f9:9d:13:bb: 6f:ce:0d:43:6c:4e:1d:68:61:d2:8e:9b:d1:ad:81:6f:24:b4: 7e:85:7a:d9:fd:f2:f8:f5:87:ff:9c:44:33:57:51:78:aa:b3: 7a:bf:29:87:de:53:11:5b:60:5d:ad:61:bf:84:75:85:23:69: 29:c1:1f:66 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUH+MRXVII7QEI/vGkK7HDU/t3Cq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDNaFw0yNjExMzAxNTUwMDNaMDMxMTAvBgNV BAMTKEIwODNBMUU2QzE0NzU4QzQ5NkNFMkQ3N0NGMzc5Q0EyNjUxOEY1NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1x2l+tsL8TBWbpPJs6FVbg0tw ZJMP/s3QbSgPhUaoyWmExRNTa54K30sIiWWbuKtsItdpSDXvG/e6qZaE8N0P0Sm2 RsjZDurxySxS+YCO2Jv/7p8mOniYMnU9vGlrSLd7bePzlT5DQLsrokE6Pbw9Uf5Q XN5R17a5+xgwprw0XsoO3Z64/DcVAAKQd81ho/jDZmYYyr+0GAcHXHn4EaGC1j0U TXlno/of3jlc/Yqf8iy6ddmmsUJDyJdopR7L6i2NpohLrE72BMYU026jfZwwWEPO mn7o9xosm7XfkwtpVIyDa9mKsq7AcMTxNtM/fBwCJgLLVYxS126lXsjjkosXAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUsIOh5sFHWMSWzi13zzecomUY9VowHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMyMzkyZTMx MzEzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAG55XIwDQYJKoZIhvcNAQELBQADggEBAKwTzOQSuSQLsqWxwrJZvGTeYGXy8Oyw Eec7/+Xm0jalOFKH/GCMBm2uaeijyxGUtpdWd6UbNb9iwZe/8xfRCpAEEpRfRzfi gifl3NQtvbNwGVRq54X4VgpW01fNg7qDe1/0nNhxB6QHPPZABIiyl+IS4Hp9wXVp QpXQZxd1lVyCYmsRq9X5SQJ4h/gyJHYet96aBMrMMTJ8bYEoosfz/8AmSeekoRGA DP1VkFxeRXFPBaLxPMnsYboeUCpV0VCeWN27+Z0Tu2/ODUNsTh1oYdKOm9GtgW8k tH6Fetn98vj1h/+cRDNXUXiqs3q/KYfeUxFbYF2tYb+EdYUjaSnBH2Y= -----END CERTIFICATE-----Generated at Fri Dec 5 13:09:15 2025 by rpki-client