This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3233322e31342e302f32342d3234203d3e203437353833.roa File: 3138352e3233322e31342e302f32342d3234203d3e203437353833.roa (raw, json) Hash identifier: yO9QwK/u34wA35b2LvFedWKDTpqqQmKxsKEiKa2MbHM= Subject key identifier: 50:FA:9A:4A:01:C0:84:C4:68:1D:F6:31:C8:08:45:AD:BF:2F:13:C5 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 6F4EE710CDE542003E31430F2DC7797190F63D99 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3233322e31342e302f32342d3234203d3e203437353833.roa Signing time: Mon 01 Dec 2025 15:50:04 +0000 ROA not before: Mon 01 Dec 2025 15:45:04 +0000 ROA not after: Mon 30 Nov 2026 15:50:04 +0000 asID: 47583 IP address blocks: 185.232.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:4e:e7:10:cd:e5:42:00:3e:31:43:0f:2d:c7:79:71:90:f6:3d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:04 2025 GMT Not After : Nov 30 15:50:04 2026 GMT Subject: CN=50FA9A4A01C084C4681DF631C80845ADBF2F13C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3c:44:2f:13:c2:c5:01:e1:95:c7:d3:a3:03: c2:fb:25:b3:48:e0:e0:47:9b:e3:ed:fe:9f:25:28: c6:31:ee:e4:7a:79:17:fa:48:21:29:d0:a3:d0:26: 34:1b:b8:bc:cb:08:d3:3f:f6:4a:fc:7c:8a:26:83: 3d:bd:50:cf:ff:7b:dc:db:1d:d0:d6:65:85:b3:c3: 3b:77:1e:fb:9c:4d:0e:b6:21:ee:1f:0b:23:a7:5d: 88:81:f2:94:8f:22:87:2e:e0:15:77:be:eb:06:d1: 31:ac:5b:a8:b9:ab:84:b1:bd:c8:fa:e1:46:b7:45: 15:0f:ac:33:bb:af:ef:de:db:78:2b:6b:ad:7d:2f: 10:a0:45:00:34:c4:5d:00:0a:a1:5a:5b:b7:39:90: 14:3d:db:73:21:61:db:24:8d:cf:da:96:6f:1e:bd: 64:88:a1:29:85:d9:47:6b:7a:a8:91:a5:34:db:5d: da:ff:f0:cb:f6:45:2f:75:eb:04:01:00:3e:ed:77: 12:b8:0d:67:c1:19:18:d0:d3:47:88:5b:fe:66:e2: 86:1b:60:fb:e8:93:07:be:45:09:a7:c3:e0:92:40: e0:92:b8:b4:b2:33:66:63:f6:d6:9a:dc:d0:86:f9: c4:9c:6e:65:d1:f9:de:43:45:be:20:0a:86:6c:3a: 78:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:FA:9A:4A:01:C0:84:C4:68:1D:F6:31:C8:08:45:AD:BF:2F:13:C5 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3233322e31342e302f32342d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.14.0/24 Signature Algorithm: sha256WithRSAEncryption ab:0d:cc:70:a3:06:89:61:9c:01:c2:9a:31:19:6e:ad:36:fe: e3:69:f1:bc:56:78:f9:79:e1:e7:7e:14:d6:b3:69:68:a4:56: af:ab:73:de:9a:ce:30:e4:69:1e:a2:b6:9b:21:4f:03:84:07: 9c:fd:da:06:c1:ab:3d:c8:78:be:aa:aa:91:12:69:06:b5:1b: 23:a8:2c:ae:f7:bd:05:c5:fd:a8:b8:17:53:29:2e:f8:33:34: c6:6d:88:a5:77:93:b9:aa:fa:22:45:8b:8f:b4:0e:b5:66:97: 4c:9e:17:11:45:1d:60:19:3d:df:0e:26:e9:b5:66:74:c0:a6: 27:fe:54:78:23:54:4e:f7:10:66:56:e4:ee:c8:cf:75:6e:0f: f5:72:f6:fc:c6:08:0f:38:b5:5e:7c:d0:fc:aa:62:38:79:3f: 98:50:b3:62:68:ea:a9:9a:69:9c:4d:21:b1:f7:a7:7c:57:e3: 71:0b:30:33:d1:d9:c9:e8:48:43:d3:bc:21:11:bc:e5:c3:26: 34:9c:39:be:a6:0a:14:8e:d8:6c:13:6b:53:6d:f2:ba:67:65: 07:ef:28:43:d7:48:d3:4f:9e:08:24:49:fe:82:99:d6:9e:51: 8f:71:f9:5d:04:5e:68:e4:22:98:68:6b:50:ff:0b:5e:b3:04: 5e:69:d7:a4 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUb07nEM3lQgA+MUMPLcd5cZD2PZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDRaFw0yNjExMzAxNTUwMDRaMDMxMTAvBgNV BAMTKDUwRkE5QTRBMDFDMDg0QzQ2ODFERjYzMUM4MDg0NUFEQkYyRjEzQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8PEQvE8LFAeGVx9OjA8L7JbNI 4OBHm+Pt/p8lKMYx7uR6eRf6SCEp0KPQJjQbuLzLCNM/9kr8fIomgz29UM//e9zb HdDWZYWzwzt3HvucTQ62Ie4fCyOnXYiB8pSPIocu4BV3vusG0TGsW6i5q4Sxvcj6 4Ua3RRUPrDO7r+/e23gra619LxCgRQA0xF0ACqFaW7c5kBQ923MhYdskjc/alm8e vWSIoSmF2UdreqiRpTTbXdr/8Mv2RS916wQBAD7tdxK4DWfBGRjQ00eIW/5m4oYb YPvokwe+RQmnw+CSQOCSuLSyM2Zj9taa3NCG+cScbmXR+d5DRb4gCoZsOnjdAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUUPqaSgHAhMRoHfYxyAhFrb8vE8UwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMzMzIyZTMx MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA uegOMA0GCSqGSIb3DQEBCwUAA4IBAQCrDcxwowaJYZwBwpoxGW6tNv7jafG8Vnj5 eeHnfhTWs2lopFavq3Pems4w5GkeorabIU8DhAec/doGwas9yHi+qqqREmkGtRsj qCyu970Fxf2ouBdTKS74MzTGbYild5O5qvoiRYuPtA61ZpdMnhcRRR1gGT3fDibp tWZ0wKYn/lR4I1RO9xBmVuTuyM91bg/1cvb8xggPOLVefND8qmI4eT+YULNiaOqp mmmcTSGx96d8V+NxCzAz0dnJ6EhD07whEbzlwyY0nDm+pgoUjthsE2tTbfK6Z2UH 7yhD10jTT54IJEn+gpnWnlGPcfldBF5o5CKYaGtQ/wteswReadek -----END CERTIFICATE-----Generated at Fri Dec 5 13:08:36 2025 by rpki-client