This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3233372e3134342e302f32332d3234203d3e203437353833.roa File: 3138352e3233372e3134342e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: cvtWaGWhj0gpCD0eWepT8vH0rokLlzj53U18codJ4CI= Subject key identifier: B2:49:3C:14:A8:1B:F3:8D:95:3D:EB:50:E3:BA:5B:66:B4:13:41:3F Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 63AE5808B79132DA33EB668C2A8A2387249CFB29 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3233372e3134342e302f32332d3234203d3e203437353833.roa Signing time: Mon 01 Dec 2025 15:50:04 +0000 ROA not before: Mon 01 Dec 2025 15:45:04 +0000 ROA not after: Mon 30 Nov 2026 15:50:04 +0000 asID: 47583 IP address blocks: 185.237.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ae:58:08:b7:91:32:da:33:eb:66:8c:2a:8a:23:87:24:9c:fb:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:04 2025 GMT Not After : Nov 30 15:50:04 2026 GMT Subject: CN=B2493C14A81BF38D953DEB50E3BA5B66B413413F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:16:bd:f8:53:4a:09:3e:51:f5:c6:99:ce:71: 14:c6:09:80:e3:d0:5f:24:f1:d4:c6:9d:f0:a6:30: d2:b2:15:53:84:c3:6b:a1:28:39:d4:5a:c6:4e:af: 99:73:9d:21:67:14:70:d4:ce:a3:a0:a5:11:58:d0: e6:07:fc:76:e3:1d:cb:83:1d:be:27:55:a0:f5:43: c8:85:3d:ea:e2:10:0a:a8:cc:5a:22:da:61:6b:ca: 22:33:57:65:fc:c8:f9:3b:30:16:22:be:ec:5c:db: c7:89:50:37:e2:9f:a0:ef:a2:29:fd:90:1b:3f:f4: ca:10:d9:21:2b:ed:21:b7:c8:da:0e:26:35:4a:0b: ff:3a:9b:e8:49:c7:ff:31:03:61:15:fe:c3:f5:6c: 02:49:f4:46:67:53:3c:bf:46:8a:2c:7f:49:6c:d5: d1:fc:91:c3:d4:18:f5:fd:d9:16:6d:d2:c8:83:3d: 0e:1e:c2:58:b9:56:d0:39:5c:04:d5:5a:94:c1:0f: be:be:d3:bf:8e:fc:3e:74:e4:9d:7a:fd:a6:c1:e4: 22:a3:9c:2b:99:33:e0:9d:cc:1c:94:e6:76:ad:e5: dd:6d:7a:81:97:a6:f9:b7:e8:ea:5d:b1:6a:a2:d5: 01:e0:85:84:24:5f:5c:ba:72:87:8c:ab:0c:c0:55: ea:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:49:3C:14:A8:1B:F3:8D:95:3D:EB:50:E3:BA:5B:66:B4:13:41:3F X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3233372e3134342e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.144.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:2e:ea:77:d0:8f:08:eb:6c:06:26:cb:3d:da:47:88:5a:4a: ed:53:1a:53:44:dd:6f:e4:b4:45:ba:8b:3e:94:55:c3:bc:07: 86:96:6c:aa:37:4d:92:77:3b:16:e8:9f:3f:d4:ba:03:e8:36: 7e:c0:27:f8:90:0b:bb:f2:31:66:21:c6:97:4b:9d:34:6b:00: 73:f0:97:36:67:3e:16:e4:0f:3f:44:eb:9d:cd:02:c9:06:c3: 04:d5:06:0d:c7:85:0a:1e:a2:49:53:ae:5a:a8:21:2f:b5:c2: 6b:b9:f8:49:72:fc:ad:18:99:76:ef:b2:1a:cf:b0:a0:d2:0e: 25:58:09:d2:3b:ac:85:ca:27:11:bd:ab:7e:ff:d0:77:22:a8: 43:35:5d:e3:16:f5:90:ef:99:bd:a8:5e:53:06:da:a5:a9:30: b8:3e:2a:39:bb:18:8f:d1:61:59:a4:ad:f7:4e:a2:0a:94:5f: 1b:d3:99:36:aa:87:77:f4:e0:46:d3:7f:62:12:9d:39:ad:b7: 37:f6:20:78:26:3e:20:6c:d3:4b:6d:35:25:c1:02:d9:10:2b: 6b:50:eb:da:7a:c6:1a:dd:5e:5f:32:24:ad:35:c3:a6:06:c6: 78:d7:b5:37:eb:e9:85:50:d0:fc:31:4e:bb:d7:88:e7:02:5b: e9:89:5f:65 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUY65YCLeRMtoz62aMKoojhySc+ykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDRaFw0yNjExMzAxNTUwMDRaMDMxMTAvBgNV BAMTKEIyNDkzQzE0QTgxQkYzOEQ5NTNERUI1MEUzQkE1QjY2QjQxMzQxM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Fr34U0oJPlH1xpnOcRTGCYDj 0F8k8dTGnfCmMNKyFVOEw2uhKDnUWsZOr5lznSFnFHDUzqOgpRFY0OYH/HbjHcuD Hb4nVaD1Q8iFPeriEAqozFoi2mFryiIzV2X8yPk7MBYivuxc28eJUDfin6Dvoin9 kBs/9MoQ2SEr7SG3yNoOJjVKC/86m+hJx/8xA2EV/sP1bAJJ9EZnUzy/Roosf0ls 1dH8kcPUGPX92RZt0siDPQ4ewli5VtA5XATVWpTBD76+07+O/D505J16/abB5CKj nCuZM+CdzByU5nat5d1teoGXpvm36OpdsWqi1QHghYQkX1y6coeMqwzAVerbAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUskk8FKgb842VPetQ47pbZrQTQT8wHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMzMzcyZTMx MzQzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAG57ZAwDQYJKoZIhvcNAQELBQADggEBAC8u6nfQjwjrbAYmyz3aR4haSu1TGlNE 3W/ktEW6iz6UVcO8B4aWbKo3TZJ3Oxbonz/UugPoNn7AJ/iQC7vyMWYhxpdLnTRr AHPwlzZnPhbkDz9E653NAskGwwTVBg3HhQoeoklTrlqoIS+1wmu5+Ely/K0YmXbv shrPsKDSDiVYCdI7rIXKJxG9q37/0HciqEM1XeMW9ZDvmb2oXlMG2qWpMLg+Kjm7 GI/RYVmkrfdOogqUXxvTmTaqh3f04EbTf2ISnTmttzf2IHgmPiBs00ttNSXBAtkQ K2tQ69p6xhrdXl8yJK01w6YGxnjXtTfr6YVQ0PwxTrvXiOcCW+mJX2U= -----END CERTIFICATE-----Generated at Fri Dec 5 13:11:00 2025 by rpki-client