This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32332d3234203d3e20383334.roa File: 3138352e3232362e3135342e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: XhroP15uKJJwme6oHchjth4p3Ivct4P78emVAdDb7yU= Subject key identifier: 2A:CB:16:94:1B:AF:23:EC:A5:94:58:66:5F:53:B8:E4:57:DA:3D:67 Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0 Certificate serial: 34FA15EE672EF70DDABEA11F9FB4ACBF4C44BC6A Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32332d3234203d3e20383334.roa Signing time: Mon 15 Dec 2025 00:07:31 +0000 ROA not before: Mon 15 Dec 2025 00:02:31 +0000 ROA not after: Mon 14 Dec 2026 00:07:31 +0000 asID: 834 IP address blocks: 185.226.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:fa:15:ee:67:2e:f7:0d:da:be:a1:1f:9f:b4:ac:bf:4c:44:bc:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0 Validity Not Before: Dec 15 00:02:31 2025 GMT Not After : Dec 14 00:07:31 2026 GMT Subject: CN=2ACB16941BAF23ECA59458665F53B8E457DA3D67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fd:46:04:28:3e:c0:68:3a:3e:83:de:e8:89: de:72:b3:73:dc:66:23:64:72:09:fc:a1:43:62:5b: 84:00:3c:2f:b5:71:d9:9c:06:55:62:7e:3d:d4:20: 38:f0:74:d3:8a:c8:95:21:10:7f:80:5f:ca:55:f4: 69:7f:83:b4:71:72:09:e3:fb:60:e2:3d:fd:a2:df: d4:3d:eb:46:ca:49:49:29:ee:28:c4:43:22:60:73: 95:90:13:d7:31:45:58:c4:6f:70:16:db:2f:9e:b2: d9:fd:96:18:3f:49:9e:9a:1f:4d:09:35:ac:98:7c: 6b:dc:9c:49:92:27:b0:53:ab:c2:07:22:e3:f3:10: e6:d7:8a:b7:3d:62:ac:c4:21:54:06:ab:2c:2d:2d: 66:84:c6:c1:4c:56:14:ff:a0:69:10:65:ea:db:07: 3d:6f:33:b4:94:bf:f8:be:3d:04:da:00:81:45:b2: fa:00:22:e8:77:40:e0:a6:91:5e:3c:2e:8f:74:b0: c8:3a:68:3c:cb:6e:04:92:a9:e8:4d:b4:d5:93:70: 5f:d9:2c:58:86:7a:ef:79:a7:de:71:ca:c7:27:6f: 64:d0:a6:30:ca:1f:d3:50:95:f2:66:26:9e:9b:bb: bc:6e:3d:55:ad:56:54:10:7a:25:9e:6c:bc:88:50: b6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CB:16:94:1B:AF:23:EC:A5:94:58:66:5F:53:B8:E4:57:DA:3D:67 X509v3 Authority Key Identifier: keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.154.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:3a:1e:ad:d4:82:f9:f5:4c:de:e7:7c:c1:c4:34:fa:3a:12: 59:b7:ed:b2:08:dc:f8:03:6b:aa:2f:e1:86:68:f2:c0:a7:fd: c5:59:dd:c7:5c:56:5f:0a:bb:5d:55:d8:22:a8:30:f7:d9:49: c4:88:76:3e:94:a3:41:d4:43:2b:9c:f4:4c:6b:1f:0b:df:3c: 51:20:bc:a1:60:c5:fa:dc:e6:c2:7a:84:fc:5a:a4:3b:16:a1: 5a:63:33:df:77:7f:ea:5d:eb:71:12:5b:f9:8a:76:99:e6:d2: 5e:dc:ef:f8:18:e8:75:b5:fe:e0:0b:c0:72:ed:09:1d:77:5e: 8b:c1:e7:9c:c4:fd:e9:b4:28:56:5c:30:66:99:eb:5e:c4:58: ef:38:87:57:17:3b:e7:e8:fb:f5:c6:f0:a6:36:f1:76:8b:20: 01:1a:e5:6e:b0:25:50:55:9b:fe:b9:75:8a:71:f7:73:61:65: 76:0a:4c:48:7e:68:c6:f4:8f:57:c3:21:08:60:3d:19:c7:3e: e4:e5:4b:49:b2:02:d9:3d:b7:a0:fa:f0:4a:df:68:c9:3a:c5: 68:d1:6e:58:65:a2:9d:bc:5e:f4:11:4b:08:b9:63:16:e6:3b: b9:3e:7f:c5:41:03:6b:b8:5a:fc:c7:f8:25:b3:6f:ea:e5:1f: 52:a5:6a:d4 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUNPoV7mcu9w3avqEfn7Ssv0xEvGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm N2M5YWNhMDAeFw0yNTEyMTUwMDAyMzFaFw0yNjEyMTQwMDA3MzFaMDMxMTAvBgNV BAMTKDJBQ0IxNjk0MUJBRjIzRUNBNTk0NTg2NjVGNTNCOEU0NTdEQTNENjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb/UYEKD7AaDo+g97oid5ys3Pc ZiNkcgn8oUNiW4QAPC+1cdmcBlVifj3UIDjwdNOKyJUhEH+AX8pV9Gl/g7Rxcgnj +2DiPf2i39Q960bKSUkp7ijEQyJgc5WQE9cxRVjEb3AW2y+estn9lhg/SZ6aH00J NayYfGvcnEmSJ7BTq8IHIuPzEObXirc9YqzEIVQGqywtLWaExsFMVhT/oGkQZerb Bz1vM7SUv/i+PQTaAIFFsvoAIuh3QOCmkV48Lo90sMg6aDzLbgSSqehNtNWTcF/Z LFiGeu95p95xyscnb2TQpjDKH9NQlfJmJp6bu7xuPVWtVlQQeiWebLyIULaLAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUKssWlBuvI+yllFhmX1O45FfaPWcwHwYDVR0j BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm SnJLQS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2E3ODllODct ZjQ4NC00MjNkLWExZDctMmMyZDU4NjBkMmVjLzAvMzEzODM1MmUzMjMyMzYyZTMx MzUzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbni mjANBgkqhkiG9w0BAQsFAAOCAQEAfjoerdSC+fVM3ud8wcQ0+joSWbftsgjc+ANr qi/hhmjywKf9xVndx1xWXwq7XVXYIqgw99lJxIh2PpSjQdRDK5z0TGsfC988USC8 oWDF+tzmwnqE/FqkOxahWmMz33d/6l3rcRJb+Yp2mebSXtzv+BjodbX+4AvAcu0J HXdei8HnnMT96bQoVlwwZpnrXsRY7ziHVxc75+j79cbwpjbxdosgARrlbrAlUFWb /rl1inH3c2FldgpMSH5oxvSPV8MhCGA9Gcc+5OVLSbIC2T23oPrwSt9oyTrFaNFu WGWinbxe9BFLCLljFuY7uT5/xUEDa7ha/Mf4JbNv6uUfUqVq1A== -----END CERTIFICATE-----Generated at Mon Dec 15 17:23:43 2025 by rpki-client