This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3235302e302f32342d3234203d3e20323032383238.roa File: 3138352e3231332e3235302e302f32342d3234203d3e20323032383238.roa (raw, json) Hash identifier: cvWbud/Q3B4zVr3PrPYyxiTjcQyvCffxgDgg+5VMZYE= Subject key identifier: 06:80:64:68:60:E7:DE:AF:51:CD:5A:E7:57:63:1C:2A:52:13:18:23 Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 2C615476AAC0423D4287DF5A60DCBE2529EBA05E Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3235302e302f32342d3234203d3e20323032383238.roa Signing time: Fri 26 Dec 2025 04:00:04 +0000 ROA not before: Fri 26 Dec 2025 03:55:04 +0000 ROA not after: Fri 25 Dec 2026 04:00:04 +0000 asID: 202828 IP address blocks: 185.213.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:61:54:76:aa:c0:42:3d:42:87:df:5a:60:dc:be:25:29:eb:a0:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Dec 26 03:55:04 2025 GMT Not After : Dec 25 04:00:04 2026 GMT Subject: CN=0680646860E7DEAF51CD5AE757631C2A52131823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3b:8f:49:49:d6:be:d6:0d:db:f3:35:7f:1f: 4e:8b:e7:54:7f:e6:d8:19:ce:13:39:e8:08:f5:09: ca:a5:e7:4b:3c:84:76:6f:f1:2b:df:cf:a2:81:92: 05:df:2e:e1:8a:b0:5f:04:17:a4:13:52:38:c8:e2: 1f:4f:a0:a0:a3:15:e0:7d:c0:1d:b5:e0:88:f5:28: 8e:3d:53:7f:9e:a7:f1:71:c2:df:fc:5d:3e:8e:38: d2:f3:a8:ea:2f:42:5f:0e:a0:4e:ea:86:aa:12:be: 01:62:c3:f7:9b:e1:43:0c:6c:c6:43:08:3e:27:8d: f2:bf:dc:12:4d:c9:29:1d:af:b2:d1:a3:02:d4:65: 78:65:8e:05:10:a9:d1:94:a3:73:e1:f8:a6:17:c1: c3:82:a1:90:1b:17:54:93:81:dc:86:bb:ce:cb:dd: 4f:ff:2c:3b:ba:9e:86:3f:08:c4:7a:fe:d7:a4:ac: 65:02:78:4f:f3:cd:d9:6f:81:ce:3a:8e:f0:36:6b: 11:d1:db:72:2a:6f:f4:eb:84:d7:f8:99:d9:0d:49: 34:f1:16:3b:71:60:dc:5e:20:fe:f7:d4:8b:68:ee: b9:91:61:a7:a0:12:1f:15:f6:ea:7e:1d:54:57:7c: 78:df:b7:76:b8:b2:38:41:6e:89:f7:19:a7:12:6a: 0c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:80:64:68:60:E7:DE:AF:51:CD:5A:E7:57:63:1C:2A:52:13:18:23 X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3235302e302f32342d3234203d3e20323032383238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.250.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:7e:25:6d:9e:fb:eb:46:87:df:68:2c:23:9f:cf:a4:a8:ef: a1:8f:c2:18:b4:65:53:92:1d:d9:54:2c:63:80:e5:e7:4a:dd: 13:5a:19:33:c0:fd:e1:68:05:f3:c8:c6:fd:77:21:dd:32:3f: 26:77:53:38:c4:5e:7c:c8:10:43:b7:7f:9c:cc:e9:ca:f3:4b: c4:7d:4a:90:5e:69:a5:26:8c:4e:87:00:84:f2:b5:4c:a8:3b: e4:d6:7b:d7:c3:58:3a:04:89:f7:bf:05:0d:57:55:6d:58:67: 16:90:09:1d:e2:d4:f6:96:a8:fd:e9:43:2b:42:40:cb:e4:88: 2f:4a:ee:25:85:ea:f5:8f:24:2b:5c:d8:66:6a:cb:b8:3b:57: a7:3f:18:af:f9:6d:6d:d0:f6:b7:61:a7:84:3a:c7:17:6f:82: a6:77:1d:9d:48:90:8a:3b:c7:8a:75:63:55:9c:ef:e9:be:98: e0:bd:00:c1:98:82:35:eb:af:98:7f:64:9b:86:25:41:2f:37: 14:c6:fb:c0:d4:8e:ac:52:aa:ca:1c:fa:8b:e5:91:cb:dd:90: 0f:d9:6d:0c:f8:60:27:6b:71:5e:6c:00:e2:d5:6c:ab:87:e9: 2b:a3:0b:06:23:93:f2:6d:c3:17:a7:eb:ad:6f:d9:bc:b3:bf: 1b:72:e1:56 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIULGFUdqrAQj1Ch99aYNy+JSnroF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNTEyMjYwMzU1MDRaFw0yNjEyMjUwNDAwMDRaMDMxMTAvBgNV BAMTKDA2ODA2NDY4NjBFN0RFQUY1MUNENUFFNzU3NjMxQzJBNTIxMzE4MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSO49JSda+1g3b8zV/H06L51R/ 5tgZzhM56Aj1Ccql50s8hHZv8Svfz6KBkgXfLuGKsF8EF6QTUjjI4h9PoKCjFeB9 wB214Ij1KI49U3+ep/Fxwt/8XT6OONLzqOovQl8OoE7qhqoSvgFiw/eb4UMMbMZD CD4njfK/3BJNySkdr7LRowLUZXhljgUQqdGUo3Ph+KYXwcOCoZAbF1STgdyGu87L 3U//LDu6noY/CMR6/tekrGUCeE/zzdlvgc46jvA2axHR23Iqb/TrhNf4mdkNSTTx FjtxYNxeIP731Ito7rmRYaegEh8V9up+HVRXfHjft3a4sjhBbon3GacSagwTAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUBoBkaGDn3q9RzVrnV2McKlITGCMwHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzODM1MmUzMjMxMzMyZTMy MzUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMjM4MzIzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALnV+jANBgkqhkiG9w0BAQsFAAOCAQEAan4lbZ7760aH32gsI5/PpKjvoY/C GLRlU5Id2VQsY4Dl50rdE1oZM8D94WgF88jG/Xch3TI/JndTOMRefMgQQ7d/nMzp yvNLxH1KkF5ppSaMTocAhPK1TKg75NZ718NYOgSJ978FDVdVbVhnFpAJHeLU9pao /elDK0JAy+SIL0ruJYXq9Y8kK1zYZmrLuDtXpz8Yr/ltbdD2t2GnhDrHF2+Cpncd nUiQijvHinVjVZzv6b6Y4L0AwZiCNeuvmH9km4YlQS83FMb7wNSOrFKqyhz6i+WR y92QD9ltDPhgJ2txXmwA4tVsq4fpK6MLBiOT8m3DF6frrW/ZvLO/G3LhVg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:05:03 2026 by rpki-client