This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3235302e302f32342d3234203d3e20323035383836.roa File: 3138352e3231332e3235302e302f32342d3234203d3e20323035383836.roa (raw, json) Hash identifier: lt02fpdxhnzR/AtLCfN0anHAJa0FEw416NFeciut8PI= Subject key identifier: 4D:A9:E1:30:EA:22:BD:5A:F8:0E:67:C2:CF:48:4E:C6:78:0C:E0:D3 Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 1A5D743EDF6FE71E88E850736AA1113D94047685 Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3235302e302f32342d3234203d3e20323035383836.roa Signing time: Thu 13 Nov 2025 07:12:29 +0000 ROA not before: Thu 13 Nov 2025 07:07:29 +0000 ROA not after: Thu 12 Nov 2026 07:12:29 +0000 asID: 205886 IP address blocks: 185.213.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:5d:74:3e:df:6f:e7:1e:88:e8:50:73:6a:a1:11:3d:94:04:76:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Nov 13 07:07:29 2025 GMT Not After : Nov 12 07:12:29 2026 GMT Subject: CN=4DA9E130EA22BD5AF80E67C2CF484EC6780CE0D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f7:be:c6:16:54:18:94:4d:21:ec:20:43:d5: ba:9c:32:2c:99:6a:22:fb:b7:e2:ed:95:31:3a:3e: 4d:4f:74:64:ca:56:d0:75:8f:fe:07:66:13:37:dd: 71:f9:c4:e0:f3:4e:9e:02:f0:66:78:15:fb:32:93: 6c:78:55:18:b0:03:29:29:3e:b1:a5:e1:76:8b:6f: 0b:aa:78:a3:dc:35:09:75:f4:0e:8e:a8:69:65:01: f7:f4:1a:21:65:0e:62:b2:a2:1f:10:51:22:5c:2b: c1:1e:99:6b:8c:5f:95:6c:ad:66:ec:54:87:a4:fc: e6:a0:64:b2:18:6f:18:6b:b4:6d:c0:20:ae:be:a9: fa:38:2f:d0:6c:ad:2a:30:93:95:98:60:7a:1e:c6: 0f:c9:1a:e6:a2:10:50:23:5b:7c:05:9b:0e:07:4c: 51:0e:ec:7e:a8:23:ee:d6:f3:73:07:d5:8e:a1:79: 9a:97:8b:1b:9b:7b:a2:63:d2:d9:19:86:93:f0:23: a4:5d:0b:fa:c9:52:68:40:0a:3d:b2:ab:72:c1:1f: b9:95:a2:51:9a:07:17:a8:ec:87:34:65:9f:d5:10: 9a:08:b1:06:9c:1d:07:e8:47:4c:46:80:0c:a4:58: 7f:39:34:de:30:dc:73:61:0a:da:cc:1c:d6:14:98: e5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A9:E1:30:EA:22:BD:5A:F8:0E:67:C2:CF:48:4E:C6:78:0C:E0:D3 X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3235302e302f32342d3234203d3e20323035383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.250.0/24 Signature Algorithm: sha256WithRSAEncryption 71:b5:60:1a:41:e9:d6:66:16:0e:34:dd:ce:9d:6f:22:3f:ac: 66:43:78:08:52:14:f7:73:46:15:c3:57:aa:72:67:29:53:7c: d0:59:8f:5e:78:e8:f9:f7:22:cf:d5:9e:0f:04:fe:27:4a:57: 0e:12:d5:fa:9a:a6:87:51:14:fd:64:63:42:64:79:05:97:83: 88:5e:80:be:41:2e:a0:88:f7:03:b1:4d:a6:37:2f:9d:db:52: fc:50:60:d2:06:dd:71:80:38:5b:c9:d7:ee:5a:9b:c3:23:b3: 66:02:30:7b:a1:c1:8a:a6:1e:38:94:93:94:7d:fd:e1:24:73: 0a:45:40:14:84:b8:05:3e:69:ba:b8:fe:57:ab:09:cb:4c:47: 26:df:4c:ba:75:02:0f:a6:82:81:c0:42:90:e7:6d:cb:d1:c3: c3:62:8c:1b:34:10:f4:a9:39:15:30:37:64:58:c9:63:f9:42: 76:f6:bb:1d:d7:69:96:5e:33:82:d6:ef:b8:ec:38:b0:68:a1: f7:40:9f:31:d5:4f:df:99:bb:f8:e9:4f:33:6e:1b:cf:b3:a3: 6b:d8:6f:2d:49:b2:7b:b5:bc:22:95:80:b7:23:92:82:aa:d9: 00:2c:97:3b:42:4b:8f:eb:79:b0:a8:c7:42:2f:f3:55:7e:78: 19:92:73:11 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUGl10Pt9v5x6I6FBzaqERPZQEdoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNTExMTMwNzA3MjlaFw0yNjExMTIwNzEyMjlaMDMxMTAvBgNV BAMTKDREQTlFMTMwRUEyMkJENUFGODBFNjdDMkNGNDg0RUM2NzgwQ0UwRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0977GFlQYlE0h7CBD1bqcMiyZ aiL7t+LtlTE6Pk1PdGTKVtB1j/4HZhM33XH5xODzTp4C8GZ4Ffsyk2x4VRiwAykp PrGl4XaLbwuqeKPcNQl19A6OqGllAff0GiFlDmKyoh8QUSJcK8EemWuMX5VsrWbs VIek/OagZLIYbxhrtG3AIK6+qfo4L9BsrSowk5WYYHoexg/JGuaiEFAjW3wFmw4H TFEO7H6oI+7W83MH1Y6heZqXixube6Jj0tkZhpPwI6RdC/rJUmhACj2yq3LBH7mV olGaBxeo7Ic0ZZ/VEJoIsQacHQfoR0xGgAykWH85NN4w3HNhCtrMHNYUmOXDAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUTanhMOoivVr4DmfCz0hOxngM4NMwHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzODM1MmUzMjMxMzMyZTMy MzUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNTM4MzgzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALnV+jANBgkqhkiG9w0BAQsFAAOCAQEAcbVgGkHp1mYWDjTdzp1vIj+sZkN4 CFIU93NGFcNXqnJnKVN80FmPXnjo+fciz9WeDwT+J0pXDhLV+pqmh1EU/WRjQmR5 BZeDiF6AvkEuoIj3A7FNpjcvndtS/FBg0gbdcYA4W8nX7lqbwyOzZgIwe6HBiqYe OJSTlH394SRzCkVAFIS4BT5purj+V6sJy0xHJt9MunUCD6aCgcBCkOdty9HDw2KM GzQQ9Kk5FTA3ZFjJY/lCdva7Hddpll4zgtbvuOw4sGih90CfMdVP35m7+OlPM24b z7Oja9hvLUmye7W8IpWAtyOSgqrZACyXO0JLj+t5sKjHQi/zVX54GZJzEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:18:15 2025 by rpki-client