This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3235302e302f32342d3234203d3e20383334.roa File: 3138352e3231332e3235302e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: AdBhWG3tduIcvZfuPBuZ6+H3XrmqS9vxHZW/13wo/SQ= Subject key identifier: E4:24:D8:28:1D:00:31:6D:AA:6B:A1:FB:EB:E3:50:20:A2:B6:FC:12 Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 16F77C1AE4794491B23535453D57C696C2E9299F Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3235302e302f32342d3234203d3e20383334.roa Signing time: Sat 13 Dec 2025 04:31:03 +0000 ROA not before: Sat 13 Dec 2025 04:26:03 +0000 ROA not after: Sat 12 Dec 2026 04:31:03 +0000 asID: 834 IP address blocks: 185.213.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 09:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f7:7c:1a:e4:79:44:91:b2:35:35:45:3d:57:c6:96:c2:e9:29:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Dec 13 04:26:03 2025 GMT Not After : Dec 12 04:31:03 2026 GMT Subject: CN=E424D8281D00316DAA6BA1FBEBE35020A2B6FC12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:89:69:fb:af:05:56:cc:c0:1f:27:8d:eb:10: 58:60:21:bc:f6:5f:cf:e5:1c:54:52:a5:8a:45:f1: ca:21:60:e8:74:f6:b9:24:fd:19:3f:a9:8d:e9:42: 90:a3:f1:8a:c4:f5:31:61:d6:f7:d8:b7:36:4a:cc: cf:d6:24:55:a5:10:ad:8f:6a:7e:1f:9b:29:c5:6d: 20:ad:59:86:93:cf:7b:8e:a0:6b:8e:c9:d3:fa:23: e9:e2:82:db:1e:d9:9c:e7:76:38:1d:d8:f5:26:32: 00:17:f6:22:c0:c7:fb:84:98:3a:89:46:32:af:0c: bc:1d:48:a9:9b:19:17:b2:8c:79:85:91:18:d2:4a: 58:33:e2:7f:7f:7d:db:7a:78:78:e8:39:7f:1f:ba: 6c:db:7e:49:05:f3:03:f8:90:39:2c:fa:99:da:a8: 71:bb:64:8d:85:24:5d:ea:76:e4:33:d8:94:d4:dc: 24:47:0e:dd:81:f0:54:7e:13:5f:07:8f:21:10:a3: 85:3d:36:c4:95:63:48:68:23:9b:14:af:bc:e9:e0: 7f:b7:2d:3a:f2:6c:53:c8:c5:d5:7a:da:64:f3:d9: 53:69:32:42:40:32:b4:b1:c1:8e:c2:a7:69:cf:af: 0f:b6:3a:4b:1b:36:02:71:4d:08:73:78:29:3b:a6: 7e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:24:D8:28:1D:00:31:6D:AA:6B:A1:FB:EB:E3:50:20:A2:B6:FC:12 X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3235302e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.250.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:2e:33:a6:c5:62:88:8a:ff:37:26:e8:d0:eb:c0:d6:23:aa: c0:b1:87:b6:5a:a2:15:0d:3e:b1:c8:c3:43:a6:fc:53:2c:e2: 20:0a:ae:42:41:2e:02:4a:7a:cb:22:ab:f9:32:db:5c:17:b4: 93:08:9c:19:1e:31:37:84:d6:c5:8d:37:0d:53:41:ef:5e:6f: c6:85:fb:24:7e:f7:30:79:8d:39:71:82:36:17:48:2d:f1:0e: d0:7f:b2:95:b4:38:4b:04:69:98:8b:27:e5:db:8e:3f:ec:5a: d3:75:d9:3f:4f:92:82:89:45:65:27:36:14:98:98:2d:f0:74: 89:37:a7:ed:fa:24:bb:3a:93:fc:9b:7b:9f:b6:f6:b5:a6:d5: 0c:e7:5f:1f:6f:32:da:60:7e:3d:0a:79:bf:bd:8e:0a:2e:49: dc:51:5c:ff:dc:43:de:4f:ee:29:34:b0:ae:8e:3e:ee:c7:82: 26:bc:89:1a:83:da:b2:21:fd:e2:5e:7b:36:87:5b:2b:24:ac: a9:86:95:45:18:06:a9:72:ba:05:0b:63:2e:5b:65:0f:59:9c: c0:25:50:74:38:c0:9e:45:33:16:3d:de:b3:6b:a1:a6:1c:78: e4:d2:d6:62:5e:5d:01:64:9b:3b:42:72:f1:ea:05:19:23:c3: e8:03:c8:7f -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUFvd8GuR5RJGyNTVFPVfGlsLpKZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNTEyMTMwNDI2MDNaFw0yNjEyMTIwNDMxMDNaMDMxMTAvBgNV BAMTKEU0MjREODI4MUQwMDMxNkRBQTZCQTFGQkVCRTM1MDIwQTJCNkZDMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgiWn7rwVWzMAfJ43rEFhgIbz2 X8/lHFRSpYpF8cohYOh09rkk/Rk/qY3pQpCj8YrE9TFh1vfYtzZKzM/WJFWlEK2P an4fmynFbSCtWYaTz3uOoGuOydP6I+nigtse2Zzndjgd2PUmMgAX9iLAx/uEmDqJ RjKvDLwdSKmbGReyjHmFkRjSSlgz4n9/fdt6eHjoOX8fumzbfkkF8wP4kDks+pna qHG7ZI2FJF3qduQz2JTU3CRHDt2B8FR+E18HjyEQo4U9NsSVY0hoI5sUr7zp4H+3 LTrybFPIxdV62mTz2VNpMkJAMrSxwY7Cp2nPrw+2OksbNgJxTQhzeCk7pn5LAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU5CTYKB0AMW2qa6H76+NQIKK2/BIwHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzODM1MmUzMjMxMzMyZTMy MzUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnV +jANBgkqhkiG9w0BAQsFAAOCAQEAPi4zpsViiIr/Nybo0OvA1iOqwLGHtlqiFQ0+ scjDQ6b8UyziIAquQkEuAkp6yyKr+TLbXBe0kwicGR4xN4TWxY03DVNB715vxoX7 JH73MHmNOXGCNhdILfEO0H+ylbQ4SwRpmIsn5duOP+xa03XZP0+SgolFZSc2FJiY LfB0iTen7fokuzqT/Jt7n7b2tabVDOdfH28y2mB+PQp5v72OCi5J3FFc/9xD3k/u KTSwro4+7seCJryJGoPasiH94l57NodbKySsqYaVRRgGqXK6BQtjLltlD1mcwCVQ dDjAnkUzFj3es2uhphx45NLWYl5dAWSbO0Jy8eoFGSPD6APIfw== -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:38 2025 by rpki-client