This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3235312e302f32342d3234203d3e20393834.roa File: 3138352e3231332e3235312e302f32342d3234203d3e20393834.roa (raw, json) Hash identifier: A919/Bekrj6rZbVlRAQ3zY8i9Bm4Qio6XVxQpWLOfQM= Subject key identifier: 12:29:2B:B8:2D:A4:07:FB:00:6E:68:93:68:DC:8A:CE:40:CF:E9:FC Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 7DB95051B6711D6AA85A18587F9EFF40114F5B2E Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3235312e302f32342d3234203d3e20393834.roa Signing time: Wed 12 Nov 2025 08:55:51 +0000 ROA not before: Wed 12 Nov 2025 08:50:51 +0000 ROA not after: Wed 11 Nov 2026 08:55:51 +0000 asID: 984 IP address blocks: 185.213.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b9:50:51:b6:71:1d:6a:a8:5a:18:58:7f:9e:ff:40:11:4f:5b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Nov 12 08:50:51 2025 GMT Not After : Nov 11 08:55:51 2026 GMT Subject: CN=12292BB82DA407FB006E689368DC8ACE40CFE9FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:82:f3:19:f6:3f:9c:a0:3e:85:65:df:46:76: 5e:66:38:97:09:da:88:0d:92:df:e6:14:ff:14:08: 32:47:c3:7d:d3:8a:23:0b:78:86:01:b8:c1:c0:f7: 38:25:c9:c6:d4:fd:2c:d3:3e:4d:68:c1:6c:83:41: 51:e8:4b:f4:2e:1e:24:75:89:2a:57:dc:96:c6:ad: 2f:b0:4d:d4:b0:77:55:30:08:e9:0a:9f:23:bc:dd: 7e:77:1e:a7:8a:9e:9c:47:68:ac:20:e7:6d:93:82: 36:d6:eb:6a:eb:ad:b8:ce:aa:88:06:9c:a0:cf:30: fd:83:21:15:10:8f:66:01:1a:08:e0:4e:f8:32:de: ae:07:f9:e2:30:c6:57:cc:f2:5f:7b:b0:52:58:c4: 7b:a5:ea:0e:f3:1f:3e:74:68:c1:85:e6:2f:99:28: 62:87:bd:60:81:7f:69:57:44:54:2b:cb:95:c9:d8: 4b:ec:2f:53:e7:47:b2:98:c1:fd:1c:14:6d:7a:9c: c5:a1:01:26:b1:52:55:6a:21:95:db:80:70:36:a6: 9b:e0:34:ba:a0:5f:c5:b8:98:d5:c8:24:72:a9:c7: 36:38:97:28:33:95:1f:b1:1e:84:14:8e:5d:a4:4e: dd:d7:8f:17:ff:10:da:90:f1:b3:a0:7f:3a:95:27: d1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:29:2B:B8:2D:A4:07:FB:00:6E:68:93:68:DC:8A:CE:40:CF:E9:FC X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3235312e302f32342d3234203d3e20393834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.251.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:0c:d2:5e:70:c2:f8:07:01:0c:be:03:b8:79:f7:82:84:79: ed:30:2d:d5:d6:dd:ae:31:9b:5e:19:c4:b1:1e:8c:23:a8:56: 35:35:29:c9:45:9c:f5:a5:02:81:52:51:37:c4:de:99:01:cd: 0c:a3:46:74:4f:41:9c:50:21:53:73:1d:41:94:ec:9b:61:83: 9e:b7:27:1c:d1:3f:0e:70:44:70:01:9e:ad:64:b3:c1:ce:95: 02:a9:cd:c5:0e:78:c1:86:fd:87:fa:b6:d6:f7:7f:f5:cf:c4: c8:a3:e8:f2:13:22:91:c4:1a:1e:dc:d6:fe:e5:10:a6:46:70: 66:6e:7e:ae:d2:0d:b4:24:cd:bf:37:0b:c0:50:c2:fa:46:14: fd:48:43:f8:1c:d0:4c:e1:fa:7b:d1:4d:98:94:73:95:55:ee: 56:00:3d:8b:2c:e2:a4:6d:19:38:7f:f6:89:7f:2c:1a:ce:fd: 15:3e:c5:6d:5c:24:40:da:09:19:50:62:a0:71:de:9b:73:14: bf:2a:02:1d:fb:e9:c0:a7:bd:0e:bc:09:3d:3c:56:45:e6:1f: 1f:b9:fe:bf:f4:7b:54:d9:ba:12:c7:eb:86:6e:d7:de:a6:34: e0:e8:44:7a:b5:c6:9a:12:2d:d3:21:fc:92:0d:e5:f9:1b:66: a7:9f:62:c4 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUfblQUbZxHWqoWhhYf57/QBFPWy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNTExMTIwODUwNTFaFw0yNjExMTEwODU1NTFaMDMxMTAvBgNV BAMTKDEyMjkyQkI4MkRBNDA3RkIwMDZFNjg5MzY4REM4QUNFNDBDRkU5RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzgvMZ9j+coD6FZd9Gdl5mOJcJ 2ogNkt/mFP8UCDJHw33TiiMLeIYBuMHA9zglycbU/SzTPk1owWyDQVHoS/QuHiR1 iSpX3JbGrS+wTdSwd1UwCOkKnyO83X53HqeKnpxHaKwg522TgjbW62rrrbjOqogG nKDPMP2DIRUQj2YBGgjgTvgy3q4H+eIwxlfM8l97sFJYxHul6g7zHz50aMGF5i+Z KGKHvWCBf2lXRFQry5XJ2EvsL1PnR7KYwf0cFG16nMWhASaxUlVqIZXbgHA2ppvg NLqgX8W4mNXIJHKpxzY4lygzlR+xHoQUjl2kTt3Xjxf/ENqQ8bOgfzqVJ9HJAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUEikruC2kB/sAbmiTaNyKzkDP6fwwHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzODM1MmUzMjMxMzMyZTMy MzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzgzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnV +zANBgkqhkiG9w0BAQsFAAOCAQEAbQzSXnDC+AcBDL4DuHn3goR57TAt1dbdrjGb XhnEsR6MI6hWNTUpyUWc9aUCgVJRN8TemQHNDKNGdE9BnFAhU3MdQZTsm2GDnrcn HNE/DnBEcAGerWSzwc6VAqnNxQ54wYb9h/q21vd/9c/EyKPo8hMikcQaHtzW/uUQ pkZwZm5+rtINtCTNvzcLwFDC+kYU/UhD+BzQTOH6e9FNmJRzlVXuVgA9iyzipG0Z OH/2iX8sGs79FT7FbVwkQNoJGVBioHHem3MUvyoCHfvpwKe9DrwJPTxWReYfH7n+ v/R7VNm6Esfrhm7X3qY04OhEerXGmhIt0yH8kg3l+Rtmp59ixA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:24:54 2025 by rpki-client