This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3232392e302f32342d3234203d3e20383334.roa File: 38352e3131372e3232392e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: AnytFI8m3GweCc5W3TrceZpmPZuR5bgXS4Q6ZHdFjII= Subject key identifier: 73:3C:A2:FF:05:EF:04:2C:AF:E7:ED:46:71:87:3A:DE:76:45:74:A9 Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 36E5E8F6D3CFB65601E85F898B4F30BF1A16CD11 Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3232392e302f32342d3234203d3e20383334.roa Signing time: Fri 07 Nov 2025 11:27:03 +0000 ROA not before: Fri 07 Nov 2025 11:22:03 +0000 ROA not after: Fri 06 Nov 2026 11:27:03 +0000 asID: 834 IP address blocks: 85.117.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e5:e8:f6:d3:cf:b6:56:01:e8:5f:89:8b:4f:30:bf:1a:16:cd:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Nov 7 11:22:03 2025 GMT Not After : Nov 6 11:27:03 2026 GMT Subject: CN=733CA2FF05EF042CAFE7ED4671873ADE764574A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:34:f2:6e:2b:f6:25:e2:ea:6a:a1:fe:7c:eb: 8b:21:54:38:53:42:a4:34:ef:dd:e7:ea:d7:58:44: 1c:59:ab:cd:a5:d4:72:08:a2:35:6c:88:56:f5:97: fd:3b:b3:59:83:8d:28:48:81:e1:a2:a3:1a:09:7d: 48:85:0a:1d:5b:63:e0:2f:4c:12:05:93:f6:de:95: e8:ea:fa:ed:19:58:f1:0e:5a:8f:ca:9c:42:2b:e9: 5c:3f:75:51:70:4d:88:50:01:d1:71:b1:35:02:09: d5:3a:f8:76:12:7a:dd:85:eb:5a:6e:a2:f1:26:25: a2:6e:ae:e2:d8:9b:56:9b:63:37:6f:01:c0:fd:7e: 20:1b:31:a6:c2:cc:4f:ba:74:9b:91:fb:57:56:5b: c3:79:b6:8f:55:65:18:a6:3d:5a:ef:18:22:e4:46: 63:3f:14:ed:57:c3:22:28:83:91:80:68:97:bd:aa: 8f:17:8f:3f:19:cb:59:8d:26:19:d9:ca:a4:30:e2: 2e:7b:42:5c:56:a8:b6:2a:01:af:ce:27:30:a9:74: a9:68:b4:ae:aa:c4:da:a2:ab:31:42:6f:5f:de:0a: e3:64:4f:63:c5:f5:1a:6e:3c:b6:12:e8:4c:56:88: c8:ab:e1:26:e2:73:c9:2a:9c:38:bf:f9:56:12:56: 76:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3C:A2:FF:05:EF:04:2C:AF:E7:ED:46:71:87:3A:DE:76:45:74:A9 X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3232392e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.229.0/24 Signature Algorithm: sha256WithRSAEncryption 20:20:41:0b:8c:fa:20:f7:9b:6a:ab:47:c3:ca:b4:81:57:04: 98:3b:a2:10:a3:de:0e:86:d7:eb:9e:de:cd:0f:44:a0:d8:50: 71:95:96:3b:90:28:1a:85:94:43:c9:19:69:f6:cd:d8:26:37: 73:30:ed:68:f8:0f:12:0d:a9:3c:a0:c5:fb:ad:2c:73:12:a3: 88:01:4a:93:33:77:d3:ae:8c:4b:77:d4:38:b1:2f:d2:a3:03: 56:56:de:58:02:21:49:bb:0d:93:5f:1b:2b:0b:68:c6:80:b7: ac:6e:6f:f1:72:b2:76:bf:dc:06:4a:64:06:fb:f9:82:c9:0e: e8:d6:2d:55:75:4e:19:58:3d:80:e4:7a:f0:8e:07:2f:06:7e: 0b:c9:31:9c:5e:73:64:53:38:87:49:63:b5:50:5d:a7:f5:43: 57:89:98:f2:6f:a9:7a:5a:b6:d1:34:00:2b:fa:88:70:ee:f8: 77:3d:d2:ea:f1:1b:6d:1e:39:eb:69:57:fc:52:b7:d4:9e:0e: e5:f1:ca:4b:a7:f4:9a:d1:a8:1c:dd:a8:ff:20:c7:72:22:1b: dc:ef:2d:a2:e4:4a:c6:d3:a2:d9:34:8f:f5:4f:94:9b:7c:4e: 36:90:b8:b0:55:97:66:5e:10:d3:02:0d:49:05:ea:67:f0:99: f8:22:ea:e1 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUNuXo9tPPtlYB6F+Ji08wvxoWzREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNTExMDcxMTIyMDNaFw0yNjExMDYxMTI3MDNaMDMxMTAvBgNV BAMTKDczM0NBMkZGMDVFRjA0MkNBRkU3RUQ0NjcxODczQURFNzY0NTc0QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSNPJuK/Yl4upqof5864shVDhT QqQ0793n6tdYRBxZq82l1HIIojVsiFb1l/07s1mDjShIgeGioxoJfUiFCh1bY+Av TBIFk/belejq+u0ZWPEOWo/KnEIr6Vw/dVFwTYhQAdFxsTUCCdU6+HYSet2F61pu ovEmJaJuruLYm1abYzdvAcD9fiAbMabCzE+6dJuR+1dWW8N5to9VZRimPVrvGCLk RmM/FO1XwyIog5GAaJe9qo8Xjz8Zy1mNJhnZyqQw4i57QlxWqLYqAa/OJzCpdKlo tK6qxNqiqzFCb1/eCuNkT2PF9RpuPLYS6ExWiMir4Sbic8kqnDi/+VYSVnY3AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUczyi/wXvBCyv5+1GcYc63nZFdKkwHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzgzNTJlMzEzMTM3MmUzMjMy MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABVdeUw DQYJKoZIhvcNAQELBQADggEBACAgQQuM+iD3m2qrR8PKtIFXBJg7ohCj3g6G1+ue 3s0PRKDYUHGVljuQKBqFlEPJGWn2zdgmN3Mw7Wj4DxINqTygxfutLHMSo4gBSpMz d9OujEt31DixL9KjA1ZW3lgCIUm7DZNfGysLaMaAt6xub/Fysna/3AZKZAb7+YLJ DujWLVV1ThlYPYDkevCOBy8GfgvJMZxec2RTOIdJY7VQXaf1Q1eJmPJvqXpattE0 ACv6iHDu+Hc90urxG20eOetpV/xSt9SeDuXxykun9JrRqBzdqP8gx3IiG9zvLaLk SsbTotk0j/VPlJt8TjaQuLBVl2ZeENMCDUkF6mfwmfgi6uE= -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:15 2025 by rpki-client