This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133372e302f32342d3234203d3e203239383032.roa File: 3138352e3135302e3133372e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: gxdT1++eOQroPJFl/Spn3qzX3IqREiwRYnLOQ4fegDc= Subject key identifier: DD:16:61:3E:FA:1F:25:C7:8D:49:1D:2E:77:D7:97:AF:02:58:43:18 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 1671CE911525BF45F6CF465B6CD4FE4728CA6CEA Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133372e302f32342d3234203d3e203239383032.roa Signing time: Sat 22 Nov 2025 12:55:12 +0000 ROA not before: Sat 22 Nov 2025 12:50:12 +0000 ROA not after: Sat 21 Nov 2026 12:55:12 +0000 asID: 29802 IP address blocks: 185.150.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:71:ce:91:15:25:bf:45:f6:cf:46:5b:6c:d4:fe:47:28:ca:6c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Nov 22 12:50:12 2025 GMT Not After : Nov 21 12:55:12 2026 GMT Subject: CN=DD16613EFA1F25C78D491D2E77D797AF02584318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0d:09:d1:a4:38:f8:8b:5c:0b:66:b2:d5:95: 69:5f:05:af:be:a6:9b:b5:87:c8:de:a6:4e:18:9c: b1:9e:58:3b:ee:a3:7e:2a:3d:e0:34:31:f5:ed:92: a8:90:c3:0f:28:0a:4e:de:94:3e:0e:6b:59:d7:9f: f6:94:3f:85:e7:09:f1:ef:eb:dd:34:99:22:d3:bf: 9b:5d:02:f2:a3:b5:80:f1:64:a8:b3:e5:64:c0:b8: 6b:fb:dc:3a:e5:68:14:47:70:71:e0:85:58:a3:af: 1b:30:9f:9f:60:04:ae:b1:ff:1e:c2:fa:37:ce:fe: 65:44:d7:6c:86:ad:51:8c:9b:df:60:8d:ed:07:bc: 40:a7:af:5d:2c:ae:61:23:e9:3f:83:75:a2:0b:2a: 74:5e:01:f7:3f:1c:4c:a8:8f:f9:ab:9e:49:63:ef: b4:04:52:1c:d5:fb:56:ac:35:ff:11:8e:79:a3:71: 8f:25:d5:9a:c9:6b:32:79:61:ad:f2:1e:36:9d:90: cb:e5:5e:4a:36:56:3d:24:fe:3d:dd:11:22:2c:6e: 84:34:b6:c9:ee:49:4f:c1:5a:1e:5a:77:9e:c3:60: 82:ad:b9:10:51:98:31:2a:9a:c4:4d:62:d1:ac:4d: 3c:1c:10:1b:e5:81:8b:53:68:26:dd:45:91:d6:c9: 7c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:16:61:3E:FA:1F:25:C7:8D:49:1D:2E:77:D7:97:AF:02:58:43:18 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133372e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.137.0/24 Signature Algorithm: sha256WithRSAEncryption 56:43:b1:9f:6f:34:ac:3e:f3:51:7b:9b:b2:f4:a0:65:f0:8b: 9c:13:6f:2e:a2:9e:cb:8d:84:bc:8b:07:d6:e9:3b:d2:99:9b: 2d:d2:97:72:41:17:cb:b2:26:53:9c:5e:da:94:0f:24:8a:bf: bd:a0:9e:dc:bd:8a:7c:e3:4c:d6:51:7d:6a:b0:75:15:3b:dc: cd:e6:03:3f:34:f8:92:76:16:e0:b2:82:a8:79:0a:d4:0a:8f: 0b:e0:2c:48:71:44:ed:8f:15:e2:77:0a:c1:4a:69:34:f3:c9: 71:c1:12:e5:9d:0e:dc:a2:38:ed:76:8d:60:bd:7c:51:c9:3f: dc:64:f9:8a:11:c6:92:87:96:e2:15:16:d5:5d:5b:3d:a7:0b: 46:9d:f5:86:77:b3:b6:3c:f3:a1:df:92:83:27:6e:77:35:0e: 42:f8:49:7b:ff:a8:95:c6:7d:53:ee:b2:7b:3b:d0:e0:2d:a5: 1d:88:bf:ad:d5:17:21:59:1f:7a:e7:2e:91:8f:d0:d0:e6:cc: ba:db:9a:3e:8f:ad:5d:fb:ed:2f:0a:b1:b5:44:c2:b4:1d:45: 72:38:5f:02:33:22:3e:d0:a6:c3:7d:c4:e7:18:d0:ed:ca:cd: 23:ec:c3:b3:98:3d:39:a1:5a:86:cf:3e:a8:81:25:f8:7a:a9: d5:cc:66:b1 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUFnHOkRUlv0X2z0ZbbNT+RyjKbOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTExMjIxMjUwMTJaFw0yNjExMjExMjU1MTJaMDMxMTAvBgNV BAMTKEREMTY2MTNFRkExRjI1Qzc4RDQ5MUQyRTc3RDc5N0FGMDI1ODQzMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRDQnRpDj4i1wLZrLVlWlfBa++ ppu1h8jepk4YnLGeWDvuo34qPeA0MfXtkqiQww8oCk7elD4Oa1nXn/aUP4XnCfHv 6900mSLTv5tdAvKjtYDxZKiz5WTAuGv73DrlaBRHcHHghVijrxswn59gBK6x/x7C +jfO/mVE12yGrVGMm99gje0HvECnr10srmEj6T+DdaILKnReAfc/HEyoj/mrnklj 77QEUhzV+1asNf8RjnmjcY8l1ZrJazJ5Ya3yHjadkMvlXko2Vj0k/j3dESIsboQ0 tsnuSU/BWh5ad57DYIKtuRBRmDEqmsRNYtGsTTwcEBvlgYtTaCbdRZHWyXzDAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU3RZhPvofJceNSR0ud9eXrwJYQxgwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzODM1MmUzMTM1MzAyZTMx MzMzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzkzODMwMzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5lokwDQYJKoZIhvcNAQELBQADggEBAFZDsZ9vNKw+81F7m7L0oGXwi5wTby6i nsuNhLyLB9bpO9KZmy3Sl3JBF8uyJlOcXtqUDySKv72gnty9inzjTNZRfWqwdRU7 3M3mAz80+JJ2FuCygqh5CtQKjwvgLEhxRO2PFeJ3CsFKaTTzyXHBEuWdDtyiOO12 jWC9fFHJP9xk+YoRxpKHluIVFtVdWz2nC0ad9YZ3s7Y886HfkoMnbnc1DkL4SXv/ qJXGfVPusns70OAtpR2Iv63VFyFZH3rnLpGP0NDmzLrbmj6PrV377S8KsbVEwrQd RXI4XwIzIj7QpsN9xOcY0O3KzSPsw7OYPTmhWobPPqiBJfh6qdXMZrE= -----END CERTIFICATE-----Generated at Sun Dec 7 00:39:45 2025 by rpki-client