This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/3138352e3235302e34312e302f32342d3234203d3e20383334.roa File: 3138352e3235302e34312e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: TMPX219AVqeVt8TCx3hdL3+PdjuG6qjdSrAINRTXrt8= Subject key identifier: D7:AF:7F:57:95:79:3D:2D:E7:38:0C:FF:21:94:48:83:1D:38:AD:89 Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Certificate serial: 55D2F6BA3B4D80A8AD2294B81CE8259CA1BD34E6 Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/3138352e3235302e34312e302f32342d3234203d3e20383334.roa Signing time: Mon 17 Nov 2025 00:10:14 +0000 ROA not before: Mon 17 Nov 2025 00:05:14 +0000 ROA not after: Mon 16 Nov 2026 00:10:14 +0000 asID: 834 IP address blocks: 185.250.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:d2:f6:ba:3b:4d:80:a8:ad:22:94:b8:1c:e8:25:9c:a1:bd:34:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Validity Not Before: Nov 17 00:05:14 2025 GMT Not After : Nov 16 00:10:14 2026 GMT Subject: CN=D7AF7F5795793D2DE7380CFF219448831D38AD89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6c:68:57:e5:7b:7c:56:97:11:de:67:8f:fe: 0c:47:cd:9d:04:e2:9e:59:0e:9a:55:ce:29:45:70: f5:15:4b:46:16:26:e3:84:20:b7:56:ed:bb:dd:71: 90:ac:f3:f8:9c:87:39:a7:87:e8:ee:c3:89:0a:6d: 8a:a5:c3:a8:a2:da:c7:e2:37:ad:a3:36:bd:f6:50: 94:b7:38:8a:ab:d1:3d:34:ef:66:b4:ce:bf:16:61: f0:c9:d3:b5:69:18:09:31:d9:eb:d8:10:4e:bb:3c: 4d:c9:64:2a:95:5a:92:76:41:1c:96:45:b1:0b:c2: 24:88:8a:a4:05:74:a0:d3:0e:b3:e4:f3:9d:55:29: 84:5e:1a:1d:ae:26:b1:97:d0:2a:a7:8e:0a:59:a0: ab:93:e2:e6:e5:a0:21:ac:c7:eb:87:bb:a4:87:a5: 61:7d:20:58:19:66:74:25:43:f9:e6:8a:11:4f:62: 07:37:b7:0d:5c:a3:04:2f:41:7b:a6:6d:f6:01:83: 2d:08:bb:c0:3e:f3:be:78:ce:35:e0:b3:9d:6b:81: 6c:e1:7c:4f:32:06:ce:cb:ce:87:d1:8e:cf:8d:16: 80:6f:ef:c1:43:33:d5:ea:99:22:d2:e4:19:a4:30: de:5c:8f:36:8f:9b:0b:34:3b:4b:5f:6b:94:0a:9c: 5b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AF:7F:57:95:79:3D:2D:E7:38:0C:FF:21:94:48:83:1D:38:AD:89 X509v3 Authority Key Identifier: keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/3138352e3235302e34312e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.41.0/24 Signature Algorithm: sha256WithRSAEncryption 16:2b:54:09:2f:42:67:12:1f:96:39:76:fc:93:40:eb:a2:f0: f5:49:52:ce:f7:40:b7:eb:64:ff:36:4e:90:15:26:58:40:e9: 3d:6a:19:eb:ff:cc:11:a3:17:72:67:2d:81:9c:ed:6e:23:31: 43:bf:f4:9b:d4:37:4b:3d:b5:ef:c9:fb:ef:5d:1f:11:f5:ec: 72:ef:6e:f3:4e:3a:5a:76:1c:a0:b2:10:0b:15:ee:de:a2:e2: 93:a7:7e:34:bc:9b:ca:04:f6:30:02:c7:5f:c1:58:97:15:e5: 1f:1f:0b:2d:30:47:c2:ec:9b:67:54:a1:63:56:4c:da:73:2a: e6:36:e9:2f:33:94:0c:83:60:48:7b:d1:b7:11:b8:39:a0:2b: 57:da:9f:eb:7f:04:87:5f:e7:c7:59:a2:cd:9f:14:d6:34:f3: 7a:a4:a4:b5:fd:e0:67:18:25:05:f5:91:02:96:4a:c2:41:0a: 67:ee:19:a4:6f:64:dc:3c:7d:47:52:0e:54:68:83:a4:4c:b2: 55:f5:14:46:9d:0f:a0:66:77:09:16:9e:dd:20:e9:cf:52:e0: 0a:5e:a7:e1:7c:7c:40:af:59:d6:ab:b8:db:3f:b5:e2:53:16: 51:d6:44:19:ca:b8:0e:32:fd:f4:b6:f8:3f:a7:34:fa:54:f3: 19:f0:d7:de -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUVdL2ujtNgKitIpS4HOglnKG9NOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi YWFmNjRjZTAeFw0yNTExMTcwMDA1MTRaFw0yNjExMTYwMDEwMTRaMDMxMTAvBgNV BAMTKEQ3QUY3RjU3OTU3OTNEMkRFNzM4MENGRjIxOTQ0ODgzMUQzOEFEODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCebGhX5Xt8VpcR3meP/gxHzZ0E 4p5ZDppVzilFcPUVS0YWJuOEILdW7bvdcZCs8/ichzmnh+juw4kKbYqlw6ii2sfi N62jNr32UJS3OIqr0T0072a0zr8WYfDJ07VpGAkx2evYEE67PE3JZCqVWpJ2QRyW RbELwiSIiqQFdKDTDrPk851VKYReGh2uJrGX0CqnjgpZoKuT4ubloCGsx+uHu6SH pWF9IFgZZnQlQ/nmihFPYgc3tw1cowQvQXumbfYBgy0Iu8A+8754zjXgs51rgWzh fE8yBs7LzofRjs+NFoBv78FDM9XqmSLS5BmkMN5cjzaPmws0O0tfa5QKnFtrAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU169/V5V5PS3nOAz/IZRIgx04rYkwHwYDVR0j BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx dlpNNC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzEzODM1MmUzMjM1MzAyZTM0 MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5+ikw DQYJKoZIhvcNAQELBQADggEBABYrVAkvQmcSH5Y5dvyTQOui8PVJUs73QLfrZP82 TpAVJlhA6T1qGev/zBGjF3JnLYGc7W4jMUO/9JvUN0s9te/J++9dHxH17HLvbvNO Olp2HKCyEAsV7t6i4pOnfjS8m8oE9jACx1/BWJcV5R8fCy0wR8Lsm2dUoWNWTNpz KuY26S8zlAyDYEh70bcRuDmgK1fan+t/BIdf58dZos2fFNY083qkpLX94GcYJQX1 kQKWSsJBCmfuGaRvZNw8fUdSDlRog6RMslX1FEadD6BmdwkWnt0g6c9S4Apep+F8 fECvWdaruNs/teJTFlHWRBnKuA4y/fS2+D+nNPpU8xnw194= -----END CERTIFICATE-----Generated at Sat Dec 6 15:41:41 2025 by rpki-client