This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e302e302f32342d3234203d3e20323036323831.roa File: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (raw, json) Hash identifier: WedmFf2QIQuuVKf/1QK4DuIi+i1j87BtcRZVJGzgY68= Subject key identifier: 36:D9:29:BC:F6:21:95:B0:65:14:7D:F0:9A:B8:94:FB:BC:1F:22:3B Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 6AD0BAF4B7D2CC831664A5BE18CA23FA5EC54D60 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e302e302f32342d3234203d3e20323036323831.roa Signing time: Tue 25 Nov 2025 06:55:12 +0000 ROA not before: Tue 25 Nov 2025 06:50:12 +0000 ROA not after: Tue 24 Nov 2026 06:55:12 +0000 asID: 206281 IP address blocks: 159.253.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:d0:ba:f4:b7:d2:cc:83:16:64:a5:be:18:ca:23:fa:5e:c5:4d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Nov 25 06:50:12 2025 GMT Not After : Nov 24 06:55:12 2026 GMT Subject: CN=36D929BCF62195B065147DF09AB894FBBC1F223B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ef:a1:c5:4b:d0:3a:72:2a:3d:bc:8b:52:29: e8:f6:7f:5e:a0:b8:e5:c4:60:cc:f3:84:b7:84:05: 6e:25:c3:47:02:22:1c:c2:5b:a4:b1:b0:ea:af:bb: 49:77:71:9e:11:84:3d:f2:87:83:83:1a:32:d2:fd: 9b:dc:eb:c5:a9:d1:93:93:5a:b5:69:33:c7:bc:58: eb:55:a8:41:13:61:7a:d2:94:49:c6:ce:fc:8e:f3: c7:47:b5:5f:8a:50:b4:16:46:4b:8e:e4:04:a0:1c: c6:e7:7a:40:45:70:5d:11:87:eb:25:bf:f8:b4:7f: e7:50:ba:ca:c7:f1:54:d5:18:46:50:4d:34:fc:0c: 62:28:26:ae:4d:f2:a6:b4:55:a9:0e:38:ef:07:b8: 5b:e7:b8:dd:65:36:a3:f6:36:39:91:1c:03:12:1d: d9:6d:90:db:f5:11:32:37:8b:65:ba:c2:26:ee:fa: 80:e8:37:d0:e9:d6:04:2c:f9:5c:42:5b:97:6a:77: fe:98:41:2c:5c:6b:55:d9:b0:65:b1:25:97:f3:8d: 57:c5:20:d3:ef:a1:f4:93:cd:40:05:79:17:77:95: 90:8a:87:e4:56:38:49:a3:25:8c:2c:3b:a1:da:a5: 8a:82:d2:54:1d:c9:38:f2:d2:f1:3c:ee:04:d8:7d: b4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D9:29:BC:F6:21:95:B0:65:14:7D:F0:9A:B8:94:FB:BC:1F:22:3B X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e302e302f32342d3234203d3e20323036323831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.253.0.0/24 Signature Algorithm: sha256WithRSAEncryption b7:d8:c3:6d:21:f4:fd:4d:3a:5e:d7:2f:2e:16:28:e5:c1:a4: fa:32:80:7b:f9:a6:c8:41:f4:3d:c9:37:7b:e3:d5:68:3c:d4: d2:3a:cf:6a:7b:c1:52:d2:1a:77:0d:e3:33:10:94:4d:b7:2c: 47:bb:b1:2e:de:8d:06:48:8b:4b:c0:fe:54:db:7d:f3:3b:cb: 00:59:1b:a9:8e:98:a8:d5:0c:a8:8a:8b:52:7b:6c:94:ce:98: a4:08:f9:ea:c8:2b:8f:d2:cb:92:3b:d2:c5:a0:78:fb:07:3b: b7:d6:41:30:1b:4c:b8:67:0b:07:d2:e0:de:0a:d0:9b:c7:08: 33:9f:74:7b:f6:cf:c8:05:ba:82:62:38:ae:cb:08:cd:c9:12: 1b:55:44:4c:bf:53:c7:ec:6b:d4:db:10:a1:c4:11:50:82:b4: 9c:d2:79:ae:ae:80:b0:c3:c9:72:cd:99:c1:2a:e6:8a:8e:31: f4:b6:4b:60:e4:f3:b2:2e:10:f7:13:bd:c2:0e:65:d4:6d:5c: c6:ba:2e:34:5e:ba:2b:36:91:6d:eb:94:50:cb:a7:00:1c:38: 3b:1b:28:6d:ae:e1:a4:3b:37:26:69:dd:47:a2:59:97:07:4c: 4d:bd:fc:c8:c9:95:4f:a1:a1:2b:cf:00:1f:d2:16:b9:5a:e3: a6:ba:81:97 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUatC69LfSzIMWZKW+GMoj+l7FTWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNTExMjUwNjUwMTJaFw0yNjExMjQwNjU1MTJaMDMxMTAvBgNV BAMTKDM2RDkyOUJDRjYyMTk1QjA2NTE0N0RGMDlBQjg5NEZCQkMxRjIyM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK76HFS9A6cio9vItSKej2f16g uOXEYMzzhLeEBW4lw0cCIhzCW6SxsOqvu0l3cZ4RhD3yh4ODGjLS/Zvc68Wp0ZOT WrVpM8e8WOtVqEETYXrSlEnGzvyO88dHtV+KULQWRkuO5ASgHMbnekBFcF0Rh+sl v/i0f+dQusrH8VTVGEZQTTT8DGIoJq5N8qa0VakOOO8HuFvnuN1lNqP2NjmRHAMS HdltkNv1ETI3i2W6wibu+oDoN9Dp1gQs+VxCW5dqd/6YQSxca1XZsGWxJZfzjVfF INPvofSTzUAFeRd3lZCKh+RWOEmjJYwsO6HapYqC0lQdyTjy0vE87gTYfbRvAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUNtkpvPYhlbBlFH3wmriU+7wfIjswHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2U1MTBlMTct MzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZkZjUxLzAvMzEzNTM5MmUzMjM1MzMyZTMw MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM2MzIzODMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA n/0AMA0GCSqGSIb3DQEBCwUAA4IBAQC32MNtIfT9TTpe1y8uFijlwaT6MoB7+abI QfQ9yTd749VoPNTSOs9qe8FS0hp3DeMzEJRNtyxHu7Eu3o0GSItLwP5U233zO8sA WRupjpio1QyoiotSe2yUzpikCPnqyCuP0suSO9LFoHj7Bzu31kEwG0y4ZwsH0uDe CtCbxwgzn3R79s/IBbqCYjiuywjNyRIbVURMv1PH7GvU2xChxBFQgrSc0nmuroCw w8lyzZnBKuaKjjH0tktg5POyLhD3E73CDmXUbVzGui40XrorNpFt65RQy6cAHDg7 GyhtruGkOzcmad1HolmXB0xNvfzIyZVPoaErzwAf0ha5WuOmuoGX -----END CERTIFICATE-----Generated at Sat Dec 6 18:17:10 2025 by rpki-client