This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135362e302f32342d3234203d3e203632343235.roa File: 3138352e3132332e3135362e302f32342d3234203d3e203632343235.roa (raw, json) Hash identifier: XgczxlBPAi1Rz8PovSXKvWm1J5yj8ZdNr+t5/opwRPc= Subject key identifier: 0D:0F:EA:80:88:C5:98:40:EC:19:B8:B0:84:95:F3:67:B0:5F:8B:B4 Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Certificate serial: 7C90E914B14C55685BC6C322EC5B6AE55BDEE028 Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135362e302f32342d3234203d3e203632343235.roa Signing time: Wed 12 Nov 2025 08:54:49 +0000 ROA not before: Wed 12 Nov 2025 08:49:49 +0000 ROA not after: Wed 11 Nov 2026 08:54:49 +0000 asID: 62425 IP address blocks: 185.123.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:90:e9:14:b1:4c:55:68:5b:c6:c3:22:ec:5b:6a:e5:5b:de:e0:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Validity Not Before: Nov 12 08:49:49 2025 GMT Not After : Nov 11 08:54:49 2026 GMT Subject: CN=0D0FEA8088C59840EC19B8B08495F367B05F8BB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:42:12:f8:f7:07:7c:9f:72:21:93:37:c5:49: 46:77:d1:24:9e:c7:54:9f:9b:75:5c:e5:c6:de:50: 72:bb:32:6d:7e:4a:4d:7d:3b:18:32:19:f0:ae:0d: 49:0b:aa:b0:98:fe:16:4b:f4:2c:71:12:4f:ec:ba: bb:f4:0e:d5:31:46:ef:e6:82:f9:55:76:bd:f0:0f: 7f:8a:32:bb:c0:23:a7:9e:88:a5:47:f4:96:57:48: eb:b3:43:41:06:e3:43:dd:54:11:98:58:ae:df:67: 1e:06:b1:e2:ed:c2:4b:d4:6b:d5:88:32:72:e1:e6: b1:de:ac:01:e5:91:a0:4c:97:2c:fa:d0:6f:57:ad: 09:94:0f:3f:c5:e5:f5:f7:75:15:43:51:49:d3:ae: b9:79:d1:8f:f2:8d:f3:c2:7b:ef:b2:af:6c:2c:6b: d3:7e:f5:26:cc:3e:a5:22:77:b1:1b:bc:62:24:6a: e0:96:bc:d8:11:2b:6d:18:2c:3c:5b:bc:d1:94:ff: 71:b9:12:40:59:26:65:95:eb:fc:f2:ca:29:cd:ec: 25:8d:6c:24:b7:29:a9:8b:a6:2c:e5:36:4e:fb:2a: 41:78:0f:9f:ca:30:23:b7:f2:53:a2:fc:6a:d8:ed: 86:0f:c6:68:99:28:51:90:54:6c:ed:82:c3:c3:84: 54:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0F:EA:80:88:C5:98:40:EC:19:B8:B0:84:95:F3:67:B0:5F:8B:B4 X509v3 Authority Key Identifier: keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135362e302f32342d3234203d3e203632343235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.123.156.0/24 Signature Algorithm: sha256WithRSAEncryption 21:43:77:1f:a8:36:2f:19:cd:d7:43:74:2f:6a:a6:f5:15:65: ef:1a:93:22:16:fc:de:7d:b7:fc:dc:86:bc:dc:14:15:95:43: e7:1e:e1:ec:b3:b2:18:f2:af:31:f8:54:30:6d:04:c8:a0:f9: 90:f5:6d:fb:d3:eb:55:e1:8d:97:af:9d:6c:9d:94:51:bd:fc: 4e:34:cd:48:c4:f3:cf:0c:f4:77:86:b3:22:a0:3b:cb:f8:59: b6:2a:ab:82:18:54:41:4a:64:a8:1a:a4:22:15:dc:97:e5:3c: 10:75:6e:49:6b:31:96:a1:c1:cc:fe:54:a3:b6:ff:37:7e:55: 8e:ae:45:b7:2b:c3:ca:35:a5:f5:6d:0e:32:e4:85:e6:37:63: 75:fa:22:15:39:2e:f3:f0:7f:41:02:b7:64:f0:49:77:82:c3: f1:bd:bb:26:9a:c8:28:22:33:32:5e:10:0e:26:c6:2f:61:df: 04:01:d4:ec:59:05:3e:39:19:d2:99:ff:6b:61:3b:f6:3a:2b: fa:5d:31:85:e4:7e:77:2c:97:cb:a2:4b:e2:1f:f6:0d:4b:8d: c7:c4:16:f4:f3:af:40:1c:d9:7f:cb:e9:16:0f:0c:2b:e5:58: 50:96:a6:e9:42:7f:d6:f1:4a:17:f1:3b:e6:cc:fd:04:bd:fb: 8f:e9:95:34 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUfJDpFLFMVWhbxsMi7Ftq5Vve4CgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTFmMzUxMmY1MWRjNDJiYjllYjEyYWJjMGJiNTI5NjY4 YjJlZGVlNDAeFw0yNTExMTIwODQ5NDlaFw0yNjExMTEwODU0NDlaMDMxMTAvBgNV BAMTKDBEMEZFQTgwODhDNTk4NDBFQzE5QjhCMDg0OTVGMzY3QjA1RjhCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpQhL49wd8n3IhkzfFSUZ30SSe x1Sfm3Vc5cbeUHK7Mm1+Sk19OxgyGfCuDUkLqrCY/hZL9CxxEk/surv0DtUxRu/m gvlVdr3wD3+KMrvAI6eeiKVH9JZXSOuzQ0EG40PdVBGYWK7fZx4GseLtwkvUa9WI MnLh5rHerAHlkaBMlyz60G9XrQmUDz/F5fX3dRVDUUnTrrl50Y/yjfPCe++yr2ws a9N+9SbMPqUid7EbvGIkauCWvNgRK20YLDxbvNGU/3G5EkBZJmWV6/zyyinN7CWN bCS3KamLpizlNk77KkF4D5/KMCO38lOi/GrY7YYPxmiZKFGQVGztgsPDhFSZAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUDQ/qgIjFmEDsGbiwhJXzZ7Bfi7QwHwYDVR0j BBgwFoAU4fNRL1HcQruesSq8C7UpZosu3uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgtZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3 OWE3LzAvRTFGMzUxMkY1MURDNDJCQjlFQjEyQUJDMEJCNTI5NjY4QjJFREVFNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmTlJMMUhjUXJ1ZXNTcThDN1VwWm9z dTN1US5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgt ZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3OWE3LzAvMzEzODM1MmUzMTMyMzMyZTMx MzUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzIzNDMyMzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5e5wwDQYJKoZIhvcNAQELBQADggEBACFDdx+oNi8ZzddDdC9qpvUVZe8akyIW /N59t/zchrzcFBWVQ+ce4eyzshjyrzH4VDBtBMig+ZD1bfvT61XhjZevnWydlFG9 /E40zUjE888M9HeGsyKgO8v4WbYqq4IYVEFKZKgapCIV3JflPBB1bklrMZahwcz+ VKO2/zd+VY6uRbcrw8o1pfVtDjLkheY3Y3X6IhU5LvPwf0ECt2TwSXeCw/G9uyaa yCgiMzJeEA4mxi9h3wQB1OxZBT45GdKZ/2thO/Y6K/pdMYXkfncsl8uiS+If9g1L jcfEFvTzr0Ac2X/L6RYPDCvlWFCWpulCf9bxShfxO+bM/QS9+4/plTQ= -----END CERTIFICATE-----Generated at Sat Dec 6 09:45:43 2025 by rpki-client