This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138382e39342e3139312e302f32342d3234203d3e203236333833.roa File: 3138382e39342e3139312e302f32342d3234203d3e203236333833.roa (raw, json) Hash identifier: KVgKufhzMCzuYPXRdj1v2nCOHhTInMxlTivgHzFkAcY= Subject key identifier: 2D:94:8C:89:A5:9E:5B:A5:3E:30:C5:2F:C3:5E:7A:B8:B0:EA:DB:9F Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Certificate serial: 1657BC886CFCE85DD871D6DB92D67E25A9D21BFA Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138382e39342e3139312e302f32342d3234203d3e203236333833.roa Signing time: Tue 02 Dec 2025 17:27:18 +0000 ROA not before: Tue 02 Dec 2025 17:22:18 +0000 ROA not after: Tue 01 Dec 2026 17:27:18 +0000 asID: 26383 IP address blocks: 188.94.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:57:bc:88:6c:fc:e8:5d:d8:71:d6:db:92:d6:7e:25:a9:d2:1b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Validity Not Before: Dec 2 17:22:18 2025 GMT Not After : Dec 1 17:27:18 2026 GMT Subject: CN=2D948C89A59E5BA53E30C52FC35E7AB8B0EADB9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cc:df:95:4d:30:c1:28:71:e6:80:54:20:7a: a8:9e:54:21:56:4c:41:f1:bf:28:5c:d6:d3:af:0f: ab:2b:5c:02:6b:59:95:30:31:67:44:25:07:36:a9: 3f:08:27:b8:39:60:24:40:c2:47:64:42:b3:f5:7d: 08:93:b2:fd:9e:b6:ba:e3:c6:35:18:fd:9e:82:1f: fa:2a:ff:aa:a4:b0:b8:e6:89:75:30:07:fb:e7:d6: 58:29:80:5d:8b:13:29:07:56:1c:75:3a:c1:6b:fe: 80:a4:95:20:b2:09:34:43:25:ee:e3:4f:41:cb:b1: a8:f7:99:d8:34:39:73:13:48:f5:ce:98:37:50:b3: 5a:61:10:7a:31:b7:bd:fc:b7:fe:6b:5e:63:44:ea: 9a:ed:a0:93:4a:05:c0:68:29:9a:6c:44:eb:60:49: 73:15:ae:d2:77:75:c1:16:dd:5a:24:07:78:3c:f7: 19:3c:94:4c:63:b1:4d:65:b3:c8:17:89:52:d4:10: 0a:cc:f5:21:b4:20:9d:09:96:9f:45:21:de:ee:0e: d5:78:5e:03:64:e3:ed:d7:48:ee:b9:07:c3:42:01: 3f:12:fb:ce:41:48:cd:a9:d2:d6:fe:45:4f:29:e0: 3e:27:50:7f:f0:6c:0d:df:84:68:bb:bf:24:45:38: 9f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:94:8C:89:A5:9E:5B:A5:3E:30:C5:2F:C3:5E:7A:B8:B0:EA:DB:9F X509v3 Authority Key Identifier: keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138382e39342e3139312e302f32342d3234203d3e203236333833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.94.191.0/24 Signature Algorithm: sha256WithRSAEncryption 56:ea:c5:4d:84:95:01:21:38:3f:85:6e:38:ba:f7:0d:25:ca: 5c:e0:41:96:f9:19:a4:3a:bd:2e:96:76:f3:28:ee:4a:63:98: c1:a1:70:8b:67:39:ea:18:21:ed:d7:ab:6f:b7:74:12:4b:ba: 6a:7f:4a:10:eb:dc:f6:77:86:d2:cd:e5:76:c8:0b:d1:1a:98: 3b:25:55:c8:63:4a:f2:d8:89:e6:3c:03:e3:a1:0b:22:d1:08: cc:83:d1:7c:c7:95:24:cf:4a:5f:e2:47:ae:6e:19:a4:1f:46: 08:90:19:cc:61:0d:72:48:c5:47:ad:30:eb:17:5c:53:bb:e1: 22:33:42:0d:44:13:bc:f2:6f:e0:94:51:1b:d2:35:c5:91:0d: 61:0c:cb:53:61:ae:e4:bf:d4:cf:39:46:45:24:3a:e6:48:69: e7:5e:9b:76:06:80:cf:5a:24:1f:f5:21:25:9b:c7:ab:b2:5b: 49:7c:c4:3a:98:c1:6b:cd:f5:b3:50:1b:b0:16:3a:43:dd:9c: 53:68:b9:36:3c:71:33:71:99:19:70:f6:e4:0b:cd:9e:39:8a: 91:ef:97:17:48:9b:a4:ec:97:6b:26:5b:92:0b:2a:1a:92:0f: 77:0d:f0:0e:06:50:f6:8c:ba:7b:f7:28:b5:7b:db:da:b6:9d: 17:17:40:31 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUFle8iGz86F3YcdbbktZ+JanSG/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTFmMzUxMmY1MWRjNDJiYjllYjEyYWJjMGJiNTI5NjY4 YjJlZGVlNDAeFw0yNTEyMDIxNzIyMThaFw0yNjEyMDExNzI3MThaMDMxMTAvBgNV BAMTKDJEOTQ4Qzg5QTU5RTVCQTUzRTMwQzUyRkMzNUU3QUI4QjBFQURCOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzN+VTTDBKHHmgFQgeqieVCFW TEHxvyhc1tOvD6srXAJrWZUwMWdEJQc2qT8IJ7g5YCRAwkdkQrP1fQiTsv2etrrj xjUY/Z6CH/oq/6qksLjmiXUwB/vn1lgpgF2LEykHVhx1OsFr/oCklSCyCTRDJe7j T0HLsaj3mdg0OXMTSPXOmDdQs1phEHoxt738t/5rXmNE6prtoJNKBcBoKZpsROtg SXMVrtJ3dcEW3VokB3g89xk8lExjsU1ls8gXiVLUEArM9SG0IJ0Jlp9FId7uDtV4 XgNk4+3XSO65B8NCAT8S+85BSM2p0tb+RU8p4D4nUH/wbA3fhGi7vyRFOJ85AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQULZSMiaWeW6U+MMUvw156uLDq258wHwYDVR0j BBgwFoAU4fNRL1HcQruesSq8C7UpZosu3uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgtZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3 OWE3LzAvRTFGMzUxMkY1MURDNDJCQjlFQjEyQUJDMEJCNTI5NjY4QjJFREVFNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmTlJMMUhjUXJ1ZXNTcThDN1VwWm9z dTN1US5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgt ZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3OWE3LzAvMzEzODM4MmUzOTM0MmUzMTM5 MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzODMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA vF6/MA0GCSqGSIb3DQEBCwUAA4IBAQBW6sVNhJUBITg/hW44uvcNJcpc4EGW+Rmk Or0ulnbzKO5KY5jBoXCLZznqGCHt16tvt3QSS7pqf0oQ69z2d4bSzeV2yAvRGpg7 JVXIY0ry2InmPAPjoQsi0QjMg9F8x5Ukz0pf4keubhmkH0YIkBnMYQ1ySMVHrTDr F1xTu+EiM0INRBO88m/glFEb0jXFkQ1hDMtTYa7kv9TPOUZFJDrmSGnnXpt2BoDP WiQf9SElm8ersltJfMQ6mMFrzfWzUBuwFjpD3ZxTaLk2PHEzcZkZcPbkC82eOYqR 75cXSJuk7JdrJluSCyoakg93DfAOBlD2jLp79yi1e9vatp0XF0Ax -----END CERTIFICATE-----Generated at Sat Dec 6 09:45:46 2025 by rpki-client