This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138382e39342e3139312e302f32342d3234203d3e203537303433.roa File: 3138382e39342e3139312e302f32342d3234203d3e203537303433.roa (raw, json) Hash identifier: 8styg8XghivByqecwh8GqtE8kKwAeHdMu50Ggf4sImQ= Subject key identifier: 78:BA:6A:5B:82:D8:6F:96:FE:D5:2F:E4:61:05:DA:A3:3E:12:99:D9 Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Certificate serial: 54EB0DC6CE12167E9E55548A8D4885D557D15093 Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138382e39342e3139312e302f32342d3234203d3e203537303433.roa Signing time: Tue 02 Dec 2025 17:27:43 +0000 ROA not before: Tue 02 Dec 2025 17:22:43 +0000 ROA not after: Tue 01 Dec 2026 17:27:43 +0000 asID: 57043 IP address blocks: 188.94.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:eb:0d:c6:ce:12:16:7e:9e:55:54:8a:8d:48:85:d5:57:d1:50:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Validity Not Before: Dec 2 17:22:43 2025 GMT Not After : Dec 1 17:27:43 2026 GMT Subject: CN=78BA6A5B82D86F96FED52FE46105DAA33E1299D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9c:e9:5f:63:39:7c:46:88:f9:bd:d8:78:a0: 4e:ea:6f:0f:7f:2a:61:73:51:0c:2e:b4:6e:7a:31: 0f:f6:cc:99:66:67:77:dc:ac:fa:69:6c:02:85:ec: 16:ca:ea:be:76:ff:10:4e:34:8b:81:d0:e7:69:cc: d3:fe:8f:7e:80:72:a5:ad:98:8a:1d:c4:51:3a:f2: 6e:6b:e7:ed:51:85:11:7b:3c:94:57:c0:b0:44:a0: 59:11:7b:12:53:2a:1c:59:14:49:57:bb:77:20:c3: 8c:b8:db:f2:d1:f1:32:fc:24:c7:fc:99:33:af:c7: 26:17:53:19:14:16:92:3f:89:22:b5:f6:44:9d:06: 11:71:fa:ef:6d:d5:cb:9a:a7:b5:b9:49:75:31:56: 58:0b:51:66:7a:f1:de:09:7e:49:a7:8f:1b:72:a9: 14:4d:34:2b:99:05:9d:75:18:6d:80:27:1a:24:04: 84:e3:80:90:9c:14:40:bc:e1:b5:14:57:ad:29:33: 2b:3f:a0:d9:60:ef:57:31:6d:da:65:54:02:2d:51: d6:7f:8a:bb:10:79:6a:27:42:16:45:2b:0f:0f:90: e8:37:66:0d:73:7c:e9:89:9d:d1:83:4b:64:8d:11: 2c:60:e8:02:53:fb:58:8f:a9:fe:d3:58:e5:67:65: 55:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BA:6A:5B:82:D8:6F:96:FE:D5:2F:E4:61:05:DA:A3:3E:12:99:D9 X509v3 Authority Key Identifier: keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138382e39342e3139312e302f32342d3234203d3e203537303433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.94.191.0/24 Signature Algorithm: sha256WithRSAEncryption 35:72:6b:82:68:25:9f:de:2c:6a:01:36:ef:b2:6d:74:51:70: b3:69:15:90:73:01:0b:3a:19:ec:c3:11:2c:6b:08:17:e3:00: e2:a0:2c:c2:4f:be:3c:0e:a1:48:9a:74:1d:05:0e:fd:b8:ab: 2f:41:93:3d:65:03:16:9d:d6:cd:86:25:89:a5:e2:17:56:17: 63:46:c1:d4:6a:c0:f3:fb:a3:38:35:77:76:09:6e:87:4e:8d: 14:d5:5a:34:77:9a:4e:2c:38:af:9d:81:76:5c:a8:a5:8b:15: c9:f1:26:58:13:3d:77:bd:97:75:c8:dc:14:2b:09:7b:fe:10: f0:82:19:29:85:5a:80:4b:e5:ec:20:ac:ce:f0:22:29:9c:e5: 85:99:6a:88:99:3a:ee:c5:0b:2d:45:6d:ea:d5:15:85:39:e0: 1e:68:5a:50:f0:a0:2d:a0:e3:8a:45:86:3e:e4:62:6f:f5:20: f2:d9:e3:72:c7:d3:0c:4b:46:3e:9e:b3:5e:c2:08:75:c1:8b: f6:9d:01:91:70:b6:d5:ab:b0:1f:9b:e4:20:39:c8:c3:93:12: c2:5d:62:3a:a8:21:a6:f1:68:4c:e5:00:2d:35:3d:ad:85:de: 8c:6e:7a:00:c3:80:2c:d3:6a:97:45:7b:30:b5:53:8a:53:3d: 0f:40:e3:59 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUVOsNxs4SFn6eVVSKjUiF1VfRUJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTFmMzUxMmY1MWRjNDJiYjllYjEyYWJjMGJiNTI5NjY4 YjJlZGVlNDAeFw0yNTEyMDIxNzIyNDNaFw0yNjEyMDExNzI3NDNaMDMxMTAvBgNV BAMTKDc4QkE2QTVCODJEODZGOTZGRUQ1MkZFNDYxMDVEQUEzM0UxMjk5RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPnOlfYzl8Roj5vdh4oE7qbw9/ KmFzUQwutG56MQ/2zJlmZ3fcrPppbAKF7BbK6r52/xBONIuB0OdpzNP+j36AcqWt mIodxFE68m5r5+1RhRF7PJRXwLBEoFkRexJTKhxZFElXu3cgw4y42/LR8TL8JMf8 mTOvxyYXUxkUFpI/iSK19kSdBhFx+u9t1cuap7W5SXUxVlgLUWZ68d4Jfkmnjxty qRRNNCuZBZ11GG2AJxokBITjgJCcFEC84bUUV60pMys/oNlg71cxbdplVAItUdZ/ irsQeWonQhZFKw8PkOg3Zg1zfOmJndGDS2SNESxg6AJT+1iPqf7TWOVnZVUhAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUeLpqW4LYb5b+1S/kYQXaoz4SmdkwHwYDVR0j BBgwFoAU4fNRL1HcQruesSq8C7UpZosu3uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgtZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3 OWE3LzAvRTFGMzUxMkY1MURDNDJCQjlFQjEyQUJDMEJCNTI5NjY4QjJFREVFNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmTlJMMUhjUXJ1ZXNTcThDN1VwWm9z dTN1US5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgt ZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3OWE3LzAvMzEzODM4MmUzOTM0MmUzMTM5 MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM3MzAzNDMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA vF6/MA0GCSqGSIb3DQEBCwUAA4IBAQA1cmuCaCWf3ixqATbvsm10UXCzaRWQcwEL OhnswxEsawgX4wDioCzCT748DqFImnQdBQ79uKsvQZM9ZQMWndbNhiWJpeIXVhdj RsHUasDz+6M4NXd2CW6HTo0U1Vo0d5pOLDivnYF2XKilixXJ8SZYEz13vZd1yNwU Kwl7/hDwghkphVqAS+XsIKzO8CIpnOWFmWqImTruxQstRW3q1RWFOeAeaFpQ8KAt oOOKRYY+5GJv9SDy2eNyx9MMS0Y+nrNewgh1wYv2nQGRcLbVq7Afm+QgOcjDkxLC XWI6qCGm8WhM5QAtNT2thd6MbnoAw4As02qXRXswtVOKUz0PQONZ -----END CERTIFICATE-----Generated at Sat Dec 6 09:45:49 2025 by rpki-client