This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/38392e3135302e34392e302f32342d3234203d3e2030.roa File: 38392e3135302e34392e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: 7Ig6g0VJeEa8ieyP+TOsHpA7clMBoFU562cFNoIoSMM= Subject key identifier: 56:2D:3F:50:2B:95:37:38:85:CA:4D:C8:CF:12:2B:E4:73:60:43:46 Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Certificate serial: 52CB48799FA3A659259267AA6669046E25F4BD72 Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/38392e3135302e34392e302f32342d3234203d3e2030.roa Signing time: Wed 03 Dec 2025 19:09:02 +0000 ROA not before: Wed 03 Dec 2025 19:04:02 +0000 ROA not after: Wed 02 Dec 2026 19:09:02 +0000 asID: 0 IP address blocks: 89.150.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:cb:48:79:9f:a3:a6:59:25:92:67:aa:66:69:04:6e:25:f4:bd:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Validity Not Before: Dec 3 19:04:02 2025 GMT Not After : Dec 2 19:09:02 2026 GMT Subject: CN=562D3F502B95373885CA4DC8CF122BE473604346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b8:5f:5c:ac:95:bf:9a:ef:c9:5b:01:85:a3: 6b:d4:46:59:9f:58:9f:5a:64:b4:f6:fd:ea:23:4b: 73:64:96:9c:ff:73:d8:8b:0c:92:80:26:c8:e4:a9: e4:78:ab:df:7c:bf:79:86:38:b2:a5:09:7c:d1:37: 62:59:06:e7:2e:19:a4:ca:e8:ba:ae:78:15:f5:2e: aa:69:9a:4c:1b:16:2f:ec:c0:42:72:bc:cd:2e:71: 81:82:42:71:fa:f9:47:84:21:67:6a:32:20:e5:25: 33:34:fe:86:60:f2:53:43:97:e6:9e:b1:00:d3:a1: 25:ce:cf:08:41:e2:61:69:10:aa:55:49:27:74:a2: 57:6d:06:33:7a:38:67:d5:6e:fc:67:8b:86:46:8b: b2:19:51:a4:a4:fd:52:c0:83:da:75:34:21:36:91: e9:75:cb:c7:84:9f:7e:c8:f9:a4:b6:a0:5d:55:13: be:64:e0:5a:3f:46:e8:4a:32:c8:d9:a5:94:0b:16: dd:3c:54:18:36:6e:92:a5:b3:72:f2:ee:dd:bf:fc: d0:0b:30:91:47:14:2f:b5:9a:03:81:b9:5d:1c:94: e9:c3:b6:12:c9:85:21:22:24:25:e4:e8:fe:d6:86: 55:00:2b:26:89:80:cb:20:74:61:b0:3e:e6:62:4f: cb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2D:3F:50:2B:95:37:38:85:CA:4D:C8:CF:12:2B:E4:73:60:43:46 X509v3 Authority Key Identifier: keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/38392e3135302e34392e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.150.49.0/24 Signature Algorithm: sha256WithRSAEncryption 79:49:ef:b2:f2:bf:d5:27:57:ae:8a:16:16:b0:96:7b:7d:9f: 51:a9:30:dd:25:c8:4b:b2:c7:d1:e1:cd:08:42:15:f1:ad:51: be:b4:91:cc:bf:52:b0:b7:cb:30:32:60:50:fc:e4:2e:3e:55: 38:08:8a:e9:53:c0:5a:a6:77:da:35:cd:5b:6b:ac:d8:ec:e7: cc:df:8e:74:09:a4:9e:45:47:da:38:23:da:26:7c:e2:f6:c5: 84:a9:8e:3e:a1:f0:56:d1:9c:ef:f7:c3:29:ff:58:b8:32:8c: c8:69:a4:9a:a9:bb:ed:f4:6d:46:68:f2:e2:fe:68:69:61:65: ba:1e:c1:91:17:72:f1:d3:67:f5:33:69:6c:5f:96:ee:4e:aa: 8a:9f:cc:fd:03:f0:66:72:73:40:23:46:fd:98:e5:bb:bf:ce: 8d:40:d4:48:5c:b4:22:f3:b5:83:3f:b8:07:ee:72:16:7e:e0: 82:82:0c:82:bc:f3:8c:f5:69:5d:fd:0a:bf:24:3f:b2:b8:64: 43:dd:c3:f6:d5:2f:2e:b1:53:ae:b5:a4:56:91:e9:13:9c:3d: 42:52:17:c7:12:11:8c:f4:0a:b0:f3:9e:0d:ef:a3:a7:fc:84: 5a:1c:c7:ce:b7:bd:5a:3c:1c:44:55:9f:77:66:9e:a2:ef:0c: ca:68:a4:e7 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUUstIeZ+jplklkmeqZmkEbiX0vXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTFmMzUxMmY1MWRjNDJiYjllYjEyYWJjMGJiNTI5NjY4 YjJlZGVlNDAeFw0yNTEyMDMxOTA0MDJaFw0yNjEyMDIxOTA5MDJaMDMxMTAvBgNV BAMTKDU2MkQzRjUwMkI5NTM3Mzg4NUNBNERDOENGMTIyQkU0NzM2MDQzNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNuF9crJW/mu/JWwGFo2vURlmf WJ9aZLT2/eojS3Nklpz/c9iLDJKAJsjkqeR4q998v3mGOLKlCXzRN2JZBucuGaTK 6LqueBX1LqppmkwbFi/swEJyvM0ucYGCQnH6+UeEIWdqMiDlJTM0/oZg8lNDl+ae sQDToSXOzwhB4mFpEKpVSSd0oldtBjN6OGfVbvxni4ZGi7IZUaSk/VLAg9p1NCE2 kel1y8eEn37I+aS2oF1VE75k4Fo/RuhKMsjZpZQLFt08VBg2bpKls3Ly7t2//NAL MJFHFC+1mgOBuV0clOnDthLJhSEiJCXk6P7WhlUAKyaJgMsgdGGwPuZiT8vHAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUVi0/UCuVNziFyk3IzxIr5HNgQ0YwHwYDVR0j BBgwFoAU4fNRL1HcQruesSq8C7UpZosu3uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgtZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3 OWE3LzAvRTFGMzUxMkY1MURDNDJCQjlFQjEyQUJDMEJCNTI5NjY4QjJFREVFNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmTlJMMUhjUXJ1ZXNTcThDN1VwWm9z dTN1US5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgt ZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3OWE3LzAvMzgzOTJlMzEzNTMwMmUzNDM5 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZljEwDQYJKoZI hvcNAQELBQADggEBAHlJ77Lyv9UnV66KFhawlnt9n1GpMN0lyEuyx9HhzQhCFfGt Ub60kcy/UrC3yzAyYFD85C4+VTgIiulTwFqmd9o1zVtrrNjs58zfjnQJpJ5FR9o4 I9omfOL2xYSpjj6h8FbRnO/3wyn/WLgyjMhppJqpu+30bUZo8uL+aGlhZboewZEX cvHTZ/UzaWxflu5OqoqfzP0D8GZyc0AjRv2Y5bu/zo1A1EhctCLztYM/uAfuchZ+ 4IKCDIK884z1aV39Cr8kP7K4ZEPdw/bVLy6xU661pFaR6ROcPUJSF8cSEYz0CrDz ng3vo6f8hFocx863vVo8HERVn3dmnqLvDMpopOc= -----END CERTIFICATE-----Generated at Sat Dec 6 09:45:52 2025 by rpki-client