This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa File: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (raw, json) Hash identifier: gAYzs7DeTkU9g1RDUiQKlOcpyqQALQV1LLqH3P6H/bU= Subject key identifier: 8C:DE:E8:62:87:A1:C5:C8:AA:4D:3C:F7:E6:A8:51:00:52:C8:B8:4D Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 05C179541E108DA7BE89A66CF67F0727C158FF18 Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa Signing time: Sun 09 Nov 2025 11:39:54 +0000 ROA not before: Sun 09 Nov 2025 11:34:54 +0000 ROA not after: Sun 08 Nov 2026 11:39:54 +0000 asID: 41720 IP address blocks: 185.242.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c1:79:54:1e:10:8d:a7:be:89:a6:6c:f6:7f:07:27:c1:58:ff:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: Nov 9 11:34:54 2025 GMT Not After : Nov 8 11:39:54 2026 GMT Subject: CN=8CDEE86287A1C5C8AA4D3CF7E6A8510052C8B84D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:02:da:31:bd:50:d0:b0:28:b7:b2:8c:9d:b0: fb:93:31:dc:27:a7:50:44:6c:59:f5:5a:9c:75:16: 95:e6:8d:f4:3e:db:3f:a9:84:42:26:f4:b4:cc:d8: 0a:4c:e4:e7:59:75:16:49:0d:99:b2:c4:99:6e:e3: e4:34:4c:7f:46:55:fd:f8:d1:2f:10:df:73:da:06: 8a:77:26:d0:7e:1d:4d:6b:12:8e:e6:2f:53:d7:02: 8a:0a:39:7d:f4:b1:02:08:a9:b8:aa:35:5d:49:77: 3f:fb:f4:ff:1c:df:73:a6:05:62:fa:5d:f8:d3:1f: 2e:75:bc:e8:94:8d:c6:af:a4:bc:22:5b:eb:97:d4: 2d:15:9d:56:17:e6:db:b4:e3:9b:56:cb:5f:29:31: c3:1a:0b:18:71:3a:fb:26:30:83:91:3a:87:1b:b5: 64:35:a2:9c:b1:03:d6:35:b4:ba:a4:b4:06:67:02: 8a:01:c8:8f:8f:26:f2:62:3a:25:6f:ea:90:eb:e9: 9a:cc:53:71:e1:38:9d:e1:25:e6:64:83:1f:38:c1: 4a:a2:23:11:bb:00:b1:ab:19:d4:c7:36:be:96:93: 49:d9:e4:e6:4e:66:e1:5c:10:9f:74:da:13:92:32: a6:12:72:12:f4:e7:d7:9c:08:a2:6c:5c:2e:9f:ba: d1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DE:E8:62:87:A1:C5:C8:AA:4D:3C:F7:E6:A8:51:00:52:C8:B8:4D X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.182.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:a2:a1:ce:05:2a:e2:8d:d9:50:ca:66:c9:63:ad:b1:e6:60: 4e:d0:66:4e:5b:d9:49:ed:4b:f3:19:81:91:03:03:35:58:fd: d4:1a:be:07:de:92:36:10:c0:94:3b:44:f8:34:c7:02:32:fc: b3:eb:c4:90:05:db:5e:cd:fd:8b:71:df:e4:a6:9e:44:67:6c: e4:00:35:d5:ac:db:b7:04:4f:82:25:70:5d:a9:37:09:b3:9b: e0:76:9b:20:d8:ea:ed:4d:e9:a4:8c:b2:e8:41:d7:ae:d6:5e: c9:90:8b:d9:06:b5:be:7c:30:68:36:c8:26:19:7e:36:52:8d: 58:5d:2f:7c:9e:cb:ee:c3:9d:8a:1c:5d:25:ea:4a:d4:5b:7d: 9d:63:23:da:7e:43:84:ed:8c:93:11:a5:e0:94:d8:9f:2c:ae: 73:43:71:54:37:20:e5:67:2d:f4:05:63:ad:df:40:a7:d2:48: 38:87:da:23:40:a6:c1:b6:12:8f:4f:d8:b3:47:2c:91:1b:11: c0:97:45:7e:c4:5b:86:74:be:35:45:b8:4c:ad:62:ec:09:d5: 2b:ab:fb:81:0c:4c:dd:4e:c5:a1:7d:af:72:d7:8c:e9:d9:a7: d4:38:4e:2f:0b:33:ad:12:fc:34:b1:37:8a:6e:77:a8:dd:e6: ab:8f:2d:91 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUBcF5VB4Qjae+iaZs9n8HJ8FY/xgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNTExMDkxMTM0NTRaFw0yNjExMDgxMTM5NTRaMDMxMTAvBgNV BAMTKDhDREVFODYyODdBMUM1QzhBQTREM0NGN0U2QTg1MTAwNTJDOEI4NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJAtoxvVDQsCi3soydsPuTMdwn p1BEbFn1Wpx1FpXmjfQ+2z+phEIm9LTM2ApM5OdZdRZJDZmyxJlu4+Q0TH9GVf34 0S8Q33PaBop3JtB+HU1rEo7mL1PXAooKOX30sQIIqbiqNV1Jdz/79P8c33OmBWL6 XfjTHy51vOiUjcavpLwiW+uX1C0VnVYX5tu045tWy18pMcMaCxhxOvsmMIOROocb tWQ1opyxA9Y1tLqktAZnAooByI+PJvJiOiVv6pDr6ZrMU3HhOJ3hJeZkgx84wUqi IxG7ALGrGdTHNr6Wk0nZ5OZOZuFcEJ902hOSMqYSchL059ecCKJsXC6futF7AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUjN7oYoehxciqTTz35qhRAFLIuE0wHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQt NjFjNS00MjkwLThhNmQtNWYyYjkwMjczMjJmLzAvMzEzODM1MmUzMjM0MzIyZTMx MzgzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzEzNzMyMzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC58rYwDQYJKoZIhvcNAQELBQADggEBAF2ioc4FKuKN2VDKZsljrbHmYE7QZk5b 2UntS/MZgZEDAzVY/dQavgfekjYQwJQ7RPg0xwIy/LPrxJAF217N/Ytx3+SmnkRn bOQANdWs27cET4IlcF2pNwmzm+B2myDY6u1N6aSMsuhB167WXsmQi9kGtb58MGg2 yCYZfjZSjVhdL3yey+7DnYocXSXqStRbfZ1jI9p+Q4TtjJMRpeCU2J8srnNDcVQ3 IOVnLfQFY63fQKfSSDiH2iNApsG2Eo9P2LNHLJEbEcCXRX7EW4Z0vjVFuEytYuwJ 1Sur+4EMTN1OxaF9r3LXjOnZp9Q4Ti8LM60S/DSxN4pud6jd5quPLZE= -----END CERTIFICATE-----Generated at Sat Dec 6 05:49:40 2025 by rpki-client