This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa File: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (raw, json) Hash identifier: miGCXloG7luQuuhAJwRZ+kv5aIjNiE2JcKseZN1V68A= Subject key identifier: D5:D8:59:01:AA:E9:FA:71:FE:E9:A0:6B:43:5F:E3:15:60:6C:84:9C Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 067B87867AE0F402B6B15525E82A2A53245E7D5F Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa Signing time: Thu 20 Nov 2025 15:55:12 +0000 ROA not before: Thu 20 Nov 2025 15:50:12 +0000 ROA not after: Thu 19 Nov 2026 15:55:12 +0000 asID: 49468 IP address blocks: 193.203.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:7b:87:86:7a:e0:f4:02:b6:b1:55:25:e8:2a:2a:53:24:5e:7d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Nov 20 15:50:12 2025 GMT Not After : Nov 19 15:55:12 2026 GMT Subject: CN=D5D85901AAE9FA71FEE9A06B435FE315606C849C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:81:5c:1c:05:35:b7:74:23:58:a5:e7:f5:5f: 0a:ac:99:52:1b:c4:5d:ae:b8:a1:98:cc:a6:a1:05: 2f:5f:fc:1e:62:8a:0b:c6:4c:54:51:b7:39:54:05: f8:29:2d:46:ad:e3:7a:04:0d:0a:95:48:0b:12:76: cd:b4:a6:a7:13:99:bc:49:47:7b:05:55:9e:4d:d4: 7c:92:3b:2e:9c:7d:1e:39:aa:8d:de:46:9c:30:43: cf:f3:0d:72:ab:77:a8:68:22:8a:d4:06:55:9b:a6: b0:20:3b:51:87:02:25:4a:c9:bd:5d:3d:15:a1:9d: 91:b0:d5:ec:17:f0:24:d4:9a:da:46:53:85:2a:d4: 08:35:5f:34:b5:c3:b1:1b:80:65:56:22:e5:ec:aa: 40:5a:00:a1:49:9c:d2:76:bb:0f:05:0f:1d:0f:7b: f2:7f:ea:bf:29:ec:31:93:47:b3:85:52:20:ae:f3: 4e:6e:ac:b9:e8:da:6f:c5:1b:8c:6e:f1:96:d7:94: fd:c7:61:28:1e:68:93:31:a7:66:ab:e1:ac:a5:b6: 05:a8:c9:ab:a4:86:16:d4:58:e3:51:8b:a6:88:e4: 5a:d0:6f:57:43:df:0e:d9:e2:04:6e:97:87:be:5f: f6:df:2a:6c:86:da:00:67:67:ba:2a:e1:43:0d:42: e9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D8:59:01:AA:E9:FA:71:FE:E9:A0:6B:43:5F:E3:15:60:6C:84:9C X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.205.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:6e:04:9a:9b:2f:3f:22:d1:15:76:fb:1d:66:75:53:e3:bd: e9:9a:55:e3:8b:18:e5:85:93:82:b2:90:00:3f:08:3c:9b:c6: 1d:d7:2f:cf:fe:17:08:1c:db:98:b3:fa:3b:f1:e7:ae:55:0d: cd:4b:98:51:8d:c3:b3:bd:84:3c:77:20:19:75:e1:c6:a0:44: 13:e2:cf:84:a4:fa:a8:a3:71:cc:1a:71:af:f3:e0:59:b0:ef: 20:1e:33:b0:ec:cf:d2:25:18:d8:ac:ea:05:95:f4:8a:89:cb: f5:5e:4c:ba:36:6f:fa:a4:ce:ff:69:dd:3b:8d:7c:60:3f:23: 01:c3:73:f1:21:b5:9f:d9:ad:bb:f5:c2:a9:73:ab:43:38:b6: 5a:37:f4:70:11:4b:b0:5f:2c:ba:e6:58:ef:97:5c:66:05:4e: ec:66:9f:7c:a8:51:45:13:52:c1:56:f0:30:b0:8b:9d:de:b7: 13:e4:ab:ab:e1:f6:9f:1f:57:e4:54:b6:b0:a7:9a:43:da:5f: d7:38:f1:ca:a7:4c:de:4b:b4:6f:a5:1b:dd:43:ec:30:a5:f2: ae:68:0a:5f:9c:22:35:08:7a:2c:60:c3:25:56:91:89:86:e3: 3e:a2:76:ec:c9:56:c4:13:49:ea:63:23:4f:29:62:45:9c:b1: ab:95:d7:ac -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUBnuHhnrg9AK2sVUl6CoqUyRefV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNTExMjAxNTUwMTJaFw0yNjExMTkxNTU1MTJaMDMxMTAvBgNV BAMTKEQ1RDg1OTAxQUFFOUZBNzFGRUU5QTA2QjQzNUZFMzE1NjA2Qzg0OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOgVwcBTW3dCNYpef1XwqsmVIb xF2uuKGYzKahBS9f/B5iigvGTFRRtzlUBfgpLUat43oEDQqVSAsSds20pqcTmbxJ R3sFVZ5N1HySOy6cfR45qo3eRpwwQ8/zDXKrd6hoIorUBlWbprAgO1GHAiVKyb1d PRWhnZGw1ewX8CTUmtpGU4Uq1Ag1XzS1w7EbgGVWIuXsqkBaAKFJnNJ2uw8FDx0P e/J/6r8p7DGTR7OFUiCu805urLno2m/FG4xu8ZbXlP3HYSgeaJMxp2ar4ayltgWo yaukhhbUWONRi6aI5FrQb1dD3w7Z4gRul4e+X/bfKmyG2gBnZ7oq4UMNQukTAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU1dhZAarp+nH+6aBrQ1/jFWBshJwwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWEwZGU5N2Yt N2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQzYzc5LzAvMzEzOTMzMmUzMjMwMzMyZTMy MzAzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzkzNDM2Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADBy80wDQYJKoZIhvcNAQELBQADggEBAH9uBJqbLz8i0RV2+x1mdVPjvemaVeOL GOWFk4KykAA/CDybxh3XL8/+Fwgc25iz+jvx565VDc1LmFGNw7O9hDx3IBl14cag RBPiz4Sk+qijccwaca/z4Fmw7yAeM7Dsz9IlGNis6gWV9IqJy/VeTLo2b/qkzv9p 3TuNfGA/IwHDc/EhtZ/Zrbv1wqlzq0M4tlo39HARS7BfLLrmWO+XXGYFTuxmn3yo UUUTUsFW8DCwi53etxPkq6vh9p8fV+RUtrCnmkPaX9c48cqnTN5LtG+lG91D7DCl 8q5oCl+cIjUIeixgwyVWkYmG4z6iduzJVsQTSepjI08pYkWcsauV16w= -----END CERTIFICATE-----Generated at Sat Dec 6 23:16:34 2025 by rpki-client