This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233392e3135312e302f32342d3234203d3e20313336373837.roa File: 3138352e3233392e3135312e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: gZtfbowEzgwDPW7bJ5TskgyiN5GDuVMW01l2MO+BehI= Subject key identifier: DB:5F:77:62:FF:45:2A:CC:40:47:A7:0B:56:D4:17:21:2C:2A:DB:1F Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 1F1AB154811FCEBA6B11E8C679EB61C8B18C5F4D Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233392e3135312e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 19:49:57 +0000 ROA not before: Fri 28 Nov 2025 19:44:57 +0000 ROA not after: Fri 27 Nov 2026 19:49:57 +0000 asID: 136787 IP address blocks: 185.239.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:1a:b1:54:81:1f:ce:ba:6b:11:e8:c6:79:eb:61:c8:b1:8c:5f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 28 19:44:57 2025 GMT Not After : Nov 27 19:49:57 2026 GMT Subject: CN=DB5F7762FF452ACC4047A70B56D417212C2ADB1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d4:a6:4e:df:8d:15:24:0a:94:b5:68:28:c7: 52:bb:45:50:45:54:bd:93:7a:5a:4f:dd:a4:59:f4: e9:52:38:58:f5:06:e3:e8:3b:aa:75:b4:3e:ba:10: 6e:4a:3f:91:db:54:af:94:fa:97:cc:3d:57:95:b1: 0c:e1:14:86:38:7f:fc:3c:51:b8:9c:d2:0b:fc:da: b3:4a:36:cb:8f:b9:3a:7b:ff:da:b1:f6:c3:9c:10: 97:c2:2d:ec:c9:99:75:91:e9:41:f9:0e:db:ed:b9: 34:23:20:cc:2d:48:13:b3:8b:9e:4d:f7:95:ff:99: e0:67:e3:bc:09:89:2f:3a:4f:c5:01:06:71:56:5d: 00:8f:ae:6f:ad:11:03:05:fe:35:95:6d:4e:23:86: e1:04:e9:eb:35:2a:16:00:44:e0:d5:92:1e:d0:89: 85:75:92:0b:8b:13:27:e9:25:d0:75:79:3b:39:1d: b4:e5:0a:58:7d:0e:ff:ef:58:54:d3:62:29:69:f1: 2c:69:a6:4f:38:1f:90:42:74:d7:6f:eb:3d:c6:c7: f6:47:32:71:d8:03:2f:0d:cc:dc:9a:48:1e:64:fe: 76:40:d0:7a:75:3e:9b:0f:86:5b:c1:2d:31:b8:2b: 96:6d:0c:80:91:c9:af:28:bd:2b:0d:12:43:06:f4: 50:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5F:77:62:FF:45:2A:CC:40:47:A7:0B:56:D4:17:21:2C:2A:DB:1F X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233392e3135312e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.151.0/24 Signature Algorithm: sha256WithRSAEncryption 21:cc:10:f1:9a:1c:1f:0c:7d:e8:f1:d5:cc:7b:29:bc:ac:7b: 1d:0c:70:cf:ac:09:d6:95:54:f8:c0:5e:e3:f5:2c:76:52:b8: 9d:00:ed:bb:2a:c2:15:42:fd:d4:d6:e5:52:ac:d1:70:8b:52: 6b:36:8f:dd:6c:7d:5a:60:91:97:cd:b6:3a:ed:bb:8b:cf:29: a9:fe:b4:33:66:45:ef:90:73:39:4c:9f:fe:7f:8d:8d:fb:9b: 70:4e:6e:6d:47:04:f4:2e:f8:f1:01:df:3b:fa:16:ee:4f:08: 95:05:31:67:70:d3:a4:9d:a3:3f:67:17:46:74:f7:50:88:69: 85:c8:6a:e3:cf:40:62:35:7d:f6:bc:b2:3c:a0:55:50:16:e1: dc:16:60:91:b8:1a:76:ec:5f:59:13:3b:e4:3b:a7:22:5a:c8: 15:18:a0:42:25:25:00:06:5e:7a:5f:99:ff:3e:1c:35:bc:65: 52:86:90:df:58:f4:a6:5f:9e:b7:e5:50:24:f4:40:ce:af:54: 70:61:71:a7:5e:74:0f:f2:9e:4c:a0:a1:97:d4:6e:b3:1f:04: ae:69:d9:0d:62:13:76:01:72:cb:f6:38:6c:ec:1d:20:8c:5d: da:9f:f4:bd:f5:c4:fc:0a:ca:75:40:2b:6e:c9:47:fc:42:78: e4:d9:03:51 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUHxqxVIEfzrprEejGeethyLGMX00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjgxOTQ0NTdaFw0yNjExMjcxOTQ5NTdaMDMxMTAvBgNV BAMTKERCNUY3NzYyRkY0NTJBQ0M0MDQ3QTcwQjU2RDQxNzIxMkMyQURCMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr1KZO340VJAqUtWgox1K7RVBF VL2TelpP3aRZ9OlSOFj1BuPoO6p1tD66EG5KP5HbVK+U+pfMPVeVsQzhFIY4f/w8 Ubic0gv82rNKNsuPuTp7/9qx9sOcEJfCLezJmXWR6UH5DtvtuTQjIMwtSBOzi55N 95X/meBn47wJiS86T8UBBnFWXQCPrm+tEQMF/jWVbU4jhuEE6es1KhYARODVkh7Q iYV1kguLEyfpJdB1eTs5HbTlClh9Dv/vWFTTYilp8Sxppk84H5BCdNdv6z3Gx/ZH MnHYAy8NzNyaSB5k/nZA0Hp1PpsPhlvBLTG4K5ZtDICRya8ovSsNEkMG9FB7AgMB AAGjggJBMIICPTAdBgNVHQ4EFgQU2193Yv9FKsxAR6cLVtQXISwq2x8wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMzMzkyZTMx MzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALnvlzANBgkqhkiG9w0BAQsFAAOCAQEAIcwQ8ZocHwx96PHVzHspvKx7HQxw z6wJ1pVU+MBe4/UsdlK4nQDtuyrCFUL91NblUqzRcItSazaP3Wx9WmCRl822Ou27 i88pqf60M2ZF75BzOUyf/n+NjfubcE5ubUcE9C748QHfO/oW7k8IlQUxZ3DTpJ2j P2cXRnT3UIhphchq489AYjV99ryyPKBVUBbh3BZgkbgaduxfWRM75DunIlrIFRig QiUlAAZeel+Z/z4cNbxlUoaQ31j0pl+et+VQJPRAzq9UcGFxp150D/KeTKChl9Ru sx8ErmnZDWITdgFyy/Y4bOwdIIxd2p/0vfXE/ArKdUArbslH/EJ45NkDUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:52:40 2025 by rpki-client