This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137352e35362e302f32342d3234203d3e203633343733.roa File: 3138352e3137352e35362e302f32342d3234203d3e203633343733.roa (raw, json) Hash identifier: 8bSHNn0kjqZOpdFqyM7I9KRYblo3JEwt89VGjD83wMg= Subject key identifier: AF:A3:8D:A7:03:2F:BB:7C:7D:29:4F:94:A3:71:CD:9B:C5:54:8C:8C Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 190534AC31A866E3251E5D095DD9F429D9200454 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137352e35362e302f32342d3234203d3e203633343733.roa Signing time: Mon 01 Dec 2025 15:50:03 +0000 ROA not before: Mon 01 Dec 2025 15:45:03 +0000 ROA not after: Mon 30 Nov 2026 15:50:03 +0000 asID: 63473 IP address blocks: 185.175.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:05:34:ac:31:a8:66:e3:25:1e:5d:09:5d:d9:f4:29:d9:20:04:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:03 2025 GMT Not After : Nov 30 15:50:03 2026 GMT Subject: CN=AFA38DA7032FBB7C7D294F94A371CD9BC5548C8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:36:07:fb:b5:4f:1c:0e:ae:a2:76:4e:d4:2e: 36:15:c6:e0:51:9c:20:f2:4c:16:47:ee:8a:6d:c8: 8f:ff:8a:37:46:93:9a:eb:fd:58:4f:99:fb:83:3e: e8:4c:31:62:91:19:3f:df:53:9d:85:c3:77:a9:de: 49:00:a2:61:f8:3d:a4:f9:74:fe:0d:35:f9:05:09: 4d:52:94:07:42:6c:36:42:d0:bd:21:f3:20:00:f1: 67:33:a2:5c:60:e2:ce:39:84:1e:30:b8:d2:d4:05: fe:58:af:e3:97:b5:80:e8:2e:76:ca:14:f3:db:7a: 30:5e:66:d5:99:4f:0b:c4:d2:6a:e0:93:90:21:22: 5a:6d:d3:c2:ad:11:8e:b9:31:e7:59:7d:f8:e8:7c: d3:70:bd:7f:56:23:f2:f3:27:fa:22:df:4c:0d:8f: 10:ca:45:9e:79:8c:44:d7:02:cf:b1:c9:7f:bd:24: b7:b0:78:41:7a:39:e0:f6:fb:d5:79:85:cb:e4:9f: e8:f3:cf:fd:be:63:5a:c0:c3:59:c7:de:fa:4f:41: 9a:7b:42:17:86:7a:d9:2f:c6:fa:b0:43:dd:1b:85: ab:82:ad:33:a5:25:e3:9d:0f:b4:b6:24:04:cc:32: 5c:5e:23:eb:33:04:46:d2:05:d4:d6:49:76:85:42: 0f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A3:8D:A7:03:2F:BB:7C:7D:29:4F:94:A3:71:CD:9B:C5:54:8C:8C X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137352e35362e302f32342d3234203d3e203633343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.175.56.0/24 Signature Algorithm: sha256WithRSAEncryption 30:69:4a:7c:50:14:44:83:57:41:03:f5:c5:a7:a4:18:a8:d2: 8e:a2:b4:f4:51:a7:a7:4e:3d:a5:3b:b7:b4:4f:e7:a7:32:22: 33:06:0c:ad:f1:35:20:4b:3f:e2:e3:8d:44:f4:84:20:47:1f: fa:54:c0:d2:7b:24:22:a7:e3:86:d0:db:7f:f1:bd:7c:53:79: 4c:ed:3f:e2:7d:7c:bf:c4:bd:14:f9:38:b4:a3:11:c7:7b:cf: b5:32:ac:d5:aa:6b:e8:fc:c8:f9:28:ab:57:dc:35:3d:ce:5f: 68:74:49:3e:3c:47:7c:9f:f9:22:f6:d5:c5:aa:2e:b4:85:47: 0f:64:f1:e8:80:f6:27:09:99:cf:59:a0:6d:af:87:75:dd:3a: 04:7f:0b:86:bf:0e:f9:40:1d:58:4d:95:d1:b8:8b:45:46:64: 0a:e7:8d:c7:b6:81:25:8a:a0:28:69:97:34:0c:c6:33:44:83: 5c:01:98:5d:27:53:29:01:2b:6a:af:b5:06:ec:1d:6b:0b:16: 08:db:59:61:16:4d:1f:d7:44:49:f1:80:c9:b5:8c:1e:b1:89: 44:e4:5b:4b:12:aa:0e:4f:a4:e2:d3:19:a0:af:ed:ec:f9:5e: b1:4b:f7:ae:e4:80:a6:53:61:09:90:b8:ad:bd:78:f5:60:5a: f0:22:6a:85 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUGQU0rDGoZuMlHl0JXdn0KdkgBFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDNaFw0yNjExMzAxNTUwMDNaMDMxMTAvBgNV BAMTKEFGQTM4REE3MDMyRkJCN0M3RDI5NEY5NEEzNzFDRDlCQzU1NDhDOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNgf7tU8cDq6idk7ULjYVxuBR nCDyTBZH7optyI//ijdGk5rr/VhPmfuDPuhMMWKRGT/fU52Fw3ep3kkAomH4PaT5 dP4NNfkFCU1SlAdCbDZC0L0h8yAA8Wczolxg4s45hB4wuNLUBf5Yr+OXtYDoLnbK FPPbejBeZtWZTwvE0mrgk5AhIlpt08KtEY65MedZffjofNNwvX9WI/LzJ/oi30wN jxDKRZ55jETXAs+xyX+9JLeweEF6OeD2+9V5hcvkn+jzz/2+Y1rAw1nH3vpPQZp7 QheGetkvxvqwQ90bhauCrTOlJeOdD7S2JATMMlxeI+szBEbSBdTWSXaFQg9bAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUr6ONpwMvu3x9KU+Uo3HNm8VUjIwwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMTM3MzUyZTM1 MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzQzNzMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA ua84MA0GCSqGSIb3DQEBCwUAA4IBAQAwaUp8UBREg1dBA/XFp6QYqNKOorT0Uaen Tj2lO7e0T+enMiIzBgyt8TUgSz/i441E9IQgRx/6VMDSeyQip+OG0Nt/8b18U3lM 7T/ifXy/xL0U+Ti0oxHHe8+1MqzVqmvo/Mj5KKtX3DU9zl9odEk+PEd8n/ki9tXF qi60hUcPZPHogPYnCZnPWaBtr4d13ToEfwuGvw75QB1YTZXRuItFRmQK543HtoEl iqAoaZc0DMYzRINcAZhdJ1MpAStqr7UG7B1rCxYI21lhFk0f10RJ8YDJtYwesYlE 5FtLEqoOT6Ti0xmgr+3s+V6xS/eu5ICmU2EJkLitvXj1YFrwImqF -----END CERTIFICATE-----Generated at Sat Dec 6 20:40:40 2025 by rpki-client