This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137352e35392e302f32342d3234203d3e203633343733.roa File: 3138352e3137352e35392e302f32342d3234203d3e203633343733.roa (raw, json) Hash identifier: +W+4LxmvS0D2V5q8h5URM01Dvj6RaHp/L1FAV3pSB60= Subject key identifier: E3:7D:C9:89:F5:C7:36:5A:F4:ED:D7:71:C7:6C:64:AF:E4:F7:E1:CC Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 2F958DB88C2D36B2DB00CC4D6DD3801E46540204 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137352e35392e302f32342d3234203d3e203633343733.roa Signing time: Mon 01 Dec 2025 15:50:06 +0000 ROA not before: Mon 01 Dec 2025 15:45:06 +0000 ROA not after: Mon 30 Nov 2026 15:50:06 +0000 asID: 63473 IP address blocks: 185.175.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:95:8d:b8:8c:2d:36:b2:db:00:cc:4d:6d:d3:80:1e:46:54:02:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:06 2025 GMT Not After : Nov 30 15:50:06 2026 GMT Subject: CN=E37DC989F5C7365AF4EDD771C76C64AFE4F7E1CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e8:89:8e:77:ce:57:11:47:16:d0:81:c1:3a: 3f:c3:ba:24:a9:cd:18:e0:ef:ad:46:94:b0:90:0a: 2e:fb:d1:c8:71:a5:ab:6e:a6:0f:75:0b:13:c4:d1: b4:6e:7c:fb:b2:aa:81:5c:0c:8c:5a:0c:2e:36:6e: 3a:96:e7:52:92:1f:b3:53:31:55:b8:96:70:0c:9e: f1:b0:f1:97:3c:5c:12:26:8d:d5:44:8c:52:6d:fd: 1b:f8:2c:58:95:dc:ae:90:ad:8d:33:bd:99:6f:66: f7:ed:77:94:c1:96:fc:f0:e0:fd:5e:5c:28:52:af: 74:79:c6:1f:3a:66:2a:0c:97:dc:1d:fc:46:12:5c: ae:6e:83:37:27:4d:a4:e5:27:e0:fd:1a:73:da:f1: 96:2e:42:9a:5e:85:28:01:0a:14:f4:90:49:69:71: c6:58:a9:8b:c1:f4:36:ba:7e:a1:b1:97:c3:8e:8d: 65:fe:d1:ad:14:73:31:ab:a1:49:3a:ff:43:a7:25: 02:aa:69:2c:48:c0:c2:6c:cc:b7:7f:87:ee:be:d5: 20:90:88:dd:e7:84:85:8a:89:3f:5b:8e:56:b0:6a: b4:f2:6f:ee:bc:87:74:a6:8f:70:7a:b9:f0:c0:13: fe:e4:97:52:7e:bc:35:9c:40:fe:1e:36:77:3e:ef: 5f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7D:C9:89:F5:C7:36:5A:F4:ED:D7:71:C7:6C:64:AF:E4:F7:E1:CC X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137352e35392e302f32342d3234203d3e203633343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.175.59.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:61:d6:96:6c:6b:b3:97:30:f1:71:70:3f:0f:40:be:ea:15: d7:af:22:d9:8e:b0:77:f1:8a:c9:6f:ab:83:89:fc:49:fa:56: 09:0c:43:a4:63:0f:17:da:4b:5f:76:35:74:75:db:fd:44:68: e8:4c:e3:2f:d6:93:ce:2b:e2:66:b6:0a:e4:c5:71:aa:29:89: a0:21:24:77:9a:0d:d9:f0:9e:ae:f2:91:b1:88:46:d0:07:49: 5f:ee:72:d9:a0:fa:b0:22:2d:8b:db:9d:c7:40:16:80:39:86: 43:1e:15:cf:58:43:b4:8c:af:6d:8a:03:ab:eb:24:19:7c:2d: 53:d3:46:0b:61:59:87:86:6d:2a:d3:2b:85:c7:2f:b1:cc:1e: 2a:37:da:bc:a8:94:4c:7e:4d:5b:28:04:2c:c1:eb:72:9b:b8: cc:b6:dd:a1:a8:09:ae:6f:f3:ed:86:78:33:e6:ca:ff:64:89: b2:89:7a:07:33:7f:8a:de:c0:2e:97:59:68:5b:f7:bc:3c:2d: 27:ea:7b:e3:56:6c:cf:ac:ca:97:0d:cc:8a:6b:92:78:a9:24: c1:ce:3a:ce:6f:80:81:2c:25:84:83:16:d0:68:17:15:ea:f8: 24:d9:c6:6a:c2:a0:4d:c3:75:30:e7:bd:57:35:08:2f:1e:e7: 76:c0:51:c1 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUL5WNuIwtNrLbAMxNbdOAHkZUAgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDZaFw0yNjExMzAxNTUwMDZaMDMxMTAvBgNV BAMTKEUzN0RDOTg5RjVDNzM2NUFGNEVERDc3MUM3NkM2NEFGRTRGN0UxQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr6ImOd85XEUcW0IHBOj/DuiSp zRjg761GlLCQCi770chxpatupg91CxPE0bRufPuyqoFcDIxaDC42bjqW51KSH7NT MVW4lnAMnvGw8Zc8XBImjdVEjFJt/Rv4LFiV3K6QrY0zvZlvZvftd5TBlvzw4P1e XChSr3R5xh86ZioMl9wd/EYSXK5ugzcnTaTlJ+D9GnPa8ZYuQppehSgBChT0kElp ccZYqYvB9Da6fqGxl8OOjWX+0a0UczGroUk6/0OnJQKqaSxIwMJszLd/h+6+1SCQ iN3nhIWKiT9bjlawarTyb+68h3Smj3B6ufDAE/7kl1J+vDWcQP4eNnc+719pAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU433JifXHNlr07ddxx2xkr+T34cwwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMTM3MzUyZTM1 MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzQzNzMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA ua87MA0GCSqGSIb3DQEBCwUAA4IBAQAOYdaWbGuzlzDxcXA/D0C+6hXXryLZjrB3 8YrJb6uDifxJ+lYJDEOkYw8X2ktfdjV0ddv9RGjoTOMv1pPOK+JmtgrkxXGqKYmg ISR3mg3Z8J6u8pGxiEbQB0lf7nLZoPqwIi2L253HQBaAOYZDHhXPWEO0jK9tigOr 6yQZfC1T00YLYVmHhm0q0yuFxy+xzB4qN9q8qJRMfk1bKAQswetym7jMtt2hqAmu b/Pthngz5sr/ZImyiXoHM3+K3sAul1loW/e8PC0n6nvjVmzPrMqXDcyKa5J4qSTB zjrOb4CBLCWEgxbQaBcV6vgk2cZqwqBNw3Uw571XNQgvHud2wFHB -----END CERTIFICATE-----Generated at Sat Dec 6 14:09:42 2025 by rpki-client