This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132352e302f32342d3234203d3e20323034313730.roa File: 3138352e3138352e3132352e302f32342d3234203d3e20323034313730.roa (raw, json) Hash identifier: nQhUspv7quXBPe4PRp3qdi5HOtuGz0gx9VDEeLGJmKE= Subject key identifier: B4:DA:88:AD:C5:46:B5:3F:B9:2A:88:3C:DB:35:0C:6F:BF:F4:5C:1F Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 56D06692D1D5EE75B9B6A4AC443EFCF808C48E28 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132352e302f32342d3234203d3e20323034313730.roa Signing time: Mon 01 Dec 2025 15:50:08 +0000 ROA not before: Mon 01 Dec 2025 15:45:08 +0000 ROA not after: Mon 30 Nov 2026 15:50:08 +0000 asID: 204170 IP address blocks: 185.185.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d0:66:92:d1:d5:ee:75:b9:b6:a4:ac:44:3e:fc:f8:08:c4:8e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:08 2025 GMT Not After : Nov 30 15:50:08 2026 GMT Subject: CN=B4DA88ADC546B53FB92A883CDB350C6FBFF45C1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:82:83:8a:db:7d:c3:3f:00:52:ae:8b:0f:66: ca:79:ce:d4:62:e6:e4:b1:ce:b8:fd:d4:b4:88:54: 83:1b:48:2c:5d:7d:25:86:71:99:bd:21:f1:12:b5: 18:1a:27:cb:a6:32:41:da:1d:73:a1:da:25:73:07: e9:d7:43:61:86:c8:2e:23:37:84:b0:06:c1:8d:9e: 32:4a:c5:3c:da:52:99:63:b7:a5:94:88:93:72:6a: 7e:58:2b:fb:c4:7f:f5:e6:fb:9a:46:0e:80:43:83: a1:a4:2f:53:6d:82:ec:64:3a:3f:9c:4c:78:7b:64: 09:75:5b:85:df:a3:c5:ed:c4:9e:27:51:3a:24:45: 9a:55:84:dd:3d:f5:6a:4a:36:6e:43:92:2f:8f:77: fd:3a:45:a9:33:1f:e0:3c:6f:ff:6f:ba:8d:dc:1e: e7:10:4f:4b:28:c0:ec:c3:38:ac:a6:a9:26:c2:7f: ac:8e:3f:79:4b:72:5b:b0:2c:5d:6a:0a:6e:3c:44: b7:43:c9:cd:e6:55:67:56:c8:9a:b8:bf:e8:da:f3: 17:42:11:d0:e3:61:b5:5d:e5:2d:13:b1:17:9b:82: 6d:79:64:e1:d9:5d:af:75:42:95:ca:12:cf:21:dc: 14:6d:6b:04:cb:ce:a1:42:3a:ac:45:88:4c:02:2f: af:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DA:88:AD:C5:46:B5:3F:B9:2A:88:3C:DB:35:0C:6F:BF:F4:5C:1F X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132352e302f32342d3234203d3e20323034313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.185.125.0/24 Signature Algorithm: sha256WithRSAEncryption 57:6b:c5:54:9c:fd:1b:6a:b6:f3:87:5e:53:8f:6f:fc:f1:25: c9:5b:62:94:60:12:5c:62:f1:8e:4b:08:64:f2:dc:26:b9:64: 47:4b:44:ae:28:1c:1d:ae:1a:10:16:76:f0:d8:40:cc:10:8d: fe:f0:84:e4:78:d6:08:0b:30:bb:09:09:ec:b5:59:24:0a:0b: 35:7a:dc:15:d3:a2:e9:d8:bf:12:e8:cb:61:8c:b1:eb:35:df: 3d:76:72:c5:fa:c8:17:48:f0:8f:14:29:da:b1:14:a5:61:f0: ef:6b:4e:ec:fd:59:11:86:65:8d:fa:ec:e8:d4:54:54:15:e9: 44:b4:cb:f7:f8:3a:e4:fe:cb:84:35:d1:c1:18:7b:aa:9c:ba: 00:25:24:0f:50:68:6e:fe:7f:b3:b3:a6:61:cc:aa:64:ce:0f: fb:ae:b8:38:49:d3:1c:50:aa:04:a5:80:de:38:c7:04:bc:86: 2e:59:40:a8:50:d4:a7:81:29:e9:d1:d1:eb:3a:61:14:1c:58: 2b:e5:72:ad:00:77:76:c7:d3:fc:74:a8:60:9d:de:3f:52:f9: 8f:3f:29:47:ee:62:ee:3b:e1:24:2f:84:95:6d:09:50:26:3e: ee:52:dd:99:53:da:34:48:31:2f:6d:b6:86:52:9b:d3:b6:2b: 7b:fd:df:de -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUVtBmktHV7nW5tqSsRD78+AjEjigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDhaFw0yNjExMzAxNTUwMDhaMDMxMTAvBgNV BAMTKEI0REE4OEFEQzU0NkI1M0ZCOTJBODgzQ0RCMzUwQzZGQkZGNDVDMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1goOK233DPwBSrosPZsp5ztRi 5uSxzrj91LSIVIMbSCxdfSWGcZm9IfEStRgaJ8umMkHaHXOh2iVzB+nXQ2GGyC4j N4SwBsGNnjJKxTzaUpljt6WUiJNyan5YK/vEf/Xm+5pGDoBDg6GkL1NtguxkOj+c THh7ZAl1W4Xfo8XtxJ4nUTokRZpVhN099WpKNm5Dki+Pd/06RakzH+A8b/9vuo3c HucQT0sowOzDOKymqSbCf6yOP3lLcluwLF1qCm48RLdDyc3mVWdWyJq4v+ja8xdC EdDjYbVd5S0TsRebgm15ZOHZXa91QpXKEs8h3BRtawTLzqFCOqxFiEwCL69vAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUtNqIrcVGtT+5Kog82zUMb7/0XB8wHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMTM4MzUyZTMx MzIzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDMxMzczMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALm5fTANBgkqhkiG9w0BAQsFAAOCAQEAV2vFVJz9G2q284deU49v/PElyVti lGASXGLxjksIZPLcJrlkR0tErigcHa4aEBZ28NhAzBCN/vCE5HjWCAswuwkJ7LVZ JAoLNXrcFdOi6di/EujLYYyx6zXfPXZyxfrIF0jwjxQp2rEUpWHw72tO7P1ZEYZl jfrs6NRUVBXpRLTL9/g65P7LhDXRwRh7qpy6ACUkD1Bobv5/s7OmYcyqZM4P+664 OEnTHFCqBKWA3jjHBLyGLllAqFDUp4Ep6dHR6zphFBxYK+VyrQB3dsfT/HSoYJ3e P1L5jz8pR+5i7jvhJC+ElW0JUCY+7lLdmVPaNEgxL222hlKb07Yre/3f3g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:02:56 2025 by rpki-client