This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132362e302f32342d3234203d3e203333313832.roa File: 3138352e3138352e3132362e302f32342d3234203d3e203333313832.roa (raw, json) Hash identifier: pvkJBTy39xasOhi+lpZ+CUOWkPVBPYVzYrf6TLq9vQo= Subject key identifier: 39:A1:3C:CF:9C:A6:7D:99:23:42:40:E4:EC:79:D2:A0:C9:50:2C:BE Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 0F4A46E7646D8760FDACF37D1D32A45DC49C20D8 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132362e302f32342d3234203d3e203333313832.roa Signing time: Mon 01 Dec 2025 15:50:04 +0000 ROA not before: Mon 01 Dec 2025 15:45:04 +0000 ROA not after: Mon 30 Nov 2026 15:50:04 +0000 asID: 33182 IP address blocks: 185.185.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:4a:46:e7:64:6d:87:60:fd:ac:f3:7d:1d:32:a4:5d:c4:9c:20:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:04 2025 GMT Not After : Nov 30 15:50:04 2026 GMT Subject: CN=39A13CCF9CA67D99234240E4EC79D2A0C9502CBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:0d:e8:bc:56:8f:00:c8:f0:72:59:c6:c2: 9b:03:22:5b:e7:36:39:e1:bb:cf:75:45:9e:66:4e: 2a:48:c3:b1:82:74:4b:41:d7:96:af:73:53:d1:f5: e7:d6:bb:99:b7:f2:70:78:4a:ed:70:8e:6b:97:ef: 44:f6:05:97:e8:20:51:35:8d:5c:df:0b:dc:b8:b0: 5a:a3:ba:9f:87:b3:32:b6:cf:6d:f2:65:2f:e9:11: 2e:b4:82:94:d4:65:ab:3b:25:d7:e0:30:ea:6e:47: a6:28:70:54:a2:eb:43:2a:c2:61:3d:78:d2:b8:f9: 34:94:d8:e6:13:2e:ac:73:5b:1c:70:a2:14:00:27: 26:c7:64:e0:d8:ed:7f:af:5a:47:19:f3:1f:05:69: 56:4f:28:be:7f:52:c9:25:45:05:fb:0c:b6:a4:0b: 7b:02:28:f0:a7:0a:15:c4:a1:b3:ac:1a:1f:61:e3: bf:2c:a3:d2:36:e6:12:be:aa:f9:72:ae:30:d0:e0: 17:82:c8:0c:55:62:9f:e0:2b:b3:cd:b3:86:a8:49: b3:06:e7:72:0d:d3:3e:68:d2:45:f9:47:5c:e9:63: 1f:ad:19:a0:23:89:83:bf:c7:3b:14:ca:c6:dc:48: 93:06:c7:e8:f5:2e:ce:77:01:79:35:5c:ff:26:e7: 24:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A1:3C:CF:9C:A6:7D:99:23:42:40:E4:EC:79:D2:A0:C9:50:2C:BE X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132362e302f32342d3234203d3e203333313832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.185.126.0/24 Signature Algorithm: sha256WithRSAEncryption 76:a9:40:69:e1:92:c0:bc:8c:4e:83:36:16:e2:0d:00:71:89: 44:35:51:bf:1e:c0:b5:92:30:15:14:45:b4:6f:d7:90:44:1d: bb:9f:dd:96:bf:d2:03:4f:e0:27:6e:ba:06:01:3b:80:23:cd: c7:4a:ba:7e:74:cd:88:fe:5c:d8:1d:12:a1:00:ba:48:20:31: 3d:e8:9a:d7:bb:0e:26:22:35:fa:4f:95:6d:15:12:20:2f:9c: b9:b2:76:ef:af:11:c7:db:7c:88:ae:64:e9:33:46:52:62:31: 05:48:08:f0:09:8a:51:cb:b7:fb:86:c9:e5:f2:5c:9f:02:9b: 6c:a1:7a:b7:00:e0:d4:67:2d:f4:51:71:06:1a:b4:60:ef:71: 20:81:26:36:e5:d2:96:1b:a8:8d:6e:74:05:01:64:0f:11:27: 57:8c:01:ff:19:c8:72:2f:94:af:19:ee:2a:1a:0a:47:0a:78: fe:83:3b:83:0c:26:0e:5b:e9:4a:a6:27:06:5c:a9:03:ac:a1: 46:9e:05:ca:85:32:e7:84:8e:de:97:0f:e9:2e:b7:d0:7a:c9: 2a:b7:81:b8:b6:0b:0a:23:9c:53:9a:e7:fe:da:c9:48:52:51: 4a:ab:f0:65:7f:99:03:09:a4:71:8a:21:14:4d:65:3e:f8:11: ef:52:dd:e9 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUD0pG52Rth2D9rPN9HTKkXcScINgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDRaFw0yNjExMzAxNTUwMDRaMDMxMTAvBgNV BAMTKDM5QTEzQ0NGOUNBNjdEOTkyMzQyNDBFNEVDNzlEMkEwQzk1MDJDQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bA3ovFaPAMjwclnGwpsDIlvn Njnhu891RZ5mTipIw7GCdEtB15avc1PR9efWu5m38nB4Su1wjmuX70T2BZfoIFE1 jVzfC9y4sFqjup+HszK2z23yZS/pES60gpTUZas7JdfgMOpuR6YocFSi60MqwmE9 eNK4+TSU2OYTLqxzWxxwohQAJybHZODY7X+vWkcZ8x8FaVZPKL5/UsklRQX7DLak C3sCKPCnChXEobOsGh9h478so9I25hK+qvlyrjDQ4BeCyAxVYp/gK7PNs4aoSbMG 53IN0z5o0kX5R1zpYx+tGaAjiYO/xzsUysbcSJMGx+j1Ls53AXk1XP8m5yQrAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUOaE8z5ymfZkjQkDk7HnSoMlQLL4wHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMTM4MzUyZTMx MzIzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzMzMTM4MzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5uX4wDQYJKoZIhvcNAQELBQADggEBAHapQGnhksC8jE6DNhbiDQBxiUQ1Ub8e wLWSMBUURbRv15BEHbuf3Za/0gNP4CduugYBO4AjzcdKun50zYj+XNgdEqEAukgg MT3omte7DiYiNfpPlW0VEiAvnLmydu+vEcfbfIiuZOkzRlJiMQVICPAJilHLt/uG yeXyXJ8Cm2yhercA4NRnLfRRcQYatGDvcSCBJjbl0pYbqI1udAUBZA8RJ1eMAf8Z yHIvlK8Z7ioaCkcKeP6DO4MMJg5b6UqmJwZcqQOsoUaeBcqFMueEjt6XD+kut9B6 ySq3gbi2CwojnFOa5/7ayUhSUUqr8GV/mQMJpHGKIRRNZT74Ee9S3ek= -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:04 2025 by rpki-client