This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139362e32302e302f32342d3332203d3e203531313637.roa File: 3138352e3139362e32302e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: /LQw7grXHW1gLUvvcV6GKyJtf2Tpke4+jvC0SGa3zsU= Subject key identifier: A2:C2:66:6C:A2:2D:2B:65:03:2E:E4:07:AE:CB:83:C8:A5:9E:CE:C7 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 4636CA23B1DAB96ABAB1369C93A2584A930F77D4 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139362e32302e302f32342d3332203d3e203531313637.roa Signing time: Mon 01 Dec 2025 15:50:08 +0000 ROA not before: Mon 01 Dec 2025 15:45:08 +0000 ROA not after: Mon 30 Nov 2026 15:50:08 +0000 asID: 51167 IP address blocks: 185.196.20.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:36:ca:23:b1:da:b9:6a:ba:b1:36:9c:93:a2:58:4a:93:0f:77:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:08 2025 GMT Not After : Nov 30 15:50:08 2026 GMT Subject: CN=A2C2666CA22D2B65032EE407AECB83C8A59ECEC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:62:06:34:87:11:84:c5:64:cf:a6:35:f7:b2: a7:dd:1b:5f:68:86:11:f1:f9:bf:d0:91:52:31:3d: a0:da:b4:c0:9f:c5:04:db:33:0a:ee:ac:21:79:e3: 5c:ae:8b:b5:68:35:f3:aa:9f:e2:e0:a1:d5:77:7d: 63:a6:31:05:aa:cd:61:62:9e:29:8f:0c:06:fb:a2: 9b:be:74:ec:6e:d3:61:22:9a:f1:5b:12:94:a5:1f: 46:85:4a:30:84:04:21:8b:cb:46:4b:99:43:73:92: ab:b3:75:3f:8f:fc:9a:1a:4f:46:1a:13:5a:13:1e: 78:c3:32:f5:08:2a:59:12:d9:df:4c:a0:ce:be:d1: ab:af:98:89:8a:15:7b:62:47:47:fe:32:46:78:f3: 8f:bc:27:34:53:cf:7a:94:53:7f:cf:f2:74:20:96: 69:b5:18:52:ae:45:f4:cf:0d:06:b2:e9:fe:31:f4: 94:6d:54:ad:2d:56:87:c8:d8:ba:5b:b3:38:37:02: 77:fb:1d:55:a3:c7:29:6f:db:84:2d:dd:0e:67:18: 8d:eb:5b:2d:7f:ec:b6:d5:1b:77:8e:3d:fe:38:c7: ad:b7:f4:a7:f7:c5:5d:56:cb:fb:a5:0f:4c:c7:2d: 09:c5:31:18:51:66:0b:a1:3d:00:19:b3:7c:40:27: ac:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C2:66:6C:A2:2D:2B:65:03:2E:E4:07:AE:CB:83:C8:A5:9E:CE:C7 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139362e32302e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.20.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:0c:c0:93:aa:8c:f3:2e:6f:b2:7a:bb:ac:02:27:57:55:0b: 9f:21:ac:d8:4d:36:e7:20:d4:40:ab:b4:98:22:97:4e:ad:0d: b9:96:b5:3d:0c:13:a3:0b:88:62:0b:f3:aa:68:be:a1:ad:fb: 0d:e4:42:62:7e:01:9b:43:8c:5c:d7:2d:d6:db:b5:14:1e:80: a1:56:b9:cf:3e:b9:e3:f9:c0:06:fc:38:43:f8:80:b5:a8:08: 6d:93:f6:4d:22:97:2c:82:a5:21:e9:e6:0a:8d:57:d2:80:de: 02:ba:1f:fb:18:b1:11:14:d3:54:2c:99:c6:f4:72:1f:f8:16: 81:d3:cf:1a:7f:6e:75:b5:ea:9e:e7:fc:f5:e4:63:9c:fc:16: 5a:99:5d:16:72:c8:dd:97:3a:04:25:74:50:f1:4e:4c:eb:fb: e9:bd:81:46:e8:bd:65:eb:e1:f9:c2:35:b0:1e:e8:81:7a:a0: 4d:aa:c6:8d:95:07:7e:96:35:00:ba:01:f8:48:5a:99:d8:e1: a2:e6:fe:80:3a:d1:40:74:60:ff:b4:f3:9e:fe:8e:28:5d:54: cb:ca:5a:67:b3:ef:c4:db:87:79:33:ad:b8:77:6c:11:aa:ac: ce:d6:9f:5a:a6:bd:2f:35:89:31:d3:ae:0c:42:f0:25:50:c4: f8:1f:7f:8d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIURjbKI7HauWq6sTack6JYSpMPd9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDhaFw0yNjExMzAxNTUwMDhaMDMxMTAvBgNV BAMTKEEyQzI2NjZDQTIyRDJCNjUwMzJFRTQwN0FFQ0I4M0M4QTU5RUNFQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVYgY0hxGExWTPpjX3sqfdG19o hhHx+b/QkVIxPaDatMCfxQTbMwrurCF541yui7VoNfOqn+LgodV3fWOmMQWqzWFi nimPDAb7opu+dOxu02EimvFbEpSlH0aFSjCEBCGLy0ZLmUNzkquzdT+P/JoaT0Ya E1oTHnjDMvUIKlkS2d9MoM6+0auvmImKFXtiR0f+MkZ484+8JzRTz3qUU3/P8nQg lmm1GFKuRfTPDQay6f4x9JRtVK0tVofI2Lpbszg3Anf7HVWjxylv24Qt3Q5nGI3r Wy1/7LbVG3eOPf44x6239Kf3xV1Wy/ulD0zHLQnFMRhRZguhPQAZs3xAJ6whAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUosJmbKItK2UDLuQHrsuDyKWezscwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMTM5MzYyZTMy MzAyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA ucQUMA0GCSqGSIb3DQEBCwUAA4IBAQBqDMCTqozzLm+yerusAidXVQufIazYTTbn INRAq7SYIpdOrQ25lrU9DBOjC4hiC/OqaL6hrfsN5EJifgGbQ4xc1y3W27UUHoCh VrnPPrnj+cAG/DhD+IC1qAhtk/ZNIpcsgqUh6eYKjVfSgN4Cuh/7GLERFNNULJnG 9HIf+BaB088af251teqe5/z15GOc/BZamV0WcsjdlzoEJXRQ8U5M6/vpvYFG6L1l 6+H5wjWwHuiBeqBNqsaNlQd+ljUAugH4SFqZ2OGi5v6AOtFAdGD/tPOe/o4oXVTL ylpns+/E24d5M624d2wRqqzO1p9apr0vNYkx064MQvAlUMT4H3+N -----END CERTIFICATE-----Generated at Sat Dec 6 13:01:49 2025 by rpki-client