This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139362e32312e302f32342d3332203d3e203531313637.roa File: 3138352e3139362e32312e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: uO5u0IIfYelEwwjqgteIBRof6gXK2YaAaQh8EtEenJ0= Subject key identifier: F0:9F:15:BF:C6:54:01:17:65:3B:3B:62:B6:59:BE:76:56:B9:FC:6C Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 4FE2319C2E02A05765A50AB812CF1F18B0E13980 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139362e32312e302f32342d3332203d3e203531313637.roa Signing time: Mon 01 Dec 2025 15:50:10 +0000 ROA not before: Mon 01 Dec 2025 15:45:10 +0000 ROA not after: Mon 30 Nov 2026 15:50:10 +0000 asID: 51167 IP address blocks: 185.196.21.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e2:31:9c:2e:02:a0:57:65:a5:0a:b8:12:cf:1f:18:b0:e1:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:10 2025 GMT Not After : Nov 30 15:50:10 2026 GMT Subject: CN=F09F15BFC6540117653B3B62B659BE7656B9FC6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e3:7c:b0:18:83:cd:0b:9c:d8:a5:6b:17:e2: a1:0b:86:58:ae:3a:dd:aa:67:ed:0d:a4:12:e4:8f: 8e:14:34:6f:57:6f:a4:01:92:02:e2:a4:d3:e1:26: 29:6a:0c:30:af:ac:9e:1f:86:cf:c3:51:ed:ca:55: d2:59:37:38:a1:cb:4c:c9:0e:09:50:90:28:ed:fa: cc:d2:5f:c2:af:c5:ad:05:d3:ed:f8:4f:1c:81:31: 74:39:7f:d3:d8:97:29:cd:aa:1a:c4:0d:c0:5f:e6: 0e:5e:aa:ab:f0:c3:42:d5:c1:04:c4:33:60:8c:f5: 59:b7:58:8c:b0:2f:97:86:5f:95:25:4b:52:ff:91: 7b:85:c8:6a:f1:49:08:d4:d6:bf:99:b5:ac:da:c8: b3:84:83:c8:f9:cb:ab:8e:94:15:03:48:03:64:d8: 09:19:4b:b0:70:83:a4:4a:1d:8d:4d:b7:35:2d:df: 32:cb:a1:11:f0:e2:67:f4:ab:7a:0b:23:94:1b:6c: e7:d1:90:53:a5:78:79:fa:be:9c:d8:d1:1b:2f:86: 81:9b:bd:8a:c0:02:8f:01:c0:9e:12:d5:88:2a:57: c2:39:57:aa:bd:cf:79:5e:04:c1:eb:34:cb:b8:f2: e5:f7:85:32:ac:84:0c:84:c8:0b:a1:90:88:65:d9: 6c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9F:15:BF:C6:54:01:17:65:3B:3B:62:B6:59:BE:76:56:B9:FC:6C X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139362e32312e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.21.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:a9:c2:a6:99:ef:dd:d3:33:6b:6b:3f:cf:95:d6:c8:b1:cd: 73:cf:22:38:83:24:e1:e8:0c:0c:0d:1a:9e:8f:a3:cb:b5:9c: 55:5e:35:e9:a8:2c:83:fe:aa:2e:d1:b2:1a:22:b0:85:a4:c2: 54:32:da:7a:55:e7:79:d1:73:ea:cb:a0:8d:73:2c:8e:da:fe: c5:b3:cc:fa:48:11:61:49:28:9e:98:da:71:89:37:26:6a:f4: e6:3a:66:e2:6a:c2:e4:be:9c:55:33:13:1b:12:21:af:13:dc: 8f:7e:20:52:b0:01:46:6a:44:1d:64:d4:1f:ac:87:56:96:6c: 72:e5:0a:17:d9:11:1f:09:aa:9f:a1:29:2d:cb:b6:a6:0f:d3: 4d:89:c6:af:ef:f6:e3:b7:fa:c8:4a:aa:96:3c:aa:ed:dc:6d: 9a:2e:52:6b:9a:af:45:55:8d:30:8d:8d:33:e9:46:d9:75:28: 14:98:bf:ec:eb:0f:a9:25:6c:c7:19:80:a2:05:48:fd:0c:c1: 21:16:bb:b4:14:2e:3e:9e:34:1d:90:03:e0:e6:5d:e1:16:62: 61:b1:37:c7:71:db:10:a9:34:5c:2b:24:0e:8b:36:51:47:77: c4:be:8a:29:03:9f:c5:31:1b:32:ad:01:00:68:90:b7:c6:f6: bd:d0:5d:34 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUT+IxnC4CoFdlpQq4Es8fGLDhOYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MTBaFw0yNjExMzAxNTUwMTBaMDMxMTAvBgNV BAMTKEYwOUYxNUJGQzY1NDAxMTc2NTNCM0I2MkI2NTlCRTc2NTZCOUZDNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/43ywGIPNC5zYpWsX4qELhliu Ot2qZ+0NpBLkj44UNG9Xb6QBkgLipNPhJilqDDCvrJ4fhs/DUe3KVdJZNzihy0zJ DglQkCjt+szSX8Kvxa0F0+34TxyBMXQ5f9PYlynNqhrEDcBf5g5eqqvww0LVwQTE M2CM9Vm3WIywL5eGX5UlS1L/kXuFyGrxSQjU1r+ZtazayLOEg8j5y6uOlBUDSANk 2AkZS7Bwg6RKHY1NtzUt3zLLoRHw4mf0q3oLI5QbbOfRkFOleHn6vpzY0RsvhoGb vYrAAo8BwJ4S1YgqV8I5V6q9z3leBMHrNMu48uX3hTKshAyEyAuhkIhl2WyNAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU8J8Vv8ZUARdlOztitlm+dla5/GwwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMTM5MzYyZTMy MzEyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA ucQVMA0GCSqGSIb3DQEBCwUAA4IBAQBdqcKmme/d0zNraz/PldbIsc1zzyI4gyTh 6AwMDRqej6PLtZxVXjXpqCyD/qou0bIaIrCFpMJUMtp6Ved50XPqy6CNcyyO2v7F s8z6SBFhSSiemNpxiTcmavTmOmbiasLkvpxVMxMbEiGvE9yPfiBSsAFGakQdZNQf rIdWlmxy5QoX2REfCaqfoSkty7amD9NNicav7/bjt/rISqqWPKrt3G2aLlJrmq9F VY0wjY0z6UbZdSgUmL/s6w+pJWzHGYCiBUj9DMEhFru0FC4+njQdkAPg5l3hFmJh sTfHcdsQqTRcKyQOizZRR3fEvoopA5/FMRsyrQEAaJC3xva90F00 -----END CERTIFICATE-----Generated at Sat Dec 6 16:56:39 2025 by rpki-client