This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139372e33302e302f32342d3234203d3e203633343733.roa File: 3138352e3139372e33302e302f32342d3234203d3e203633343733.roa (raw, json) Hash identifier: Aplb7DDp+Ma54+gh1nZHsOHWtxmrU1ErFRcPgBeXAlE= Subject key identifier: 31:58:78:0C:55:74:34:82:9B:35:A3:11:8A:CD:81:06:BE:67:47:06 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 579F3B0832BFE2374D19AD6A3C686F9C22E0D267 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139372e33302e302f32342d3234203d3e203633343733.roa Signing time: Mon 01 Dec 2025 15:50:07 +0000 ROA not before: Mon 01 Dec 2025 15:45:07 +0000 ROA not after: Mon 30 Nov 2026 15:50:07 +0000 asID: 63473 IP address blocks: 185.197.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:9f:3b:08:32:bf:e2:37:4d:19:ad:6a:3c:68:6f:9c:22:e0:d2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:07 2025 GMT Not After : Nov 30 15:50:07 2026 GMT Subject: CN=3158780C557434829B35A3118ACD8106BE674706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:64:bb:ab:f2:56:4d:38:75:36:92:ab:a0:bf: 67:ca:dd:58:23:a3:d7:e2:b2:81:1b:b5:71:38:76: 9a:1a:09:5f:82:5f:ba:f0:91:bd:a4:59:a8:90:8e: 32:3c:57:54:f9:e1:59:fc:65:f3:56:3b:f3:ad:33: 60:94:dd:3a:69:0d:1a:0e:5e:f9:6c:79:89:15:e3: 6d:57:af:5e:0d:5a:b2:ca:3e:86:45:85:e3:97:a3: 86:c6:ad:45:1e:65:3e:33:c5:5e:f6:99:d7:71:31: c0:27:16:b1:be:16:86:ee:15:4d:53:12:18:26:bb: 84:50:4d:cb:e6:b8:15:e6:f6:ca:8b:43:a5:38:07: 7a:bb:83:da:e9:60:8f:d8:38:0b:ff:f9:97:e6:ff: 5f:84:4e:aa:35:30:f1:5f:fc:71:2c:86:8f:6b:2e: 74:9b:f9:19:38:9e:7b:b4:a2:87:f1:66:bb:b2:9f: 93:d5:d8:cb:18:9b:4c:8e:63:d0:47:8d:6f:72:b9: 39:87:6f:82:31:ff:04:56:11:3b:3a:d2:00:2a:86: 90:ca:85:1e:c5:85:e3:d6:b3:a1:37:11:d2:ca:41: 2b:a9:10:b6:6e:a1:79:5f:92:07:93:5a:9a:85:7e: b0:35:5b:df:f4:99:80:c8:cc:0c:dc:f0:f8:6a:cb: a4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:58:78:0C:55:74:34:82:9B:35:A3:11:8A:CD:81:06:BE:67:47:06 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139372e33302e302f32342d3234203d3e203633343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.30.0/24 Signature Algorithm: sha256WithRSAEncryption 20:06:8b:62:0f:3f:29:7b:09:04:a5:d4:32:b3:8a:fb:1f:de: ce:86:8d:ce:1a:74:aa:9f:0f:6b:bd:15:b4:c2:02:fe:7e:72: 64:4e:6b:96:a9:e9:e0:d4:37:16:97:f9:ae:66:52:d2:c7:b9: b2:6e:32:c8:6f:13:f9:c8:b9:c9:2c:05:37:05:1e:d2:2c:5e: 8f:1a:94:d2:f6:ee:64:f0:32:fd:e4:f0:85:20:7b:40:c9:01: 8b:34:7d:48:87:f4:ea:10:29:ae:8d:14:0a:15:7a:36:28:28: 65:62:db:ad:e7:a7:bb:10:37:27:b3:9f:56:00:bb:a8:76:cd: 16:50:b4:53:e3:a6:d8:49:ea:e2:89:a1:94:50:38:73:35:8e: 9b:3e:61:91:04:f3:33:62:c8:3b:21:89:81:8b:bb:55:62:db: bc:7e:04:f0:53:44:8d:ee:24:ee:3a:ca:6f:77:b6:fb:23:d5: c4:4b:2b:ea:89:e1:f7:25:30:66:67:c9:7c:a5:5c:1c:c8:3a: 3e:e9:a4:c2:93:3f:34:13:ef:fa:5d:7c:0c:92:2e:7d:8f:97: 58:1f:2e:df:f7:d0:b0:26:70:8b:63:f1:7e:1e:01:bd:3b:4d: ef:1f:d0:a2:e4:01:2d:87:22:22:f8:42:d2:b5:52:17:ad:c1: 1b:2a:ac:70 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUV587CDK/4jdNGa1qPGhvnCLg0mcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDdaFw0yNjExMzAxNTUwMDdaMDMxMTAvBgNV BAMTKDMxNTg3ODBDNTU3NDM0ODI5QjM1QTMxMThBQ0Q4MTA2QkU2NzQ3MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOZLur8lZNOHU2kqugv2fK3Vgj o9fisoEbtXE4dpoaCV+CX7rwkb2kWaiQjjI8V1T54Vn8ZfNWO/OtM2CU3TppDRoO XvlseYkV421Xr14NWrLKPoZFheOXo4bGrUUeZT4zxV72mddxMcAnFrG+FobuFU1T Ehgmu4RQTcvmuBXm9sqLQ6U4B3q7g9rpYI/YOAv/+Zfm/1+ETqo1MPFf/HEsho9r LnSb+Rk4nnu0oofxZruyn5PV2MsYm0yOY9BHjW9yuTmHb4Ix/wRWETs60gAqhpDK hR7FhePWs6E3EdLKQSupELZuoXlfkgeTWpqFfrA1W9/0mYDIzAzc8Phqy6TFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUMVh4DFV0NIKbNaMRis2BBr5nRwYwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMTM5MzcyZTMz MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzQzNzMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA ucUeMA0GCSqGSIb3DQEBCwUAA4IBAQAgBotiDz8pewkEpdQys4r7H97Oho3OGnSq nw9rvRW0wgL+fnJkTmuWqeng1DcWl/muZlLSx7mybjLIbxP5yLnJLAU3BR7SLF6P GpTS9u5k8DL95PCFIHtAyQGLNH1Ih/TqECmujRQKFXo2KChlYtut56e7EDcns59W ALuods0WULRT46bYSeriiaGUUDhzNY6bPmGRBPMzYsg7IYmBi7tVYtu8fgTwU0SN 7iTuOspvd7b7I9XESyvqieH3JTBmZ8l8pVwcyDo+6aTCkz80E+/6XXwMki59j5dY Hy7f99CwJnCLY/F+HgG9O03vH9Ci5AEthyIi+ELStVIXrcEbKqxw -----END CERTIFICATE-----Generated at Sat Dec 6 15:46:37 2025 by rpki-client