This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139382e32362e302f32342d3234203d3e203633343733.roa File: 3138352e3139382e32362e302f32342d3234203d3e203633343733.roa (raw, json) Hash identifier: q5fwC26aTZnz/LWTg4Q/jxmkh+iRvruYJFzGYltayWE= Subject key identifier: 64:A3:3B:CD:66:53:55:AA:9E:60:5A:68:E2:66:5D:70:62:68:27:C5 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 4A78D709E5BA465A1ED3F1EAFC9511DC75738B1E Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139382e32362e302f32342d3234203d3e203633343733.roa Signing time: Mon 01 Dec 2025 15:50:06 +0000 ROA not before: Mon 01 Dec 2025 15:45:06 +0000 ROA not after: Mon 30 Nov 2026 15:50:06 +0000 asID: 63473 IP address blocks: 185.198.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:78:d7:09:e5:ba:46:5a:1e:d3:f1:ea:fc:95:11:dc:75:73:8b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:06 2025 GMT Not After : Nov 30 15:50:06 2026 GMT Subject: CN=64A33BCD665355AA9E605A68E2665D70626827C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e3:6f:4e:da:a6:92:40:bc:3d:c2:d6:ae:19: c2:4b:c6:67:f9:3e:c6:1c:8a:d6:16:3a:4f:69:8f: 5d:dd:6e:67:4e:15:e8:df:6a:a5:66:d6:32:c3:f5: c6:43:ca:e8:0c:60:f8:e3:a7:cc:24:92:f3:9d:67: 87:d7:ba:0b:60:3c:30:6f:d3:3f:17:a8:e0:9a:22: fa:48:0a:6e:73:d1:de:06:a3:c7:81:69:4b:33:49: eb:36:5b:26:3e:62:75:6f:31:e4:46:a9:eb:88:17: 7d:86:f7:85:fd:7c:54:91:6b:1d:ed:fa:62:43:88: 2c:1b:e9:09:3d:5d:aa:74:89:62:f1:3a:c5:e7:cf: 23:10:b9:f6:ff:4c:20:81:2c:45:fb:f9:68:b5:22: 5e:e2:84:51:24:b4:92:bb:3c:19:28:7c:03:53:5b: 4b:93:ca:49:38:01:19:b2:2b:06:37:7b:e3:8d:d6: 48:60:d5:49:ae:a9:6c:c3:dd:98:00:b0:4b:b4:e0: 0f:b1:c9:69:19:da:c4:40:5e:a5:60:13:57:e2:f5: 69:fa:35:98:8b:40:18:3f:27:7b:1f:8d:9f:7f:1e: 88:d7:78:0a:4b:2a:8d:75:74:c4:c1:38:8f:fc:84: e5:57:35:c9:66:32:24:b3:48:91:5b:8b:8a:2b:91: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A3:3B:CD:66:53:55:AA:9E:60:5A:68:E2:66:5D:70:62:68:27:C5 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139382e32362e302f32342d3234203d3e203633343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.198.26.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:06:4c:e3:d7:4e:00:ec:2f:82:51:20:a3:1a:62:45:e6:8a: 75:ec:c7:6b:ca:3f:67:9f:d7:51:06:7a:ae:ea:54:8f:23:f6: 84:f4:51:15:37:fc:11:0a:6e:dc:98:a7:4c:69:5a:9b:7a:4d: 15:26:c8:b9:50:11:49:a3:b8:e9:a1:4b:7c:cf:98:8f:fe:47: 3f:a3:4f:0b:0b:3f:b5:9a:82:ff:46:48:29:7a:ab:c8:40:ec: 1a:dd:06:8a:17:a0:f5:6e:15:ab:a3:18:01:be:1f:6a:20:fa: e0:db:95:73:d6:72:e9:b5:f8:cd:3c:c4:91:3e:30:f1:e1:bf: 58:11:ee:e9:81:cc:64:a4:b0:75:52:62:fb:bc:e3:c4:fe:36: 9c:b9:a0:f8:62:d7:a6:96:bb:f6:41:4f:d3:68:33:e8:ec:be: ee:ba:69:10:34:21:c2:8e:2e:31:50:5b:88:b3:d7:26:71:1e: 82:21:bb:58:cb:60:e2:0f:f8:53:f4:3c:3e:f3:0d:a3:45:aa: fb:e7:18:d3:b1:01:7b:7a:b5:3d:d0:b5:39:53:9b:27:7a:2f: 86:05:94:15:95:f1:5b:09:55:7d:00:89:52:d8:ef:bb:7d:60: e5:ef:2f:8e:c2:48:0c:af:c0:f5:b3:cd:2d:50:95:fe:d4:50: 78:ea:9b:2f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUSnjXCeW6Rloe0/Hq/JUR3HVzix4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDZaFw0yNjExMzAxNTUwMDZaMDMxMTAvBgNV BAMTKDY0QTMzQkNENjY1MzU1QUE5RTYwNUE2OEUyNjY1RDcwNjI2ODI3QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs429O2qaSQLw9wtauGcJLxmf5 PsYcitYWOk9pj13dbmdOFejfaqVm1jLD9cZDyugMYPjjp8wkkvOdZ4fXugtgPDBv 0z8XqOCaIvpICm5z0d4Go8eBaUszSes2WyY+YnVvMeRGqeuIF32G94X9fFSRax3t +mJDiCwb6Qk9Xap0iWLxOsXnzyMQufb/TCCBLEX7+Wi1Il7ihFEktJK7PBkofANT W0uTykk4ARmyKwY3e+ON1khg1UmuqWzD3ZgAsEu04A+xyWkZ2sRAXqVgE1fi9Wn6 NZiLQBg/J3sfjZ9/HojXeApLKo11dMTBOI/8hOVXNclmMiSzSJFbi4orkczrAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUZKM7zWZTVaqeYFpo4mZdcGJoJ8UwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMTM5MzgyZTMy MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzQzNzMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA ucYaMA0GCSqGSIb3DQEBCwUAA4IBAQCeBkzj104A7C+CUSCjGmJF5op17Mdryj9n n9dRBnqu6lSPI/aE9FEVN/wRCm7cmKdMaVqbek0VJsi5UBFJo7jpoUt8z5iP/kc/ o08LCz+1moL/RkgpeqvIQOwa3QaKF6D1bhWroxgBvh9qIPrg25Vz1nLptfjNPMSR PjDx4b9YEe7pgcxkpLB1UmL7vOPE/jacuaD4Ytemlrv2QU/TaDPo7L7uumkQNCHC ji4xUFuIs9cmcR6CIbtYy2DiD/hT9Dw+8w2jRar75xjTsQF7erU90LU5U5snei+G BZQVlfFbCVV9AIlS2O+7fWDl7y+OwkgMr8D1s80tUJX+1FB46psv -----END CERTIFICATE-----Generated at Sun Dec 7 00:34:32 2025 by rpki-client