This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139382e32372e302f32342d3332203d3e203531313637.roa File: 3138352e3139382e32372e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: E1cnz7tZiQdhrEh68i1d4ViuA1Z9Glqr8gJPqV3nfjg= Subject key identifier: 0F:8C:CD:C8:BF:0F:5B:AD:28:AC:DC:C7:0F:A4:7C:99:BF:D3:1D:69 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 5C639D0C7C268E9E7E75D2DB89E4851BC5B7BDF1 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139382e32372e302f32342d3332203d3e203531313637.roa Signing time: Mon 01 Dec 2025 15:50:10 +0000 ROA not before: Mon 01 Dec 2025 15:45:10 +0000 ROA not after: Mon 30 Nov 2026 15:50:10 +0000 asID: 51167 IP address blocks: 185.198.27.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:63:9d:0c:7c:26:8e:9e:7e:75:d2:db:89:e4:85:1b:c5:b7:bd:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:10 2025 GMT Not After : Nov 30 15:50:10 2026 GMT Subject: CN=0F8CCDC8BF0F5BAD28ACDCC70FA47C99BFD31D69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:93:1d:65:73:32:2d:b1:79:ba:0d:a7:72: c2:0d:ca:70:1c:22:be:67:cf:3f:cc:96:2f:94:0c: b5:64:59:98:2d:b2:7e:be:03:55:44:ed:2b:c8:66: 28:2e:55:05:ee:28:9d:86:3b:a1:11:81:76:52:f1: 6a:1f:10:62:1d:d1:fd:e2:a9:11:e9:60:e2:2a:21: f7:16:c8:fb:c9:5c:a2:0e:78:8a:22:91:30:76:ef: d5:50:7b:d8:a2:5a:71:85:b9:ff:a9:52:40:36:73: c9:b6:ff:d9:02:d7:d9:35:e2:bf:57:9c:55:25:c1: 2b:7e:86:70:a4:fa:87:85:d8:fb:d4:97:31:13:58: ec:eb:e7:e6:15:a0:81:ec:a2:ae:a9:0a:20:0c:b9: 92:a0:88:27:f2:46:d2:02:2d:47:35:92:83:f9:24: e4:c0:6a:d4:7f:bc:0e:64:11:6f:f3:81:7c:0b:34: 45:11:64:7e:23:cc:53:57:e2:4e:87:40:95:19:7e: f3:9d:17:c1:24:6e:aa:c6:2c:bf:5a:8e:fb:06:d9: ce:ab:27:1b:3d:e5:37:19:3c:06:bd:0c:83:8d:f4: 22:61:f2:04:23:ea:ac:52:2a:fc:47:c6:84:f8:9a: ff:f0:e8:bd:49:7c:b8:36:b5:04:26:0f:45:f9:0e: 9c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8C:CD:C8:BF:0F:5B:AD:28:AC:DC:C7:0F:A4:7C:99:BF:D3:1D:69 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139382e32372e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.198.27.0/24 Signature Algorithm: sha256WithRSAEncryption 30:31:44:bf:3a:10:03:60:f2:28:76:72:31:91:4c:bb:7e:f9: 07:8a:f8:19:e8:5c:1d:09:42:16:54:d1:ad:1d:81:d7:86:e9: 33:96:a1:b2:d8:8e:05:5b:83:fa:8f:17:f0:0a:d9:be:0e:b8: 75:2c:7e:fd:79:6d:ca:22:af:e0:e3:2f:39:15:98:89:57:89: e6:3f:1f:3c:c8:5e:74:c3:2e:07:5d:2e:64:b6:6d:fa:26:ca: 92:e2:41:a2:fb:fb:6d:ac:cc:85:10:6f:0d:8a:a0:46:04:75: 63:e0:1e:bb:71:bd:ea:30:7e:c1:54:83:2f:77:71:4d:b5:39: 90:11:18:8c:5e:63:6c:5e:92:b8:f1:15:5b:29:e3:c5:5d:66: c1:b1:9e:ad:bf:7e:04:75:72:98:e2:5a:15:fe:c3:20:74:57: 23:2d:0e:c8:0d:fa:bf:8a:aa:d0:a0:c8:52:bc:db:01:96:86: cb:6b:4e:70:ce:99:ab:40:39:94:36:07:75:c1:6d:9d:96:71: e3:6d:df:53:a6:0f:f1:9a:7b:5e:54:ae:98:dc:f5:c5:89:0f: 06:0c:56:04:0a:2d:9a:4b:e6:29:5a:3c:eb:fb:39:1f:2e:f7: 16:a1:5b:bf:fb:ea:47:5d:dd:38:0a:e6:b1:f6:14:2d:ce:57: b8:7b:93:32 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUXGOdDHwmjp5+ddLbieSFG8W3vfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MTBaFw0yNjExMzAxNTUwMTBaMDMxMTAvBgNV BAMTKDBGOENDREM4QkYwRjVCQUQyOEFDRENDNzBGQTQ3Qzk5QkZEMzFENjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6EpMdZXMyLbF5ug2ncsINynAc Ir5nzz/Mli+UDLVkWZgtsn6+A1VE7SvIZiguVQXuKJ2GO6ERgXZS8WofEGId0f3i qRHpYOIqIfcWyPvJXKIOeIoikTB279VQe9iiWnGFuf+pUkA2c8m2/9kC19k14r9X nFUlwSt+hnCk+oeF2PvUlzETWOzr5+YVoIHsoq6pCiAMuZKgiCfyRtICLUc1koP5 JOTAatR/vA5kEW/zgXwLNEURZH4jzFNX4k6HQJUZfvOdF8EkbqrGLL9ajvsG2c6r Jxs95TcZPAa9DION9CJh8gQj6qxSKvxHxoT4mv/w6L1JfLg2tQQmD0X5DpwVAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUD4zNyL8PW60orNzHD6R8mb/THWkwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMTM5MzgyZTMy MzcyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA ucYbMA0GCSqGSIb3DQEBCwUAA4IBAQAwMUS/OhADYPIodnIxkUy7fvkHivgZ6Fwd CUIWVNGtHYHXhukzlqGy2I4FW4P6jxfwCtm+Drh1LH79eW3KIq/g4y85FZiJV4nm Px88yF50wy4HXS5ktm36JsqS4kGi+/ttrMyFEG8NiqBGBHVj4B67cb3qMH7BVIMv d3FNtTmQERiMXmNsXpK48RVbKePFXWbBsZ6tv34EdXKY4loV/sMgdFcjLQ7IDfq/ iqrQoMhSvNsBlobLa05wzpmrQDmUNgd1wW2dlnHjbd9Tpg/xmnteVK6Y3PXFiQ8G DFYECi2aS+YpWjzr+zkfLvcWoVu/++pHXd04Cuax9hQtzle4e5My -----END CERTIFICATE-----Generated at Tue Dec 16 14:00:13 2025 by rpki-client