This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231312e33332e302f32342d3234203d3e20323034313730.roa File: 3138352e3231312e33332e302f32342d3234203d3e20323034313730.roa (raw, json) Hash identifier: FnbfcNgrMDWo5acADtfsXNGeb4w+dw9tNr6p1owzV8A= Subject key identifier: 5C:4A:57:4B:99:CA:67:13:5B:A9:71:C1:03:FF:92:76:3C:F4:4A:B3 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 481BEABDAB0D9596A601AE9322CBDB00C373D0F3 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231312e33332e302f32342d3234203d3e20323034313730.roa Signing time: Mon 01 Dec 2025 15:50:05 +0000 ROA not before: Mon 01 Dec 2025 15:45:05 +0000 ROA not after: Mon 30 Nov 2026 15:50:05 +0000 asID: 204170 IP address blocks: 185.211.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:1b:ea:bd:ab:0d:95:96:a6:01:ae:93:22:cb:db:00:c3:73:d0:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:05 2025 GMT Not After : Nov 30 15:50:05 2026 GMT Subject: CN=5C4A574B99CA67135BA971C103FF92763CF44AB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:35:5e:6c:0c:0b:84:12:8a:e0:0a:e5:f5:ec: 0a:17:6c:29:8b:8a:70:a1:b1:37:9c:29:b2:74:b6: bc:05:cf:8a:1b:56:5d:1d:09:97:88:ce:d0:b1:e7: cd:28:82:bb:a3:1e:c5:4c:ca:93:ce:20:9d:43:72: ee:80:42:11:50:65:88:1d:17:59:07:fb:87:92:f9: 79:b6:39:d1:70:17:82:7d:a8:68:54:70:a3:52:22: 00:27:15:22:a7:e7:c9:3d:a1:1e:ea:a3:8f:d4:c6: 0e:32:22:9c:02:0e:d1:b3:d6:d9:4e:be:a7:56:96: c5:6b:96:8b:39:b1:41:03:78:05:d6:f0:b8:16:60: f3:f6:e4:ba:a3:f7:17:fc:c2:9c:68:96:69:26:83: 3b:93:c6:71:2d:7c:e4:70:b0:eb:65:13:13:b6:11: 8b:2f:53:59:6b:5c:9c:3d:f0:75:ce:f8:d1:33:c8: 22:60:4f:4f:04:51:e7:f6:cc:c3:20:a2:a1:70:36: b0:7f:90:77:2f:22:08:c3:5b:6c:81:e8:33:8a:da: c3:5d:01:47:f5:5e:1b:a1:c3:bb:c0:44:0d:5e:91: b1:9d:ed:5e:63:e0:22:be:43:c4:4b:4b:87:79:e8: c8:b1:9f:40:75:3a:96:c8:36:f5:c7:ce:d2:f8:31: c8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4A:57:4B:99:CA:67:13:5B:A9:71:C1:03:FF:92:76:3C:F4:4A:B3 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231312e33332e302f32342d3234203d3e20323034313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.33.0/24 Signature Algorithm: sha256WithRSAEncryption 52:cb:65:97:55:07:f9:89:69:4f:1b:f0:4c:ad:a1:b0:9f:8c: 9d:1b:a9:1b:41:2f:06:f6:75:7a:7c:0b:e5:d4:34:df:91:a9: 87:d0:c1:11:09:2a:e3:91:c9:58:39:04:1d:b5:25:f3:7f:a5: 57:d8:9f:8e:27:1f:55:4a:6f:46:18:e5:02:66:49:b2:c0:d6: 95:2c:da:4e:3a:5b:6a:b5:54:29:f5:3b:64:71:c7:15:74:b2: 8a:da:de:55:99:c7:0b:f2:a0:86:79:68:20:40:34:5b:54:82: 23:ab:60:48:b7:35:27:64:d6:21:f7:cf:da:57:95:37:52:a4: 63:2c:8d:30:65:cf:76:d1:a7:f6:b8:a6:33:ea:18:05:59:73: 89:51:9c:8c:5e:97:4b:fd:4c:b9:93:43:f5:ce:d0:a8:b1:fa: 92:c9:0a:0c:86:89:50:e8:f7:50:01:c7:3c:b4:69:cc:23:e3: 43:3e:9e:55:8d:81:ec:c0:b6:61:76:ff:1a:ea:ec:e8:19:b8: e5:f7:05:ac:32:aa:17:6e:4a:53:6c:4e:84:69:6f:b7:2e:cc: 73:9c:4a:19:b5:50:0e:f6:92:01:a6:e6:8e:ea:32:9b:28:a3: 5e:99:17:db:8c:13:db:26:6f:6d:a8:e2:98:4d:65:a9:47:69: e9:af:58:9c -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUSBvqvasNlZamAa6TIsvbAMNz0PMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDVaFw0yNjExMzAxNTUwMDVaMDMxMTAvBgNV BAMTKDVDNEE1NzRCOTlDQTY3MTM1QkE5NzFDMTAzRkY5Mjc2M0NGNDRBQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDENV5sDAuEEorgCuX17AoXbCmL inChsTecKbJ0trwFz4obVl0dCZeIztCx580ogrujHsVMypPOIJ1Dcu6AQhFQZYgd F1kH+4eS+Xm2OdFwF4J9qGhUcKNSIgAnFSKn58k9oR7qo4/Uxg4yIpwCDtGz1tlO vqdWlsVrlos5sUEDeAXW8LgWYPP25Lqj9xf8wpxolmkmgzuTxnEtfORwsOtlExO2 EYsvU1lrXJw98HXO+NEzyCJgT08EUef2zMMgoqFwNrB/kHcvIgjDW2yB6DOK2sNd AUf1Xhuhw7vARA1ekbGd7V5j4CK+Q8RLS4d56Mixn0B1OpbINvXHztL4McgTAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUXEpXS5nKZxNbqXHBA/+Sdjz0SrMwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMxMzEyZTMz MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzMTM3MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC50yEwDQYJKoZIhvcNAQELBQADggEBAFLLZZdVB/mJaU8b8EytobCfjJ0bqRtB Lwb2dXp8C+XUNN+RqYfQwREJKuORyVg5BB21JfN/pVfYn44nH1VKb0YY5QJmSbLA 1pUs2k46W2q1VCn1O2RxxxV0sora3lWZxwvyoIZ5aCBANFtUgiOrYEi3NSdk1iH3 z9pXlTdSpGMsjTBlz3bRp/a4pjPqGAVZc4lRnIxel0v9TLmTQ/XO0Kix+pLJCgyG iVDo91ABxzy0acwj40M+nlWNgezAtmF2/xrq7OgZuOX3BawyqhduSlNsToRpb7cu zHOcShm1UA72kgGm5o7qMpsoo16ZF9uME9smb22o4phNZalHaemvWJw= -----END CERTIFICATE-----Generated at Sat Dec 6 13:04:16 2025 by rpki-client