This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231332e32342e302f32342d3234203d3e203633343733.roa File: 3138352e3231332e32342e302f32342d3234203d3e203633343733.roa (raw, json) Hash identifier: 0Ba6gFrH4PInU8f0ZIlPHZ3JDmqMgvQIH16MwVGM4BU= Subject key identifier: 76:9B:F9:C1:03:B7:BA:B7:0A:26:05:1A:2E:93:E9:D0:23:CD:D1:C4 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 58F058AFD829453AECDB5BFC1D38202C8522CDBA Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231332e32342e302f32342d3234203d3e203633343733.roa Signing time: Mon 01 Dec 2025 15:50:05 +0000 ROA not before: Mon 01 Dec 2025 15:45:05 +0000 ROA not after: Mon 30 Nov 2026 15:50:05 +0000 asID: 63473 IP address blocks: 185.213.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f0:58:af:d8:29:45:3a:ec:db:5b:fc:1d:38:20:2c:85:22:cd:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:05 2025 GMT Not After : Nov 30 15:50:05 2026 GMT Subject: CN=769BF9C103B7BAB70A26051A2E93E9D023CDD1C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:82:2e:4e:20:cf:fc:21:81:36:da:ac:46: 0d:a1:80:2d:d8:a6:0d:3c:dd:4c:ff:31:a9:0f:f9: e4:06:6c:5f:f9:51:8c:11:a1:26:9c:73:81:bd:82: 22:f3:c6:a1:b3:0d:e6:c5:70:5b:48:70:76:9e:3c: 6e:bf:f2:53:b6:10:f1:c4:22:b6:24:39:9d:80:67: 33:e7:35:1e:99:29:a2:13:29:dc:35:43:a6:9f:94: 31:f2:ba:6e:d0:dc:06:c7:27:78:10:6b:52:5a:58: f4:e3:93:e1:86:9a:b8:93:05:61:f4:b9:bf:bd:f6: 6d:44:19:9c:ec:90:3d:59:23:6e:e0:b1:bc:47:89: 8a:fa:43:6f:67:04:52:16:c8:40:68:1d:6b:ba:cc: f1:c7:e8:72:5e:c3:4c:8d:72:cb:d4:e8:c9:b2:e7: f0:ba:46:96:6f:49:c4:51:ff:f1:c5:3f:fb:d4:73: 4b:6c:f0:21:05:ef:ed:3f:43:8e:f3:b7:e3:51:d3: d7:b2:84:21:58:20:5e:c4:78:67:d4:d6:32:11:ed: 1c:56:6e:a4:04:b4:f4:34:57:26:e8:1c:b8:18:ef: 75:cd:21:ba:62:4c:ef:b9:27:6c:a0:e7:04:ec:e4: 51:44:df:4f:e8:12:2b:1b:e6:8d:db:3f:2d:df:b2: fc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9B:F9:C1:03:B7:BA:B7:0A:26:05:1A:2E:93:E9:D0:23:CD:D1:C4 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231332e32342e302f32342d3234203d3e203633343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.24.0/24 Signature Algorithm: sha256WithRSAEncryption 57:b6:6e:73:53:f6:2e:3c:07:6c:61:c1:4d:95:53:8d:a9:8f: 19:43:c1:61:10:7f:7e:c7:37:f7:d6:ea:33:78:86:8c:86:e2: f9:08:78:91:9c:5d:c1:d3:f1:45:11:ed:ce:9c:06:b3:0c:42: 07:a4:83:87:ff:8d:60:30:af:74:84:e4:95:47:e5:17:8e:8a: 2c:a6:17:f6:b4:7f:91:ed:0e:a5:cf:0d:39:a9:ec:26:28:46: 69:be:6a:a9:4e:81:0d:35:a5:ad:e6:cc:8b:22:c0:d9:9f:74: 8c:d6:41:b0:26:94:ca:42:9d:f1:0d:0e:64:7d:04:34:ec:f5: 01:a8:14:6b:58:69:34:2a:ec:67:0c:9c:a8:93:40:e7:d3:84: 88:6f:51:34:4c:91:60:2d:9a:1e:48:76:5e:c7:f0:7a:b2:40: 04:7b:7b:d7:a3:1d:a8:16:48:dd:8f:a6:e8:74:96:b2:f8:af: 7f:99:87:82:27:c3:40:18:96:0f:c2:0b:d2:a4:10:aa:12:76: 1b:cc:67:af:d1:8f:ac:9c:dc:4b:fb:31:a3:e7:d3:da:08:aa: 50:2d:8e:63:69:8e:e6:5b:6f:24:5f:0e:a2:e4:5d:b5:40:4d: 0e:d0:5f:69:59:75:ab:04:a2:d4:49:a6:85:40:12:59:a5:16: f6:bb:1a:73 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUWPBYr9gpRTrs21v8HTggLIUizbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDVaFw0yNjExMzAxNTUwMDVaMDMxMTAvBgNV BAMTKDc2OUJGOUMxMDNCN0JBQjcwQTI2MDUxQTJFOTNFOUQwMjNDREQxQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6c4IuTiDP/CGBNtqsRg2hgC3Y pg083Uz/MakP+eQGbF/5UYwRoSacc4G9giLzxqGzDebFcFtIcHaePG6/8lO2EPHE IrYkOZ2AZzPnNR6ZKaITKdw1Q6aflDHyum7Q3AbHJ3gQa1JaWPTjk+GGmriTBWH0 ub+99m1EGZzskD1ZI27gsbxHiYr6Q29nBFIWyEBoHWu6zPHH6HJew0yNcsvU6Mmy 5/C6RpZvScRR//HFP/vUc0ts8CEF7+0/Q47zt+NR09eyhCFYIF7EeGfU1jIR7RxW bqQEtPQ0VyboHLgY73XNIbpiTO+5J2yg5wTs5FFE30/oEisb5o3bPy3fsvz9AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUdpv5wQO3urcKJgUaLpPp0CPN0cQwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMxMzMyZTMy MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzQzNzMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA udUYMA0GCSqGSIb3DQEBCwUAA4IBAQBXtm5zU/YuPAdsYcFNlVONqY8ZQ8FhEH9+ xzf31uozeIaMhuL5CHiRnF3B0/FFEe3OnAazDEIHpIOH/41gMK90hOSVR+UXjoos phf2tH+R7Q6lzw05qewmKEZpvmqpToENNaWt5syLIsDZn3SM1kGwJpTKQp3xDQ5k fQQ07PUBqBRrWGk0KuxnDJyok0Dn04SIb1E0TJFgLZoeSHZex/B6skAEe3vXox2o Fkjdj6bodJay+K9/mYeCJ8NAGJYPwgvSpBCqEnYbzGev0Y+snNxL+zGj59PaCKpQ LY5jaY7mW28kXw6i5F21QE0O0F9pWXWrBKLUSaaFQBJZpRb2uxpz -----END CERTIFICATE-----Generated at Sat Dec 6 15:46:14 2025 by rpki-client