This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231332e32352e302f32342d3332203d3e203531313637.roa File: 3138352e3231332e32352e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: sS3bdStNbXwNwumtzKqXAyREvNWiL0b/CmlCJ2/BquI= Subject key identifier: 17:56:E4:D3:41:8D:D5:51:35:7E:46:7F:EC:AE:62:41:0C:20:4C:5F Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 6150E072A7004F6DC52D1208CC75F1CB8CF74EE2 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231332e32352e302f32342d3332203d3e203531313637.roa Signing time: Mon 01 Dec 2025 15:50:06 +0000 ROA not before: Mon 01 Dec 2025 15:45:06 +0000 ROA not after: Mon 30 Nov 2026 15:50:06 +0000 asID: 51167 IP address blocks: 185.213.25.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:50:e0:72:a7:00:4f:6d:c5:2d:12:08:cc:75:f1:cb:8c:f7:4e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:06 2025 GMT Not After : Nov 30 15:50:06 2026 GMT Subject: CN=1756E4D3418DD551357E467FECAE62410C204C5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a3:40:50:57:2d:92:b7:c2:bf:67:92:ec:84: 83:ac:1f:f3:42:b9:7b:ba:52:82:0e:ab:13:88:7e: 40:31:b4:e9:6c:98:b0:38:a8:58:2b:c0:83:cb:9d: ce:98:9d:d6:2a:bc:cb:41:eb:04:cb:45:4e:0e:83: a9:a1:61:ba:fc:73:d1:77:7b:79:32:1f:15:dd:ca: dc:97:88:83:1e:3e:5b:45:89:d2:3c:ea:e2:e7:0b: a7:55:16:5c:c8:7f:0d:2f:37:0d:4e:70:f6:0a:5d: 39:ec:07:cd:75:b3:96:37:91:33:09:e4:d8:8f:25: 97:e9:b4:3d:44:e7:47:79:c1:b0:f2:aa:ff:87:e6: 70:60:c5:e1:7e:0d:ef:c8:97:e8:11:fe:27:05:e9: 59:ad:79:7c:48:9d:e2:dd:50:d1:6a:75:86:9a:60: 6b:09:2b:f5:1f:bc:ef:c5:da:ec:55:cc:67:ef:8a: c5:32:53:f3:20:97:33:86:aa:3b:4e:d7:9f:89:cf: e6:b8:ed:f3:26:20:eb:36:f9:1b:d2:00:c8:bf:37: 5b:95:8c:5e:1d:89:b7:4c:ae:43:91:a1:65:c5:07: 14:8f:46:86:82:73:e1:18:04:34:94:0a:75:75:43: d7:4c:e2:9b:f0:0f:56:11:e4:d4:2c:7b:e4:10:21: 30:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:56:E4:D3:41:8D:D5:51:35:7E:46:7F:EC:AE:62:41:0C:20:4C:5F X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231332e32352e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.25.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:cd:0f:eb:19:f7:d0:18:5a:e2:de:d9:e8:11:30:bc:ad:10: f8:98:83:e0:31:8d:ba:83:30:55:33:75:0d:84:a3:52:f8:d8: 5e:4a:fe:04:b6:1a:03:e6:b0:e1:11:cf:9e:67:6f:f0:b6:e8: 81:cc:a8:8c:55:49:c3:29:c5:92:a9:b9:9d:5a:59:64:e2:61: e3:f4:ed:a7:bf:13:17:79:f6:86:35:9b:65:7c:b4:4b:4a:d3: ae:98:70:de:d1:d6:16:8f:49:81:95:e4:03:66:b3:c0:fa:b8: 72:96:9e:0a:77:92:83:6f:8e:54:3c:46:69:06:2b:d6:8b:98: d7:bd:f2:4c:d5:ed:9a:a4:5c:22:ae:76:36:11:c1:40:5e:0f: 31:16:f7:2a:48:d8:9e:0f:2a:a9:f0:61:8c:38:c3:b0:c6:c8: b7:a4:eb:73:2b:ee:da:25:51:9d:8c:4c:f7:bf:fa:d1:7a:61: 0e:61:6f:a6:25:8c:0b:8f:7d:61:52:e5:21:39:3f:35:62:c5: db:a6:9a:2f:d5:33:59:a4:e5:de:8e:8f:86:ff:94:78:af:e6: c7:13:b4:ec:9e:54:ec:af:95:e2:63:11:c3:dc:39:00:db:6e: 1e:40:85:8d:21:08:95:0f:0c:05:d1:f3:bb:ea:5c:2b:9e:da: 06:90:55:2b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUYVDgcqcAT23FLRIIzHXxy4z3TuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDZaFw0yNjExMzAxNTUwMDZaMDMxMTAvBgNV BAMTKDE3NTZFNEQzNDE4REQ1NTEzNTdFNDY3RkVDQUU2MjQxMEMyMDRDNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSo0BQVy2St8K/Z5LshIOsH/NC uXu6UoIOqxOIfkAxtOlsmLA4qFgrwIPLnc6YndYqvMtB6wTLRU4Og6mhYbr8c9F3 e3kyHxXdytyXiIMePltFidI86uLnC6dVFlzIfw0vNw1OcPYKXTnsB811s5Y3kTMJ 5NiPJZfptD1E50d5wbDyqv+H5nBgxeF+De/Il+gR/icF6VmteXxIneLdUNFqdYaa YGsJK/UfvO/F2uxVzGfvisUyU/MglzOGqjtO15+Jz+a47fMmIOs2+RvSAMi/N1uV jF4dibdMrkORoWXFBxSPRoaCc+EYBDSUCnV1Q9dM4pvwD1YR5NQse+QQITDtAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUF1bk00GN1VE1fkZ/7K5iQQwgTF8wHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMxMzMyZTMy MzUyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA udUZMA0GCSqGSIb3DQEBCwUAA4IBAQBqzQ/rGffQGFri3tnoETC8rRD4mIPgMY26 gzBVM3UNhKNS+NheSv4EthoD5rDhEc+eZ2/wtuiBzKiMVUnDKcWSqbmdWllk4mHj 9O2nvxMXefaGNZtlfLRLStOumHDe0dYWj0mBleQDZrPA+rhylp4Kd5KDb45UPEZp BivWi5jXvfJM1e2apFwirnY2EcFAXg8xFvcqSNieDyqp8GGMOMOwxsi3pOtzK+7a JVGdjEz3v/rRemEOYW+mJYwLj31hUuUhOT81YsXbppov1TNZpOXejo+G/5R4r+bH E7TsnlTsr5XiYxHD3DkA224eQIWNIQiVDwwF0fO76lwrntoGkFUr -----END CERTIFICATE-----Generated at Sat Dec 6 14:04:15 2025 by rpki-client