This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231332e32362e302f32342d3234203d3e203633343733.roa File: 3138352e3231332e32362e302f32342d3234203d3e203633343733.roa (raw, json) Hash identifier: 5VXfMqEZ7FMpZwwdaBPPDmf3fpKyyWheHuz+O34N+SE= Subject key identifier: CE:5D:98:A1:5D:D9:31:63:8F:5B:C0:8A:87:A3:45:C8:80:D5:DD:1C Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 33E47A6F558D012A0A614F06A826C9D16172F399 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231332e32362e302f32342d3234203d3e203633343733.roa Signing time: Mon 01 Dec 2025 15:50:09 +0000 ROA not before: Mon 01 Dec 2025 15:45:09 +0000 ROA not after: Mon 30 Nov 2026 15:50:09 +0000 asID: 63473 IP address blocks: 185.213.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e4:7a:6f:55:8d:01:2a:0a:61:4f:06:a8:26:c9:d1:61:72:f3:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:09 2025 GMT Not After : Nov 30 15:50:09 2026 GMT Subject: CN=CE5D98A15DD931638F5BC08A87A345C880D5DD1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:3f:ad:99:f2:fa:60:3e:dd:66:91:15:ee: d4:30:71:77:9f:f0:66:01:54:c4:40:35:60:65:48: dd:f8:3e:80:38:ef:02:7e:11:4f:6e:b3:e7:1b:01: 5a:96:d1:4f:fd:c5:35:83:24:07:71:b4:be:e8:d0: 3a:3d:87:de:d6:c2:03:e3:86:0f:ad:11:f6:c7:45: 9a:10:b9:15:82:31:cb:af:7e:1c:bc:bb:8b:69:b5: 08:5d:4b:af:66:55:39:a9:d0:78:4c:c6:a5:fb:63: ea:71:b2:1b:bc:99:39:a9:a8:85:e9:6d:4a:0c:68: a1:6c:8d:88:ce:11:f3:eb:2c:4a:eb:a2:2d:9c:e7: 6b:86:8a:a8:07:75:8d:3e:d3:cb:1c:60:81:b0:63: 7e:d6:85:1a:72:e0:35:ee:ba:f1:39:af:89:cd:5e: 85:42:0d:03:c9:7b:43:71:44:0d:c3:69:80:ca:8d: 84:bc:a0:90:cb:98:d1:55:d8:de:e4:eb:6e:3f:48: 22:65:c6:b3:e1:20:c6:66:97:01:f9:d4:34:90:d8: 44:29:bd:bb:b1:69:98:d1:ca:ae:11:bb:50:ab:bd: 6a:2f:33:f1:87:fa:d5:0d:00:b6:e9:e3:97:16:e7: f8:4f:b2:10:c4:35:2e:45:6b:e4:a1:d6:3c:cf:d7: 61:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5D:98:A1:5D:D9:31:63:8F:5B:C0:8A:87:A3:45:C8:80:D5:DD:1C X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231332e32362e302f32342d3234203d3e203633343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.26.0/24 Signature Algorithm: sha256WithRSAEncryption 03:46:2d:2f:1c:ee:a2:a6:c3:bb:1c:b6:6c:b9:0f:ea:dc:4a: 49:e9:98:95:bf:92:7f:dc:d5:10:70:58:78:60:d4:4b:03:81: 78:6b:f9:de:fc:93:a4:6a:2a:34:3c:63:b0:67:7c:f2:52:1d: e4:91:31:3c:30:58:84:7b:de:28:5e:79:3b:13:db:67:96:e0: 34:07:fa:56:a7:e9:7d:30:38:69:53:a7:f3:db:8f:06:74:b9: 66:80:b2:29:2d:92:40:a7:2f:d3:03:a9:54:1d:1a:02:f1:63: c2:21:93:53:ba:d7:76:9a:94:57:3d:b8:c7:57:06:27:26:08: 52:39:6c:ed:14:73:ba:de:58:ea:cf:5b:19:42:05:76:13:e6: a4:4c:90:28:bd:34:9e:24:bb:75:d3:e9:76:10:a4:51:6a:80: d2:c7:4e:19:f0:10:2f:ff:a8:96:df:43:c6:9a:47:10:e8:0a: eb:96:d8:17:a7:46:dd:34:88:7d:e9:8a:88:86:4b:e1:c6:bb: a3:c8:3e:0c:a3:1e:64:a3:4d:35:01:9a:e5:b7:a2:b2:81:96: e1:e1:8c:5b:40:98:26:77:d9:83:11:83:ff:0e:02:04:14:9a: 78:a0:f5:f8:1a:e4:54:ee:72:a0:2e:6c:60:2a:8d:7c:ca:76: fd:51:89:0f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUM+R6b1WNASoKYU8GqCbJ0WFy85kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDlaFw0yNjExMzAxNTUwMDlaMDMxMTAvBgNV BAMTKENFNUQ5OEExNUREOTMxNjM4RjVCQzA4QTg3QTM0NUM4ODBENUREMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7RD+tmfL6YD7dZpEV7tQwcXef 8GYBVMRANWBlSN34PoA47wJ+EU9us+cbAVqW0U/9xTWDJAdxtL7o0Do9h97WwgPj hg+tEfbHRZoQuRWCMcuvfhy8u4tptQhdS69mVTmp0HhMxqX7Y+pxshu8mTmpqIXp bUoMaKFsjYjOEfPrLErroi2c52uGiqgHdY0+08scYIGwY37WhRpy4DXuuvE5r4nN XoVCDQPJe0NxRA3DaYDKjYS8oJDLmNFV2N7k624/SCJlxrPhIMZmlwH51DSQ2EQp vbuxaZjRyq4Ru1CrvWovM/GH+tUNALbp45cW5/hPshDENS5Fa+Sh1jzP12HNAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUzl2YoV3ZMWOPW8CKh6NFyIDV3RwwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMxMzMyZTMy MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzQzNzMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA udUaMA0GCSqGSIb3DQEBCwUAA4IBAQADRi0vHO6ipsO7HLZsuQ/q3EpJ6ZiVv5J/ 3NUQcFh4YNRLA4F4a/ne/JOkaio0PGOwZ3zyUh3kkTE8MFiEe94oXnk7E9tnluA0 B/pWp+l9MDhpU6fz248GdLlmgLIpLZJApy/TA6lUHRoC8WPCIZNTutd2mpRXPbjH VwYnJghSOWztFHO63ljqz1sZQgV2E+akTJAovTSeJLt10+l2EKRRaoDSx04Z8BAv /6iW30PGmkcQ6ArrltgXp0bdNIh96YqIhkvhxrujyD4Mox5ko001AZrlt6KygZbh 4YxbQJgmd9mDEYP/DgIEFJp4oPX4GuRU7nKgLmxgKo18ynb9UYkP -----END CERTIFICATE-----Generated at Sat Dec 6 13:05:29 2025 by rpki-client