This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231332e32372e302f32342d3332203d3e203531313637.roa File: 3138352e3231332e32372e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: WA1ASBhe7CKO00IzeYJ5kbWVd2PFCwh4eNgqpmQ5/tY= Subject key identifier: 50:83:D0:F3:2F:C4:E3:11:E2:32:65:C1:D5:E1:AA:5D:2B:75:F0:E6 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 2E14645EE998756E8925D4AE8C794256E3C4DEB5 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231332e32372e302f32342d3332203d3e203531313637.roa Signing time: Mon 01 Dec 2025 15:50:08 +0000 ROA not before: Mon 01 Dec 2025 15:45:08 +0000 ROA not after: Mon 30 Nov 2026 15:50:08 +0000 asID: 51167 IP address blocks: 185.213.27.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:14:64:5e:e9:98:75:6e:89:25:d4:ae:8c:79:42:56:e3:c4:de:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:08 2025 GMT Not After : Nov 30 15:50:08 2026 GMT Subject: CN=5083D0F32FC4E311E23265C1D5E1AA5D2B75F0E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:97:b7:ed:a7:68:59:57:6d:61:a8:d3:60:5c: bb:80:56:94:af:c4:6a:c0:7b:b4:b6:c7:2d:c9:57: f2:dc:c5:3d:99:6f:85:b5:9f:fd:9a:09:69:6c:ab: 2c:1f:c9:f5:54:ae:f3:2c:15:67:f5:38:7c:eb:b3: 3d:80:22:0a:13:5d:2f:33:34:0c:b5:e7:dc:6e:5c: 9d:5f:47:36:58:22:96:c9:b3:ef:d5:0b:a2:ed:60: 6d:75:48:ed:25:d2:7e:91:0e:33:69:6b:98:98:6b: b7:26:b5:6e:87:8f:90:1f:e8:95:47:99:d4:2e:c0: 01:91:14:eb:e2:e6:0d:cc:2e:18:f3:a9:5c:bf:50: e2:07:80:33:f6:90:1d:e5:f2:f2:81:e8:fe:c1:df: d7:09:86:b2:c0:e4:21:90:bc:a7:cf:d0:d1:6c:71: a3:61:78:f4:8b:a9:b8:f2:12:0c:20:64:ba:10:c1: b2:77:26:d8:94:79:da:9f:b6:61:d7:bd:09:2a:32: ae:2a:2a:20:94:65:64:d0:2b:a1:c2:7d:88:67:9c: 6c:29:f9:98:9b:a1:3c:33:4a:17:59:c1:c2:45:82: 6c:bb:55:dd:92:01:6f:65:e7:11:2d:ac:13:7d:6b: 92:57:4a:ec:6e:95:a4:92:25:d6:c5:51:b9:ae:49: 8c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:83:D0:F3:2F:C4:E3:11:E2:32:65:C1:D5:E1:AA:5D:2B:75:F0:E6 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231332e32372e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.27.0/24 Signature Algorithm: sha256WithRSAEncryption ab:8d:a2:b4:76:9a:f5:cb:0f:2f:dd:34:78:de:9e:d7:72:7c: eb:9d:5a:ee:f8:bf:2c:69:c8:ff:0b:e4:26:ec:2b:af:06:61: 2c:46:cd:ae:12:08:ef:11:cb:b4:c0:61:d3:9b:58:d6:44:e9: 35:42:b0:f9:34:3f:44:45:59:b0:8a:d8:c1:38:71:55:4a:4c: 83:70:66:41:6b:14:d2:d7:37:75:ad:53:39:5f:b0:bc:47:02: 24:2a:e0:4b:1e:fc:67:54:c5:2e:8a:e5:08:ee:a2:f0:d4:54: 81:ed:e4:fb:31:53:86:e6:d5:2d:74:fe:cc:9e:86:c3:35:e5: 7f:c7:9e:ac:5b:30:a2:92:10:cc:d2:fe:cf:41:3f:6d:49:01: dd:3e:4c:2a:bc:4a:08:ac:e0:a2:dd:d2:dd:4b:f0:26:55:7e: 0b:18:dd:6d:d9:9b:55:0d:05:09:b0:30:ac:f8:82:e5:bf:f0: a0:2e:c4:ae:a3:68:b4:ae:7b:79:ad:2e:14:21:cc:ec:f3:ca: 08:eb:ac:f9:9d:c5:73:b0:71:37:35:af:75:21:03:d4:c3:f3: 2a:8a:a0:d1:f3:e1:9a:db:bd:f5:28:63:57:d2:1b:c4:f7:cc: 53:21:c2:c0:c7:b7:d1:f6:3a:63:90:74:3b:70:05:ee:14:c1: 53:7e:b1:1e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIULhRkXumYdW6JJdSujHlCVuPE3rUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDhaFw0yNjExMzAxNTUwMDhaMDMxMTAvBgNV BAMTKDUwODNEMEYzMkZDNEUzMTFFMjMyNjVDMUQ1RTFBQTVEMkI3NUYwRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyl7ftp2hZV21hqNNgXLuAVpSv xGrAe7S2xy3JV/LcxT2Zb4W1n/2aCWlsqywfyfVUrvMsFWf1OHzrsz2AIgoTXS8z NAy159xuXJ1fRzZYIpbJs+/VC6LtYG11SO0l0n6RDjNpa5iYa7cmtW6Hj5Af6JVH mdQuwAGRFOvi5g3MLhjzqVy/UOIHgDP2kB3l8vKB6P7B39cJhrLA5CGQvKfP0NFs caNhePSLqbjyEgwgZLoQwbJ3JtiUedqftmHXvQkqMq4qKiCUZWTQK6HCfYhnnGwp +ZiboTwzShdZwcJFgmy7Vd2SAW9l5xEtrBN9a5JXSuxulaSSJdbFUbmuSYyjAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUUIPQ8y/E4xHiMmXB1eGqXSt18OYwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMxMzMyZTMy MzcyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA udUbMA0GCSqGSIb3DQEBCwUAA4IBAQCrjaK0dpr1yw8v3TR43p7XcnzrnVru+L8s acj/C+Qm7CuvBmEsRs2uEgjvEcu0wGHTm1jWROk1QrD5ND9ERVmwitjBOHFVSkyD cGZBaxTS1zd1rVM5X7C8RwIkKuBLHvxnVMUuiuUI7qLw1FSB7eT7MVOG5tUtdP7M nobDNeV/x56sWzCikhDM0v7PQT9tSQHdPkwqvEoIrOCi3dLdS/AmVX4LGN1t2ZtV DQUJsDCs+ILlv/CgLsSuo2i0rnt5rS4UIczs88oI66z5ncVzsHE3Na91IQPUw/Mq iqDR8+Ga2731KGNX0hvE98xTIcLAx7fR9jpjkHQ7cAXuFMFTfrEe -----END CERTIFICATE-----Generated at Sat Dec 6 18:43:37 2025 by rpki-client