This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3233322e31352e302f32342d3234203d3e20323034313730.roa File: 3138352e3233322e31352e302f32342d3234203d3e20323034313730.roa (raw, json) Hash identifier: 8xVMk9zzUfwn8+0I+gAD1VuV28rn/j+jTiXnG+oC8nE= Subject key identifier: 5C:44:07:A6:40:B5:74:4A:12:E6:80:96:57:B6:B2:15:B7:AA:BF:95 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 3321332DA8164BD8854114D44078EF4327EA9CA8 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3233322e31352e302f32342d3234203d3e20323034313730.roa Signing time: Mon 01 Dec 2025 15:50:02 +0000 ROA not before: Mon 01 Dec 2025 15:45:02 +0000 ROA not after: Mon 30 Nov 2026 15:50:02 +0000 asID: 204170 IP address blocks: 185.232.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:21:33:2d:a8:16:4b:d8:85:41:14:d4:40:78:ef:43:27:ea:9c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:02 2025 GMT Not After : Nov 30 15:50:02 2026 GMT Subject: CN=5C4407A640B5744A12E6809657B6B215B7AABF95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:31:81:ce:34:79:e5:0a:97:51:66:d2:a2:4a: f1:22:33:1a:80:55:3f:fc:05:37:05:8c:4f:be:89: 75:30:51:b3:69:8c:02:61:1a:3a:0f:67:62:5d:5a: 12:1a:f5:2a:13:63:27:3a:81:a0:6f:78:2c:69:2f: 66:97:46:35:d6:6d:2b:04:b8:6c:0f:4b:85:f0:73: 6c:2e:28:bc:20:2b:5e:80:5c:48:f1:64:6b:9d:ff: fb:bf:ee:a0:f0:39:b8:32:ce:40:d5:a6:5e:61:22: 5a:2b:c3:2d:60:82:59:4a:2e:02:a4:36:ed:01:be: 5b:9e:83:a5:6f:02:33:55:e2:77:ae:3a:9e:4d:b9: 5b:b9:a5:b5:21:82:4b:7b:e7:b2:a8:bb:42:f2:4f: 4e:43:9d:d1:e1:6b:0d:8a:6d:54:39:f8:3e:c9:4a: 2f:94:f5:4b:b8:39:9a:56:e5:4b:e3:a8:1b:3a:18: 0d:2f:bc:11:2d:43:38:0c:0d:fa:33:21:27:ea:08: 72:48:5e:8b:ce:f0:be:91:ea:ca:49:00:ec:86:b9: 8d:eb:0e:71:1a:42:32:ad:03:ed:18:e1:62:e7:8d: 30:bc:c9:5f:99:a5:03:69:42:42:31:4a:0c:c6:39: b1:e7:12:0c:dd:39:48:68:72:b8:62:65:c5:27:1c: 78:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:44:07:A6:40:B5:74:4A:12:E6:80:96:57:B6:B2:15:B7:AA:BF:95 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3233322e31352e302f32342d3234203d3e20323034313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.15.0/24 Signature Algorithm: sha256WithRSAEncryption 66:00:15:56:26:82:f9:7a:1f:f6:e3:e8:da:24:60:df:1d:4e: e8:c1:73:17:23:67:1e:cb:ad:10:50:01:cd:c1:b3:eb:6b:68: 6f:4c:61:36:01:67:d2:81:5e:b2:01:fc:c6:29:2b:f0:03:d7: 3d:86:fc:27:89:7b:38:2f:c8:b4:58:5c:22:15:66:87:bd:d5: 4a:4a:96:96:01:d4:d8:a4:dc:dd:79:d3:9a:25:37:4a:78:87: 07:20:fd:db:e3:97:3b:7e:a4:f9:ed:4f:02:2b:7e:0f:27:80: 96:62:9b:2e:15:f9:9d:ad:e4:f2:e7:97:fd:3c:55:d3:4a:8d: a1:cf:a9:10:61:24:33:f9:a4:e0:cb:c8:97:05:27:73:c6:7a: 99:c4:4e:6b:29:50:62:27:30:5d:a2:e7:4a:76:1e:f1:9c:b0: db:02:78:3f:55:4a:14:2c:63:5b:14:0e:32:f1:bf:ee:99:43: b9:2c:81:0e:f5:0e:3e:af:09:07:f0:d2:1f:ea:d8:91:11:0d: 2d:36:0d:6f:de:3c:87:b9:78:6f:54:d4:3d:a6:51:5e:48:23: eb:ee:9f:12:2b:56:ce:7b:6a:34:ee:9c:cf:0f:42:31:0e:b4: 60:bc:6b:ef:19:23:c7:66:dd:aa:7f:83:89:ea:08:42:1a:6b: f3:64:52:52 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUMyEzLagWS9iFQRTUQHjvQyfqnKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDJaFw0yNjExMzAxNTUwMDJaMDMxMTAvBgNV BAMTKDVDNDQwN0E2NDBCNTc0NEExMkU2ODA5NjU3QjZCMjE1QjdBQUJGOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwMYHONHnlCpdRZtKiSvEiMxqA VT/8BTcFjE++iXUwUbNpjAJhGjoPZ2JdWhIa9SoTYyc6gaBveCxpL2aXRjXWbSsE uGwPS4Xwc2wuKLwgK16AXEjxZGud//u/7qDwObgyzkDVpl5hIlorwy1ggllKLgKk Nu0Bvlueg6VvAjNV4neuOp5NuVu5pbUhgkt757Kou0LyT05DndHhaw2KbVQ5+D7J Si+U9Uu4OZpW5UvjqBs6GA0vvBEtQzgMDfozISfqCHJIXovO8L6R6spJAOyGuY3r DnEaQjKtA+0Y4WLnjTC8yV+ZpQNpQkIxSgzGObHnEgzdOUhocrhiZcUnHHg9AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUXEQHpkC1dEoS5oCWV7ayFbeqv5UwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMzMzIyZTMx MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzMTM3MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC56A8wDQYJKoZIhvcNAQELBQADggEBAGYAFVYmgvl6H/bj6NokYN8dTujBcxcj Zx7LrRBQAc3Bs+traG9MYTYBZ9KBXrIB/MYpK/AD1z2G/CeJezgvyLRYXCIVZoe9 1UpKlpYB1Nik3N1505olN0p4hwcg/dvjlzt+pPntTwIrfg8ngJZimy4V+Z2t5PLn l/08VdNKjaHPqRBhJDP5pODLyJcFJ3PGepnETmspUGInMF2i50p2HvGcsNsCeD9V ShQsY1sUDjLxv+6ZQ7ksgQ71Dj6vCQfw0h/q2JERDS02DW/ePIe5eG9U1D2mUV5I I+vunxIrVs57ajTunM8PQjEOtGC8a+8ZI8dm3ap/g4nqCEIaa/NkUlI= -----END CERTIFICATE-----Generated at Sat Dec 6 13:03:42 2025 by rpki-client