This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234312e3233362e302f32322d3232203d3e20323030303634.roa File: 3138352e3234312e3233362e302f32322d3232203d3e20323030303634.roa (raw, json) Hash identifier: c4tsIozALg8H9mJkdTpSmO2iZcdJmYHkuS4AeeVvq8E= Subject key identifier: 7B:63:5A:0A:74:F3:26:7F:F0:97:7D:20:69:F8:CD:53:57:33:96:6E Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 0350B389A80606A61FF426C7DBB15E35864ADFBB Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234312e3233362e302f32322d3232203d3e20323030303634.roa Signing time: Mon 01 Dec 2025 15:50:04 +0000 ROA not before: Mon 01 Dec 2025 15:45:04 +0000 ROA not after: Mon 30 Nov 2026 15:50:04 +0000 asID: 200064 IP address blocks: 185.241.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:50:b3:89:a8:06:06:a6:1f:f4:26:c7:db:b1:5e:35:86:4a:df:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:04 2025 GMT Not After : Nov 30 15:50:04 2026 GMT Subject: CN=7B635A0A74F3267FF0977D2069F8CD535733966E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:09:d6:80:47:96:75:1f:51:83:ca:4a:93:55: ef:41:e1:3e:95:ed:ce:0b:08:e2:b5:ec:2c:24:d3: 6d:e5:5c:51:67:d1:7b:3c:64:ae:77:aa:5d:5e:94: 0a:92:18:e6:d9:59:d5:2e:92:15:bd:23:b3:04:e3: 10:a8:d3:69:85:1d:38:d5:95:ce:2b:36:85:fe:1e: 71:11:76:12:8f:22:34:65:0c:83:61:53:85:1c:95: a1:9b:32:55:00:9a:35:d3:ac:ff:29:2c:8e:9a:31: e8:19:58:b1:fc:ce:ae:ba:9d:c2:39:03:ed:3d:41: 76:f5:6c:6e:8c:41:3c:1c:f5:c4:84:42:7d:e4:2b: a3:c1:85:2e:f2:13:09:5a:a8:b4:da:1a:e7:4d:0d: 7e:86:ba:9a:7e:d1:ac:a4:24:a4:42:27:a1:c9:2d: 6d:df:73:32:a7:4c:ed:46:54:a2:dc:81:c0:9c:57: b1:e3:19:b5:1c:83:70:af:57:f5:5f:7f:e6:77:57: 3c:76:4f:6f:58:6d:ee:9b:14:45:b8:f2:aa:b2:f0: 0f:e2:53:49:f0:39:c2:9b:d1:fe:6a:77:db:8d:a2: 08:a4:d0:2f:26:21:51:ce:b0:26:6b:b2:62:82:6a: 3a:14:76:6f:d1:ce:2b:e3:2c:d3:06:2e:d4:62:68: 24:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:63:5A:0A:74:F3:26:7F:F0:97:7D:20:69:F8:CD:53:57:33:96:6E X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234312e3233362e302f32322d3232203d3e20323030303634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.241.236.0/22 Signature Algorithm: sha256WithRSAEncryption a0:b8:09:ff:63:ee:8e:98:fa:f9:ae:12:31:89:b4:83:0a:09: 3c:98:36:43:df:c3:8a:a9:20:2b:f2:a9:27:73:d3:68:e7:95: 85:c9:35:10:14:6d:65:bf:64:df:f9:3c:80:f7:7d:96:67:19: bf:3b:c3:72:37:bc:72:5f:43:f1:8b:b9:35:c1:69:31:54:73: 39:61:83:db:66:8d:09:fb:68:a0:6b:00:00:e3:08:0c:27:36: e3:de:ae:c5:3c:1b:21:df:8c:a7:14:9d:e9:7c:f5:f9:5f:a9: 2b:ca:6a:96:4a:29:c9:4d:23:74:10:ab:2a:c2:bd:6b:5f:15: 79:5b:f2:90:2b:3c:13:63:5d:e3:8c:0c:07:31:1e:55:55:78: 83:e7:c6:f1:f2:bf:03:5f:4d:0a:cf:3e:74:93:b9:d9:06:d6: a6:15:a9:98:73:f2:5c:bc:9e:34:62:fd:85:3e:d8:a6:43:4a: ea:84:d4:76:ba:fd:53:e1:9e:40:af:af:15:38:a8:bb:ae:15: 8d:a9:db:a0:ea:62:67:9c:1f:74:8e:95:ad:14:3d:c5:88:49: 2e:dc:f8:c4:71:d1:a4:f5:70:04:bc:e9:b8:7e:d6:79:e2:43: e6:89:a5:09:72:41:48:b2:09:79:42:a1:f5:12:4a:f7:f9:e2: 5a:c8:65:75 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUA1CziagGBqYf9CbH27FeNYZK37swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDRaFw0yNjExMzAxNTUwMDRaMDMxMTAvBgNV BAMTKDdCNjM1QTBBNzRGMzI2N0ZGMDk3N0QyMDY5RjhDRDUzNTczMzk2NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKCdaAR5Z1H1GDykqTVe9B4T6V 7c4LCOK17Cwk023lXFFn0Xs8ZK53ql1elAqSGObZWdUukhW9I7ME4xCo02mFHTjV lc4rNoX+HnERdhKPIjRlDINhU4UclaGbMlUAmjXTrP8pLI6aMegZWLH8zq66ncI5 A+09QXb1bG6MQTwc9cSEQn3kK6PBhS7yEwlaqLTaGudNDX6Gupp+0aykJKRCJ6HJ LW3fczKnTO1GVKLcgcCcV7HjGbUcg3CvV/Vff+Z3Vzx2T29Ybe6bFEW48qqy8A/i U0nwOcKb0f5qd9uNogik0C8mIVHOsCZrsmKCajoUdm/RzivjLNMGLtRiaCSvAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUe2NaCnTzJn/wl30gafjNU1czlm4wHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjM0MzEyZTMy MzMzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzAzMDMwMzYzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArnx7DANBgkqhkiG9w0BAQsFAAOCAQEAoLgJ/2Pujpj6+a4SMYm0gwoJPJg2 Q9/DiqkgK/KpJ3PTaOeVhck1EBRtZb9k3/k8gPd9lmcZvzvDcje8cl9D8Yu5NcFp MVRzOWGD22aNCftooGsAAOMIDCc2496uxTwbId+MpxSd6Xz1+V+pK8pqlkopyU0j dBCrKsK9a18VeVvykCs8E2Nd44wMBzEeVVV4g+fG8fK/A19NCs8+dJO52QbWphWp mHPyXLyeNGL9hT7YpkNK6oTUdrr9U+GeQK+vFTiou64VjanboOpiZ5wfdI6VrRQ9 xYhJLtz4xHHRpPVwBLzpuH7WeeJD5omlCXJBSLIJeUKh9RJK9/niWshldQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:57:34 2025 by rpki-client