This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234312e3233362e302f32322d3234203d3e20323037353934.roa File: 3138352e3234312e3233362e302f32322d3234203d3e20323037353934.roa (raw, json) Hash identifier: gu6k/mw79RTPDGR2XmGH87SernG9QFNr0wYrkACIezA= Subject key identifier: 08:47:C9:C0:6F:1B:6A:3D:59:F9:55:E3:B6:89:42:6C:3B:A8:26:03 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 18FAB5B1D3329E7B4E6A41A8834FB1A35615C46B Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234312e3233362e302f32322d3234203d3e20323037353934.roa Signing time: Mon 01 Dec 2025 15:50:04 +0000 ROA not before: Mon 01 Dec 2025 15:45:04 +0000 ROA not after: Mon 30 Nov 2026 15:50:04 +0000 asID: 207594 IP address blocks: 185.241.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:fa:b5:b1:d3:32:9e:7b:4e:6a:41:a8:83:4f:b1:a3:56:15:c4:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:04 2025 GMT Not After : Nov 30 15:50:04 2026 GMT Subject: CN=0847C9C06F1B6A3D59F955E3B689426C3BA82603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:11:52:a2:e1:ec:b3:50:b5:c7:4a:8a:e9:3e: 39:2f:5e:26:c4:26:9d:71:b1:9b:2b:77:7e:db:06: 25:bc:c5:82:e5:5d:7f:6d:2e:c7:2d:d0:ec:db:18: d5:aa:57:16:59:aa:6e:f0:e4:4e:6b:d9:09:03:63: 19:aa:cc:07:8b:71:69:ed:03:da:dc:7b:ee:e7:af: 23:92:31:62:ea:35:92:44:24:99:41:d7:49:e8:7c: 5f:92:d3:09:27:e4:3b:2b:62:a5:67:6b:85:b2:5e: 4d:79:12:ae:62:cd:04:a8:de:c0:2e:c6:4b:12:ea: 7a:60:f9:9d:f3:36:e3:f3:32:12:b3:1e:a4:1e:7b: 07:98:88:13:c6:44:33:59:94:3b:63:db:7b:2d:17: 75:37:fc:eb:88:fa:18:a5:29:30:7a:e9:d3:a6:0d: e6:d7:38:f4:68:b2:2a:e9:d4:22:eb:da:b0:c7:fd: 1f:e6:7c:9e:52:93:f2:38:9d:5c:0a:41:d1:dc:b9: d7:3c:d8:c3:fe:4b:3a:2c:6a:de:5b:42:9e:9d:a6: 2b:97:c6:0f:20:68:7a:34:1c:a0:37:dc:fd:9c:5a: cc:74:29:28:16:6d:d8:b1:00:77:e6:e2:01:0f:d1: d0:46:10:f5:fc:b0:13:d1:a5:d2:a7:8e:c8:56:fc: cd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:47:C9:C0:6F:1B:6A:3D:59:F9:55:E3:B6:89:42:6C:3B:A8:26:03 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234312e3233362e302f32322d3234203d3e20323037353934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.241.236.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:b4:69:16:c0:8b:5e:da:87:56:60:17:e4:ff:39:0d:e2:02: 5e:69:fb:5f:21:ee:0b:77:3e:97:d9:ec:64:3d:8f:2c:d7:14: d6:9f:9f:55:ac:1f:1d:50:bc:db:43:b6:3e:47:0e:d4:ba:f7: 07:47:f2:e4:b1:01:93:cb:65:b6:15:54:d6:23:e4:a0:b2:8a: 12:5b:c6:c9:af:9a:36:a0:16:1a:5d:02:07:11:c9:b6:5f:44: 6f:55:8e:1e:fb:d5:aa:30:6c:4d:af:1c:1c:d7:5b:73:1a:37: 6b:e8:de:0f:2e:8c:3f:26:c5:57:90:0b:dc:30:64:37:b1:d8: ea:ae:0c:da:4b:16:1e:53:22:06:a3:5f:d5:e1:50:58:c8:2c: 42:5f:c3:b8:6e:ed:79:e6:f7:26:3f:64:cd:41:3a:32:25:fa: 72:d5:08:a7:e2:ac:0a:08:86:a2:cd:e0:59:3b:ee:86:4a:59: 45:40:c4:f5:74:19:ec:04:4e:5c:c6:71:a9:0d:62:e5:df:df: 7f:25:83:d3:b6:e4:87:ae:a7:76:a0:0c:21:9e:b1:41:32:b1: ab:92:f1:c0:70:cd:23:49:f1:32:02:21:1d:f3:1d:fa:34:29: 80:75:79:a7:d5:e5:9c:e4:7b:f0:df:b3:04:a8:a5:ae:73:c6: 91:0d:e4:1b -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUGPq1sdMynntOakGog0+xo1YVxGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDRaFw0yNjExMzAxNTUwMDRaMDMxMTAvBgNV BAMTKDA4NDdDOUMwNkYxQjZBM0Q1OUY5NTVFM0I2ODk0MjZDM0JBODI2MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbEVKi4eyzULXHSorpPjkvXibE Jp1xsZsrd37bBiW8xYLlXX9tLsct0OzbGNWqVxZZqm7w5E5r2QkDYxmqzAeLcWnt A9rce+7nryOSMWLqNZJEJJlB10nofF+S0wkn5DsrYqVna4WyXk15Eq5izQSo3sAu xksS6npg+Z3zNuPzMhKzHqQeeweYiBPGRDNZlDtj23stF3U3/OuI+hilKTB66dOm DebXOPRosirp1CLr2rDH/R/mfJ5Sk/I4nVwKQdHcudc82MP+Szosat5bQp6dpiuX xg8gaHo0HKA33P2cWsx0KSgWbdixAHfm4gEP0dBGEPX8sBPRpdKnjshW/M3PAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUCEfJwG8baj1Z+VXjtolCbDuoJgMwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjM0MzEyZTMy MzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNzM1MzkzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArnx7DANBgkqhkiG9w0BAQsFAAOCAQEAWrRpFsCLXtqHVmAX5P85DeICXmn7 XyHuC3c+l9nsZD2PLNcU1p+fVawfHVC820O2PkcO1Lr3B0fy5LEBk8tlthVU1iPk oLKKElvGya+aNqAWGl0CBxHJtl9Eb1WOHvvVqjBsTa8cHNdbcxo3a+jeDy6MPybF V5AL3DBkN7HY6q4M2ksWHlMiBqNf1eFQWMgsQl/DuG7teeb3Jj9kzUE6MiX6ctUI p+KsCgiGos3gWTvuhkpZRUDE9XQZ7AROXMZxqQ1i5d/ffyWD07bkh66ndqAMIZ6x QTKxq5LxwHDNI0nxMgIhHfMd+jQpgHV5p9XlnOR78N+zBKilrnPGkQ3kGw== -----END CERTIFICATE-----Generated at Sun Dec 7 06:20:42 2025 by rpki-client