This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234312e3233382e302f32332d3234203d3e20323037353934.roa File: 3138352e3234312e3233382e302f32332d3234203d3e20323037353934.roa (raw, json) Hash identifier: hltcGR2l84hl1QeCz3wCdbjlsSFhFwBJIJB+3Gx9sZE= Subject key identifier: EF:CA:7C:E1:F5:94:07:CF:08:27:87:4A:55:3C:72:94:4B:C4:A0:4C Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 2CA2DE396F143A509C7E439C0FC81291ABF66094 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234312e3233382e302f32332d3234203d3e20323037353934.roa Signing time: Mon 01 Dec 2025 15:50:04 +0000 ROA not before: Mon 01 Dec 2025 15:45:04 +0000 ROA not after: Mon 30 Nov 2026 15:50:04 +0000 asID: 207594 IP address blocks: 185.241.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:a2:de:39:6f:14:3a:50:9c:7e:43:9c:0f:c8:12:91:ab:f6:60:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:04 2025 GMT Not After : Nov 30 15:50:04 2026 GMT Subject: CN=EFCA7CE1F59407CF0827874A553C72944BC4A04C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ff:19:c2:25:ae:ef:14:20:90:e6:80:a2:c2: 6c:87:8a:11:d0:39:ae:84:c0:f5:7d:2e:54:7f:c5: 37:11:41:09:53:7d:dd:6d:3f:2c:9b:49:10:c0:25: d3:d7:80:c8:82:7a:78:54:8d:ab:a7:53:57:c3:52: 4d:41:b0:de:6e:16:72:23:5a:1c:7c:5b:86:39:a6: 44:b7:87:26:7e:6b:2b:67:d0:e8:74:ef:18:56:5c: 3c:85:a1:4c:bf:ea:80:8c:78:bb:9c:f9:33:07:ba: 82:cf:ba:4b:fe:bf:00:2e:97:82:3c:7b:a7:e3:53: f3:b3:6e:3c:a5:90:20:5e:aa:13:15:5e:75:5c:d9: 0e:39:1e:5a:28:27:66:87:b2:3a:1b:cc:74:2f:80: 69:ef:4f:d8:44:48:44:40:58:97:72:b4:5d:02:b7: b3:14:ba:91:88:9d:9b:35:89:fa:75:94:aa:82:58: 66:ba:96:84:dc:67:23:b7:be:e8:dd:82:9b:a2:ea: dd:c6:d3:3b:35:f9:bc:4e:df:a2:4a:97:d9:28:50: 41:b5:12:ff:6c:fd:80:22:1c:1a:5b:e4:46:24:58: 5c:41:ea:db:31:cc:c4:4f:e9:8a:dc:54:a2:43:ea: 84:84:89:71:e3:da:c3:f3:87:71:ed:73:f3:d2:c8: 78:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CA:7C:E1:F5:94:07:CF:08:27:87:4A:55:3C:72:94:4B:C4:A0:4C X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234312e3233382e302f32332d3234203d3e20323037353934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.241.238.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:24:ec:d9:30:33:90:7d:9c:06:38:bc:f3:8a:b8:aa:79:7b: eb:0a:e9:71:5b:94:80:dc:0a:9d:4a:82:6a:50:64:42:42:88: e0:f8:6e:3c:bf:2b:81:89:a4:88:35:25:8b:d9:a5:df:30:1e: 4c:0c:61:c7:c5:2d:d4:b2:f6:7b:f7:3e:b7:c8:4c:2d:d8:ef: e7:c0:0d:a8:81:ad:d4:d8:da:d3:2f:26:16:13:46:05:66:84: 0f:a7:98:c6:f8:a0:88:f7:8c:29:84:29:c1:b9:9a:08:41:91: 49:b5:7f:57:20:3e:60:1e:43:b0:86:37:c7:c4:c2:ac:4d:83: 99:99:c8:2d:c8:e0:5d:34:b4:ac:b0:92:1e:0d:71:35:8d:67: 93:ff:a4:66:60:2e:41:1a:5c:08:6e:4c:51:d9:15:2e:aa:00: 01:1e:89:b4:ed:20:28:e6:51:04:68:64:f5:ec:1e:3e:d9:a7: 71:db:55:d8:7a:8a:f5:aa:6a:a3:d2:b3:3a:8f:7b:ed:3b:ed: ea:49:50:8b:c8:4b:8b:60:cc:d9:6d:05:9e:d5:f5:1e:3f:88: 4e:e1:0e:f9:03:5b:39:e1:ca:ce:80:e5:79:dc:b4:4a:b5:48: 01:b6:7e:46:0b:1a:79:52:63:73:97:9e:f8:67:d5:9c:17:6a: d0:5f:56:29 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIULKLeOW8UOlCcfkOcD8gSkav2YJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDRaFw0yNjExMzAxNTUwMDRaMDMxMTAvBgNV BAMTKEVGQ0E3Q0UxRjU5NDA3Q0YwODI3ODc0QTU1M0M3Mjk0NEJDNEEwNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu/xnCJa7vFCCQ5oCiwmyHihHQ Oa6EwPV9LlR/xTcRQQlTfd1tPyybSRDAJdPXgMiCenhUjaunU1fDUk1BsN5uFnIj Whx8W4Y5pkS3hyZ+aytn0Oh07xhWXDyFoUy/6oCMeLuc+TMHuoLPukv+vwAul4I8 e6fjU/OzbjylkCBeqhMVXnVc2Q45HlooJ2aHsjobzHQvgGnvT9hESERAWJdytF0C t7MUupGInZs1ifp1lKqCWGa6loTcZyO3vujdgpui6t3G0zs1+bxO36JKl9koUEG1 Ev9s/YAiHBpb5EYkWFxB6tsxzMRP6YrcVKJD6oSEiXHj2sPzh3Htc/PSyHiXAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQU78p84fWUB88IJ4dKVTxylEvEoEwwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjM0MzEyZTMy MzMzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzAzNzM1MzkzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAbnx7jANBgkqhkiG9w0BAQsFAAOCAQEACiTs2TAzkH2cBji884q4qnl76wrp cVuUgNwKnUqCalBkQkKI4PhuPL8rgYmkiDUli9ml3zAeTAxhx8Ut1LL2e/c+t8hM Ldjv58ANqIGt1Nja0y8mFhNGBWaED6eYxvigiPeMKYQpwbmaCEGRSbV/VyA+YB5D sIY3x8TCrE2DmZnILcjgXTS0rLCSHg1xNY1nk/+kZmAuQRpcCG5MUdkVLqoAAR6J tO0gKOZRBGhk9ewePtmncdtV2HqK9apqo9KzOo977Tvt6klQi8hLi2DM2W0FntX1 Hj+ITuEO+QNbOeHKzoDledy0SrVIAbZ+RgsaeVJjc5ee+GfVnBdq0F9WKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:37:29 2025 by rpki-client