This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e35342e302f32342d3332203d3e2039303039.roa File: 3139342e33312e35342e302f32342d3332203d3e2039303039.roa (raw, json) Hash identifier: /XLtKJoSkNndG9hZSuhqCZOZJLpk4eDAarnLkCSQ6Cs= Subject key identifier: 48:35:1C:99:F6:8E:21:43:6F:FD:CA:AC:46:75:A7:0D:13:AE:48:13 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 5791B4DF6D696D0E4373283485F0BDAD732A583F Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e35342e302f32342d3332203d3e2039303039.roa Signing time: Mon 01 Dec 2025 15:50:03 +0000 ROA not before: Mon 01 Dec 2025 15:45:03 +0000 ROA not after: Mon 30 Nov 2026 15:50:03 +0000 asID: 9009 IP address blocks: 194.31.54.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:91:b4:df:6d:69:6d:0e:43:73:28:34:85:f0:bd:ad:73:2a:58:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:03 2025 GMT Not After : Nov 30 15:50:03 2026 GMT Subject: CN=48351C99F68E21436FFDCAAC4675A70D13AE4813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:16:00:60:13:45:1a:23:fe:f1:f0:41:0b:19: 70:66:cb:b3:51:9b:bd:42:6c:d3:ab:83:67:8c:d2: 8b:0c:17:47:a5:aa:f8:b8:df:dc:ba:6e:f2:22:ff: b5:6c:3c:d8:82:32:2c:71:40:6b:5d:e1:76:e6:5d: 89:54:f3:dd:47:ce:de:99:4b:06:a9:67:cb:6c:1e: 55:c8:94:5e:b4:31:24:e3:2b:6d:a2:99:cb:a4:d2: 81:f0:b4:43:04:37:43:a1:a1:ca:41:b7:85:e3:52: 56:4c:49:02:d2:dc:56:58:18:07:06:0a:ae:72:50: 17:56:8c:b4:bb:97:eb:5b:f2:c3:a2:b8:7c:c9:a9: 51:53:5d:bf:67:80:5e:1d:82:36:64:46:76:8c:9b: e4:56:0d:01:0d:db:de:2a:69:70:e3:e5:f7:3a:cb: 4c:b5:cb:f4:09:f4:5a:3a:7e:3c:06:4f:bb:1d:50: 1c:f6:6a:5d:72:be:9c:e0:9f:8a:a9:5a:91:58:05: 14:5f:06:45:33:d7:38:c3:13:db:fb:64:4d:bc:61: fd:a3:69:57:6b:14:48:15:7c:b6:09:46:cd:01:32: 4d:69:52:3c:08:0a:7b:bd:83:6f:32:aa:79:bf:99: 56:36:05:f2:c9:7e:e9:36:11:09:e8:f6:39:fe:54: 43:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:35:1C:99:F6:8E:21:43:6F:FD:CA:AC:46:75:A7:0D:13:AE:48:13 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e35342e302f32342d3332203d3e2039303039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.54.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:0a:b6:01:8f:4f:c1:10:19:9c:87:27:74:1d:3f:d7:95:70: 5a:3b:8d:9e:e0:89:f1:d9:ae:8a:e9:1f:30:c6:f3:aa:a4:c5: fa:5b:e8:64:99:ac:2b:00:18:33:90:7a:47:0f:de:55:5c:87: f0:3f:bf:f3:f4:22:e8:03:fb:4b:b5:80:57:dc:e4:0d:48:79: 2d:62:62:08:ce:db:bd:7c:63:c0:e2:b0:29:4f:89:89:be:20: e4:6a:f7:0c:8e:83:ec:33:63:bc:58:8d:ee:8a:ab:e6:d2:d1: 15:15:21:98:7a:c0:fc:a5:43:5a:eb:57:6e:ae:1f:aa:c1:3b: ae:85:f7:5c:32:3d:75:c0:34:9f:47:21:33:79:9a:a0:e6:e6: e7:d2:32:1c:35:55:f2:1c:53:50:9b:3b:04:82:7e:59:8d:77: d6:b6:87:33:ed:4e:c6:c0:60:43:4d:13:af:08:4b:63:e5:97: 7d:51:e3:c7:e6:39:b5:5d:ba:9b:2e:c6:89:80:bd:9d:c0:4c: 0a:08:49:9e:57:87:50:ab:df:0a:10:5c:04:02:57:e0:52:22: 52:3c:06:45:f9:38:3b:d0:8f:be:6e:b3:c5:8c:d7:4d:0e:0a: 2d:1f:f8:d2:4b:ae:cd:0d:a3:c0:3e:cf:a7:02:10:02:0d:59: 9f:40:8f:bb -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUV5G0321pbQ5Dcyg0hfC9rXMqWD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDNaFw0yNjExMzAxNTUwMDNaMDMxMTAvBgNV BAMTKDQ4MzUxQzk5RjY4RTIxNDM2RkZEQ0FBQzQ2NzVBNzBEMTNBRTQ4MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeFgBgE0UaI/7x8EELGXBmy7NR m71CbNOrg2eM0osMF0elqvi439y6bvIi/7VsPNiCMixxQGtd4XbmXYlU891Hzt6Z SwapZ8tsHlXIlF60MSTjK22imcuk0oHwtEMEN0OhocpBt4XjUlZMSQLS3FZYGAcG Cq5yUBdWjLS7l+tb8sOiuHzJqVFTXb9ngF4dgjZkRnaMm+RWDQEN294qaXDj5fc6 y0y1y/QJ9Fo6fjwGT7sdUBz2al1yvpzgn4qpWpFYBRRfBkUz1zjDE9v7ZE28Yf2j aVdrFEgVfLYJRs0BMk1pUjwICnu9g28yqnm/mVY2BfLJfuk2EQno9jn+VEPnAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUSDUcmfaOIUNv/cqsRnWnDROuSBMwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzOTM0MmUzMzMxMmUzNTM0 MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzkzMDMwMzkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCHzYw DQYJKoZIhvcNAQELBQADggEBAIsKtgGPT8EQGZyHJ3QdP9eVcFo7jZ7gifHZrorp HzDG86qkxfpb6GSZrCsAGDOQekcP3lVch/A/v/P0IugD+0u1gFfc5A1IeS1iYgjO 2718Y8DisClPiYm+IORq9wyOg+wzY7xYje6Kq+bS0RUVIZh6wPylQ1rrV26uH6rB O66F91wyPXXANJ9HITN5mqDm5ufSMhw1VfIcU1CbOwSCflmNd9a2hzPtTsbAYENN E68IS2Pll31R48fmObVdupsuxomAvZ3ATAoISZ5Xh1Cr3woQXAQCV+BSIlI8BkX5 ODvQj75us8WM100OCi0f+NJLrs0No8A+z6cCEAINWZ9Aj7s= -----END CERTIFICATE-----Generated at Sat Dec 6 11:51:18 2025 by rpki-client