This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e20383334.roa File: 3138382e3136342e3135342e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: vvTevjxETDa595QBqFXtPC5dkfNklcd1MuoPmql9OGw= Subject key identifier: C5:FA:85:FB:56:45:AF:EE:B9:62:4D:AB:C2:A4:42:AD:7F:24:45:CF Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Certificate serial: 23E29B6D94EC73B1F3FCA7E3A161BB9B8FD1C155 Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e20383334.roa Signing time: Thu 18 Dec 2025 00:06:02 +0000 ROA not before: Thu 18 Dec 2025 00:01:02 +0000 ROA not after: Thu 17 Dec 2026 00:06:02 +0000 asID: 834 IP address blocks: 188.164.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e2:9b:6d:94:ec:73:b1:f3:fc:a7:e3:a1:61:bb:9b:8f:d1:c1:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Validity Not Before: Dec 18 00:01:02 2025 GMT Not After : Dec 17 00:06:02 2026 GMT Subject: CN=C5FA85FB5645AFEEB9624DABC2A442AD7F2445CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:79:b8:6b:8d:47:f5:75:62:9c:89:0d:44:34: 86:16:69:95:34:37:5a:8c:e4:06:3e:21:b8:de:e0: b1:da:7d:1b:ac:9b:34:fa:47:70:f5:cf:0d:3c:5d: 7b:d7:fd:e8:9a:ea:0c:74:b0:bf:05:69:cd:f7:a6: e8:47:44:d8:80:f2:27:a8:93:42:a6:8a:8a:cf:59: d6:f1:7b:75:64:b4:7f:68:62:29:f1:5c:17:38:a5: dd:f3:e3:6e:4d:f1:f9:06:28:21:e4:46:96:ac:13: 6e:af:90:24:ae:31:fc:6c:a9:47:eb:f1:4e:cd:9c: 70:91:75:e8:6c:f9:8e:91:e2:95:30:4e:e6:26:ec: 79:99:4b:fb:45:ec:46:7d:2f:cc:f7:17:22:06:21: f7:0c:15:f8:ca:ef:76:ed:66:25:64:b2:43:7a:26: 9a:1d:6e:4d:8e:93:e4:18:11:0a:2f:15:ec:20:1e: eb:af:eb:7c:2a:f8:06:1e:f6:b3:22:0a:f2:04:3f: 9e:5f:4b:9e:3b:4a:9b:3c:ce:cd:76:cd:2c:10:41: dd:ff:3f:5f:eb:d7:56:d6:7c:f4:04:3e:c0:b5:b2: 3b:02:d8:1b:06:b3:79:fb:44:c7:3d:c4:a7:bf:6f: 64:6f:8a:54:ee:8b:79:31:dd:a1:58:ba:5c:b7:3b: c3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FA:85:FB:56:45:AF:EE:B9:62:4D:AB:C2:A4:42:AD:7F:24:45:CF X509v3 Authority Key Identifier: keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.164.154.0/24 Signature Algorithm: sha256WithRSAEncryption 56:4a:06:ab:5c:94:9b:c3:35:57:b3:be:a2:63:c6:ac:29:c2: 00:93:f6:f8:bf:79:77:e7:93:f8:14:43:08:78:59:d9:53:33: 95:72:ce:c5:d6:76:09:ba:ea:5a:b4:7a:c5:b4:4c:e7:3c:0b: e0:f2:70:a0:b3:93:47:75:91:5a:20:dc:96:a7:94:10:7b:90: 0e:b7:d6:e8:d8:d1:5b:e9:57:b1:81:85:ef:68:4c:0d:be:3f: 59:a9:d3:f5:ce:33:97:33:88:76:f5:3b:a3:71:3a:6e:ea:d4: e8:6c:7d:e0:d2:74:12:e8:0b:f8:c2:e9:14:b2:fa:00:e9:e6: 7e:0f:7a:49:61:4c:db:54:a6:26:de:70:95:72:7e:a9:92:3e: 40:81:76:b1:92:41:54:0c:cd:bd:b7:43:fd:67:39:3c:b9:ab: df:11:33:92:b6:e3:0e:25:5a:ac:30:ff:aa:d4:e9:f1:c0:ae: 4b:77:d1:7d:2c:b1:3c:a1:ef:bd:6f:fb:da:57:f3:3c:69:09: 39:b4:52:50:6c:72:4f:b1:27:d0:38:e8:b6:a1:cd:a5:a0:a5: d4:09:e3:8c:9d:4a:c6:e9:d4:d0:36:11:1e:e2:72:d2:f9:61: 45:bb:bc:f3:65:6b:8e:ea:68:34:7f:ab:2b:c0:44:4a:02:f4: ec:83:ad:e6 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUI+KbbZTsc7Hz/KfjoWG7m4/RwVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz MGY3YzRjYTAeFw0yNTEyMTgwMDAxMDJaFw0yNjEyMTcwMDA2MDJaMDMxMTAvBgNV BAMTKEM1RkE4NUZCNTY0NUFGRUVCOTYyNERBQkMyQTQ0MkFEN0YyNDQ1Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsebhrjUf1dWKciQ1ENIYWaZU0 N1qM5AY+Ibje4LHafRusmzT6R3D1zw08XXvX/eia6gx0sL8Fac33puhHRNiA8ieo k0KmiorPWdbxe3VktH9oYinxXBc4pd3z425N8fkGKCHkRpasE26vkCSuMfxsqUfr 8U7NnHCRdehs+Y6R4pUwTuYm7HmZS/tF7EZ9L8z3FyIGIfcMFfjK73btZiVkskN6 Jpodbk2Ok+QYEQovFewgHuuv63wq+AYe9rMiCvIEP55fS547Sps8zs12zSwQQd3/ P1/r11bWfPQEPsC1sjsC2BsGs3n7RMc9xKe/b2RvilTui3kx3aFYuly3O8O7AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUxfqF+1ZFr+65Yk2rwqRCrX8kRc8wHwYDVR0j BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE M3hNby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAt ZjZlMC00MTBjLWJjOTktYWYwOTIxZDFjM2E0LzAvMzEzODM4MmUzMTM2MzQyZTMx MzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALyk mjANBgkqhkiG9w0BAQsFAAOCAQEAVkoGq1yUm8M1V7O+omPGrCnCAJP2+L95d+eT +BRDCHhZ2VMzlXLOxdZ2CbrqWrR6xbRM5zwL4PJwoLOTR3WRWiDclqeUEHuQDrfW 6NjRW+lXsYGF72hMDb4/WanT9c4zlzOIdvU7o3E6burU6Gx94NJ0EugL+MLpFLL6 AOnmfg96SWFM21SmJt5wlXJ+qZI+QIF2sZJBVAzNvbdD/Wc5PLmr3xEzkrbjDiVa rDD/qtTp8cCuS3fRfSyxPKHvvW/72lfzPGkJObRSUGxyT7En0DjotqHNpaCl1Anj jJ1KxunU0DYRHuJy0vlhRbu882VrjupoNH+rK8BESgL07IOt5g== -----END CERTIFICATE-----Generated at Fri Dec 19 23:23:28 2025 by rpki-client