This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232302e302f32342d3234203d3e20323132333335.roa File: 3138352e3230352e3232302e302f32342d3234203d3e20323132333335.roa (raw, json) Hash identifier: /xQFdKSlNzroH5syizRbpyy0dYCs+WtvjES+MVZtLFw= Subject key identifier: AE:CB:47:50:45:44:9B:6F:72:D3:D2:17:5A:A5:77:4B:07:56:18:3B Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Certificate serial: 3A23F6D8A0A99C513C521F768F17944F64606792 Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232302e302f32342d3234203d3e20323132333335.roa Signing time: Fri 12 Dec 2025 14:55:32 +0000 ROA not before: Fri 12 Dec 2025 14:50:32 +0000 ROA not after: Fri 11 Dec 2026 14:55:32 +0000 asID: 212335 IP address blocks: 185.205.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:23:f6:d8:a0:a9:9c:51:3c:52:1f:76:8f:17:94:4f:64:60:67:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc Validity Not Before: Dec 12 14:50:32 2025 GMT Not After : Dec 11 14:55:32 2026 GMT Subject: CN=AECB475045449B6F72D3D2175AA5774B0756183B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b4:5f:f2:f0:ee:35:6d:72:08:77:a8:70:2a: fe:7c:93:6a:db:19:78:c4:45:11:79:44:f6:82:13: c7:4e:cb:59:97:c2:6f:f9:60:18:33:db:2e:fb:12: 84:44:44:d4:c1:bd:12:27:92:50:2d:5a:f6:7e:cb: e5:d9:76:de:55:04:69:35:ae:bc:c1:e8:e0:fb:04: 23:da:15:b4:c1:7c:f0:dd:e2:3f:3d:90:8f:1e:85: 08:e6:0a:cd:4c:87:6f:57:de:b2:fc:68:90:74:8f: 23:d6:2e:9f:d1:91:34:16:4d:44:3e:63:a4:d1:6a: 16:18:da:72:b3:d2:96:ed:87:94:6f:de:a3:83:ff: 8c:9e:93:87:2a:33:a8:9d:3b:3e:a6:50:8f:8d:1a: e6:45:35:6c:6a:50:49:55:67:4e:83:65:5f:af:08: cc:f9:db:b1:51:20:ab:19:af:14:25:4d:ee:c2:85: 86:5f:a1:36:dc:ef:14:da:cd:3f:d7:12:53:26:54: ae:15:80:94:e4:d4:f6:60:dd:c8:6c:11:9e:24:2c: ed:66:15:8a:99:32:d2:f0:92:fe:c3:6b:80:8d:37: ef:91:8d:6d:3c:ce:26:df:db:ae:cd:7b:ee:42:0c: 0a:43:37:29:b5:b3:d5:da:29:ee:73:5d:06:38:a1: 89:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CB:47:50:45:44:9B:6F:72:D3:D2:17:5A:A5:77:4B:07:56:18:3B X509v3 Authority Key Identifier: keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232302e302f32342d3234203d3e20323132333335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.220.0/24 Signature Algorithm: sha256WithRSAEncryption 79:09:b2:8e:8e:20:50:5e:82:d6:c4:a1:10:81:95:01:1b:61: 84:72:66:32:da:f0:d2:03:cc:27:c2:aa:bb:44:54:82:69:5d: bd:57:24:fc:b1:da:92:e2:4e:f1:79:1b:f1:9d:9d:8d:e2:fa: eb:cd:72:28:f8:09:87:37:8e:2f:4a:64:8a:e5:39:d8:09:50: 18:30:cf:4b:8e:d3:03:36:19:c1:52:ce:db:30:fe:0c:d4:35: fd:6c:e7:98:e9:ca:88:91:4d:8b:6c:9f:52:54:68:5f:c8:3d: e8:fb:f2:c9:aa:6c:56:5d:3a:60:81:13:ad:c4:92:68:36:22: 62:0d:08:e2:43:2f:87:b6:be:94:2b:d7:0f:69:e0:a3:7b:ff: f4:38:78:bd:0a:5b:3f:86:de:d6:cd:4b:69:4d:0d:c4:83:99: 9b:cd:41:18:75:d6:43:26:ca:75:3d:f0:75:f0:91:fb:c8:06: 08:22:e4:ea:65:bf:de:36:95:4e:64:83:9f:49:61:d8:fd:3f: 3f:56:19:fc:d0:85:2f:f3:27:a3:8d:ba:3f:b9:bf:73:c1:02: 12:bb:82:f1:92:e8:a1:fe:57:75:bc:0c:3d:3f:0b:4a:ba:d4: ce:7f:0e:e5:d1:e3:ed:9c:57:0b:d4:ff:d0:15:08:1f:9c:9e: 53:fd:ef:16 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUOiP22KCpnFE8Uh92jxeUT2RgZ5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl ODZlMGVmYzAeFw0yNTEyMTIxNDUwMzJaFw0yNjEyMTExNDU1MzJaMDMxMTAvBgNV BAMTKEFFQ0I0NzUwNDU0NDlCNkY3MkQzRDIxNzVBQTU3NzRCMDc1NjE4M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdtF/y8O41bXIId6hwKv58k2rb GXjERRF5RPaCE8dOy1mXwm/5YBgz2y77EoRERNTBvRInklAtWvZ+y+XZdt5VBGk1 rrzB6OD7BCPaFbTBfPDd4j89kI8ehQjmCs1Mh29X3rL8aJB0jyPWLp/RkTQWTUQ+ Y6TRahYY2nKz0pbth5Rv3qOD/4yek4cqM6idOz6mUI+NGuZFNWxqUElVZ06DZV+v CMz527FRIKsZrxQlTe7ChYZfoTbc7xTazT/XElMmVK4VgJTk1PZg3chsEZ4kLO1m FYqZMtLwkv7Da4CNN++RjW08zibf267Ne+5CDApDNym1s9XaKe5zXQY4oYk3AgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUrstHUEVEm29y09IXWqV3SwdWGDswHwYDVR0j BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo dUR2dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzODM1MmUzMjMwMzUyZTMy MzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMzMzMzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALnN3DANBgkqhkiG9w0BAQsFAAOCAQEAeQmyjo4gUF6C1sShEIGVARthhHJm Mtrw0gPMJ8Kqu0RUgmldvVck/LHakuJO8Xkb8Z2djeL6681yKPgJhzeOL0pkiuU5 2AlQGDDPS47TAzYZwVLO2zD+DNQ1/WznmOnKiJFNi2yfUlRoX8g96PvyyapsVl06 YIETrcSSaDYiYg0I4kMvh7a+lCvXD2ngo3v/9Dh4vQpbP4be1s1LaU0NxIOZm81B GHXWQybKdT3wdfCR+8gGCCLk6mW/3jaVTmSDn0lh2P0/P1YZ/NCFL/Mno426P7m/ c8ECEruC8ZLoof5XdbwMPT8LSrrUzn8O5dHj7ZxXC9T/0BUIH5yeU/3vFg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:15:50 2025 by rpki-client