This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa File: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (raw, json) Hash identifier: aweSXhd8mJw0T/P7jNxc4m1Vtbpxw0PK6PNEOA0lb/w= Subject key identifier: 4C:A3:ED:AC:33:51:6C:5D:6D:0C:BF:C0:F4:AF:65:2F:49:E3:AA:24 Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Certificate serial: 0D9C3813484134474050539E5B92943B7101A080 Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa Signing time: Tue 30 Dec 2025 19:55:33 +0000 ROA not before: Tue 30 Dec 2025 19:50:33 +0000 ROA not after: Tue 29 Dec 2026 19:55:33 +0000 asID: 13335 IP address blocks: 178.132.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:9c:38:13:48:41:34:47:40:50:53:9e:5b:92:94:3b:71:01:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Validity Not Before: Dec 30 19:50:33 2025 GMT Not After : Dec 29 19:55:33 2026 GMT Subject: CN=4CA3EDAC33516C5D6D0CBFC0F4AF652F49E3AA24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a9:a6:82:90:01:e5:07:82:49:7c:d8:c4:0e: 50:f5:62:ee:cb:4c:c4:57:28:51:d5:94:12:1b:e5: 92:09:24:36:98:b4:bd:fd:1f:9d:83:3e:6e:35:fe: a4:06:c3:6f:8f:27:ba:e4:71:a5:55:5d:d0:56:04: 20:da:cd:64:fa:87:2e:bf:68:b3:1d:c1:10:c1:67: fb:c4:4d:18:9f:6b:ba:ba:44:f8:e2:55:4f:a2:ff: 78:56:6e:47:0d:68:93:2b:27:77:5e:71:ff:a4:2d: 03:35:c9:c7:c1:ed:3b:23:01:21:74:be:4b:70:94: f0:58:72:9b:6b:14:da:62:2f:ca:6c:a8:05:79:56: 0e:c9:f9:1d:83:77:77:f9:99:03:5b:a7:74:cd:73: 92:6c:93:94:b7:96:93:31:b5:19:5f:02:d0:e6:41: a3:a6:3b:19:94:e9:37:96:b0:2d:c8:91:45:01:6b: 81:65:47:1a:b4:6f:33:4c:30:06:93:29:e5:18:91: 09:84:23:0d:2e:3d:80:85:f0:37:33:d5:cd:31:9a: ab:18:3a:6b:d3:32:55:7b:4d:2e:1a:3e:24:7d:d9: 37:bb:23:35:c3:24:2f:ea:e2:ae:63:11:3e:1f:ff: 48:b2:b7:78:68:76:93:9e:55:c3:79:60:4d:93:af: a0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A3:ED:AC:33:51:6C:5D:6D:0C:BF:C0:F4:AF:65:2F:49:E3:AA:24 X509v3 Authority Key Identifier: keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.132.198.0/24 Signature Algorithm: sha256WithRSAEncryption 35:f7:08:85:58:27:6e:a3:86:4c:d7:3d:a4:22:d7:90:9d:6f: 6b:05:fa:4b:9f:66:c5:e6:f0:a7:35:c5:14:3b:a0:20:75:98: cc:10:26:62:40:18:fd:f5:0b:07:4d:6d:22:46:40:85:34:24: 2e:e5:e0:86:26:89:a3:19:2a:c0:2a:80:f0:4f:7b:7c:d4:ec: 08:66:01:1a:1c:91:76:27:94:9f:46:fe:e6:12:22:c4:2a:a6: c3:76:10:41:ac:d3:1f:08:6b:48:9a:45:b5:98:48:f6:0a:3f: b7:52:96:f5:a0:d1:39:ae:82:4f:f4:5b:0d:bb:cc:df:f3:e5: b1:88:2e:a1:fd:c1:e2:ff:92:7c:62:af:86:ba:20:cd:81:ca: 42:24:1a:2d:c0:6b:84:c2:7d:f6:22:d4:aa:e7:bf:06:4f:84: 95:0d:30:75:08:35:c4:02:d0:f3:49:dc:e4:a8:a3:f3:a9:2b: e4:92:da:5d:cd:9c:0f:81:c1:59:84:ad:e7:c7:22:f7:aa:88: 31:64:ce:cb:9e:e8:46:09:2f:64:d9:03:1c:d3:c2:ae:28:04: f3:46:ff:20:3f:22:cf:c4:f2:3c:98:41:94:1a:03:2b:7c:fd: 64:18:60:cf:b0:23:e5:49:44:5e:91:e2:e9:1b:2f:00:e0:37: c8:f2:d8:a1 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUDZw4E0hBNEdAUFOeW5KUO3EBoIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk MTZjZWVkMzAeFw0yNTEyMzAxOTUwMzNaFw0yNjEyMjkxOTU1MzNaMDMxMTAvBgNV BAMTKDRDQTNFREFDMzM1MTZDNUQ2RDBDQkZDMEY0QUY2NTJGNDlFM0FBMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOqaaCkAHlB4JJfNjEDlD1Yu7L TMRXKFHVlBIb5ZIJJDaYtL39H52DPm41/qQGw2+PJ7rkcaVVXdBWBCDazWT6hy6/ aLMdwRDBZ/vETRifa7q6RPjiVU+i/3hWbkcNaJMrJ3decf+kLQM1ycfB7TsjASF0 vktwlPBYcptrFNpiL8psqAV5Vg7J+R2Dd3f5mQNbp3TNc5Jsk5S3lpMxtRlfAtDm QaOmOxmU6TeWsC3IkUUBa4FlRxq0bzNMMAaTKeUYkQmEIw0uPYCF8Dcz1c0xmqsY OmvTMlV7TS4aPiR92Te7IzXDJC/q4q5jET4f/0iyt3hodpOeVcN5YE2Tr6D1AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUTKPtrDNRbF1tDL/A9K9lL0njqiQwHwYDVR0j BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0 NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G czd0TS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGNjMDg3Mzct OTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0NGVkLzAvMzEzNzM4MmUzMTMzMzIyZTMx MzkzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMzMzMzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACyhMYwDQYJKoZIhvcNAQELBQADggEBADX3CIVYJ26jhkzXPaQi15Cdb2sF+kuf ZsXm8Kc1xRQ7oCB1mMwQJmJAGP31CwdNbSJGQIU0JC7l4IYmiaMZKsAqgPBPe3zU 7AhmARockXYnlJ9G/uYSIsQqpsN2EEGs0x8Ia0iaRbWYSPYKP7dSlvWg0Tmugk/0 Ww27zN/z5bGILqH9weL/knxir4a6IM2BykIkGi3Aa4TCffYi1KrnvwZPhJUNMHUI NcQC0PNJ3OSoo/OpK+SS2l3NnA+BwVmErefHIveqiDFkzsue6EYJL2TZAxzTwq4o BPNG/yA/Is/E8jyYQZQaAyt8/WQYYM+wI+VJRF6R4ukbLwDgN8jy2KE= -----END CERTIFICATE-----Generated at Sun Jan 25 14:16:37 2026 by rpki-client