This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa File: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (raw, json) Hash identifier: u4r7X/suBx+FzLFBQvOSNxzBhjg3wd1M6uflDgVU6DA= Subject key identifier: BA:AF:A1:00:F6:5F:34:00:22:00:BE:ED:CD:BF:D9:33:48:4B:6D:55 Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Certificate serial: 1F97159B2E64AAFEC5BE8208CA290B442665EAE7 Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa Signing time: Tue 30 Dec 2025 19:55:33 +0000 ROA not before: Tue 30 Dec 2025 19:50:33 +0000 ROA not after: Tue 29 Dec 2026 19:55:33 +0000 asID: 265919 IP address blocks: 178.132.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:97:15:9b:2e:64:aa:fe:c5:be:82:08:ca:29:0b:44:26:65:ea:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Validity Not Before: Dec 30 19:50:33 2025 GMT Not After : Dec 29 19:55:33 2026 GMT Subject: CN=BAAFA100F65F34002200BEEDCDBFD933484B6D55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a2:63:01:05:18:6f:09:97:12:ef:95:27:44: 4c:95:c6:1c:41:6b:a5:d2:3c:e2:b8:e2:72:cf:20: b5:72:b2:04:ef:59:b5:79:54:dd:5e:81:2c:02:d4: c3:43:fe:0c:87:a3:9e:8e:76:95:ff:ed:b7:51:a2: 9f:33:38:b9:d7:47:b7:2c:2a:4c:9f:e8:16:73:49: e0:22:8d:0e:67:51:13:64:b9:e9:bd:2d:30:6d:03: 53:7f:44:55:a1:fb:79:e0:aa:1e:96:7d:f3:d3:b9: 8c:53:bb:83:19:d5:a5:62:a7:5e:ac:dc:8a:52:a0: c0:67:24:29:3d:34:df:c7:02:fc:df:63:20:8b:ed: 60:f4:c0:63:06:69:fe:14:63:bf:bb:84:d7:b0:f2: 35:ee:8b:77:cd:fb:85:89:6d:37:a8:f9:65:5a:2c: ba:34:34:cd:86:e5:d8:d7:e8:00:6f:41:78:81:46: d0:4b:98:bc:62:12:39:21:9b:47:cc:6a:bf:12:ef: 65:11:6d:8b:55:73:3a:65:d4:43:a4:40:74:71:b7: 74:4b:70:0e:6a:f6:c1:d5:56:9c:f2:b2:98:50:e2: fd:21:79:f2:ca:4d:e8:c5:33:9b:7a:e2:6d:4f:76: 10:e2:b4:b0:7b:e6:b4:82:2f:18:22:b0:3c:ee:67: c0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AF:A1:00:F6:5F:34:00:22:00:BE:ED:CD:BF:D9:33:48:4B:6D:55 X509v3 Authority Key Identifier: keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.132.198.0/24 Signature Algorithm: sha256WithRSAEncryption b1:b4:0b:ee:b1:4d:0d:9b:db:30:50:62:30:02:06:08:0e:29: 15:e4:97:ed:bc:c1:c0:a5:49:fa:00:d4:ce:ed:e2:fb:a2:db: 03:43:5d:8a:34:f4:c3:36:8c:cd:f5:f0:4c:8f:76:83:0f:85: e1:1d:a1:dd:7b:82:2f:1a:69:f8:16:b4:77:e0:b5:1c:99:10: e5:10:2e:91:1c:ce:b2:bc:26:c6:36:7c:8a:20:da:56:7f:14: 81:db:ef:34:07:b6:5c:8c:6e:d3:8a:93:44:6d:54:b1:b8:83: 68:88:9c:1a:8f:d6:02:d0:22:78:65:03:47:4c:07:1e:c3:77: 54:cf:1a:7f:89:1d:71:ea:0a:e3:a7:ab:14:b4:21:1c:bd:da: 47:2a:2c:19:d7:7b:3c:5c:1e:c0:69:49:74:67:7c:9f:5a:ce: 42:2d:df:dc:c4:13:b3:7d:c6:6d:23:07:57:a2:5e:82:a1:21: 97:e5:75:a8:d0:56:f4:bc:e3:ad:53:8d:4e:00:d3:05:a1:1b: bc:b5:2f:df:89:84:cf:a3:72:0b:9b:46:5b:ac:3e:b5:12:b7: 7e:22:8f:a3:d0:a0:d9:43:2d:60:9b:1c:e2:d0:a0:e3:74:95: d6:1d:43:95:a5:d0:f4:16:7f:b7:c5:f1:bd:ba:f5:d1:22:12: 6f:b3:d8:e7 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUH5cVmy5kqv7FvoIIyikLRCZl6ucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk MTZjZWVkMzAeFw0yNTEyMzAxOTUwMzNaFw0yNjEyMjkxOTU1MzNaMDMxMTAvBgNV BAMTKEJBQUZBMTAwRjY1RjM0MDAyMjAwQkVFRENEQkZEOTMzNDg0QjZENTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgomMBBRhvCZcS75UnREyVxhxB a6XSPOK44nLPILVysgTvWbV5VN1egSwC1MND/gyHo56OdpX/7bdRop8zOLnXR7cs Kkyf6BZzSeAijQ5nURNkuem9LTBtA1N/RFWh+3ngqh6WffPTuYxTu4MZ1aVip16s 3IpSoMBnJCk9NN/HAvzfYyCL7WD0wGMGaf4UY7+7hNew8jXui3fN+4WJbTeo+WVa LLo0NM2G5djX6ABvQXiBRtBLmLxiEjkhm0fMar8S72URbYtVczpl1EOkQHRxt3RL cA5q9sHVVpzysphQ4v0hefLKTejFM5t64m1PdhDitLB75rSCLxgisDzuZ8D7AgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUuq+hAPZfNAAiAL7tzb/ZM0hLbVUwHwYDVR0j BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0 NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G czd0TS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGNjMDg3Mzct OTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0NGVkLzAvMzEzNzM4MmUzMTMzMzIyZTMx MzkzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNTM5MzEzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALKExjANBgkqhkiG9w0BAQsFAAOCAQEAsbQL7rFNDZvbMFBiMAIGCA4pFeSX 7bzBwKVJ+gDUzu3i+6LbA0NdijT0wzaMzfXwTI92gw+F4R2h3XuCLxpp+Ba0d+C1 HJkQ5RAukRzOsrwmxjZ8iiDaVn8UgdvvNAe2XIxu04qTRG1UsbiDaIicGo/WAtAi eGUDR0wHHsN3VM8af4kdceoK46erFLQhHL3aRyosGdd7PFwewGlJdGd8n1rOQi3f 3MQTs33GbSMHV6JegqEhl+V1qNBW9LzjrVONTgDTBaEbvLUv34mEz6NyC5tGW6w+ tRK3fiKPo9Cg2UMtYJsc4tCg43SV1h1DlaXQ9BZ/t8Xxvbr10SISb7PY5w== -----END CERTIFICATE-----Generated at Sun Jan 25 14:16:37 2026 by rpki-client