This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3136382e302f32342d3234203d3e203232333633.roa File: 3137382e3230382e3136382e302f32342d3234203d3e203232333633.roa (raw, json) Hash identifier: ce/ts3qcMqGWtD+97WDrrdedkt7K+c32O9QxHWb3aRM= Subject key identifier: F2:91:70:64:EF:42:AC:62:03:24:B5:4B:29:A2:34:BC:B7:45:C3:67 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 422A42620F18E4FA21871D81AB2058705AD9381C Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3136382e302f32342d3234203d3e203232333633.roa Signing time: Tue 02 Dec 2025 05:55:12 +0000 ROA not before: Tue 02 Dec 2025 05:50:12 +0000 ROA not after: Tue 01 Dec 2026 05:55:12 +0000 asID: 22363 IP address blocks: 178.208.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2a:42:62:0f:18:e4:fa:21:87:1d:81:ab:20:58:70:5a:d9:38:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Dec 2 05:50:12 2025 GMT Not After : Dec 1 05:55:12 2026 GMT Subject: CN=F2917064EF42AC620324B54B29A234BCB745C367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:f3:d5:3e:ca:8c:20:d7:3b:14:36:bc:21: 73:78:ff:6d:0d:0f:b7:68:73:94:1e:4f:94:2f:e7: a2:6d:d3:92:42:8c:26:b7:c4:59:c6:02:da:43:91: b8:6c:ca:86:c8:77:dd:db:61:e2:63:2e:33:7e:8e: be:8f:5f:4e:5a:60:90:b3:89:64:c4:b7:60:e6:6b: 0c:bd:19:db:6d:db:0b:0e:d2:cd:b6:1d:e5:d6:c6: d9:63:34:3a:66:7e:e2:b2:0d:ef:34:09:16:26:90: 4b:dc:4d:d9:2f:3d:f9:1d:a6:5c:a3:b4:37:97:7d: d7:12:0e:c3:df:67:ae:66:29:ef:f7:f0:42:d9:72: 05:34:21:0c:d3:e6:b1:c5:af:89:1e:98:1e:6f:4f: 1c:eb:5c:5a:9e:e3:a9:7e:51:c3:61:76:48:95:2e: 34:26:fb:f3:6c:cd:4d:72:76:f8:fb:f3:80:8d:40: 17:19:6c:6d:77:ac:82:e3:12:8b:16:7e:37:da:36: cc:8c:71:e2:b2:f3:58:87:35:e1:51:57:3a:57:3a: 6a:1d:15:fe:87:cf:f7:e4:14:bb:65:52:5f:0c:d5: 35:d0:99:b0:ca:e8:ae:f9:f0:e0:b8:57:fb:df:27: d7:7a:8d:b6:6c:27:23:45:06:53:b4:4b:dc:57:a5: 2a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:91:70:64:EF:42:AC:62:03:24:B5:4B:29:A2:34:BC:B7:45:C3:67 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3136382e302f32342d3234203d3e203232333633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.208.168.0/24 Signature Algorithm: sha256WithRSAEncryption 40:f8:26:48:3e:64:34:bd:ae:b6:85:24:b6:f0:61:85:8f:b2: c4:ab:8e:0a:e2:6c:b3:aa:b3:72:ad:f9:80:36:5e:38:e4:0e: cc:d1:c5:ce:99:b7:3a:72:2a:69:fd:33:10:f3:4c:47:bb:73: 89:d2:0e:43:c8:f2:ae:58:2c:c4:e4:04:95:0e:c8:ac:76:eb: da:a2:78:11:c9:8e:c8:ea:f0:17:7b:2b:b4:38:bc:68:8f:85: b4:d7:7a:bb:45:e5:32:b6:ef:8f:10:c8:4a:e9:dd:db:cb:9a: 49:ae:70:f0:55:cc:6a:26:c4:a4:3e:73:43:24:ca:2f:54:8e: 7e:82:93:59:63:ae:8e:1a:99:bb:00:bc:5e:71:0d:7b:80:74: b8:08:b2:c1:18:2d:56:2e:1c:63:9e:78:d4:08:12:15:f7:ef: 19:2e:e3:cb:79:55:04:04:14:1c:af:bd:5c:3f:60:bf:6f:a4: 54:0b:fc:3a:77:b5:03:eb:59:e0:d5:0e:b8:36:f2:63:0a:37: 7b:f3:99:b0:d9:bd:7a:2a:5f:f8:4c:63:3d:55:ae:05:99:7d: 90:7e:a0:6c:49:73:5a:4a:34:a2:75:71:a0:30:fc:2e:f0:3e: 29:fc:1f:6f:48:da:4a:6d:99:17:17:53:54:34:71:37:3a:6c: 6c:8b:c1:b4 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUQipCYg8Y5Pohhx2BqyBYcFrZOBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTEyMDIwNTUwMTJaFw0yNjEyMDEwNTU1MTJaMDMxMTAvBgNV BAMTKEYyOTE3MDY0RUY0MkFDNjIwMzI0QjU0QjI5QTIzNEJDQjc0NUMzNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwL/PVPsqMINc7FDa8IXN4/20N D7doc5QeT5Qv56Jt05JCjCa3xFnGAtpDkbhsyobId93bYeJjLjN+jr6PX05aYJCz iWTEt2Dmawy9Gdtt2wsO0s22HeXWxtljNDpmfuKyDe80CRYmkEvcTdkvPfkdplyj tDeXfdcSDsPfZ65mKe/38ELZcgU0IQzT5rHFr4kemB5vTxzrXFqe46l+UcNhdkiV LjQm+/NszU1ydvj784CNQBcZbG13rILjEosWfjfaNsyMceKy81iHNeFRVzpXOmod Ff6Hz/fkFLtlUl8M1TXQmbDK6K758OC4V/vfJ9d6jbZsJyNFBlO0S9xXpSoPAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU8pFwZO9CrGIDJLVLKaI0vLdFw2cwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzNzM4MmUzMjMwMzgyZTMx MzYzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzIzMzM2MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACy0KgwDQYJKoZIhvcNAQELBQADggEBAED4Jkg+ZDS9rraFJLbwYYWPssSrjgri bLOqs3Kt+YA2XjjkDszRxc6ZtzpyKmn9MxDzTEe7c4nSDkPI8q5YLMTkBJUOyKx2 69qieBHJjsjq8Bd7K7Q4vGiPhbTXertF5TK2748QyErp3dvLmkmucPBVzGomxKQ+ c0Mkyi9Ujn6Ck1ljro4ambsAvF5xDXuAdLgIssEYLVYuHGOeeNQIEhX37xku48t5 VQQEFByvvVw/YL9vpFQL/Dp3tQPrWeDVDrg28mMKN3vzmbDZvXoqX/hMYz1VrgWZ fZB+oGxJc1pKNKJ1caAw/C7wPin8H29I2kptmRcXU1Q0cTc6bGyLwbQ= -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:19 2025 by rpki-client