This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3136392e302f32342d3234203d3e203232333633.roa File: 3137382e3230382e3136392e302f32342d3234203d3e203232333633.roa (raw, json) Hash identifier: VgMj8110dAdD70NR7J01+sLc1rhCBl++m0jO+0B9l9w= Subject key identifier: 78:76:8D:62:09:11:E4:2C:26:F0:DB:ED:8E:45:6E:0D:36:C2:0D:31 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 72895E19D2733454E990CDB1E517A4FA7583EFFC Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3136392e302f32342d3234203d3e203232333633.roa Signing time: Tue 02 Dec 2025 05:55:12 +0000 ROA not before: Tue 02 Dec 2025 05:50:12 +0000 ROA not after: Tue 01 Dec 2026 05:55:12 +0000 asID: 22363 IP address blocks: 178.208.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:89:5e:19:d2:73:34:54:e9:90:cd:b1:e5:17:a4:fa:75:83:ef:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Dec 2 05:50:12 2025 GMT Not After : Dec 1 05:55:12 2026 GMT Subject: CN=78768D620911E42C26F0DBED8E456E0D36C20D31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1c:99:ee:22:dc:22:8b:c4:f3:16:ac:bc:dc: 18:dd:bc:4e:d4:de:c1:f9:c1:ff:2d:88:46:d8:c9: 78:7e:f0:b0:e8:61:05:bb:f8:ed:19:40:32:f6:b2: 58:93:8b:a1:dc:73:f9:59:b5:bc:68:c1:26:9f:3e: a5:e9:a1:ee:46:aa:32:ce:ca:6d:d0:b9:e3:7d:73: b2:f1:26:01:21:65:e8:e2:c5:20:12:fe:1a:6a:05: 0e:b5:ae:b2:67:dd:07:7f:e1:f0:5b:ca:c2:44:32: ad:c1:80:0b:9f:14:18:b6:e5:ef:c8:5f:b4:05:3d: 4a:17:93:92:99:a1:15:21:7c:97:e5:1c:12:6e:eb: d7:74:d3:1c:ef:46:38:d2:13:e7:11:80:a4:f7:37: ae:33:79:29:a8:99:e1:93:5b:16:53:41:77:ad:2a: 58:f5:63:82:1d:e6:b3:a4:a3:7e:e2:67:ac:29:58: b2:00:53:a0:eb:8f:0c:cb:a8:b6:a6:3b:44:23:ef: 3c:24:b2:da:e8:24:ca:6b:9c:20:d1:a4:e2:23:73: be:2e:5c:d2:8d:e5:5c:35:b8:0b:22:9b:1b:fc:89: 4d:76:dc:a1:6b:85:e9:17:9e:98:7f:fa:51:29:13: 30:5c:04:20:80:a0:3b:8d:e1:b1:09:c6:30:cb:2f: 86:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:76:8D:62:09:11:E4:2C:26:F0:DB:ED:8E:45:6E:0D:36:C2:0D:31 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3136392e302f32342d3234203d3e203232333633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.208.169.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:ab:b1:78:98:9e:fb:d4:ef:0d:f8:94:fc:9c:6c:a0:89:b0: cc:11:c3:08:35:9e:59:d3:a1:41:4b:2d:65:03:ac:41:7d:05: 21:29:92:8b:9f:e6:3a:43:ec:99:82:d6:83:6d:16:e0:55:e5: 58:3d:7c:da:51:10:54:ce:23:81:1c:ab:63:30:c8:c6:d3:67: 1a:02:f5:15:c2:70:de:be:ce:3d:7b:65:ed:89:53:ea:03:d5: 8a:54:6c:5a:8d:ed:02:b2:82:7f:ed:46:73:f6:6f:56:a2:2f: fd:53:40:9f:09:3d:3d:c9:52:1e:5b:d5:be:1d:b7:d2:c4:af: a9:2b:97:e2:42:ff:c4:ab:78:cb:ce:31:85:31:d5:85:53:2e: ca:f4:11:6d:52:d5:e1:45:2b:aa:0b:d4:71:5e:1b:2b:7f:e1: d1:09:fc:02:fc:83:b5:fc:63:18:a4:43:c3:cb:55:6b:6f:12: 27:de:e5:5c:3b:28:9d:3b:ca:f8:21:7a:d6:ab:de:16:c1:27: 91:8c:99:ac:8a:13:21:9f:fb:a5:11:b0:50:0c:57:ad:b7:89: 08:c7:56:de:a9:ff:c9:c8:3e:d7:f3:0f:b0:ff:65:6e:a9:36: 44:d4:1d:bc:85:59:ae:6f:1c:94:b2:d6:e1:f6:fe:7f:2e:cc: c6:ba:ba:74 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUcoleGdJzNFTpkM2x5Rek+nWD7/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTEyMDIwNTUwMTJaFw0yNjEyMDEwNTU1MTJaMDMxMTAvBgNV BAMTKDc4NzY4RDYyMDkxMUU0MkMyNkYwREJFRDhFNDU2RTBEMzZDMjBEMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqHJnuItwii8TzFqy83BjdvE7U 3sH5wf8tiEbYyXh+8LDoYQW7+O0ZQDL2sliTi6Hcc/lZtbxowSafPqXpoe5GqjLO ym3QueN9c7LxJgEhZejixSAS/hpqBQ61rrJn3Qd/4fBbysJEMq3BgAufFBi25e/I X7QFPUoXk5KZoRUhfJflHBJu69d00xzvRjjSE+cRgKT3N64zeSmomeGTWxZTQXet Klj1Y4Id5rOko37iZ6wpWLIAU6DrjwzLqLamO0Qj7zwkstroJMprnCDRpOIjc74u XNKN5Vw1uAsimxv8iU123KFrhekXnph/+lEpEzBcBCCAoDuN4bEJxjDLL4ZLAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUeHaNYgkR5Cwm8NvtjkVuDTbCDTEwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzNzM4MmUzMjMwMzgyZTMx MzYzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzIzMzM2MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACy0KkwDQYJKoZIhvcNAQELBQADggEBAF2rsXiYnvvU7w34lPycbKCJsMwRwwg1 nlnToUFLLWUDrEF9BSEpkouf5jpD7JmC1oNtFuBV5Vg9fNpREFTOI4Ecq2MwyMbT ZxoC9RXCcN6+zj17Ze2JU+oD1YpUbFqN7QKygn/tRnP2b1aiL/1TQJ8JPT3JUh5b 1b4dt9LEr6krl+JC/8SreMvOMYUx1YVTLsr0EW1S1eFFK6oL1HFeGyt/4dEJ/AL8 g7X8YxikQ8PLVWtvEife5Vw7KJ07yvghetar3hbBJ5GMmayKEyGf+6URsFAMV623 iQjHVt6p/8nIPtfzD7D/ZW6pNkTUHbyFWa5vHJSy1uH2/n8uzMa6unQ= -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:12 2025 by rpki-client