This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138352e302f32342d3234203d3e203631333137.roa File: 3137382e3230382e3138352e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: dfNTEV3Le7IkJvOu0RPBOgN2MCEGoJppHkqUrA/fKgg= Subject key identifier: 33:DB:1D:67:F2:02:E2:88:1D:D1:D2:FB:84:58:13:36:4E:C7:03:77 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 0D06FFB7D94F0FB4DC4BAC38817FA11A7E15410F Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138352e302f32342d3234203d3e203631333137.roa Signing time: Tue 02 Dec 2025 05:55:12 +0000 ROA not before: Tue 02 Dec 2025 05:50:12 +0000 ROA not after: Tue 01 Dec 2026 05:55:12 +0000 asID: 61317 IP address blocks: 178.208.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:06:ff:b7:d9:4f:0f:b4:dc:4b:ac:38:81:7f:a1:1a:7e:15:41:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Dec 2 05:50:12 2025 GMT Not After : Dec 1 05:55:12 2026 GMT Subject: CN=33DB1D67F202E2881DD1D2FB845813364EC70377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:93:6e:ef:d6:8e:f6:66:08:d6:61:54:dc:cb: 63:fe:06:a2:71:13:60:ab:3e:c5:65:76:8b:36:63: 7a:74:99:cf:be:f4:08:09:14:2e:d3:76:52:8d:7e: 0f:e2:85:e8:ff:be:97:35:cb:9b:1e:da:6e:74:93: e4:31:40:da:6d:bd:3a:2f:c2:9c:29:e2:6f:64:80: bf:58:23:14:94:5c:66:13:d3:3f:67:d6:f4:63:f5: ef:15:04:6f:0c:b9:ac:a0:f3:e4:6b:84:bb:20:2b: 8b:c7:07:3c:3b:5f:63:0e:65:eb:0d:af:2a:d6:07: 0c:cd:35:bf:ef:d4:d4:70:af:9a:44:5e:4c:3d:71: 53:b7:91:c2:43:87:6f:dd:5a:44:11:41:08:3c:d2: 83:2b:2d:04:5a:64:c1:b4:7b:82:2d:5e:63:c9:9f: 12:08:0c:94:2f:5e:90:49:87:52:f9:6d:75:61:06: ad:bc:53:85:2a:4a:74:24:0d:82:4a:db:c0:e6:3b: 50:da:cc:32:73:e5:07:ec:7f:64:ee:58:c0:6a:13: 48:10:d8:c7:6a:77:1e:28:e3:b8:bf:8d:2a:d3:1f: c0:37:40:f2:ff:f2:16:fc:70:47:f2:14:b5:54:6f: 9f:38:bf:36:12:88:d2:95:c8:06:66:2f:3e:29:72: 81:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DB:1D:67:F2:02:E2:88:1D:D1:D2:FB:84:58:13:36:4E:C7:03:77 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138352e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.208.185.0/24 Signature Algorithm: sha256WithRSAEncryption a2:a4:61:33:48:82:00:74:06:64:a4:9a:ee:4b:64:eb:59:d5: 5c:4e:1b:56:b0:78:08:22:79:56:01:ac:a9:19:a2:f4:b0:e2: 08:be:ca:90:af:6e:f6:b0:1b:65:d6:2e:3e:35:98:75:a4:32: c8:b8:2b:bc:b9:94:a8:45:3a:ed:0b:9d:f3:fb:31:f6:9f:8b: 7c:43:d8:d7:07:7c:c9:f0:6d:27:df:04:5a:1d:b8:94:0e:c9: ac:9a:4e:8a:28:da:65:8d:b7:ed:35:ed:e6:b1:e7:e4:5c:4e: 8e:5f:03:cd:de:3e:36:9b:83:1e:52:2f:1c:a5:cd:b5:07:86: 38:03:b4:ce:7e:37:02:5b:87:74:44:25:f6:0d:39:ff:22:aa: 0b:76:5a:f1:5e:11:bf:aa:dc:a6:4d:70:24:d6:d5:52:91:98: cb:19:8a:9b:51:dd:94:1b:b2:e7:5c:bd:8c:cb:38:b5:c0:8e: c9:b1:48:13:99:2b:56:3f:e7:e1:1f:15:bd:eb:94:fc:57:71: 03:de:d4:4a:60:44:9a:fe:b6:80:a6:34:bf:eb:08:73:d3:a5: da:e4:fb:1b:a0:7b:14:7f:8e:f0:5f:88:91:15:d7:1b:88:29: 45:24:ba:76:0b:a1:ad:83:4e:bc:2e:71:c6:22:ff:73:be:b1: a7:09:f8:2c -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUDQb/t9lPD7TcS6w4gX+hGn4VQQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTEyMDIwNTUwMTJaFw0yNjEyMDEwNTU1MTJaMDMxMTAvBgNV BAMTKDMzREIxRDY3RjIwMkUyODgxREQxRDJGQjg0NTgxMzM2NEVDNzAzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXk27v1o72ZgjWYVTcy2P+BqJx E2CrPsVldos2Y3p0mc++9AgJFC7TdlKNfg/ihej/vpc1y5se2m50k+QxQNptvTov wpwp4m9kgL9YIxSUXGYT0z9n1vRj9e8VBG8Muayg8+RrhLsgK4vHBzw7X2MOZesN ryrWBwzNNb/v1NRwr5pEXkw9cVO3kcJDh2/dWkQRQQg80oMrLQRaZMG0e4ItXmPJ nxIIDJQvXpBJh1L5bXVhBq28U4UqSnQkDYJK28DmO1DazDJz5Qfsf2TuWMBqE0gQ 2Mdqdx4o47i/jSrTH8A3QPL/8hb8cEfyFLVUb584vzYSiNKVyAZmLz4pcoGPAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUM9sdZ/IC4ogd0dL7hFgTNk7HA3cwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzNzM4MmUzMjMwMzgyZTMx MzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACy0LkwDQYJKoZIhvcNAQELBQADggEBAKKkYTNIggB0BmSkmu5LZOtZ1VxOG1aw eAgieVYBrKkZovSw4gi+ypCvbvawG2XWLj41mHWkMsi4K7y5lKhFOu0LnfP7Mfaf i3xD2NcHfMnwbSffBFoduJQOyayaTooo2mWNt+017eax5+RcTo5fA83ePjabgx5S LxylzbUHhjgDtM5+NwJbh3REJfYNOf8iqgt2WvFeEb+q3KZNcCTW1VKRmMsZiptR 3ZQbsudcvYzLOLXAjsmxSBOZK1Y/5+EfFb3rlPxXcQPe1EpgRJr+toCmNL/rCHPT pdrk+xugexR/jvBfiJEV1xuIKUUkunYLoa2DTrwuccYi/3O+sacJ+Cw= -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:20 2025 by rpki-client