This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138362e302f32342d3234203d3e203437323633.roa File: 3137382e3230382e3138362e302f32342d3234203d3e203437323633.roa (raw, json) Hash identifier: 9XL5z/jrL8furif/j9nQ8NiKNV1HfN3Kiu+v+bDN5Ig= Subject key identifier: E9:D4:D5:41:77:4C:A0:EB:EA:54:0D:44:7B:0E:2B:69:F4:86:EC:27 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 1243A232910CEA6D294BD4F9B2D64A8C49F4C245 Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138362e302f32342d3234203d3e203437323633.roa Signing time: Sun 28 Dec 2025 12:55:32 +0000 ROA not before: Sun 28 Dec 2025 12:50:32 +0000 ROA not after: Sun 27 Dec 2026 12:55:32 +0000 asID: 47263 IP address blocks: 178.208.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:43:a2:32:91:0c:ea:6d:29:4b:d4:f9:b2:d6:4a:8c:49:f4:c2:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Dec 28 12:50:32 2025 GMT Not After : Dec 27 12:55:32 2026 GMT Subject: CN=E9D4D541774CA0EBEA540D447B0E2B69F486EC27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:05:56:7f:ae:f8:40:4f:2c:cf:08:66:ee:3d: 28:19:89:ff:f4:7b:b6:57:82:15:f8:1a:29:f1:6d: 38:d0:66:85:71:ab:5d:3d:09:b9:b9:6f:94:f8:5a: 3d:c8:d5:95:86:bc:25:0e:ea:69:da:13:a9:bb:59: 77:7d:61:15:99:e9:08:68:52:b2:96:10:bd:09:72: 5e:62:ec:d1:c4:be:39:82:39:e8:8f:e3:04:00:0d: 9d:3f:4a:bc:f6:98:6a:46:f2:3e:9e:5a:f2:70:60: 81:58:6a:1b:37:5b:42:22:a2:fd:d7:79:0a:bd:3f: cc:e1:f8:c6:9f:df:c2:d9:05:d5:e3:3a:fe:75:d2: fb:a5:e0:ca:c8:de:44:80:f6:6c:a9:dd:b1:b9:2b: c1:bc:77:76:44:e3:5c:f3:76:4c:db:02:a4:8f:f1: 51:ed:91:98:cc:2e:35:78:2e:bb:41:38:fe:89:23: c2:a4:36:98:fd:76:aa:af:e9:74:5b:c9:65:bd:cd: 59:59:11:fc:e6:d0:aa:53:21:c4:6c:19:48:82:d5: b1:d8:57:c9:e4:f8:6b:48:3b:ad:1b:6c:aa:47:86: 2f:5f:f6:fc:05:68:14:64:73:b0:4d:07:f8:86:8b: 07:81:20:d5:c5:e3:01:13:91:0c:c9:d5:ae:33:c6: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D4:D5:41:77:4C:A0:EB:EA:54:0D:44:7B:0E:2B:69:F4:86:EC:27 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138362e302f32342d3234203d3e203437323633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.208.186.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:3d:c6:60:b6:20:a3:1d:d8:4c:ea:74:cb:30:e0:3f:a4:cc: 3a:8a:26:33:d0:57:5e:35:d5:58:59:17:c5:92:54:e1:ec:d5: 06:10:10:92:0c:08:1e:6e:09:d1:26:bd:19:77:f7:06:85:07: b5:3b:5c:ec:75:43:b5:c2:ef:21:6f:fc:a5:95:de:54:01:2c: 4f:02:d6:5c:3d:71:93:84:2f:93:c4:43:4e:24:ed:3c:2d:7d: 6a:ce:12:22:9b:d3:3b:1a:06:bf:7d:40:bf:8e:35:6e:24:1f: 54:58:d8:71:1d:80:8d:af:f6:70:da:bd:57:e3:b3:c7:99:14: 97:ce:53:bd:c3:a4:56:95:fb:14:bc:d5:5d:08:c2:62:50:58: c7:86:d8:ca:6a:8a:27:fa:0f:ce:eb:48:82:06:b3:dc:46:54: 34:60:b3:e4:98:df:cb:13:10:29:62:d7:44:26:a6:50:63:e1: 6c:ea:e7:73:f6:4d:6f:5a:da:1d:a4:78:66:bb:4d:7a:7e:e2: a0:6b:98:5c:14:83:07:b2:d6:97:84:73:a0:64:e5:a9:ac:d5: 5f:ce:68:79:3d:5e:c9:dd:2c:23:2f:91:b5:05:82:7e:29:7e: a7:60:91:92:9d:7a:0e:a9:a6:b6:4b:08:c7:40:85:d3:de:df: b9:50:66:01 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUEkOiMpEM6m0pS9T5stZKjEn0wkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTEyMjgxMjUwMzJaFw0yNjEyMjcxMjU1MzJaMDMxMTAvBgNV BAMTKEU5RDRENTQxNzc0Q0EwRUJFQTU0MEQ0NDdCMEUyQjY5RjQ4NkVDMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BVZ/rvhATyzPCGbuPSgZif/0 e7ZXghX4GinxbTjQZoVxq109Cbm5b5T4Wj3I1ZWGvCUO6mnaE6m7WXd9YRWZ6Qho UrKWEL0Jcl5i7NHEvjmCOeiP4wQADZ0/Srz2mGpG8j6eWvJwYIFYahs3W0Iiov3X eQq9P8zh+Maf38LZBdXjOv510vul4MrI3kSA9myp3bG5K8G8d3ZE41zzdkzbAqSP 8VHtkZjMLjV4LrtBOP6JI8KkNpj9dqqv6XRbyWW9zVlZEfzm0KpTIcRsGUiC1bHY V8nk+GtIO60bbKpHhi9f9vwFaBRkc7BNB/iGiweBINXF4wETkQzJ1a4zxtfxAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU6dTVQXdMoOvqVA1Eew4rafSG7CcwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzNzM4MmUzMjMwMzgyZTMx MzgzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzczMjM2MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACy0LowDQYJKoZIhvcNAQELBQADggEBAJo9xmC2IKMd2EzqdMsw4D+kzDqKJjPQ V1411VhZF8WSVOHs1QYQEJIMCB5uCdEmvRl39waFB7U7XOx1Q7XC7yFv/KWV3lQB LE8C1lw9cZOEL5PEQ04k7TwtfWrOEiKb0zsaBr99QL+ONW4kH1RY2HEdgI2v9nDa vVfjs8eZFJfOU73DpFaV+xS81V0IwmJQWMeG2Mpqiif6D87rSIIGs9xGVDRgs+SY 38sTECli10QmplBj4Wzq53P2TW9a2h2keGa7TXp+4qBrmFwUgwey1peEc6Bk5ams 1V/OaHk9XsndLCMvkbUFgn4pfqdgkZKdeg6pprZLCMdAhdPe37lQZgE= -----END CERTIFICATE-----Generated at Sun Jan 25 14:13:54 2026 by rpki-client