This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa File: 3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa (raw, json) Hash identifier: wHwcwoFIrN2jLP/C8OzdoSzmdobOAFysYNlbWgxelzw= Subject key identifier: 8E:FB:FE:19:4D:CB:CE:20:22:FD:78:C8:CD:C8:2D:0F:A7:28:21:AC Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 1B905AF05A42559F37C5EF2F508EC84946978B1B Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa Signing time: Tue 20 Jan 2026 17:55:34 +0000 ROA not before: Tue 20 Jan 2026 17:50:34 +0000 ROA not after: Tue 19 Jan 2027 17:55:34 +0000 asID: 151872 IP address blocks: 178.248.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:90:5a:f0:5a:42:55:9f:37:c5:ef:2f:50:8e:c8:49:46:97:8b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Jan 20 17:50:34 2026 GMT Not After : Jan 19 17:55:34 2027 GMT Subject: CN=8EFBFE194DCBCE2022FD78C8CDC82D0FA72821AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:7a:ad:78:f1:81:47:ff:1d:49:b3:da:98:40: 48:82:c5:15:1f:ac:45:79:4c:db:99:f8:bf:21:5b: 15:de:99:29:09:b8:dc:01:32:2d:b8:b1:ba:56:ff: 8d:f9:85:67:00:27:c8:50:f6:0d:39:95:0c:ce:d0: 23:d7:33:35:69:8f:d5:63:85:ff:b3:b3:fc:ad:c7: 91:22:6a:9c:55:9e:40:b6:54:12:9b:f6:fa:9d:66: 56:e7:f8:c4:3d:28:a9:31:f8:47:4e:bb:ca:07:3c: c0:58:5f:27:d8:40:93:a5:66:7b:ea:63:9c:63:8c: 6b:20:f4:dc:58:b1:b8:81:d1:56:13:92:b8:ff:f2: 16:a4:43:e3:9d:46:25:bd:6d:c8:95:8d:31:74:6a: 7f:47:97:31:3b:f8:85:90:09:c7:03:81:f2:e9:59: 8c:e2:88:76:e2:b4:5e:5c:9e:39:a2:98:a5:d6:cb: 21:49:e6:be:af:5b:20:95:55:0b:e4:d3:3a:1b:1b: c5:19:43:b3:b3:41:0e:2e:32:08:dc:91:8c:e6:3e: 91:b2:4c:8c:1b:b5:bd:a0:ca:14:1b:d5:a1:6b:85: 5f:17:4d:9c:04:82:60:ef:11:89:48:c1:30:98:14: 26:03:84:c0:5a:21:44:8d:6a:d9:42:6d:5a:a6:b0: 05:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FB:FE:19:4D:CB:CE:20:22:FD:78:C8:CD:C8:2D:0F:A7:28:21:AC X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.248.72.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:26:1e:e1:4c:d1:45:2a:f2:71:e2:35:ab:02:79:95:6a:cd: d7:36:d2:e3:12:68:74:e4:f7:4a:f6:69:b9:db:ed:6f:70:a4: cc:18:70:49:c6:ce:a1:a6:2c:02:5f:ed:3e:de:3b:24:8c:05: 70:0f:69:71:e6:92:15:18:04:1c:d0:f5:29:7f:33:28:6c:13: 49:bf:3c:35:78:ec:d7:8d:ee:68:c1:0b:3f:18:ce:db:31:36: 9c:37:c4:c3:ae:19:ab:d4:8b:22:08:ed:87:83:17:cb:d6:13: 7b:f9:ea:e6:0c:f4:31:55:2c:94:b5:21:45:62:8e:89:9a:dd: 39:80:88:47:9b:0b:fb:16:20:69:0b:ad:f8:9a:d2:6a:f9:78: 12:87:6f:7a:c1:39:80:2c:06:f6:9a:59:82:a0:e7:5c:65:8b: e2:40:9d:73:fb:a6:88:23:64:08:cc:5a:42:20:72:11:29:b1: 9f:88:1b:16:94:04:bb:32:c9:f7:46:0d:33:01:6e:66:74:d1: 64:aa:b1:ad:c4:89:2e:ea:7d:de:08:62:3d:b4:f2:ed:d7:67: 7c:f9:8a:69:6f:a1:0b:83:c6:8d:b9:17:70:5d:7e:9e:94:a4: 33:52:be:f7:ba:14:91:e8:a9:cc:6d:21:7c:46:31:5d:77:b4: 5a:58:1f:ed -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUG5Ba8FpCVZ83xe8vUI7ISUaXixswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjAxMjAxNzUwMzRaFw0yNzAxMTkxNzU1MzRaMDMxMTAvBgNV BAMTKDhFRkJGRTE5NERDQkNFMjAyMkZENzhDOENEQzgyRDBGQTcyODIxQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1eq148YFH/x1Js9qYQEiCxRUf rEV5TNuZ+L8hWxXemSkJuNwBMi24sbpW/435hWcAJ8hQ9g05lQzO0CPXMzVpj9Vj hf+zs/ytx5EiapxVnkC2VBKb9vqdZlbn+MQ9KKkx+EdOu8oHPMBYXyfYQJOlZnvq Y5xjjGsg9NxYsbiB0VYTkrj/8hakQ+OdRiW9bciVjTF0an9HlzE7+IWQCccDgfLp WYziiHbitF5cnjmimKXWyyFJ5r6vWyCVVQvk0zobG8UZQ7OzQQ4uMgjckYzmPpGy TIwbtb2gyhQb1aFrhV8XTZwEgmDvEYlIwTCYFCYDhMBaIUSNatlCbVqmsAXNAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUjvv+GU3LziAi/XjIzcgtD6coIawwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWMxNDMzODct ZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUxZTRhLzAvMzEzNzM4MmUzMjM0MzgyZTM3 MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzODM3MzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACy+EgwDQYJKoZIhvcNAQELBQADggEBAJsmHuFM0UUq8nHiNasCeZVqzdc20uMS aHTk90r2abnb7W9wpMwYcEnGzqGmLAJf7T7eOySMBXAPaXHmkhUYBBzQ9Sl/Myhs E0m/PDV47NeN7mjBCz8YztsxNpw3xMOuGavUiyII7YeDF8vWE3v56uYM9DFVLJS1 IUVijoma3TmAiEebC/sWIGkLrfia0mr5eBKHb3rBOYAsBvaaWYKg51xli+JAnXP7 pogjZAjMWkIgchEpsZ+IGxaUBLsyyfdGDTMBbmZ00WSqsa3EiS7qfd4IYj208u3X Z3z5imlvoQuDxo25F3Bdfp6UpDNSvve6FJHoqcxtIXxGMV13tFpYH+0= -----END CERTIFICATE-----Generated at Sun Jan 25 16:31:46 2026 by rpki-client