This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa File: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (raw, json) Hash identifier: 32SDZVJ37JJ5kdrs24paGjp5boRcUJ2fYJyMfyL4cw4= Subject key identifier: 78:46:96:81:36:44:4F:FF:54:10:9D:23:DF:93:18:F3:72:BB:9A:42 Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 09D6E698D5F42F77A693CE49CAF52297BDEC6A Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa Signing time: Tue 20 Jan 2026 17:55:34 +0000 ROA not before: Tue 20 Jan 2026 17:50:34 +0000 ROA not after: Tue 19 Jan 2027 17:55:34 +0000 asID: 199058 IP address blocks: 178.248.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d6:e6:98:d5:f4:2f:77:a6:93:ce:49:ca:f5:22:97:bd:ec:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Jan 20 17:50:34 2026 GMT Not After : Jan 19 17:55:34 2027 GMT Subject: CN=7846968136444FFF54109D23DF9318F372BB9A42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dd:e9:a3:e1:51:59:0e:37:4e:90:8e:d3:8e: 17:e3:09:3f:85:8f:9b:cb:89:f6:62:5c:12:11:ad: 05:46:4b:5b:96:91:ad:47:87:13:3b:3c:54:20:c0: 9c:1e:2f:b5:04:cc:00:e3:c3:8c:53:89:9b:cf:84: d5:91:a9:b0:53:ad:40:63:e2:50:8d:57:32:65:58: 77:40:9a:a1:1e:47:71:8f:5c:1c:b5:2c:67:59:04: b5:c2:ab:37:7c:37:8c:14:cb:8b:a3:b6:f2:cb:8d: 17:9d:64:8a:7f:60:32:37:f0:39:ed:74:1f:2e:59: 21:f1:d7:6e:0b:e8:ad:a9:49:5e:fc:16:cc:9a:62: 47:0a:f7:30:85:c8:41:ba:e4:80:09:3e:03:e1:8a: a0:53:fb:07:84:74:32:b2:95:4a:8e:c5:a4:08:fb: b4:c6:5e:f0:82:e9:22:47:00:4c:cb:92:d8:0a:33: 9e:8a:1b:d3:3e:1e:ac:a4:22:88:6b:5f:1a:ff:3b: cb:a4:7e:96:f4:21:3f:ad:20:bb:2a:fe:bc:4e:e1: 83:fb:e1:c6:6b:e1:4a:e0:b8:1e:41:7a:7a:b4:6d: 23:f8:3f:75:3c:11:09:a9:47:e7:8e:3e:f6:7f:ba: 1d:d5:91:3a:c8:47:7f:ac:92:5d:33:36:8b:23:7e: f3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:46:96:81:36:44:4F:FF:54:10:9D:23:DF:93:18:F3:72:BB:9A:42 X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.248.75.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:91:e0:2c:dc:e6:90:11:0e:f5:7f:2b:bd:1c:dd:f6:ba:48: 0a:0e:45:62:83:c4:8e:c8:1c:c4:5c:da:91:fc:79:b0:ec:5b: 56:ba:1c:ec:9a:27:b7:b7:0e:6c:20:bd:9e:35:d1:07:60:25: 65:dd:15:42:8b:a3:53:42:c4:4a:4a:e4:00:ac:0e:77:96:f3: e7:73:a0:06:6b:a5:c3:f6:7d:1c:11:6b:e4:8c:26:9e:40:65: 9c:c6:35:3e:2e:05:97:f1:5e:d9:76:94:c4:74:4c:d2:17:95: c5:c1:d2:72:f4:7d:4d:69:a5:75:50:2b:18:72:48:d2:a2:74: 8f:9a:8a:33:dc:cc:12:1a:20:12:57:0b:3f:28:a5:7a:f8:44: a0:a5:24:01:9d:f7:14:9b:ef:70:a3:c7:e8:09:41:53:84:3e: ec:55:49:22:29:9f:ca:7c:39:83:16:67:47:c1:83:50:1d:e7: 0d:e0:f3:52:c3:ee:d9:a9:dc:c4:fc:26:45:11:3f:dc:e9:4e: 0a:e8:6a:c5:aa:fe:6a:ec:5c:94:2d:bc:5d:e6:cf:ea:34:a1: 7b:1a:67:f5:02:53:f7:bc:aa:c8:96:49:af:8c:fa:fa:9d:b3: 53:18:d9:a2:8c:6c:90:f3:b6:f9:a4:1a:89:7e:1c:14:36:08: 58:5e:26:7a -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgITCdbmmNX0L3emk85JyvUil73sajANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhiZTBiYjc4ODY5Y2RiMmFkMGM5NzFhNmE4NThhMzAyMTNl YWVjNDdkMB4XDTI2MDEyMDE3NTAzNFoXDTI3MDExOTE3NTUzNFowMzExMC8GA1UE AxMoNzg0Njk2ODEzNjQ0NEZGRjU0MTA5RDIzREY5MzE4RjM3MkJCOUE0MjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALDd6aPhUVkON06QjtOOF+MJP4WP m8uJ9mJcEhGtBUZLW5aRrUeHEzs8VCDAnB4vtQTMAOPDjFOJm8+E1ZGpsFOtQGPi UI1XMmVYd0CaoR5HcY9cHLUsZ1kEtcKrN3w3jBTLi6O28suNF51kin9gMjfwOe10 Hy5ZIfHXbgvoralJXvwWzJpiRwr3MIXIQbrkgAk+A+GKoFP7B4R0MrKVSo7FpAj7 tMZe8ILpIkcATMuS2Aoznoob0z4erKQiiGtfGv87y6R+lvQhP60guyr+vE7hg/vh xmvhSuC4HkF6erRtI/g/dTwRCalH544+9n+6HdWROshHf6ySXTM2iyN+81sCAwEA AaOCAj8wggI7MB0GA1UdDgQWBBR4RpaBNkRP/1QQnSPfkxjzcruaQjAfBgNVHSME GDAWgBS+C7eIac2yrQyXGmqFijAhPq7EfTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1mMDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFl NGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5NzFBNkE4NThBMzAyMTNFQUVDNDdELmNy bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvdmd1M2lHbk5zcTBNbHhwcWhZb3dJVDZ1 eEgwLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwGCCsGAQUFBzALhoGPcnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC8zMTM3MzgyZTMyMzQzODJlMzcz NTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzOTMwMzUzOC5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ALL4SzANBgkqhkiG9w0BAQsFAAOCAQEAe5HgLNzmkBEO9X8rvRzd9rpICg5FYoPE jsgcxFzakfx5sOxbVroc7Jont7cObCC9njXRB2AlZd0VQoujU0LESkrkAKwOd5bz 53OgBmulw/Z9HBFr5IwmnkBlnMY1Pi4Fl/Fe2XaUxHRM0heVxcHScvR9TWmldVAr GHJI0qJ0j5qKM9zMEhogElcLPyilevhEoKUkAZ33FJvvcKPH6AlBU4Q+7FVJIimf ynw5gxZnR8GDUB3nDeDzUsPu2ancxPwmRRE/3OlOCuhqxar+auxclC28XebP6jSh expn9QJT97yqyJZJr4z6+p2zUxjZooxskPO2+aQaiX4cFDYIWF4meg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:09:36 2026 by rpki-client