This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137352e302f32342d3234203d3e20323033373538.roa File: 3138352e3137322e3137352e302f32342d3234203d3e20323033373538.roa (raw, json) Hash identifier: fCpOXt27A6axDt/4zYpYox2WQxRrqAgVC84e2q5JTIU= Subject key identifier: 24:DC:C1:22:0B:53:44:38:51:22:A3:41:F7:A6:BC:3B:70:91:A5:40 Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Certificate serial: 7EE5D407230522141FB774ACA70421D7E98D4F8B Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137352e302f32342d3234203d3e20323033373538.roa Signing time: Mon 08 Dec 2025 20:55:14 +0000 ROA not before: Mon 08 Dec 2025 20:50:14 +0000 ROA not after: Mon 07 Dec 2026 20:55:14 +0000 asID: 203758 IP address blocks: 185.172.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e5:d4:07:23:05:22:14:1f:b7:74:ac:a7:04:21:d7:e9:8d:4f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Validity Not Before: Dec 8 20:50:14 2025 GMT Not After : Dec 7 20:55:14 2026 GMT Subject: CN=24DCC1220B5344385122A341F7A6BC3B7091A540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0a:8d:5d:4d:f0:63:55:50:93:d4:9f:4e:e3: 86:f9:21:f9:35:b9:c4:6e:ed:b3:e6:4e:89:f2:92: dc:8e:df:8b:18:93:91:2a:02:26:19:c7:c7:91:b7: c4:d4:95:a5:f7:b3:c2:b2:fe:ef:09:74:63:da:16: 5d:e5:b4:33:a9:c9:95:fe:f6:0b:96:69:30:83:7e: 6b:0c:6d:0b:76:bb:2d:00:85:1d:ca:9c:bd:04:17: 52:6b:0e:d0:07:72:bb:d6:3e:d3:b3:59:85:e1:d9: 69:f9:5b:f9:d8:f1:b8:d5:6c:d9:1f:30:70:80:b8: ff:41:a3:4c:b9:da:c4:ee:b9:ca:57:77:96:6b:8d: 38:04:45:69:c4:de:39:1e:6a:09:f8:00:b8:92:33: 3d:1b:39:b9:e0:7e:82:47:22:bf:b0:32:0d:e8:95: 88:fe:08:b1:7e:58:90:ad:5a:49:d6:6c:a3:5e:ef: 49:33:6d:2d:54:4e:7e:b0:4d:3b:7d:aa:37:d3:5c: 41:45:64:92:cf:1d:91:99:4c:5b:af:ef:13:db:35: 7d:a9:57:77:fd:ef:ba:6a:2d:41:2f:a9:95:97:e6: 68:59:cc:f8:e9:1e:13:c6:30:b2:d2:6d:2e:fd:06: 0e:a1:a6:9f:c3:74:e1:06:34:b8:22:7b:aa:14:bc: a7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DC:C1:22:0B:53:44:38:51:22:A3:41:F7:A6:BC:3B:70:91:A5:40 X509v3 Authority Key Identifier: keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137352e302f32342d3234203d3e20323033373538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.175.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:48:d2:36:81:83:d4:2a:8c:b8:89:43:5d:44:58:2b:ad:39: 20:ba:42:b6:45:5a:b9:d8:2d:07:33:02:17:f8:7d:64:93:fd: 9b:51:c5:39:4b:c1:72:81:04:35:9e:ea:f7:98:31:64:be:b5: 39:cd:c9:ec:87:30:b6:20:68:74:bd:a1:4d:d3:cf:86:ad:17: 87:aa:c0:5c:ee:e9:ac:0d:2e:01:c0:e4:14:63:9e:32:0e:6e: 05:3b:8c:b8:1b:3b:73:8f:ec:eb:9b:e4:b8:9a:c4:96:f7:1e: ac:45:80:4d:72:6f:c3:7a:05:6a:12:1c:62:f6:13:38:83:98: f2:aa:9a:98:c8:5d:17:a7:4c:8b:bc:3c:84:47:9b:54:71:ee: 21:aa:ea:ea:63:60:fe:92:27:eb:85:24:41:3a:8b:6e:86:fa: 4e:fa:35:11:31:34:9b:70:93:81:7f:53:28:4a:ef:af:df:3d: f0:fc:4b:31:54:31:2b:8d:3a:36:ed:f4:af:47:3d:21:bc:47: f6:fd:43:7d:e5:ce:e8:fd:33:3d:a8:84:bb:c6:ce:6d:15:66: 27:1f:30:3d:6c:f0:bc:f5:c9:ce:6d:6f:e7:7c:df:34:3a:66: 05:d0:b8:23:c9:23:48:4d:85:b0:be:30:1c:ea:2d:f3:e9:19: 5c:ad:c9:ab -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUfuXUByMFIhQft3SspwQh1+mNT4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3 OWI1ZmQ5MTAeFw0yNTEyMDgyMDUwMTRaFw0yNjEyMDcyMDU1MTRaMDMxMTAvBgNV BAMTKDI0RENDMTIyMEI1MzQ0Mzg1MTIyQTM0MUY3QTZCQzNCNzA5MUE1NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Co1dTfBjVVCT1J9O44b5Ifk1 ucRu7bPmTonyktyO34sYk5EqAiYZx8eRt8TUlaX3s8Ky/u8JdGPaFl3ltDOpyZX+ 9guWaTCDfmsMbQt2uy0AhR3KnL0EF1JrDtAHcrvWPtOzWYXh2Wn5W/nY8bjVbNkf MHCAuP9Bo0y52sTuucpXd5ZrjTgERWnE3jkeagn4ALiSMz0bObngfoJHIr+wMg3o lYj+CLF+WJCtWknWbKNe70kzbS1UTn6wTTt9qjfTXEFFZJLPHZGZTFuv7xPbNX2p V3f977pqLUEvqZWX5mhZzPjpHhPGMLLSbS79Bg6hpp/DdOEGNLgie6oUvKdtAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUJNzBIgtTRDhRIqNB96a8O3CRpUAwHwYDVR0j BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5 ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t MV9aRS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzEzODM1MmUzMTM3MzIyZTMx MzczNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMzM3MzUzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALmsrzANBgkqhkiG9w0BAQsFAAOCAQEALkjSNoGD1CqMuIlDXURYK605ILpC tkVaudgtBzMCF/h9ZJP9m1HFOUvBcoEENZ7q95gxZL61Oc3J7IcwtiBodL2hTdPP hq0Xh6rAXO7prA0uAcDkFGOeMg5uBTuMuBs7c4/s65vkuJrElvcerEWATXJvw3oF ahIcYvYTOIOY8qqamMhdF6dMi7w8hEebVHHuIarq6mNg/pIn64UkQTqLbob6Tvo1 ETE0m3CTgX9TKErvr9898PxLMVQxK406Nu30r0c9IbxH9v1DfeXO6P0zPaiEu8bO bRVmJx8wPWzwvPXJzm1v53zfNDpmBdC4I8kjSE2FsL4wHOot8+kZXK3Jqw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:49:16 2025 by rpki-client