This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137362e302f32342d3234203d3e20313336373837.roa File: 3137362e35332e3137362e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: WSQZtrF363Dhcuwix1TiY9o9z71X5MsQPlfn+2cN1EM= Subject key identifier: 8B:27:EE:90:D3:DE:69:AF:1E:FA:38:37:93:27:8D:06:B3:B3:AC:43 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 724636E5D7ED93CD039CA8EA35C11079713EA3C8 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137362e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 19:49:56 +0000 ROA not before: Fri 28 Nov 2025 19:44:56 +0000 ROA not after: Fri 27 Nov 2026 19:49:56 +0000 asID: 136787 IP address blocks: 176.53.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:46:36:e5:d7:ed:93:cd:03:9c:a8:ea:35:c1:10:79:71:3e:a3:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 28 19:44:56 2025 GMT Not After : Nov 27 19:49:56 2026 GMT Subject: CN=8B27EE90D3DE69AF1EFA383793278D06B3B3AC43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5e:c2:37:33:9b:35:ef:64:34:d4:67:43:ef: a9:6d:22:02:d1:37:e0:7d:d0:84:3a:81:7b:9e:ec: 27:a5:b4:9a:8b:f7:d5:88:cc:ff:9a:39:39:2c:d5: 5a:43:69:ea:8a:a7:2c:74:12:c7:f2:8b:c0:b7:ba: 19:d1:fb:aa:4e:13:a2:18:f9:07:8c:db:ba:39:b9: ca:9f:e6:2f:c6:4b:a0:a4:31:d0:d7:e7:b9:b9:f0: d0:a8:25:85:60:6a:e2:23:43:4a:d2:f3:e6:72:e8: 44:f5:0a:08:04:9d:16:bb:0b:40:32:ba:9e:38:84: 38:dc:18:73:ec:a0:ee:d6:54:a2:7f:dc:ed:95:13: 99:07:d3:f2:d8:f9:95:6b:e6:29:d6:f6:4e:b3:2f: 78:a0:80:90:f2:dd:19:00:23:e9:60:9d:1b:c0:9b: 37:5e:00:d6:42:91:bb:33:3a:14:6e:7b:87:f8:85: 23:4f:7f:19:18:a1:63:83:1b:20:0e:7e:4e:50:1d: 01:e2:1a:ca:14:57:7c:3a:b3:28:5d:e2:7c:76:b4: a9:52:1d:9a:88:51:38:4e:99:df:73:3b:9f:c4:c7: 80:b4:d3:05:f5:ae:d9:4b:30:60:4d:4b:e1:f6:ba: a0:ea:5f:d4:9c:bd:12:a4:8e:bf:e8:c3:7f:0f:8f: 33:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:27:EE:90:D3:DE:69:AF:1E:FA:38:37:93:27:8D:06:B3:B3:AC:43 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137362e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.53.176.0/24 Signature Algorithm: sha256WithRSAEncryption 80:65:0b:f9:2f:96:18:ef:9f:df:33:1b:7b:18:df:4e:63:45: 54:1a:4f:80:93:da:c7:f2:f8:37:66:c0:c0:14:e3:c4:18:d0: 64:66:69:55:67:30:de:0f:d5:dc:9c:7e:5d:48:12:35:f2:8d: 49:a0:3d:ab:d5:75:77:55:f3:50:28:8b:5c:04:02:5f:4a:5d: b1:66:f0:f1:8f:07:04:c0:8e:01:15:57:8b:df:41:ab:df:ee: a0:e2:96:76:7d:a5:af:59:f7:a4:97:ea:89:ba:8a:b4:c3:58: 9b:23:0d:13:8a:70:e6:9c:c8:a1:5f:60:bc:3b:2b:c7:14:fc: 9c:0e:75:99:e1:c1:51:06:fb:ef:b6:2b:8c:ad:58:b1:c6:53: 00:fc:4e:b4:eb:9e:2a:df:f7:c6:9b:4a:14:d1:61:de:cd:2e: 16:66:f6:47:2e:fd:ab:7c:25:ea:32:63:50:03:51:cb:8a:ee: ca:ab:d8:de:ff:9a:e8:5b:03:6c:13:2f:be:56:a1:84:a9:d9: 2e:11:d0:f1:7e:ce:82:08:ad:4a:70:8f:12:4c:5b:5c:a7:33: f5:b1:47:33:8a:61:ac:4c:84:5d:a2:13:c9:0a:de:0a:1b:af: 5c:d6:9b:0a:69:e0:17:6c:fc:c1:02:a2:bc:68:23:60:0e:f9: eb:61:c0:13 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUckY25dftk80DnKjqNcEQeXE+o8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjgxOTQ0NTZaFw0yNjExMjcxOTQ5NTZaMDMxMTAvBgNV BAMTKDhCMjdFRTkwRDNERTY5QUYxRUZBMzgzNzkzMjc4RDA2QjNCM0FDNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOXsI3M5s172Q01GdD76ltIgLR N+B90IQ6gXue7CeltJqL99WIzP+aOTks1VpDaeqKpyx0Esfyi8C3uhnR+6pOE6IY +QeM27o5ucqf5i/GS6CkMdDX57m58NCoJYVgauIjQ0rS8+Zy6ET1CggEnRa7C0Ay up44hDjcGHPsoO7WVKJ/3O2VE5kH0/LY+ZVr5inW9k6zL3iggJDy3RkAI+lgnRvA mzdeANZCkbszOhRue4f4hSNPfxkYoWODGyAOfk5QHQHiGsoUV3w6syhd4nx2tKlS HZqIUThOmd9zO5/Ex4C00wX1rtlLMGBNS+H2uqDqX9ScvRKkjr/ow38PjzOjAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUiyfukNPeaa8e+jg3kyeNBrOzrEMwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNzM2MmUzNTMzMmUzMTM3 MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACwNbAwDQYJKoZIhvcNAQELBQADggEBAIBlC/kvlhjvn98zG3sY305jRVQaT4CT 2sfy+DdmwMAU48QY0GRmaVVnMN4P1dycfl1IEjXyjUmgPavVdXdV81Aoi1wEAl9K XbFm8PGPBwTAjgEVV4vfQavf7qDilnZ9pa9Z96SX6om6irTDWJsjDROKcOacyKFf YLw7K8cU/JwOdZnhwVEG+++2K4ytWLHGUwD8TrTrnirf98abShTRYd7NLhZm9kcu /at8JeoyY1ADUcuK7sqr2N7/muhbA2wTL75WoYSp2S4R0PF+zoIIrUpwjxJMW1yn M/WxRzOKYaxMhF2iE8kK3gobr1zWmwpp4Bds/MECorxoI2AO+ethwBM= -----END CERTIFICATE-----Generated at Sat Dec 6 13:00:56 2025 by rpki-client