This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e203231383539.roa File: 37382e33312e3234382e302f32342d3234203d3e203231383539.roa (raw, json) Hash identifier: o1tPrdjZNeFxXXvcmN8LhBqa2QXoU7wYnvWHDeFyeG8= Subject key identifier: 13:D4:5C:EF:F0:98:3B:D3:D6:39:AF:29:8D:97:1E:84:D2:7D:A5:A7 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 01347BB17F72B06E6F0FC255AEE6487C3935BC0C Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e203231383539.roa Signing time: Thu 11 Dec 2025 08:42:19 +0000 ROA not before: Thu 11 Dec 2025 08:37:19 +0000 ROA not after: Thu 10 Dec 2026 08:42:19 +0000 asID: 21859 IP address blocks: 78.31.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:34:7b:b1:7f:72:b0:6e:6f:0f:c2:55:ae:e6:48:7c:39:35:bc:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 11 08:37:19 2025 GMT Not After : Dec 10 08:42:19 2026 GMT Subject: CN=13D45CEFF0983BD3D639AF298D971E84D27DA5A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f2:72:37:d4:c7:5b:ac:d4:c4:b7:90:83:03: 81:fe:19:5e:ed:c2:24:78:9d:a2:ee:86:93:98:97: c3:3f:3d:8e:ef:b2:a4:78:82:44:d6:68:c1:df:dc: e0:30:b9:74:6c:2f:08:3e:b5:ba:a0:ce:80:b3:bd: 53:03:25:29:2f:0f:b2:d0:3a:b2:c4:ae:9e:d5:cf: 52:4a:a5:37:61:0a:d8:68:09:ba:aa:de:67:bf:47: 75:4b:8e:ff:17:91:e2:86:ff:58:80:98:c5:9d:3d: 90:6b:55:f3:03:a3:9d:8c:a4:f9:e5:7f:75:12:7f: 43:ef:73:4f:07:de:2d:bc:ba:4d:8f:da:fe:db:69: c1:ae:a7:56:5e:2f:3f:b4:90:2e:13:47:ef:09:e7: 3b:8c:22:e7:9c:b3:00:79:49:70:fd:49:83:50:6e: 31:6f:e8:47:1a:29:fb:b4:45:8b:cc:a4:63:d2:f9: e5:1a:35:cf:87:0d:93:e9:d6:26:49:b7:42:9c:a6: 9d:4d:87:84:e6:63:1f:0c:58:c8:fa:4c:81:5a:44: e6:20:74:01:f1:22:20:73:62:7a:16:ce:b6:2a:9d: 47:64:50:c6:34:e6:fa:c1:bc:69:36:80:fb:81:86: e8:f2:21:10:6b:b7:7b:e7:11:69:f8:5a:af:e6:97: ed:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D4:5C:EF:F0:98:3B:D3:D6:39:AF:29:8D:97:1E:84:D2:7D:A5:A7 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e203231383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.31.248.0/24 Signature Algorithm: sha256WithRSAEncryption 75:2e:31:cd:0f:43:26:c0:74:d0:5a:a1:37:8d:35:61:d5:a1: 89:01:56:83:3f:4e:c9:f7:7f:22:d2:23:92:ba:21:ae:f6:91: e4:63:ba:d9:a8:38:15:c8:a1:f2:87:17:66:b5:26:6b:53:82: 74:5f:e4:22:aa:59:d5:a0:93:14:7e:26:9e:01:ad:aa:72:33: 9c:4c:9b:6a:c3:3b:8d:c1:56:db:d3:5b:6b:55:e8:78:0a:fe: 68:f1:ec:71:f1:8c:d0:d2:0f:a0:0d:04:bc:b2:dd:b5:2d:07: b2:1f:48:e7:92:40:01:69:6d:73:4f:0a:fd:9c:36:f4:a7:d3: 1b:9a:39:1f:b5:ab:4c:92:b1:0f:3e:71:3d:5d:10:17:17:69: ed:bd:01:5a:24:5f:4f:8b:86:07:ab:2f:01:75:67:ef:31:7c: 17:a0:e2:38:37:6b:54:5d:86:2f:cd:29:5d:bb:6c:4d:86:38: cb:73:db:05:53:d8:1f:11:ff:48:de:43:3a:90:10:fc:0d:3b: 3c:d1:19:34:1d:37:a5:63:83:db:6a:c7:88:6a:e3:95:0a:2d: 12:b8:22:6d:24:d1:eb:b3:19:36:88:17:c4:e4:91:03:b2:c8: a6:f0:a4:d7:1f:ba:d1:68:5d:a8:2d:a3:c7:68:ed:24:a1:33: 04:16:b9:3d -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUATR7sX9ysG5vD8JVruZIfDk1vAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMTEwODM3MTlaFw0yNjEyMTAwODQyMTlaMDMxMTAvBgNV BAMTKDEzRDQ1Q0VGRjA5ODNCRDNENjM5QUYyOThEOTcxRTg0RDI3REE1QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV8nI31MdbrNTEt5CDA4H+GV7t wiR4naLuhpOYl8M/PY7vsqR4gkTWaMHf3OAwuXRsLwg+tbqgzoCzvVMDJSkvD7LQ OrLErp7Vz1JKpTdhCthoCbqq3me/R3VLjv8XkeKG/1iAmMWdPZBrVfMDo52MpPnl f3USf0Pvc08H3i28uk2P2v7bacGup1ZeLz+0kC4TR+8J5zuMIuecswB5SXD9SYNQ bjFv6EcaKfu0RYvMpGPS+eUaNc+HDZPp1iZJt0Kcpp1Nh4TmYx8MWMj6TIFaROYg dAHxIiBzYnoWzrYqnUdkUMY05vrBvGk2gPuBhujyIRBrt3vnEWn4Wq/ml+3jAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUE9Rc7/CYO9PWOa8pjZcehNJ9pacwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzczODJlMzMzMTJlMzIzNDM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM4MzUzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE4f +DANBgkqhkiG9w0BAQsFAAOCAQEAdS4xzQ9DJsB00FqhN401YdWhiQFWgz9Oyfd/ ItIjkrohrvaR5GO62ag4Fcih8ocXZrUma1OCdF/kIqpZ1aCTFH4mngGtqnIznEyb asM7jcFW29Nba1XoeAr+aPHscfGM0NIPoA0EvLLdtS0Hsh9I55JAAWltc08K/Zw2 9KfTG5o5H7WrTJKxDz5xPV0QFxdp7b0BWiRfT4uGB6svAXVn7zF8F6DiODdrVF2G L80pXbtsTYY4y3PbBVPYHxH/SN5DOpAQ/A07PNEZNB03pWOD22rHiGrjlQotErgi bSTR67MZNogXxOSRA7LIpvCk1x+60WhdqC2jx2jtJKEzBBa5PQ== -----END CERTIFICATE-----Generated at Fri Dec 19 03:57:00 2025 by rpki-client