This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139362e302f32342d3234203d3e20333933393432.roa File: 3137382e3133322e3139362e302f32342d3234203d3e20333933393432.roa (raw, json) Hash identifier: D28ld5kVJceea0qzm5GNZqptmPyuFgFAFujny6boKiE= Subject key identifier: 0E:66:48:5E:3F:90:7B:D0:0A:E7:B2:53:D1:6A:2A:98:DB:93:C1:2B Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Certificate serial: 0B7AF5B3E8F5BB7F389D214AF50F11F1791CEEF8 Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139362e302f32342d3234203d3e20333933393432.roa Signing time: Mon 24 Nov 2025 03:28:03 +0000 ROA not before: Mon 24 Nov 2025 03:23:03 +0000 ROA not after: Mon 23 Nov 2026 03:28:03 +0000 asID: 393942 IP address blocks: 178.132.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 18:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:7a:f5:b3:e8:f5:bb:7f:38:9d:21:4a:f5:0f:11:f1:79:1c:ee:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Validity Not Before: Nov 24 03:23:03 2025 GMT Not After : Nov 23 03:28:03 2026 GMT Subject: CN=0E66485E3F907BD00AE7B253D16A2A98DB93C12B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e2:4f:85:a1:d3:a8:8b:b2:87:c6:86:a3:1a: 8f:cf:2d:d0:1e:71:21:90:51:25:07:97:32:df:03: c4:a1:f5:93:4c:48:0d:16:f0:16:48:e3:e5:c4:e4: f3:f0:d2:46:64:fe:63:7c:c8:7a:be:38:62:3d:5a: 00:42:4f:07:81:fe:0c:04:24:8f:f0:3c:83:44:f1: 99:09:df:6e:49:b3:70:01:88:24:41:38:5a:de:98: 81:4d:e1:f3:5b:5a:bb:87:9b:1e:92:73:b2:a5:20: b6:51:d6:4c:18:2b:52:11:4d:19:e1:70:38:71:4c: cb:17:0f:7a:57:3a:f7:45:58:be:3a:ca:da:a1:4f: 24:3f:52:1a:c4:67:54:85:33:7e:0a:d2:38:0d:3b: e9:4f:0a:6b:1b:77:d5:bb:96:d0:13:23:3c:12:e2: 60:36:48:9b:a5:b3:28:f3:b7:1a:9f:00:ff:bc:b1: c7:19:87:3c:a2:2d:fd:4c:fc:66:25:a3:5c:7e:5f: 76:2f:da:bf:2e:c9:7f:b1:fd:b8:6a:22:56:02:aa: a1:24:20:13:e6:79:21:b1:4c:1d:57:c8:de:f3:c0: 8f:d3:66:03:56:08:1b:62:5c:ce:fd:a2:9d:4e:0c: fe:2f:a5:0a:92:42:cc:91:6e:af:a7:7c:aa:a1:96: e9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:66:48:5E:3F:90:7B:D0:0A:E7:B2:53:D1:6A:2A:98:DB:93:C1:2B X509v3 Authority Key Identifier: keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139362e302f32342d3234203d3e20333933393432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.132.196.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:bb:56:08:ff:2b:7c:65:af:0e:a5:89:c2:ec:a2:78:b4:9e: 33:ef:39:e2:e5:4d:35:80:54:28:e1:a0:0c:0e:00:37:62:81: d4:c9:28:ab:c0:bf:37:4d:16:6b:01:24:6c:51:29:fb:60:62: 64:67:6d:0f:35:3a:81:55:da:18:81:f5:ce:5c:3d:56:a0:e1: 89:a1:4d:14:a9:bc:f0:ef:62:67:d3:57:41:cb:64:78:e9:40: aa:59:cb:84:b8:ca:dc:51:c0:5a:07:63:7e:50:81:82:d8:c4: 9f:56:64:9c:27:a5:a4:7c:0a:30:38:37:32:12:78:e9:6b:67: 6f:c2:75:66:19:1b:af:4f:29:78:33:de:df:06:76:81:8a:e4: c0:0f:7b:a1:79:e3:a5:9f:1d:3d:4a:13:fd:8a:4d:56:9c:40: 98:00:1c:ef:1b:2d:a4:03:6a:80:86:3a:51:8a:94:f3:12:7a: 46:d7:d4:8f:50:f6:54:2a:29:2c:32:69:38:e9:ab:ca:50:e8: ef:64:97:97:ee:7b:81:8c:d9:f7:b6:ba:3f:bb:f4:b6:bb:e9: 13:02:21:f5:61:f9:bc:dd:11:1f:2f:b2:b2:ab:78:1a:8f:85: 9d:35:b9:7e:44:4b:d1:b8:aa:71:a8:04:3f:e9:84:a6:4d:22: 39:82:54:78 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUC3r1s+j1u384nSFK9Q8R8Xkc7vgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk MTZjZWVkMzAeFw0yNTExMjQwMzIzMDNaFw0yNjExMjMwMzI4MDNaMDMxMTAvBgNV BAMTKDBFNjY0ODVFM0Y5MDdCRDAwQUU3QjI1M0QxNkEyQTk4REI5M0MxMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt4k+FodOoi7KHxoajGo/PLdAe cSGQUSUHlzLfA8Sh9ZNMSA0W8BZI4+XE5PPw0kZk/mN8yHq+OGI9WgBCTweB/gwE JI/wPINE8ZkJ325Js3ABiCRBOFremIFN4fNbWruHmx6Sc7KlILZR1kwYK1IRTRnh cDhxTMsXD3pXOvdFWL46ytqhTyQ/UhrEZ1SFM34K0jgNO+lPCmsbd9W7ltATIzwS 4mA2SJulsyjztxqfAP+8sccZhzyiLf1M/GYlo1x+X3Yv2r8uyX+x/bhqIlYCqqEk IBPmeSGxTB1XyN7zwI/TZgNWCBtiXM79op1ODP4vpQqSQsyRbq+nfKqhlum/AgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUDmZIXj+Qe9AK57JT0WoqmNuTwSswHwYDVR0j BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0 NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G czd0TS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGNjMDg3Mzct OTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0NGVkLzAvMzEzNzM4MmUzMTMzMzIyZTMx MzkzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzMzM5MzQzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALKExDANBgkqhkiG9w0BAQsFAAOCAQEASrtWCP8rfGWvDqWJwuyieLSeM+85 4uVNNYBUKOGgDA4AN2KB1Mkoq8C/N00WawEkbFEp+2BiZGdtDzU6gVXaGIH1zlw9 VqDhiaFNFKm88O9iZ9NXQctkeOlAqlnLhLjK3FHAWgdjflCBgtjEn1ZknCelpHwK MDg3MhJ46Wtnb8J1Zhkbr08peDPe3wZ2gYrkwA97oXnjpZ8dPUoT/YpNVpxAmAAc 7xstpANqgIY6UYqU8xJ6RtfUj1D2VCopLDJpOOmrylDo72SXl+57gYzZ97a6P7v0 trvpEwIh9WH5vN0RHy+ysqt4Go+FnTW5fkRL0biqcagEP+mEpk0iOYJUeA== -----END CERTIFICATE-----Generated at Fri Dec 5 06:45:43 2025 by rpki-client