This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138342e302f32342d3234203d3e203538303631.roa
File: 3137382e3230382e3138342e302f32342d3234203d3e203538303631.roa (raw, json)
Hash identifier: YP4YHXitSPQZCFgyUwf0x2J5APG8E4j6WZD0KxotoLk=
Subject key identifier: 7A:37:EE:AB:23:19:E3:5F:A6:30:8E:CA:97:25:75:00:6D:3D:49:B9
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 76D87EFE9838036107BE3CE09EC4D4D707A4968D
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138342e302f32342d3234203d3e203538303631.roa
Signing time: Fri 26 Dec 2025 18:55:32 +0000
ROA not before: Fri 26 Dec 2025 18:50:32 +0000
ROA not after: Fri 25 Dec 2026 18:55:32 +0000
asID: 58061
IP address blocks: 178.208.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d8:7e:fe:98:38:03:61:07:be:3c:e0:9e:c4:d4:d7:07:a4:96:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Dec 26 18:50:32 2025 GMT
Not After : Dec 25 18:55:32 2026 GMT
Subject: CN=7A37EEAB2319E35FA6308ECA972575006D3D49B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:15:9f:82:9b:2b:ef:78:b7:b4:ad:16:8c:
9d:36:c1:8b:28:d3:6f:7a:90:64:45:0c:ea:45:92:
84:07:e1:f5:55:33:39:79:1c:9f:d2:05:bb:bc:ea:
2d:c7:6b:a2:8d:97:54:81:e0:c8:21:b9:dc:ae:74:
73:df:97:a3:29:21:ee:55:b4:1d:f0:f5:28:39:e4:
74:be:db:cf:f2:f7:61:35:0b:1d:6f:22:77:d7:50:
61:d8:75:f1:34:da:f5:9b:ea:23:fa:77:cb:fc:83:
cb:1f:f6:6d:b9:ca:49:ff:1f:a7:67:31:8f:89:55:
b7:05:ae:40:58:4c:dc:06:44:32:5a:e8:34:9d:ef:
7f:13:97:a5:a2:fb:1d:55:95:43:40:a1:ba:d9:ee:
c4:6b:f1:64:30:61:50:4f:d4:0d:23:8b:bc:e5:f7:
19:8d:c8:fb:8f:f3:15:17:93:e0:d0:90:c0:7f:5a:
dc:b7:cf:13:87:5b:33:e6:9d:f4:b2:5d:32:97:58:
fc:06:e1:f4:e3:a4:31:8b:cc:8d:a2:88:de:dc:14:
48:e6:8c:94:18:b6:95:5c:62:12:e4:61:43:2b:49:
d7:78:31:1d:01:13:7d:8f:08:b4:4e:f4:f0:d2:83:
9c:bb:b0:45:fb:b0:a1:16:17:56:cb:6c:ee:1d:09:
a3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:37:EE:AB:23:19:E3:5F:A6:30:8E:CA:97:25:75:00:6D:3D:49:B9
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138342e302f32342d3234203d3e203538303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.184.0/24
Signature Algorithm: sha256WithRSAEncryption
78:1e:3c:21:0d:50:c7:5c:3c:c4:17:76:e6:7e:01:71:54:65:
38:ef:cf:a9:ac:1f:3f:a9:52:81:f1:1c:a7:28:71:91:84:5a:
ec:33:42:f4:26:97:2b:4c:a0:89:6b:d8:f5:b7:4c:ac:ac:f3:
6a:96:54:24:7d:8f:3e:20:38:ed:18:90:44:bf:13:ee:67:7c:
ca:a8:4e:15:c9:1a:9f:7e:f0:3f:83:de:0d:e5:de:88:9d:fd:
ab:d8:a9:e4:2b:66:0a:92:9d:f3:01:94:ca:c9:9a:78:a1:e0:
6e:c6:3c:2c:8a:e5:46:27:17:91:b8:36:b0:5a:4e:d5:ef:77:
fe:30:79:7a:01:0e:0b:bd:ef:d1:e3:72:74:15:7f:1a:db:80:
cb:80:dd:6d:ec:cb:48:f0:7d:e9:0f:f7:f7:77:27:bb:50:64:
db:9d:9c:7e:40:0f:bf:82:be:e7:6c:b0:3b:ca:32:9f:e5:80:
65:25:f0:ce:82:ea:42:e1:44:8c:77:1c:c3:55:41:0b:f5:f2:
1c:f4:97:5e:05:fb:8f:27:c0:a5:d1:7e:2c:52:02:43:eb:2f:
05:94:90:d7:4d:90:4c:07:2e:ad:ae:54:86:89:aa:1f:9b:33:
2b:8e:61:38:fb:a7:2e:bf:4a:c3:43:78:d9:40:5c:c8:fe:84:
43:f5:cb:45
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUdth+/pg4A2EHvjzgnsTU1weklo0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNTEyMjYxODUwMzJaFw0yNjEyMjUxODU1MzJaMDMxMTAvBgNV
BAMTKDdBMzdFRUFCMjMxOUUzNUZBNjMwOEVDQTk3MjU3NTAwNkQzRDQ5QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsVxWfgpsr73i3tK0WjJ02wYso
0296kGRFDOpFkoQH4fVVMzl5HJ/SBbu86i3Ha6KNl1SB4MghudyudHPfl6MpIe5V
tB3w9Sg55HS+28/y92E1Cx1vInfXUGHYdfE02vWb6iP6d8v8g8sf9m25ykn/H6dn
MY+JVbcFrkBYTNwGRDJa6DSd738Tl6Wi+x1VlUNAobrZ7sRr8WQwYVBP1A0ji7zl
9xmNyPuP8xUXk+DQkMB/Wty3zxOHWzPmnfSyXTKXWPwG4fTjpDGLzI2iiN7cFEjm
jJQYtpVcYhLkYUMrSdd4MR0BE32PCLRO9PDSg5y7sEX7sKEWF1bLbO4dCaNfAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUejfuqyMZ41+mMI7KlyV1AG09SbkwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzNzM4MmUzMjMwMzgyZTMx
MzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzgzMDM2MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACy0LgwDQYJKoZIhvcNAQELBQADggEBAHgePCENUMdcPMQXduZ+AXFUZTjvz6ms
Hz+pUoHxHKcocZGEWuwzQvQmlytMoIlr2PW3TKys82qWVCR9jz4gOO0YkES/E+5n
fMqoThXJGp9+8D+D3g3l3oid/avYqeQrZgqSnfMBlMrJmnih4G7GPCyK5UYnF5G4
NrBaTtXvd/4weXoBDgu979HjcnQVfxrbgMuA3W3sy0jwfekP9/d3J7tQZNudnH5A
D7+CvudssDvKMp/lgGUl8M6C6kLhRIx3HMNVQQv18hz0l14F+48nwKXRfixSAkPr
LwWUkNdNkEwHLq2uVIaJqh+bMyuOYTj7py6/SsNDeNlAXMj+hEP1y0U=
-----END CERTIFICATE-----
Generated at Mon Jan 19 07:49:34 2026 by rpki-client