This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138372e302f32342d3234203d3e20323130353338.roa File: 3137382e3230382e3138372e302f32342d3234203d3e20323130353338.roa (raw, json) Hash identifier: 85hyrcyMArZcZorsWIpZVrP4a7hTkF9gqqW8gT7zv8Y= Subject key identifier: 79:65:82:56:31:63:BF:23:EF:87:94:27:13:42:20:76:E0:62:5F:8C Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 3BADD57047FAF405E8C8E761DF4750D1888CC766 Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138372e302f32342d3234203d3e20323130353338.roa Signing time: Fri 28 Nov 2025 08:55:12 +0000 ROA not before: Fri 28 Nov 2025 08:50:12 +0000 ROA not after: Fri 27 Nov 2026 08:55:12 +0000 asID: 210538 IP address blocks: 178.208.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 03:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ad:d5:70:47:fa:f4:05:e8:c8:e7:61:df:47:50:d1:88:8c:c7:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Nov 28 08:50:12 2025 GMT Not After : Nov 27 08:55:12 2026 GMT Subject: CN=796582563163BF23EF87942713422076E0625F8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:b2:0d:c5:31:21:11:bc:6d:04:a5:97:0b: 0c:91:7d:7c:5a:b3:d1:9f:04:15:1a:e2:d2:b1:67: c9:e9:cf:2f:87:f9:c2:f8:00:3d:52:95:ab:0a:15: 0a:f7:97:bf:e1:26:be:a3:56:e7:5f:fd:d1:10:ea: 20:e4:e3:bb:0a:8e:61:48:7b:01:05:ab:d9:cc:a6: 99:41:41:74:88:05:29:ea:e7:e6:dd:03:d2:93:2a: 55:ed:fa:4c:5a:ba:33:99:6b:8c:3b:6e:22:93:bc: b4:6e:14:0a:5f:70:f5:9d:4e:1d:3a:85:cb:ce:a1: 39:ed:0e:7d:64:dc:58:36:3c:c0:f6:54:98:dc:45: c0:12:ac:da:50:74:f4:e1:22:b7:72:e4:bf:01:dd: f5:cd:c7:de:ef:f5:40:d3:fb:43:a3:e7:e2:98:b8: 2c:73:ac:2b:8f:5a:b7:01:da:5c:6a:14:45:d0:82: 7e:48:f9:10:a5:a3:5d:df:32:da:4d:00:c8:92:17: 71:e6:be:f1:3c:60:95:b8:d2:c6:d0:e3:70:ea:a7: 81:18:db:e1:be:2d:ce:d7:e1:c3:61:88:b9:bb:ce: 2d:6a:06:6b:43:dc:3b:54:22:70:96:8d:25:3b:d0: d1:34:f2:6c:aa:b5:0f:01:33:2f:ec:78:ad:fe:55: 2b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:65:82:56:31:63:BF:23:EF:87:94:27:13:42:20:76:E0:62:5F:8C X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138372e302f32342d3234203d3e20323130353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.208.187.0/24 Signature Algorithm: sha256WithRSAEncryption 45:2a:b7:68:b6:b7:ff:5b:6f:a0:6f:39:67:1b:f9:5b:8a:18: 77:af:0b:d9:d0:43:6e:42:04:24:42:77:12:d8:4c:90:0a:e2: fe:b6:89:58:fd:fa:13:07:14:25:bc:a8:a0:9b:7b:ac:72:dc: 44:8c:92:7a:c7:03:08:c5:da:c3:85:0a:86:7f:b8:d2:c0:99: 72:fb:35:7e:d6:36:ec:0e:93:d7:ef:72:92:b7:d2:8f:91:1b: 82:54:3e:15:b3:56:f4:4c:47:59:48:54:ea:83:9f:3f:a4:18: 21:45:2a:a6:db:eb:25:7b:76:4b:69:44:96:0d:51:81:76:73: e5:1c:97:5f:bb:7f:43:7c:bc:58:75:1a:7f:31:05:5d:4a:19: ca:a0:d3:9f:6a:ab:7a:73:d9:0b:1a:48:df:27:50:1a:71:6a: 89:ec:83:07:ad:11:50:9e:86:1a:84:9f:cd:1c:d2:3a:d4:42: 59:4c:13:db:7b:69:a2:ed:59:30:b0:40:b4:fc:c7:0f:c1:df: d9:67:9e:15:db:e8:51:9d:06:5d:75:5f:ae:56:20:90:d6:18: 72:94:58:eb:17:7d:3a:7e:9c:25:cd:28:ea:28:60:1c:d7:fb: 74:57:3f:1e:35:04:9b:97:0f:b6:3c:74:a0:e6:21:31:75:e6: 43:84:a6:4c -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUO63VcEf69AXoyOdh30dQ0YiMx2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTExMjgwODUwMTJaFw0yNjExMjcwODU1MTJaMDMxMTAvBgNV BAMTKDc5NjU4MjU2MzE2M0JGMjNFRjg3OTQyNzEzNDIyMDc2RTA2MjVGOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3zLINxTEhEbxtBKWXCwyRfXxa s9GfBBUa4tKxZ8npzy+H+cL4AD1SlasKFQr3l7/hJr6jVudf/dEQ6iDk47sKjmFI ewEFq9nMpplBQXSIBSnq5+bdA9KTKlXt+kxaujOZa4w7biKTvLRuFApfcPWdTh06 hcvOoTntDn1k3Fg2PMD2VJjcRcASrNpQdPThIrdy5L8B3fXNx97v9UDT+0Oj5+KY uCxzrCuPWrcB2lxqFEXQgn5I+RClo13fMtpNAMiSF3HmvvE8YJW40sbQ43Dqp4EY 2+G+Lc7X4cNhiLm7zi1qBmtD3DtUInCWjSU70NE08myqtQ8BMy/seK3+VSsDAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUeWWCVjFjvyPvh5QnE0IgduBiX4wwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzNzM4MmUzMjMwMzgyZTMx MzgzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMDM1MzMzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALLQuzANBgkqhkiG9w0BAQsFAAOCAQEARSq3aLa3/1tvoG85Zxv5W4oYd68L 2dBDbkIEJEJ3EthMkAri/raJWP36EwcUJbyooJt7rHLcRIySescDCMXaw4UKhn+4 0sCZcvs1ftY27A6T1+9ykrfSj5EbglQ+FbNW9ExHWUhU6oOfP6QYIUUqptvrJXt2 S2lElg1RgXZz5RyXX7t/Q3y8WHUafzEFXUoZyqDTn2qrenPZCxpI3ydQGnFqieyD B60RUJ6GGoSfzRzSOtRCWUwT23tpou1ZMLBAtPzHD8Hf2WeeFdvoUZ0GXXVfrlYg kNYYcpRY6xd9On6cJc0o6ihgHNf7dFc/HjUEm5cPtjx0oOYhMXXmQ4SmTA== -----END CERTIFICATE-----Generated at Fri Dec 5 16:20:47 2025 by rpki-client