This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139302e302f32342d3234203d3e203633313530.roa File: 3137382e3230382e3139302e302f32342d3234203d3e203633313530.roa (raw, json) Hash identifier: VNjwTqohukCbuqn9Zn6J/UvnaEBRhlWlFEy1H9PVBns= Subject key identifier: 42:8A:BC:59:1A:C7:09:F8:C5:09:3F:37:6B:08:AB:56:86:94:DC:51 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 13380FFC8C22F39BB55AC6339B6EAF7B65E3A5A2 Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139302e302f32342d3234203d3e203633313530.roa Signing time: Wed 03 Dec 2025 10:55:14 +0000 ROA not before: Wed 03 Dec 2025 10:50:14 +0000 ROA not after: Wed 02 Dec 2026 10:55:14 +0000 asID: 63150 IP address blocks: 178.208.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:38:0f:fc:8c:22:f3:9b:b5:5a:c6:33:9b:6e:af:7b:65:e3:a5:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Dec 3 10:50:14 2025 GMT Not After : Dec 2 10:55:14 2026 GMT Subject: CN=428ABC591AC709F8C5093F376B08AB568694DC51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ea:aa:c3:93:09:57:81:e6:59:18:e3:58:78: 16:3e:c6:d5:9c:53:08:6a:6d:68:b0:26:6f:3a:fd: c7:5c:a6:2a:36:ad:3e:18:d5:3c:b1:da:3a:bd:24: db:d5:26:46:8c:5d:bc:d3:1c:fb:90:cf:a2:9a:68: 00:70:11:b4:fb:a2:d4:5f:e5:53:4e:48:04:8d:0c: b2:05:24:e2:21:26:f1:de:54:3a:bd:a0:87:74:08: aa:95:28:94:b6:27:95:86:17:96:94:9a:e0:e1:13: 14:6c:b2:a7:09:83:10:c0:e2:54:7a:c3:10:2b:81: 81:f6:87:c1:ee:4d:36:54:06:a1:82:20:53:6a:ba: a4:e0:08:00:a5:b7:0e:fd:d9:34:bc:92:da:e0:52: 4b:c8:f4:3f:da:36:e2:e7:f6:69:a8:a5:4b:dd:23: 48:b5:b0:24:47:d5:00:39:41:ac:7f:5d:6b:03:ac: a7:5a:55:2f:22:72:68:b9:c5:11:c8:2c:cd:70:0a: 93:ec:d2:4d:2e:d2:14:c3:02:4a:73:95:dd:2e:72: f3:74:a7:f0:40:25:fa:f8:1b:b3:b3:61:01:18:f9: 5c:cd:be:d3:c1:4e:04:21:5c:f0:8c:9d:d5:d4:2d: 6f:53:2b:f3:b0:8c:75:c0:8d:93:76:6a:f9:94:0d: bc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8A:BC:59:1A:C7:09:F8:C5:09:3F:37:6B:08:AB:56:86:94:DC:51 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139302e302f32342d3234203d3e203633313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.208.190.0/24 Signature Algorithm: sha256WithRSAEncryption 85:f2:78:bc:c7:1a:b2:56:c3:1e:d2:90:bb:0b:82:32:66:84: ad:67:83:e0:ac:74:05:23:ac:e3:02:d3:06:27:57:e0:c9:3a: 42:58:a1:b6:1a:8d:9c:d9:d8:9f:e7:f4:40:aa:b5:6d:8b:c0: 26:ed:48:68:52:4c:a6:b9:90:c7:ab:4c:84:b6:42:82:60:26: 2f:b8:91:e9:49:a2:5b:a5:e1:30:78:7d:9d:0e:48:8b:d5:cf: 3d:f4:75:4d:2a:80:a8:35:a5:03:f8:e8:9b:ef:82:c4:cb:21: 63:af:a8:f5:dd:5b:bd:96:89:84:32:76:0c:c6:a5:34:78:ad: 45:17:f0:e2:f9:f9:92:83:88:58:ae:1e:12:37:90:4c:3c:89: 02:91:03:10:ff:5d:78:0b:48:46:07:7c:7b:db:df:f0:c7:2f: 3a:71:11:f6:c2:72:f4:ea:cf:20:e6:e8:55:7f:ab:e5:84:3b: fe:c2:db:90:c4:8d:32:94:91:13:4f:9a:5c:39:80:ff:9c:e6: e6:20:37:52:8e:a6:aa:20:93:b0:a0:99:5c:93:17:a7:3e:54: 99:1f:19:9a:b8:21:45:d9:30:d9:8f:ec:ef:27:a6:f2:e8:75: ab:ae:7f:c1:55:13:4b:21:1d:91:42:c3:43:27:e3:29:b7:7c: dd:35:f5:b3 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUEzgP/Iwi85u1WsYzm26ve2XjpaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTEyMDMxMDUwMTRaFw0yNjEyMDIxMDU1MTRaMDMxMTAvBgNV BAMTKDQyOEFCQzU5MUFDNzA5RjhDNTA5M0YzNzZCMDhBQjU2ODY5NERDNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV6qrDkwlXgeZZGONYeBY+xtWc UwhqbWiwJm86/cdcpio2rT4Y1Tyx2jq9JNvVJkaMXbzTHPuQz6KaaABwEbT7otRf 5VNOSASNDLIFJOIhJvHeVDq9oId0CKqVKJS2J5WGF5aUmuDhExRssqcJgxDA4lR6 wxArgYH2h8HuTTZUBqGCIFNquqTgCACltw792TS8ktrgUkvI9D/aNuLn9mmopUvd I0i1sCRH1QA5Qax/XWsDrKdaVS8icmi5xRHILM1wCpPs0k0u0hTDAkpzld0ucvN0 p/BAJfr4G7OzYQEY+VzNvtPBTgQhXPCMndXULW9TK/OwjHXAjZN2avmUDbw3AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUQoq8WRrHCfjFCT83awirVoaU3FEwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzNzM4MmUzMjMwMzgyZTMx MzkzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzMzMTM1MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACy0L4wDQYJKoZIhvcNAQELBQADggEBAIXyeLzHGrJWwx7SkLsLgjJmhK1ng+Cs dAUjrOMC0wYnV+DJOkJYobYajZzZ2J/n9ECqtW2LwCbtSGhSTKa5kMerTIS2QoJg Ji+4kelJolul4TB4fZ0OSIvVzz30dU0qgKg1pQP46JvvgsTLIWOvqPXdW72WiYQy dgzGpTR4rUUX8OL5+ZKDiFiuHhI3kEw8iQKRAxD/XXgLSEYHfHvb3/DHLzpxEfbC cvTqzyDm6FV/q+WEO/7C25DEjTKUkRNPmlw5gP+c5uYgN1KOpqogk7CgmVyTF6c+ VJkfGZq4IUXZMNmP7O8npvLodauuf8FVE0shHZFCw0Mn4ym3fN019bM= -----END CERTIFICATE-----Generated at Sat Dec 6 01:34:12 2025 by rpki-client