This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139312e302f32342d3234203d3e203432383331.roa File: 3137382e3230382e3139312e302f32342d3234203d3e203432383331.roa (raw, json) Hash identifier: ret9iBNCHPx+EIQioPIaXJL+sdoAmjIgLTOdp4Iu21E= Subject key identifier: 2E:BD:80:EF:AC:FD:1E:EB:C0:20:8D:67:6F:E1:F1:6D:D5:69:0D:F9 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 6606018D3E602B14F39A2A9F11663D4534BD2B9B Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139312e302f32342d3234203d3e203432383331.roa Signing time: Mon 17 Nov 2025 11:07:19 +0000 ROA not before: Mon 17 Nov 2025 11:02:19 +0000 ROA not after: Mon 16 Nov 2026 11:07:19 +0000 asID: 42831 IP address blocks: 178.208.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:06:01:8d:3e:60:2b:14:f3:9a:2a:9f:11:66:3d:45:34:bd:2b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Nov 17 11:02:19 2025 GMT Not After : Nov 16 11:07:19 2026 GMT Subject: CN=2EBD80EFACFD1EEBC0208D676FE1F16DD5690DF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2d:2c:30:07:ad:2b:ea:c4:b8:7c:b3:3f:24: 72:69:30:60:d3:b1:1e:17:de:b0:c2:5a:b9:7c:09: 71:52:05:be:96:6e:a3:fd:14:0f:43:67:7d:4b:57: cd:6f:b8:35:45:ed:ce:5b:8a:f8:9e:72:5a:2e:ee: 86:d7:64:30:37:8f:55:e6:ed:b9:1e:c5:7c:17:4b: e8:50:c0:15:ff:48:79:a0:b9:f5:95:21:e3:a6:8f: bb:7d:3a:82:c0:54:e3:2a:5e:d3:5b:ef:f4:b4:f8: 44:53:45:ae:55:b5:c2:d2:aa:f0:0a:19:83:93:17: 4f:ce:6c:60:97:a3:3d:bf:d8:f4:ad:e5:d0:79:f6: a0:10:19:d5:0c:d9:8e:fb:63:56:21:3e:56:93:0a: 6e:33:af:a7:04:03:37:4f:cb:25:dd:d1:78:3a:0a: 3d:35:e5:0c:8d:92:67:3c:7a:76:99:90:48:0b:9e: c8:10:1b:15:6f:0f:ba:2b:f3:f2:4e:76:94:80:e6: 4a:7f:c8:a8:60:04:26:30:88:ee:19:89:b6:8c:10: f8:26:da:97:38:4a:8c:4c:6e:53:c7:6d:56:2e:34: 1b:37:f5:b4:f7:cd:b9:ad:b4:94:00:27:c4:9d:5b: 1e:b0:eb:cd:3b:fb:d5:6c:ab:72:6e:7f:08:79:4c: 6e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BD:80:EF:AC:FD:1E:EB:C0:20:8D:67:6F:E1:F1:6D:D5:69:0D:F9 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139312e302f32342d3234203d3e203432383331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.208.191.0/24 Signature Algorithm: sha256WithRSAEncryption 29:07:2d:1c:48:fa:1e:96:d5:cb:4e:c8:d2:eb:ca:7e:37:aa: 3b:69:d5:3e:0f:4a:77:43:cf:ce:f2:4f:ed:3d:14:37:f5:c0: 4b:eb:4e:24:e9:bf:d4:bb:b2:73:fa:80:b3:6e:6f:6d:cd:9e: f7:0b:4b:23:c5:bc:59:0a:0d:81:6b:03:78:3a:d4:c1:a2:9f: f6:b4:7f:fc:87:83:69:90:5f:c6:19:77:3d:c3:d3:93:cc:2d: bb:c3:8c:09:3c:82:2a:23:6e:0d:20:e3:df:ea:f3:36:f6:2d: 5d:66:8d:15:b8:b8:0c:00:45:d4:7a:6e:5a:5b:25:62:5d:e5: ef:4f:58:48:f3:95:e6:fb:62:bb:36:56:89:39:05:a4:b2:6e: 78:59:52:30:0e:08:be:4a:47:19:66:0a:eb:b8:0c:2a:dc:e4: 6c:43:77:eb:06:ca:24:66:29:39:40:28:80:da:81:89:98:db: 4f:6e:a0:95:06:24:99:7d:0e:21:d9:c0:e6:dc:90:34:a5:b3: 1c:75:87:c6:49:2c:58:13:78:a5:69:9b:6d:fc:7c:e5:5e:f1: 5f:76:64:45:b5:29:54:63:73:1d:80:36:3d:7a:1d:ed:35:b9: ca:c0:0c:15:cb:55:f1:6d:17:3b:8b:81:6e:30:d2:a0:95:d4: d6:9d:4d:c9 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUZgYBjT5gKxTzmiqfEWY9RTS9K5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTExMTcxMTAyMTlaFw0yNjExMTYxMTA3MTlaMDMxMTAvBgNV BAMTKDJFQkQ4MEVGQUNGRDFFRUJDMDIwOEQ2NzZGRTFGMTZERDU2OTBERjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8LSwwB60r6sS4fLM/JHJpMGDT sR4X3rDCWrl8CXFSBb6WbqP9FA9DZ31LV81vuDVF7c5bivieclou7obXZDA3j1Xm 7bkexXwXS+hQwBX/SHmgufWVIeOmj7t9OoLAVOMqXtNb7/S0+ERTRa5VtcLSqvAK GYOTF0/ObGCXoz2/2PSt5dB59qAQGdUM2Y77Y1YhPlaTCm4zr6cEAzdPyyXd0Xg6 Cj015QyNkmc8enaZkEgLnsgQGxVvD7or8/JOdpSA5kp/yKhgBCYwiO4ZibaMEPgm 2pc4SoxMblPHbVYuNBs39bT3zbmttJQAJ8SdWx6w6807+9Vsq3Jufwh5TG6rAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQULr2A76z9HuvAII1nb+HxbdVpDfkwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzNzM4MmUzMjMwMzgyZTMx MzkzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzIzODMzMzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACy0L8wDQYJKoZIhvcNAQELBQADggEBACkHLRxI+h6W1ctOyNLryn43qjtp1T4P SndDz87yT+09FDf1wEvrTiTpv9S7snP6gLNub23NnvcLSyPFvFkKDYFrA3g61MGi n/a0f/yHg2mQX8YZdz3D05PMLbvDjAk8giojbg0g49/q8zb2LV1mjRW4uAwARdR6 blpbJWJd5e9PWEjzleb7Yrs2Vok5BaSybnhZUjAOCL5KRxlmCuu4DCrc5GxDd+sG yiRmKTlAKIDagYmY209uoJUGJJl9DiHZwObckDSlsxx1h8ZJLFgTeKVpm238fOVe 8V92ZEW1KVRjcx2ANj16He01ucrADBXLVfFtFzuLgW4w0qCV1NadTck= -----END CERTIFICATE-----Generated at Fri Dec 5 04:57:21 2025 by rpki-client