This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137382e302f32342d3234203d3e20313336373837.roa File: 3137362e35332e3137382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: +KLehDX6moaaR+S++umShYFo4ZyMrZ9Z7aMaIt5P2f4= Subject key identifier: D8:1B:3D:6D:C8:9E:60:2A:47:FD:4B:E1:58:14:3A:A8:81:94:68:EB Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 481CCF62BB3C1F7E827116AD6457C99E6939123A Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 19:49:56 +0000 ROA not before: Fri 28 Nov 2025 19:44:56 +0000 ROA not after: Fri 27 Nov 2026 19:49:56 +0000 asID: 136787 IP address blocks: 176.53.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:1c:cf:62:bb:3c:1f:7e:82:71:16:ad:64:57:c9:9e:69:39:12:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 28 19:44:56 2025 GMT Not After : Nov 27 19:49:56 2026 GMT Subject: CN=D81B3D6DC89E602A47FD4BE158143AA8819468EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:63:7c:cf:c5:3d:ca:29:b5:3c:6b:37:e8:47: 6d:e1:53:d8:3a:1b:61:9f:50:29:b0:dc:27:f8:fc: 91:9b:72:7a:86:8f:dc:e1:f7:03:7a:6a:ff:73:b3: 42:7a:85:b5:de:44:7e:78:b8:bb:e8:6e:64:c7:92: 1d:c2:99:6f:6d:a1:e8:aa:46:20:4e:2b:43:81:3c: ab:2e:56:05:2d:be:97:9c:4a:fa:a3:0e:17:f1:77: 84:8b:0c:3e:95:dc:6b:7a:61:49:c0:7b:8e:fb:b3: 0a:85:66:71:7b:31:82:e4:70:70:70:3b:af:4c:89: cd:82:30:d9:c7:52:0b:91:2e:82:d1:98:95:69:5e: ee:d0:40:b5:43:c6:a3:3f:6f:88:f1:14:26:ca:a5: 08:97:ca:6b:8a:ed:1d:08:79:7e:60:32:40:d1:aa: b1:2a:dd:bb:57:e3:f6:69:c7:6f:d4:da:ea:e7:18: a1:82:41:70:6d:5d:99:5b:13:8e:e5:e9:29:69:c2: b2:7f:5d:dc:96:72:ea:a6:a6:9f:6d:36:e0:bd:e3: a8:cb:dc:49:f6:bc:ca:66:ba:2f:06:fb:1b:81:e7: 2a:dd:97:3a:c4:79:df:8d:ba:a0:5e:7a:77:e2:4d: 64:50:ac:49:6b:01:87:26:0e:30:d4:fb:6e:56:bd: 61:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1B:3D:6D:C8:9E:60:2A:47:FD:4B:E1:58:14:3A:A8:81:94:68:EB X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.53.178.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:1b:8a:87:c9:91:1f:0d:a5:09:a6:b1:c1:1e:8d:3c:30:59: 91:b6:92:eb:c4:d8:f7:cc:18:e1:45:58:b3:70:9c:82:a7:29: 3a:25:46:69:51:52:6c:c2:4a:8f:53:98:3f:83:fa:04:cd:24: a3:8d:cd:2d:8e:da:86:47:45:f9:0f:d0:53:df:ad:90:ba:f2: b0:19:1d:0b:c2:02:6a:74:80:8d:2b:3a:e9:55:b0:ed:ca:eb: bb:40:c0:6f:af:8e:5b:50:89:1a:40:f9:cb:cd:d8:95:65:8f: f5:16:7a:bc:2e:21:7a:50:09:68:a7:35:ff:29:28:48:b8:55: a6:20:45:fe:27:39:05:ce:2e:be:12:65:a7:4c:24:99:6d:b2: a5:d4:b2:15:31:b2:6a:0f:ea:04:3c:23:65:ea:ee:30:a8:8c: da:e8:d7:24:ce:45:ae:a1:00:67:fe:3f:3b:3c:5d:40:aa:2f: cf:53:70:d1:ed:6d:94:63:fb:8a:71:2f:c4:82:2a:83:3d:61: 26:5d:33:76:a7:73:45:94:88:37:48:72:37:4d:16:02:b0:04: 9a:30:e5:e1:83:14:ed:9b:48:a2:66:d9:fe:f9:1a:c7:28:ac: 9c:a1:ce:a2:be:29:b2:f3:91:28:d9:e1:36:1b:54:7c:e8:24: b8:73:fb:af -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUSBzPYrs8H36CcRatZFfJnmk5EjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjgxOTQ0NTZaFw0yNjExMjcxOTQ5NTZaMDMxMTAvBgNV BAMTKEQ4MUIzRDZEQzg5RTYwMkE0N0ZENEJFMTU4MTQzQUE4ODE5NDY4RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJY3zPxT3KKbU8azfoR23hU9g6 G2GfUCmw3Cf4/JGbcnqGj9zh9wN6av9zs0J6hbXeRH54uLvobmTHkh3CmW9toeiq RiBOK0OBPKsuVgUtvpecSvqjDhfxd4SLDD6V3Gt6YUnAe477swqFZnF7MYLkcHBw O69Mic2CMNnHUguRLoLRmJVpXu7QQLVDxqM/b4jxFCbKpQiXymuK7R0IeX5gMkDR qrEq3btX4/Zpx2/U2urnGKGCQXBtXZlbE47l6SlpwrJ/XdyWcuqmpp9tNuC946jL 3En2vMpmui8G+xuB5yrdlzrEed+NuqBeenfiTWRQrElrAYcmDjDU+25WvWGbAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU2Bs9bcieYCpH/UvhWBQ6qIGUaOswHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNzM2MmUzNTMzMmUzMTM3 MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACwNbIwDQYJKoZIhvcNAQELBQADggEBAH0biofJkR8NpQmmscEejTwwWZG2kuvE 2PfMGOFFWLNwnIKnKTolRmlRUmzCSo9TmD+D+gTNJKONzS2O2oZHRfkP0FPfrZC6 8rAZHQvCAmp0gI0rOulVsO3K67tAwG+vjltQiRpA+cvN2JVlj/UWerwuIXpQCWin Nf8pKEi4VaYgRf4nOQXOLr4SZadMJJltsqXUshUxsmoP6gQ8I2Xq7jCojNro1yTO Ra6hAGf+Pzs8XUCqL89TcNHtbZRj+4pxL8SCKoM9YSZdM3anc0WUiDdIcjdNFgKw BJow5eGDFO2bSKJm2f75GscorJyhzqK+KbLzkSjZ4TYbVHzoJLhz+68= -----END CERTIFICATE-----Generated at Fri Dec 5 05:41:37 2025 by rpki-client