This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130342e302f32342d3234203d3e20313336373837.roa File: 3137382e3133322e3130342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: JbxbLRSzC7IM/InZlLFZhuwpS4IpfT9INWEUq7bmBmU= Subject key identifier: 9F:75:EE:07:D7:4D:0B:17:F1:3E:D1:BF:40:95:4E:2B:43:24:9E:4F Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 387356399A24CAE913E0B0661190976AB8D16F0F Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130342e302f32342d3234203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:50:45 +0000 ROA not before: Mon 29 Dec 2025 09:45:45 +0000 ROA not after: Mon 28 Dec 2026 09:50:45 +0000 asID: 136787 IP address blocks: 178.132.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:73:56:39:9a:24:ca:e9:13:e0:b0:66:11:90:97:6a:b8:d1:6f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:45 2025 GMT Not After : Dec 28 09:50:45 2026 GMT Subject: CN=9F75EE07D74D0B17F13ED1BF40954E2B43249E4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d0:94:38:16:3b:88:77:52:aa:78:54:18:15: e0:84:fd:09:ff:78:08:a5:45:19:3a:6a:7f:8b:8b: b3:4d:27:1e:9a:fe:6f:cf:8e:a4:fd:71:63:ee:ff: 3c:ba:84:d2:40:f6:04:5f:0f:a0:d1:44:cc:49:9e: 88:84:46:32:28:a6:3b:1d:46:16:23:4d:1d:16:d4: ef:5d:7f:40:e7:39:5b:db:e5:98:a3:b3:4a:c2:ef: 28:1d:b7:ce:94:79:51:2c:24:1e:52:1f:9b:e3:6d: 69:0c:05:e5:3e:2a:eb:71:2d:7e:8a:5c:9f:cf:87: 31:a0:57:44:20:89:bb:58:ff:cf:1e:b1:98:d2:f5: 7f:b2:f6:d0:ac:a2:41:a0:f5:50:26:9d:5d:6c:c2: 32:ad:e8:fe:1b:d4:57:ee:64:92:6f:2c:41:e0:83: 2e:a2:0f:da:42:a0:8b:2e:f1:b1:20:5c:f6:e2:2c: 37:0f:4d:1f:5d:d5:76:e1:2f:3d:fc:f9:7e:d5:fc: 89:48:27:91:d4:2f:aa:68:2d:f5:c4:ef:b8:fe:63: a9:38:b6:26:23:e6:55:6f:cb:28:61:cb:61:d9:c2: 9f:16:9a:d3:b7:22:44:f9:3f:9d:93:26:fb:4e:d2: 4c:1f:f7:db:b5:8c:ea:a4:62:c6:2b:39:20:42:e0: 5d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:75:EE:07:D7:4D:0B:17:F1:3E:D1:BF:40:95:4E:2B:43:24:9E:4F X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.132.104.0/24 Signature Algorithm: sha256WithRSAEncryption 73:f0:09:52:d6:bf:8c:21:68:45:7f:1e:6f:54:66:83:88:da: d7:ed:80:fd:54:83:79:ad:be:01:25:91:96:e5:0f:e3:4c:ad: 5b:78:a7:37:27:34:1a:ab:e6:84:4e:76:00:d6:12:e0:a8:31: fc:b7:2c:5b:59:a3:41:32:06:1a:1a:ba:f7:87:d1:9e:c9:ad: d9:2c:4d:70:b7:14:a5:8b:3f:67:1c:8e:e5:91:16:c0:3a:a8: e5:95:b5:de:f1:93:86:48:6e:a3:61:5b:ed:d5:96:f6:cd:99: b7:99:4d:24:99:a6:4b:5a:34:37:aa:1d:99:92:8e:55:7f:95: 40:91:42:a6:16:25:f2:98:27:c1:a1:2e:48:d0:a0:a6:79:e2: 22:a7:56:ea:72:16:ff:d0:21:65:a0:bf:69:39:cf:ee:95:da: 52:95:51:07:7e:f3:bc:77:68:2c:68:b6:b3:bd:39:86:4b:83: 74:0b:bf:38:b6:9e:e1:8d:c6:54:ad:2c:6e:d7:0a:70:d6:71: 70:62:af:12:2e:49:c4:a8:fc:7d:50:91:a9:19:ec:7c:f6:4d: af:b5:d5:16:44:9a:72:51:34:6e:98:ff:08:22:06:62:40:1c: 12:d5:09:68:d7:14:5b:19:81:dc:3c:ae:53:47:1d:07:1c:4a: 40:c0:27:08 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUOHNWOZokyukT4LBmEZCXarjRbw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDVaFw0yNjEyMjgwOTUwNDVaMDMxMTAvBgNV BAMTKDlGNzVFRTA3RDc0RDBCMTdGMTNFRDFCRjQwOTU0RTJCNDMyNDlFNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq0JQ4FjuId1KqeFQYFeCE/Qn/ eAilRRk6an+Li7NNJx6a/m/PjqT9cWPu/zy6hNJA9gRfD6DRRMxJnoiERjIopjsd RhYjTR0W1O9df0DnOVvb5Zijs0rC7ygdt86UeVEsJB5SH5vjbWkMBeU+KutxLX6K XJ/PhzGgV0QgibtY/88esZjS9X+y9tCsokGg9VAmnV1swjKt6P4b1FfuZJJvLEHg gy6iD9pCoIsu8bEgXPbiLDcPTR9d1XbhLz38+X7V/IlIJ5HUL6poLfXE77j+Y6k4 tiYj5lVvyyhhy2HZwp8WmtO3IkT5P52TJvtO0kwf99u1jOqkYsYrOSBC4F17AgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUn3XuB9dNCxfxPtG/QJVOK0Mknk8wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNzM4MmUzMTMzMzIyZTMx MzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALKEaDANBgkqhkiG9w0BAQsFAAOCAQEAc/AJUta/jCFoRX8eb1Rmg4ja1+2A /VSDea2+ASWRluUP40ytW3inNyc0GqvmhE52ANYS4Kgx/LcsW1mjQTIGGhq694fR nsmt2SxNcLcUpYs/ZxyO5ZEWwDqo5ZW13vGThkhuo2Fb7dWW9s2Zt5lNJJmmS1o0 N6odmZKOVX+VQJFCphYl8pgnwaEuSNCgpnniIqdW6nIW/9AhZaC/aTnP7pXaUpVR B37zvHdoLGi2s705hkuDdAu/OLae4Y3GVK0sbtcKcNZxcGKvEi5JxKj8fVCRqRns fPZNr7XVFkSaclE0bpj/CCIGYkAcEtUJaNcUWxmB3DyuU0cdBxxKQMAnCA== -----END CERTIFICATE-----Generated at Tue Jan 27 04:26:35 2026 by rpki-client