This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e20313337353137.roa File: 37382e33312e3234382e302f32342d3234203d3e20313337353137.roa (raw, json) Hash identifier: SE7D2KDofB5rrWhXLVNSPilmOfg1f4zq32TqSJxg08Y= Subject key identifier: D0:47:59:C4:F2:06:6B:D1:12:4A:37:A6:9F:5B:29:C4:2C:47:00:CF Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 78A0F5EF33E3478FB9CF530DCE419A1618E43A83 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e20313337353137.roa Signing time: Mon 12 Jan 2026 19:44:17 +0000 ROA not before: Mon 12 Jan 2026 19:39:17 +0000 ROA not after: Mon 11 Jan 2027 19:44:17 +0000 asID: 137517 IP address blocks: 78.31.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a0:f5:ef:33:e3:47:8f:b9:cf:53:0d:ce:41:9a:16:18:e4:3a:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Jan 12 19:39:17 2026 GMT Not After : Jan 11 19:44:17 2027 GMT Subject: CN=D04759C4F2066BD1124A37A69F5B29C42C4700CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fc:e8:81:ab:34:68:34:f7:62:67:0e:e0:4d: d0:e9:0f:96:47:88:9d:eb:7b:1b:e2:e3:8e:e7:96: 02:28:cf:82:26:56:00:ef:70:e5:a3:29:f8:f3:aa: eb:e6:99:c9:bc:42:b4:26:5d:81:1a:5c:f1:56:dc: ac:b1:36:d9:82:60:f5:00:8a:1b:4b:bb:b7:ef:36: 01:18:60:ed:67:82:20:73:e1:04:44:e0:99:aa:b9: fe:a5:37:c6:29:4e:ac:e0:ec:02:64:fc:d6:a9:d5: 35:d6:14:bd:a6:a1:29:e3:c5:86:7f:f9:d8:d5:23: 94:82:81:c9:57:b3:c7:4d:a9:c5:3f:c1:7a:8f:d3: 5e:26:31:8f:cc:37:6c:33:26:55:05:0c:61:ad:6b: 2b:e0:cd:44:16:33:17:93:2b:12:23:61:39:a6:c5: a0:f8:10:e7:a7:02:09:0a:e6:b5:4c:81:05:02:45: 22:94:d8:1e:e0:c4:e1:9d:6f:ca:16:29:2f:2b:e6: 56:64:81:93:2f:58:c0:92:17:a0:a9:43:4d:91:aa: a1:9a:50:83:c8:e2:a4:ac:49:05:15:7a:bb:ef:6c: a7:64:dd:9c:46:9b:8c:4b:3e:b0:8d:1d:e1:3f:cf: d8:8b:b4:7c:5f:89:8b:48:ea:75:04:48:5e:ab:81: 75:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:47:59:C4:F2:06:6B:D1:12:4A:37:A6:9F:5B:29:C4:2C:47:00:CF X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e20313337353137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.31.248.0/24 Signature Algorithm: sha256WithRSAEncryption 93:e0:d9:cc:4c:7e:9a:95:8a:97:29:0e:1e:e2:37:7a:d6:e8: 13:45:43:44:e8:0d:ce:34:68:ef:5a:d5:ee:aa:97:be:e9:d0: 41:d6:0e:03:5d:91:e5:39:97:bb:fa:5a:d4:f3:d4:a4:cc:9a: d0:d0:d7:cc:ef:77:2d:e6:87:46:0e:f4:ca:10:72:c2:ee:07: 97:ef:60:68:28:75:54:f4:90:11:d9:ec:2d:43:bb:48:74:ae: 6c:d7:56:31:c0:79:43:ed:34:7a:66:d9:88:01:5d:6a:2d:e1: c9:3a:0d:c4:b2:d5:4a:be:7a:73:32:a1:03:98:5a:75:b6:1f: 5e:43:41:c8:48:7b:e0:41:aa:da:4b:f3:49:a1:a0:77:f8:6d: d6:44:98:ca:ea:3c:f1:0e:af:35:ed:1f:03:76:77:33:67:39: 26:a0:42:22:f4:0b:3d:1f:ce:30:85:b4:1b:b6:6d:43:c7:f3: 1b:71:c3:39:3d:58:ec:01:82:9e:2d:57:12:f8:2d:dc:a8:cf: c6:ef:c2:cc:7c:67:7c:0b:03:ef:78:39:ee:e8:72:e6:c7:b9: 91:95:9e:63:5f:2e:a8:5f:02:98:12:02:9d:41:ae:15:0b:64: 99:21:3d:5f:25:e0:b1:d4:be:e1:d5:5e:48:a3:28:82:9b:c2: 59:55:1c:ae -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUeKD17zPjR4+5z1MNzkGaFhjkOoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNjAxMTIxOTM5MTdaFw0yNzAxMTExOTQ0MTdaMDMxMTAvBgNV BAMTKEQwNDc1OUM0RjIwNjZCRDExMjRBMzdBNjlGNUIyOUM0MkM0NzAwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU/OiBqzRoNPdiZw7gTdDpD5ZH iJ3rexvi447nlgIoz4ImVgDvcOWjKfjzquvmmcm8QrQmXYEaXPFW3KyxNtmCYPUA ihtLu7fvNgEYYO1ngiBz4QRE4Jmquf6lN8YpTqzg7AJk/Nap1TXWFL2moSnjxYZ/ +djVI5SCgclXs8dNqcU/wXqP014mMY/MN2wzJlUFDGGtayvgzUQWMxeTKxIjYTmm xaD4EOenAgkK5rVMgQUCRSKU2B7gxOGdb8oWKS8r5lZkgZMvWMCSF6CpQ02RqqGa UIPI4qSsSQUVervvbKdk3ZxGm4xLPrCNHeE/z9iLtHxfiYtI6nUESF6rgXW9AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU0EdZxPIGa9ESSjemn1spxCxHAM8wHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzczODJlMzMzMTJlMzIzNDM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM3MzUzMTM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA Th/4MA0GCSqGSIb3DQEBCwUAA4IBAQCT4NnMTH6alYqXKQ4e4jd61ugTRUNE6A3O NGjvWtXuqpe+6dBB1g4DXZHlOZe7+lrU89SkzJrQ0NfM73ct5odGDvTKEHLC7geX 72BoKHVU9JAR2ewtQ7tIdK5s11YxwHlD7TR6ZtmIAV1qLeHJOg3EstVKvnpzMqED mFp1th9eQ0HISHvgQaraS/NJoaB3+G3WRJjK6jzxDq817R8DdnczZzkmoEIi9As9 H84whbQbtm1Dx/MbccM5PVjsAYKeLVcS+C3cqM/G78LMfGd8CwPveDnu6HLmx7mR lZ5jXy6oXwKYEgKdQa4VC2SZIT1fJeCx1L7h1V5IoyiCm8JZVRyu -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:40 2026 by rpki-client