This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa File: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (raw, json) Hash identifier: 18uWoZxLQSNFgorcRVHtw6ibhqjhBqTrkSvVXqFqM+Y= Subject key identifier: 41:3C:1A:D4:21:78:A2:DF:45:95:B3:E4:13:95:EB:22:74:56:75:13 Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Certificate serial: 276844B44821006181B5A359744A587700BF933A Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa Signing time: Tue 30 Dec 2025 19:55:33 +0000 ROA not before: Tue 30 Dec 2025 19:50:33 +0000 ROA not after: Tue 29 Dec 2026 19:55:33 +0000 asID: 213920 IP address blocks: 178.132.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:68:44:b4:48:21:00:61:81:b5:a3:59:74:4a:58:77:00:bf:93:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Validity Not Before: Dec 30 19:50:33 2025 GMT Not After : Dec 29 19:55:33 2026 GMT Subject: CN=413C1AD42178A2DF4595B3E41395EB2274567513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:bb:89:95:a2:8f:21:69:eb:fe:e9:27:cb: 55:00:bb:19:4e:a4:7b:61:e8:0a:62:f5:b8:1e:05: 7f:7d:28:cb:eb:ef:87:20:b7:a3:f8:c4:ea:bd:fa: 0c:d0:d8:e6:74:68:20:d3:f2:bc:f0:04:33:75:90: 89:a4:52:8a:c2:41:a6:89:57:b1:b3:f8:47:5f:58: c7:63:06:51:d0:54:a3:d8:f6:ee:98:61:99:a3:05: 42:2f:b0:91:66:d2:f2:d8:90:6a:a8:15:86:c4:9b: 95:a4:60:9e:eb:8d:f7:65:17:dd:82:65:71:64:c3: 6e:cf:81:5b:f4:96:71:80:34:7c:7d:19:35:0b:f5: 73:1b:49:f8:f4:3c:7c:35:11:ce:86:dc:8c:7a:c1: 98:bd:d5:9d:bc:31:ad:82:9e:07:66:11:93:b3:fc: cb:44:da:c9:ff:5b:69:c6:39:67:1c:15:27:4b:06: 8c:b5:77:dc:f1:7e:17:d7:30:2e:0c:d0:c1:8f:13: 2d:47:e9:da:96:cc:b5:1a:4f:fa:24:95:24:49:a3: 6c:52:60:ef:3a:89:a8:1b:4c:b1:a5:ae:c5:5d:17: 4c:19:7b:f1:3a:e1:10:c1:da:2c:96:da:5b:f3:9b: d9:ca:fa:ca:5e:da:73:09:2a:e0:f0:83:ba:9e:47: b1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3C:1A:D4:21:78:A2:DF:45:95:B3:E4:13:95:EB:22:74:56:75:13 X509v3 Authority Key Identifier: keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.132.198.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:d4:96:84:0f:30:02:0e:de:49:97:7c:b3:e7:81:63:fd:f6: 0a:11:c1:54:6a:eb:b9:e3:eb:9d:80:d9:4d:69:72:a2:a6:57: 11:48:4d:b3:5a:27:97:1f:b5:de:68:29:40:54:ad:ac:05:43: b3:ac:23:ca:35:4b:ff:26:a1:d0:82:57:d2:10:35:5b:3f:26: 19:1c:23:95:22:65:7b:d4:3a:a6:3a:07:ff:bc:e1:cf:6d:da: 07:be:a4:e9:72:72:ba:02:f3:12:60:c2:fb:67:65:af:5d:ea: d8:04:92:a3:c8:06:87:11:ba:72:94:04:a1:9f:6c:4f:17:66: b7:31:41:dc:f9:f1:87:54:6a:c1:6e:29:f8:86:f2:78:13:89: 74:79:3b:84:df:49:1e:5f:78:7e:e6:fb:b7:e1:02:de:81:6a: 86:54:7f:96:57:10:9d:3c:3d:6d:d0:c4:c5:3f:57:47:b4:ea: 09:3c:f3:54:09:67:af:c5:21:a5:17:a2:32:80:e5:ff:d0:0b: 03:16:75:b4:0c:72:ff:6d:cf:e0:3d:54:10:61:d5:fc:36:46: bc:66:75:44:3f:a8:de:d6:e2:3e:c5:64:26:e8:6b:68:42:ed: b4:22:6e:81:8f:5e:81:f3:83:49:43:b4:c5:5b:34:75:c9:49: 84:8d:9c:a5 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUJ2hEtEghAGGBtaNZdEpYdwC/kzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk MTZjZWVkMzAeFw0yNTEyMzAxOTUwMzNaFw0yNjEyMjkxOTU1MzNaMDMxMTAvBgNV BAMTKDQxM0MxQUQ0MjE3OEEyREY0NTk1QjNFNDEzOTVFQjIyNzQ1Njc1MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1eLuJlaKPIWnr/ukny1UAuxlO pHth6Api9bgeBX99KMvr74cgt6P4xOq9+gzQ2OZ0aCDT8rzwBDN1kImkUorCQaaJ V7Gz+EdfWMdjBlHQVKPY9u6YYZmjBUIvsJFm0vLYkGqoFYbEm5WkYJ7rjfdlF92C ZXFkw27PgVv0lnGANHx9GTUL9XMbSfj0PHw1Ec6G3Ix6wZi91Z28Ma2CngdmEZOz /MtE2sn/W2nGOWccFSdLBoy1d9zxfhfXMC4M0MGPEy1H6dqWzLUaT/oklSRJo2xS YO86iagbTLGlrsVdF0wZe/E64RDB2iyW2lvzm9nK+spe2nMJKuDwg7qeR7H/AgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUQTwa1CF4ot9FlbPkE5XrInRWdRMwHwYDVR0j BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0 NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G czd0TS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGNjMDg3Mzct OTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0NGVkLzAvMzEzNzM4MmUzMTMzMzIyZTMx MzkzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMzM5MzIzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALKExjANBgkqhkiG9w0BAQsFAAOCAQEAetSWhA8wAg7eSZd8s+eBY/32ChHB VGrruePrnYDZTWlyoqZXEUhNs1onlx+13mgpQFStrAVDs6wjyjVL/yah0IJX0hA1 Wz8mGRwjlSJle9Q6pjoH/7zhz23aB76k6XJyugLzEmDC+2dlr13q2ASSo8gGhxG6 cpQEoZ9sTxdmtzFB3Pnxh1RqwW4p+IbyeBOJdHk7hN9JHl94fub7t+EC3oFqhlR/ llcQnTw9bdDExT9XR7TqCTzzVAlnr8UhpReiMoDl/9ALAxZ1tAxy/23P4D1UEGHV /DZGvGZ1RD+o3tbiPsVkJuhraELttCJugY9egfODSUO0xVs0dclJhI2cpQ== -----END CERTIFICATE-----Generated at Fri Jan 2 23:26:51 2026 by rpki-client