This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3136372e32342e302f32322d3234203d3e20323035313933.roa File: 3138352e3136372e32342e302f32322d3234203d3e20323035313933.roa (raw, json) Hash identifier: esMBCsKDarR5Xp6fAJoFRp5XDQCvw8Vih+LPOZmeVgc= Subject key identifier: 0F:81:5C:B6:C0:43:16:E9:13:1D:D3:B2:36:E8:89:AC:EE:85:79:E0 Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0 Certificate serial: 16FC480D18911E2523BBEFD64B1E2E215DE42A84 Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3136372e32342e302f32322d3234203d3e20323035313933.roa Signing time: Fri 19 Dec 2025 11:11:17 +0000 ROA not before: Fri 19 Dec 2025 11:06:17 +0000 ROA not after: Fri 18 Dec 2026 11:11:17 +0000 asID: 205193 IP address blocks: 185.167.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:fc:48:0d:18:91:1e:25:23:bb:ef:d6:4b:1e:2e:21:5d:e4:2a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0 Validity Not Before: Dec 19 11:06:17 2025 GMT Not After : Dec 18 11:11:17 2026 GMT Subject: CN=0F815CB6C04316E9131DD3B236E889ACEE8579E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:47:bb:d1:c7:a2:ec:e0:83:e9:ad:89:af:a5: b1:d4:c2:c9:1c:a2:98:65:2b:39:67:91:30:aa:d5: 16:71:61:82:f9:e8:98:38:72:1f:52:09:8b:b1:3d: 33:af:84:49:f1:6a:cc:63:ec:c8:a1:54:22:78:10: 03:50:10:a8:fa:c7:d6:e7:6b:6a:cc:ee:6b:c3:9e: 8b:c2:d8:e8:f6:7e:a7:b4:c5:18:9d:a9:c1:25:f9: fa:1d:e4:cd:26:4b:05:e3:21:1a:6a:ca:0f:f9:99: 0e:5d:93:61:8a:79:b3:0b:e5:af:ae:43:ac:6d:97: 1f:e2:da:52:d8:3d:69:43:05:83:67:63:29:0b:24: 61:58:c7:4e:0c:2c:20:4e:3f:74:ab:fd:39:cc:ba: f3:b5:6d:b8:2a:7a:ff:63:b2:d5:0f:72:3a:a5:8a: b5:4b:7e:d6:d9:33:82:55:8f:41:49:24:23:6b:85: 9c:e0:4a:9a:6f:b4:43:7f:e3:94:90:9f:64:c7:60: 72:fa:05:14:85:72:ed:f5:d7:92:5b:a9:f9:28:25: 25:c3:78:6f:85:c4:19:ab:df:5c:77:8a:a9:d2:14: f9:d9:f8:80:3a:3a:d4:3c:7e:de:54:c6:26:19:68: 39:bf:c9:de:b1:da:a3:95:b6:de:ef:d9:5b:b9:19: 7f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:81:5C:B6:C0:43:16:E9:13:1D:D3:B2:36:E8:89:AC:EE:85:79:E0 X509v3 Authority Key Identifier: keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3136372e32342e302f32322d3234203d3e20323035313933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.24.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:16:b9:5b:0b:49:48:cd:34:fe:dd:af:61:f0:09:ff:fe:78: 9c:d4:95:87:d5:2b:54:79:a2:f7:5a:59:da:df:37:e2:cc:96: 77:11:ca:fc:b5:fb:c4:81:93:1e:e8:ed:76:a0:82:58:c9:70: fb:85:e5:70:09:a0:2f:80:5e:c9:84:78:0e:83:54:e8:64:8f: 64:43:e4:da:ee:6e:c3:78:5c:a6:37:e6:85:31:70:13:55:4f: 4e:1f:9e:03:90:06:6c:2c:e9:66:92:a7:9a:ae:2b:de:d7:5d: 3e:64:64:31:c7:e3:7f:57:68:2e:44:ed:2e:89:e4:82:b7:af: d6:a1:00:11:9f:af:78:d8:7b:50:1d:6c:d1:23:3f:ad:ad:cd: 04:2e:85:25:8b:fc:72:4d:4f:ae:72:a8:de:e0:67:7b:72:65: 75:e9:3b:fc:ba:e2:67:d8:f1:bd:ed:06:0b:8a:b4:72:92:b3: ea:c2:67:8e:39:2d:a9:8e:d7:7c:02:70:5b:7a:ee:29:33:67: be:3a:7d:ff:db:bb:df:49:ef:72:c4:04:65:d6:d7:90:77:61: 24:5d:7e:dc:39:c6:f5:a9:77:5b:8c:a9:57:d4:f4:ee:25:a0: ff:12:f1:9a:6f:e5:bc:3b:47:ed:a8:dd:35:ab:23:6a:5c:8f: 38:88:7c:89 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUFvxIDRiRHiUju+/WSx4uIV3kKoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm N2M5YWNhMDAeFw0yNTEyMTkxMTA2MTdaFw0yNjEyMTgxMTExMTdaMDMxMTAvBgNV BAMTKDBGODE1Q0I2QzA0MzE2RTkxMzFERDNCMjM2RTg4OUFDRUU4NTc5RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPR7vRx6Ls4IPprYmvpbHUwskc ophlKzlnkTCq1RZxYYL56Jg4ch9SCYuxPTOvhEnxasxj7MihVCJ4EANQEKj6x9bn a2rM7mvDnovC2Oj2fqe0xRidqcEl+fod5M0mSwXjIRpqyg/5mQ5dk2GKebML5a+u Q6xtlx/i2lLYPWlDBYNnYykLJGFYx04MLCBOP3Sr/TnMuvO1bbgqev9jstUPcjql irVLftbZM4JVj0FJJCNrhZzgSppvtEN/45SQn2THYHL6BRSFcu3115JbqfkoJSXD eG+FxBmr31x3iqnSFPnZ+IA6OtQ8ft5UxiYZaDm/yd6x2qOVtt7v2Vu5GX+pAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUD4FctsBDFukTHdOyNuiJrO6FeeAwHwYDVR0j BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm SnJLQS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2E3ODllODct ZjQ4NC00MjNkLWExZDctMmMyZDU4NjBkMmVjLzAvMzEzODM1MmUzMTM2MzcyZTMy MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMwMzUzMTM5MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAK5pxgwDQYJKoZIhvcNAQELBQADggEBADwWuVsLSUjNNP7dr2HwCf/+eJzUlYfV K1R5ovdaWdrfN+LMlncRyvy1+8SBkx7o7XaggljJcPuF5XAJoC+AXsmEeA6DVOhk j2RD5NrubsN4XKY35oUxcBNVT04fngOQBmws6WaSp5quK97XXT5kZDHH439XaC5E 7S6J5IK3r9ahABGfr3jYe1AdbNEjP62tzQQuhSWL/HJNT65yqN7gZ3tyZXXpO/y6 4mfY8b3tBguKtHKSs+rCZ445LamO13wCcFt67ikzZ746ff/bu99J73LEBGXW15B3 YSRdftw5xvWpd1uMqVfU9O4loP8S8Zpv5bw7R+2o3TWrI2pcjziIfIk= -----END CERTIFICATE-----Generated at Sat Dec 20 00:49:51 2025 by rpki-client