This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3230322e3134342e302f32322d3234203d3e20323035313933.roa File: 3138352e3230322e3134342e302f32322d3234203d3e20323035313933.roa (raw, json) Hash identifier: LRszeRhiqNiDpTZLRxtFbRdntoZBJmprly3ss2Kwomk= Subject key identifier: BB:BE:13:EC:E5:1E:17:85:B9:D5:11:82:5E:8A:CB:E7:B9:FE:59:66 Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0 Certificate serial: 289921E669180D5BA4F3D4C3C0C5E78FA1A02F7C Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3230322e3134342e302f32322d3234203d3e20323035313933.roa Signing time: Fri 19 Dec 2025 11:16:37 +0000 ROA not before: Fri 19 Dec 2025 11:11:37 +0000 ROA not after: Fri 18 Dec 2026 11:16:37 +0000 asID: 205193 IP address blocks: 185.202.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:99:21:e6:69:18:0d:5b:a4:f3:d4:c3:c0:c5:e7:8f:a1:a0:2f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0 Validity Not Before: Dec 19 11:11:37 2025 GMT Not After : Dec 18 11:16:37 2026 GMT Subject: CN=BBBE13ECE51E1785B9D511825E8ACBE7B9FE5966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:56:fb:8e:ce:f5:1f:e9:37:99:24:b9:1f:5a: fe:4b:ef:fa:84:37:32:aa:91:b0:70:68:60:cb:b9: 56:cf:b3:ba:12:e1:26:72:30:0f:b5:96:15:4c:93: 28:a3:3b:6a:80:4d:74:86:e8:c9:8a:18:e9:ab:c9: c5:30:72:fc:6b:df:13:64:ff:c1:d9:b1:00:d0:b0: 54:a3:95:24:06:ed:a0:ab:a4:04:2c:18:cb:7d:dc: 1b:af:17:1b:28:b9:31:1c:a0:1c:96:cc:e7:82:26: 0f:dd:11:34:5f:23:37:72:c6:75:d6:f0:0a:3f:6c: 57:4c:83:64:22:84:9a:52:8e:eb:0e:51:7a:ba:d4: aa:26:63:8b:dd:d9:ee:32:37:ad:71:68:43:56:9a: 4e:72:a5:bb:e2:0c:72:70:16:4d:48:69:eb:03:64: 0c:a4:43:e8:af:e0:d5:71:35:3f:21:9f:ec:a2:67: 1c:dd:18:19:89:71:0e:62:f7:f8:08:61:80:51:02: d1:fe:de:26:99:26:fe:48:30:99:0a:9f:a4:ee:c6: 0c:d5:a3:a7:a5:ee:ec:e4:e3:0e:1c:f2:69:ee:bc: 7b:ad:ca:f1:84:6d:39:36:9a:79:fd:14:2e:7e:59: a6:c6:6d:ca:9f:c5:19:8f:7a:73:9d:98:ec:06:f3: 86:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BE:13:EC:E5:1E:17:85:B9:D5:11:82:5E:8A:CB:E7:B9:FE:59:66 X509v3 Authority Key Identifier: keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3230322e3134342e302f32322d3234203d3e20323035313933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.202.144.0/22 Signature Algorithm: sha256WithRSAEncryption 76:a8:d8:df:4b:be:19:1e:39:52:8d:5d:d0:91:54:0a:0c:61: ec:9c:f6:4e:94:ca:27:c4:f8:ec:72:83:49:31:f1:51:b0:13: 5e:d0:84:4a:2b:d2:d9:bb:14:93:74:25:f1:53:36:ca:10:d8: 9e:72:4b:8a:c7:58:e9:26:9e:24:f7:f2:58:79:aa:81:3a:14: 90:1e:9b:be:74:ce:b7:fb:2a:67:5a:44:f9:d3:7f:20:16:8e: 9b:b1:0e:40:ca:e1:2a:1d:e0:a7:86:ec:79:07:9c:94:54:f6: f3:93:0e:d6:81:cb:f6:51:05:7e:7d:98:69:d4:89:4b:00:4b: 75:c5:11:7b:4e:01:5c:09:60:13:41:3f:96:8b:02:6c:1b:05: 9b:53:44:52:ac:de:73:57:00:d3:94:3b:7f:c9:e4:4e:15:68: a9:fb:12:b6:37:b0:6a:0f:86:14:5d:ac:ee:d2:4c:2f:91:ac: 5e:80:5f:99:5c:02:ff:cc:a2:af:99:24:0a:75:cc:85:5d:a7: e5:35:40:f8:d7:f0:26:86:17:ab:c2:87:00:31:58:12:8d:ad: 5b:32:72:13:f8:b5:2c:f9:a3:2d:75:d2:78:3f:91:44:32:c1: 73:e6:21:53:94:5b:7e:6d:e9:a4:75:2a:fb:d1:27:0d:39:b5: 68:9b:b3:6d -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUKJkh5mkYDVuk89TDwMXnj6GgL3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm N2M5YWNhMDAeFw0yNTEyMTkxMTExMzdaFw0yNjEyMTgxMTE2MzdaMDMxMTAvBgNV BAMTKEJCQkUxM0VDRTUxRTE3ODVCOUQ1MTE4MjVFOEFDQkU3QjlGRTU5NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVvuOzvUf6TeZJLkfWv5L7/qE NzKqkbBwaGDLuVbPs7oS4SZyMA+1lhVMkyijO2qATXSG6MmKGOmrycUwcvxr3xNk /8HZsQDQsFSjlSQG7aCrpAQsGMt93BuvFxsouTEcoByWzOeCJg/dETRfIzdyxnXW 8Ao/bFdMg2QihJpSjusOUXq61KomY4vd2e4yN61xaENWmk5ypbviDHJwFk1IaesD ZAykQ+iv4NVxNT8hn+yiZxzdGBmJcQ5i9/gIYYBRAtH+3iaZJv5IMJkKn6TuxgzV o6el7uzk4w4c8mnuvHutyvGEbTk2mnn9FC5+WabGbcqfxRmPenOdmOwG84bdAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUu74T7OUeF4W51RGCXorL57n+WWYwHwYDVR0j BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm SnJLQS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2E3ODllODct ZjQ4NC00MjNkLWExZDctMmMyZDU4NjBkMmVjLzAvMzEzODM1MmUzMjMwMzIyZTMx MzQzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNTMxMzkzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArnKkDANBgkqhkiG9w0BAQsFAAOCAQEAdqjY30u+GR45Uo1d0JFUCgxh7Jz2 TpTKJ8T47HKDSTHxUbATXtCESivS2bsUk3Ql8VM2yhDYnnJLisdY6SaeJPfyWHmq gToUkB6bvnTOt/sqZ1pE+dN/IBaOm7EOQMrhKh3gp4bseQeclFT285MO1oHL9lEF fn2YadSJSwBLdcURe04BXAlgE0E/losCbBsFm1NEUqzec1cA05Q7f8nkThVoqfsS tjewag+GFF2s7tJML5GsXoBfmVwC/8yir5kkCnXMhV2n5TVA+NfwJoYXq8KHADFY Eo2tWzJyE/i1LPmjLXXSeD+RRDLBc+YhU5Rbfm3ppHUq+9EnDTm1aJuzbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:50:39 2025 by rpki-client