This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37362e302f32342d3234203d3e203432383331.roa File: 3137382e3234382e37362e302f32342d3234203d3e203432383331.roa (raw, json) Hash identifier: FQiM0Ff1DCSzma5DiHQMrsfmN7QznFFoSzW1a5q9Q2M= Subject key identifier: D0:95:66:5C:86:0D:A2:5A:E4:C3:51:33:02:BB:B9:B1:E5:3E:C1:8D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 17C8166277923E37A8F71DBF0C5A045544603C0B Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37362e302f32342d3234203d3e203432383331.roa Signing time: Thu 18 Dec 2025 22:13:00 +0000 ROA not before: Thu 18 Dec 2025 22:08:00 +0000 ROA not after: Thu 17 Dec 2026 22:13:00 +0000 asID: 42831 IP address blocks: 178.248.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c8:16:62:77:92:3e:37:a8:f7:1d:bf:0c:5a:04:55:44:60:3c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Dec 18 22:08:00 2025 GMT Not After : Dec 17 22:13:00 2026 GMT Subject: CN=D095665C860DA25AE4C3513302BBB9B1E53EC18D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:62:64:3d:78:47:bf:9c:3b:0b:57:f0:45:3a: 06:7a:91:2a:68:a9:f8:24:87:4c:5b:a1:d6:c7:f9: 1a:ed:83:e9:9a:df:65:f8:ef:63:07:6e:60:f9:be: c1:3a:66:3d:be:93:27:bc:24:ae:64:1b:5a:40:46: 01:43:36:95:fc:fd:2b:20:fa:88:15:69:21:47:5b: 90:69:8c:e7:1e:11:e1:6d:9b:2e:eb:0c:03:a0:49: a1:ea:48:48:de:e0:4a:88:03:30:34:e3:fa:29:68: 14:65:27:34:88:99:9c:b2:18:71:59:c7:eb:89:6f: d3:c9:45:5b:74:00:a6:5d:83:b1:1a:c9:79:4d:a3: 0b:12:70:44:7b:06:47:7b:63:0f:b9:e6:42:7b:0d: f7:8c:7c:59:9f:4f:87:7e:db:7d:77:34:08:d8:12: 10:79:b9:b4:a8:f5:03:a0:77:60:5b:eb:61:27:22: e1:a0:98:8c:fe:23:fd:28:3e:ac:f5:bb:bb:0a:92: 73:92:23:50:a3:ea:d5:a2:b3:f9:c5:8b:a0:b9:97: 45:60:b4:97:b3:9f:16:73:9a:35:00:bc:9b:f8:0c: 55:62:c8:2e:95:08:76:79:31:44:2c:95:8b:4b:2e: 79:83:b5:e1:bd:13:6a:13:22:54:f7:46:29:17:91: 33:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:95:66:5C:86:0D:A2:5A:E4:C3:51:33:02:BB:B9:B1:E5:3E:C1:8D X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37362e302f32342d3234203d3e203432383331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.248.76.0/24 Signature Algorithm: sha256WithRSAEncryption a4:4b:96:79:51:28:90:79:eb:d7:26:50:7d:85:84:88:81:fb: 19:bf:10:dd:40:34:0c:40:bc:38:5e:7c:d3:1a:70:cd:b3:73: 08:d8:78:c1:9b:3f:78:d8:81:79:21:c0:3d:b0:69:a2:3f:cc: 8c:5f:90:38:a6:fe:76:0f:07:be:a8:58:d4:c2:8a:67:12:a1: 6c:0d:8a:ba:56:76:68:78:ae:4b:6a:d9:47:cf:d3:dc:64:00: 79:89:71:27:f9:d4:90:f2:d3:28:62:e9:77:d6:de:1e:7f:96: df:3d:34:df:aa:ed:c5:eb:ab:e1:40:c2:51:af:84:c8:67:46: b4:d8:12:df:c4:15:e6:2d:56:8f:8a:10:29:bf:39:d7:28:e8: 12:e0:39:30:07:79:80:79:db:25:97:b0:e2:dd:ce:c4:1d:bd: 2a:3d:4b:2b:02:e4:c1:83:aa:50:c5:c9:f5:37:7b:73:34:b3: 80:79:33:5d:ae:56:4f:b2:19:12:69:56:cc:f3:bd:b4:4d:82: 8f:5b:c4:97:42:05:37:31:64:4d:4b:a6:c7:2a:2b:fb:25:f6: 52:0c:fd:39:90:ab:b9:05:41:72:ce:9a:ca:46:33:72:62:c2: 9d:0b:bc:58:6b:fa:9a:a2:da:84:13:a9:76:e5:e4:af:d2:c3: 09:b6:ce:1b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUF8gWYneSPjeo9x2/DFoEVURgPAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNTEyMTgyMjA4MDBaFw0yNjEyMTcyMjEzMDBaMDMxMTAvBgNV BAMTKEQwOTU2NjVDODYwREEyNUFFNEMzNTEzMzAyQkJCOUIxRTUzRUMxOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8YmQ9eEe/nDsLV/BFOgZ6kSpo qfgkh0xbodbH+Rrtg+ma32X472MHbmD5vsE6Zj2+kye8JK5kG1pARgFDNpX8/Ssg +ogVaSFHW5BpjOceEeFtmy7rDAOgSaHqSEje4EqIAzA04/opaBRlJzSImZyyGHFZ x+uJb9PJRVt0AKZdg7EayXlNowsScER7Bkd7Yw+55kJ7DfeMfFmfT4d+2313NAjY EhB5ubSo9QOgd2Bb62EnIuGgmIz+I/0oPqz1u7sKknOSI1Cj6tWis/nFi6C5l0Vg tJeznxZzmjUAvJv4DFViyC6VCHZ5MUQslYtLLnmDteG9E2oTIlT3RikXkTPrAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU0JVmXIYNolrkw1EzAru5seU+wY0wHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWMxNDMzODct ZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUxZTRhLzAvMzEzNzM4MmUzMjM0MzgyZTM3 MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMyMzgzMzMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA svhMMA0GCSqGSIb3DQEBCwUAA4IBAQCkS5Z5USiQeevXJlB9hYSIgfsZvxDdQDQM QLw4XnzTGnDNs3MI2HjBmz942IF5IcA9sGmiP8yMX5A4pv52Dwe+qFjUwopnEqFs DYq6VnZoeK5LatlHz9PcZAB5iXEn+dSQ8tMoYul31t4ef5bfPTTfqu3F66vhQMJR r4TIZ0a02BLfxBXmLVaPihApvznXKOgS4DkwB3mAedsll7Di3c7EHb0qPUsrAuTB g6pQxcn1N3tzNLOAeTNdrlZPshkSaVbM8720TYKPW8SXQgU3MWRNS6bHKiv7JfZS DP05kKu5BUFyzprKRjNyYsKdC7xYa/qaotqEE6l25eSv0sMJts4b -----END CERTIFICATE-----Generated at Fri Dec 19 12:02:23 2025 by rpki-client