This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e322e302f32342d3234203d3e20323136313531.roa File: 3138352e3136392e322e302f32342d3234203d3e20323136313531.roa (raw, json) Hash identifier: Vj+K8TcPQGM35CvRsa76pixWlz6qdFypkSA5tcKfq/Q= Subject key identifier: 1D:62:76:6E:E6:E7:46:EC:A3:48:53:03:F0:17:C7:04:04:DF:58:80 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1C8248CADF76F2102E7B4346856F79A991447570 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e322e302f32342d3234203d3e20323136313531.roa Signing time: Mon 29 Dec 2025 16:51:08 +0000 ROA not before: Mon 29 Dec 2025 16:46:08 +0000 ROA not after: Mon 28 Dec 2026 16:51:08 +0000 asID: 216151 IP address blocks: 185.169.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 13:09:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:82:48:ca:df:76:f2:10:2e:7b:43:46:85:6f:79:a9:91:44:75:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Dec 29 16:46:08 2025 GMT Not After : Dec 28 16:51:08 2026 GMT Subject: CN=1D62766EE6E746ECA3485303F017C70404DF5880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7c:18:87:bd:2d:96:b1:8c:ee:18:91:4b:f3: d4:2a:21:6a:01:53:46:68:02:87:0a:3e:6c:98:6a: fd:a3:30:b4:98:2a:88:3e:14:5b:5b:e9:48:39:8b: 43:e1:7f:a3:0c:7f:07:a1:3a:60:92:30:20:21:35: b6:57:58:53:73:e2:a2:5d:c0:88:58:9e:7c:d5:f5: cc:e1:78:53:ca:20:5b:88:d0:3d:bb:4b:29:c7:84: ab:e7:f6:a3:72:d4:21:80:5c:fb:77:ed:13:fe:b6: 55:d8:9d:c6:ef:b5:ed:6a:64:73:34:ad:ce:33:84: 91:16:d0:85:b5:73:88:0a:5f:e4:96:a3:65:b6:b8: f5:48:85:ec:5f:6f:fd:28:1a:c9:89:ce:ad:5f:d7: 4d:73:7e:8d:e0:30:4a:12:ad:10:62:a4:63:3e:14: 46:0c:b1:6a:6a:5e:c1:1a:57:e7:bb:95:d5:6b:b1: 42:ac:db:9b:ae:4c:9d:7f:7d:29:6f:aa:e3:5d:45: 03:72:32:a7:42:1d:64:1e:bb:02:26:41:99:49:69: 28:bc:bf:7b:bc:25:13:bf:7d:f3:92:f3:6f:7a:67: 8e:ea:06:82:d8:06:bb:65:b9:10:60:f6:e2:65:1e: a0:14:ab:2c:a7:39:bf:b8:68:2d:12:2a:0e:7c:e5: 9f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:62:76:6E:E6:E7:46:EC:A3:48:53:03:F0:17:C7:04:04:DF:58:80 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e322e302f32342d3234203d3e20323136313531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.2.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:b6:e6:12:2d:83:62:f0:58:85:6d:21:c4:b5:43:93:d4:ed: 4a:49:54:0e:b1:d9:12:64:fd:d0:dd:e0:b3:54:59:66:63:d9: b9:fa:cb:54:61:04:b6:a9:69:37:7c:2a:7f:6c:65:5c:8d:0c: 73:5a:b9:f9:ae:d8:9f:aa:bb:c1:b3:6c:75:6c:04:c2:84:02: ab:68:9b:7d:0b:cb:97:05:be:e6:98:de:43:63:fd:d4:2f:ca: 0e:ac:49:48:2c:66:83:7f:df:d6:1c:35:85:4a:17:d2:60:d7: 1e:96:e3:d7:1e:ec:7e:bd:9b:8e:28:5f:dc:d9:39:3b:51:10: a5:d6:32:5f:62:d0:2d:ab:67:0e:b0:93:f6:3f:88:6d:69:ad: 98:ad:7d:e8:99:01:95:68:03:b8:ae:29:0d:05:21:f4:31:fc: 0c:ab:41:e9:85:a2:fc:d1:43:d6:08:d2:49:d4:b8:2b:0a:80: fe:68:9d:b6:95:dd:59:17:3f:75:e5:d6:77:3e:a9:b8:31:18: 72:c6:af:b0:09:b1:2d:c5:49:b6:40:0f:71:f4:ad:44:ad:4c: 35:98:5c:b4:45:cf:89:0f:4a:04:a3:34:af:44:b1:d6:2d:de: 7e:0f:21:a0:80:c8:78:e8:a1:e8:b7:0b:cd:6e:bf:48:58:b2: 6f:69:64:a2 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUHIJIyt928hAue0NGhW95qZFEdXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTEyMjkxNjQ2MDhaFw0yNjEyMjgxNjUxMDhaMDMxMTAvBgNV BAMTKDFENjI3NjZFRTZFNzQ2RUNBMzQ4NTMwM0YwMTdDNzA0MDRERjU4ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUfBiHvS2WsYzuGJFL89QqIWoB U0ZoAocKPmyYav2jMLSYKog+FFtb6Ug5i0Phf6MMfwehOmCSMCAhNbZXWFNz4qJd wIhYnnzV9czheFPKIFuI0D27SynHhKvn9qNy1CGAXPt37RP+tlXYncbvte1qZHM0 rc4zhJEW0IW1c4gKX+SWo2W2uPVIhexfb/0oGsmJzq1f101zfo3gMEoSrRBipGM+ FEYMsWpqXsEaV+e7ldVrsUKs25uuTJ1/fSlvquNdRQNyMqdCHWQeuwImQZlJaSi8 v3u8JRO/ffOS8296Z47qBoLYBrtluRBg9uJlHqAUqyynOb+4aC0SKg585Z+LAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUHWJ2bubnRuyjSFMD8BfHBATfWIAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzYz OTJlMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzYzMTM1MzEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC5qQIwDQYJKoZIhvcNAQELBQADggEBAJy25hItg2LwWIVtIcS1Q5PU7UpJ VA6x2RJk/dDd4LNUWWZj2bn6y1RhBLapaTd8Kn9sZVyNDHNaufmu2J+qu8GzbHVs BMKEAqtom30Ly5cFvuaY3kNj/dQvyg6sSUgsZoN/39YcNYVKF9Jg1x6W49ce7H69 m44oX9zZOTtREKXWMl9i0C2rZw6wk/Y/iG1prZitfeiZAZVoA7iuKQ0FIfQx/Ayr QemFovzRQ9YI0knUuCsKgP5onbaV3VkXP3Xl1nc+qbgxGHLGr7AJsS3FSbZAD3H0 rUStTDWYXLRFz4kPSgSjNK9EsdYt3n4PIaCAyHjooei3C81uv0hYsm9pZKI= -----END CERTIFICATE-----Generated at Fri Jan 23 21:17:53 2026 by rpki-client