This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36302e302f32342d3332203d3e203430303231.roa File: 3130392e3233362e36302e302f32342d3332203d3e203430303231.roa (raw, json) Hash identifier: jyReDQhY97oRk+S2RX6cni1x8GK8JRdqhA9U323pCt4= Subject key identifier: 49:33:2C:7D:6D:80:2B:99:6F:78:03:AB:38:1A:0B:08:C2:3F:18:5B Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 08BC2679B1DA54D8B9CAD0712795315D81C8ACB3 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36302e302f32342d3332203d3e203430303231.roa Signing time: Fri 21 Nov 2025 15:48:59 +0000 ROA not before: Fri 21 Nov 2025 15:43:59 +0000 ROA not after: Fri 20 Nov 2026 15:48:59 +0000 asID: 40021 IP address blocks: 109.236.60.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 02:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:bc:26:79:b1:da:54:d8:b9:ca:d0:71:27:95:31:5d:81:c8:ac:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:43:59 2025 GMT Not After : Nov 20 15:48:59 2026 GMT Subject: CN=49332C7D6D802B996F7803AB381A0B08C23F185B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5a:80:29:d6:94:b4:1d:c3:a8:8e:af:fa:66: 15:cf:ab:51:8e:fb:14:27:29:19:1f:11:03:65:37: 54:0d:66:cf:27:f5:2f:53:40:ff:74:8a:be:f2:da: 7b:d8:d3:70:57:75:69:0a:52:a2:59:f4:dd:0c:fe: 64:da:bc:81:c6:64:7e:52:9b:8f:7d:76:39:f6:07: 2c:f0:8b:f0:0c:6c:a5:b8:ea:c4:e4:40:0f:ea:31: 66:8c:d1:c1:e3:0c:45:47:57:f3:20:8b:34:84:74: 12:2b:23:02:0f:4e:ce:1a:3a:ad:69:e1:ea:4f:1a: e1:5d:5c:a4:24:86:bc:42:80:aa:92:a5:28:fc:9a: 96:6c:ad:6d:2a:cf:fb:44:5c:0e:56:65:e3:bc:13: 60:16:3a:df:55:2b:c2:5d:89:db:d3:71:23:0d:c4: 7a:e4:7c:a3:2d:3d:5d:c2:52:39:9b:c8:4c:cc:f2: b5:a4:89:5a:ea:aa:c9:3d:f8:a9:b6:4a:10:e4:52: 5c:af:4f:0c:2b:f3:39:8e:f8:74:43:65:6c:06:51: a2:78:c9:64:d5:bd:ce:12:29:6d:69:72:f2:a7:d4: 58:cc:fa:6d:31:08:2b:04:40:9d:1e:cb:26:d3:bf: df:31:2e:ef:98:0a:4e:77:56:c6:4c:68:23:81:31: 21:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:33:2C:7D:6D:80:2B:99:6F:78:03:AB:38:1A:0B:08:C2:3F:18:5B X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36302e302f32342d3332203d3e203430303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.236.60.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:5f:a1:24:22:44:35:a6:09:68:16:f2:60:96:e2:20:cf:9f: 67:3d:24:74:13:96:a1:3e:2a:fa:66:01:40:29:70:09:0d:30: d4:72:53:72:50:dc:21:97:ed:db:37:df:ac:94:78:ac:08:80: 05:9d:14:54:6f:8e:f9:c0:da:e0:02:67:7f:72:d7:71:86:1d: 81:5f:32:70:89:b7:27:a5:59:e6:37:75:15:12:15:a9:5c:df: df:4e:cb:e9:78:fa:96:cc:f1:c9:14:7d:c1:49:e9:d9:74:0a: 17:12:34:6f:74:7c:4c:f3:61:cf:f5:fa:43:3a:4a:ab:51:4a: 6d:1a:e8:33:3c:56:68:a4:62:84:a2:40:00:93:ee:85:97:d6: 13:e6:21:b8:aa:e5:72:0c:66:36:14:1d:e6:43:cf:5e:5b:0d: 92:c1:42:74:83:15:7e:0f:ad:b8:53:d0:62:7e:e8:36:cd:50: f9:9a:05:19:dc:4b:84:c0:96:77:74:5e:d3:93:cf:7c:85:1e: 5f:79:1a:77:04:16:85:de:06:0b:ca:c4:5e:6c:15:94:41:a0: 4e:94:e3:4b:ec:bc:2a:8e:a4:38:46:94:2a:d2:c1:74:1d:10: 70:0b:ca:37:b2:5e:62:1a:b5:12:d1:32:f6:63:0a:05:9c:48: 85:d2:2c:a5 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUCLwmebHaVNi5ytBxJ5UxXYHIrLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQzNTlaFw0yNjExMjAxNTQ4NTlaMDMxMTAvBgNV BAMTKDQ5MzMyQzdENkQ4MDJCOTk2Rjc4MDNBQjM4MUEwQjA4QzIzRjE4NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0WoAp1pS0HcOojq/6ZhXPq1GO +xQnKRkfEQNlN1QNZs8n9S9TQP90ir7y2nvY03BXdWkKUqJZ9N0M/mTavIHGZH5S m499djn2Byzwi/AMbKW46sTkQA/qMWaM0cHjDEVHV/MgizSEdBIrIwIPTs4aOq1p 4epPGuFdXKQkhrxCgKqSpSj8mpZsrW0qz/tEXA5WZeO8E2AWOt9VK8JdidvTcSMN xHrkfKMtPV3CUjmbyEzM8rWkiVrqqsk9+Km2ShDkUlyvTwwr8zmO+HRDZWwGUaJ4 yWTVvc4SKW1pcvKn1FjM+m0xCCsEQJ0eyybTv98xLu+YCk53VsZMaCOBMSFDAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUSTMsfW2AK5lveAOrOBoLCMI/GFswHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTMwMzkyZTMyMzMz NjJlMzYzMDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM0MzAzMDMyMzEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABt7DwwDQYJKoZIhvcNAQELBQADggEBADtfoSQiRDWmCWgW8mCW4iDPn2c9 JHQTlqE+KvpmAUApcAkNMNRyU3JQ3CGX7ds336yUeKwIgAWdFFRvjvnA2uACZ39y 13GGHYFfMnCJtyelWeY3dRUSFalc399Oy+l4+pbM8ckUfcFJ6dl0ChcSNG90fEzz Yc/1+kM6SqtRSm0a6DM8VmikYoSiQACT7oWX1hPmIbiq5XIMZjYUHeZDz15bDZLB QnSDFX4PrbhT0GJ+6DbNUPmaBRncS4TAlnd0XtOTz3yFHl95GncEFoXeBgvKxF5s FZRBoE6U40vsvCqOpDhGlCrSwXQdEHALyjeyXmIatRLRMvZjCgWcSIXSLKU= -----END CERTIFICATE-----Generated at Fri Dec 5 14:50:35 2025 by rpki-client