This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134372e37382e3132382e302f32342d3234203d3e20313336373837.roa File: 3134372e37382e3132382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: iF2rcjXiQ8NtOOHh5uTi0NGUUehdaaROaiOl8omLKX8= Subject key identifier: 57:B4:AB:A7:0E:B5:D2:F4:B0:8F:CC:4B:0E:68:0B:ED:AB:DF:A8:63 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 70432DA4C0A70B0CED4C612F1EAF5F59047691C2 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134372e37382e3132382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:30 +0000 ROA not before: Fri 28 Nov 2025 11:44:30 +0000 ROA not after: Fri 27 Nov 2026 11:49:30 +0000 asID: 136787 IP address blocks: 147.78.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:43:2d:a4:c0:a7:0b:0c:ed:4c:61:2f:1e:af:5f:59:04:76:91:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:30 2025 GMT Not After : Nov 27 11:49:30 2026 GMT Subject: CN=57B4ABA70EB5D2F4B08FCC4B0E680BEDABDFA863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:00:71:f6:0f:0c:d4:4b:bf:44:98:f2:57:61: fc:ca:81:f4:ee:99:bd:f9:c4:e7:9a:41:73:8e:fd: ee:0a:ed:6b:59:71:32:e0:32:57:56:05:2f:09:06: 0a:9d:77:7e:21:b9:60:e7:3e:26:a7:dd:4c:57:85: a0:d5:95:7e:60:bb:76:61:f3:6f:a6:e5:09:51:22: 81:ce:26:e9:51:73:f6:8e:87:d3:10:20:c9:65:0c: 06:19:87:e4:87:4c:9a:a6:cc:20:23:c1:4a:12:1d: 6b:41:11:fa:0c:43:b6:f5:56:23:d3:72:77:fd:87: d2:ce:13:9e:5d:f8:7c:c6:61:e0:9c:ca:80:21:f2: 74:30:f4:22:cf:b3:1f:6f:1b:e3:c6:7a:cc:f7:f9: 77:b1:3e:63:91:a3:ce:e5:6f:7f:6e:e5:aa:91:82: 23:f6:92:9a:49:af:17:12:a6:04:a4:02:1d:55:da: cf:1c:6c:23:e5:2f:06:55:a8:ed:0e:ed:20:cc:a1: 1c:10:ab:17:d6:67:1d:30:b8:c8:cd:b1:14:7f:87: 5d:5e:d9:27:08:22:cb:df:17:5c:a3:d5:e2:79:18: 1a:bf:6c:0a:91:72:19:d6:5d:63:4d:81:1f:f4:7f: 9f:a2:82:e7:84:05:43:6b:fd:b0:10:20:64:3a:77: af:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B4:AB:A7:0E:B5:D2:F4:B0:8F:CC:4B:0E:68:0B:ED:AB:DF:A8:63 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134372e37382e3132382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.128.0/24 Signature Algorithm: sha256WithRSAEncryption df:d1:07:81:c4:52:a4:67:a3:8c:1b:c4:ca:6d:33:8b:11:0c: ca:f1:6a:f0:4a:aa:35:0d:49:af:78:d9:9d:45:22:9b:85:ba: 28:33:4d:0b:36:34:e7:9d:d5:f0:bb:ac:09:f5:71:84:7d:75: 6b:66:04:8e:35:03:92:f4:df:c4:28:b3:e2:32:a2:3c:d3:b0: ba:8f:74:f0:13:33:18:7a:8e:93:01:4d:18:1c:3c:5d:fb:9d: 15:d5:93:19:c6:c9:58:69:9a:10:66:01:81:ae:e4:46:12:a5: 27:16:ef:7d:7f:ab:81:32:55:bc:63:bc:8e:69:fd:5f:34:e0: 63:20:62:c1:e6:83:0f:63:f3:69:2a:30:05:38:0e:e5:6c:78: 88:dc:21:d3:d5:53:c1:2c:7f:0a:c9:08:79:6d:f8:59:4d:83: e3:0c:1c:b4:48:90:91:00:e9:a6:98:69:8f:ff:66:bf:22:e8: 37:5a:c5:ab:9f:39:c9:58:b8:31:bd:53:64:8a:98:7c:a8:77: 87:a9:c4:81:a1:01:40:3e:87:7a:cb:e4:1d:42:1a:ab:95:60: 11:2c:15:29:ba:d4:17:1f:c8:98:54:f6:55:eb:c1:20:ba:c2: 6f:87:95:5a:0a:f1:aa:19:1d:5a:10:08:77:8f:73:53:8d:b8: 21:9f:53:88 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUcEMtpMCnCwztTGEvHq9fWQR2kcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzBaFw0yNjExMjcxMTQ5MzBaMDMxMTAvBgNV BAMTKDU3QjRBQkE3MEVCNUQyRjRCMDhGQ0M0QjBFNjgwQkVEQUJERkE4NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5AHH2DwzUS79EmPJXYfzKgfTu mb35xOeaQXOO/e4K7WtZcTLgMldWBS8JBgqdd34huWDnPian3UxXhaDVlX5gu3Zh 82+m5QlRIoHOJulRc/aOh9MQIMllDAYZh+SHTJqmzCAjwUoSHWtBEfoMQ7b1ViPT cnf9h9LOE55d+HzGYeCcyoAh8nQw9CLPsx9vG+PGesz3+XexPmORo87lb39u5aqR giP2kppJrxcSpgSkAh1V2s8cbCPlLwZVqO0O7SDMoRwQqxfWZx0wuMjNsRR/h11e 2ScIIsvfF1yj1eJ5GBq/bAqRchnWXWNNgR/0f5+igueEBUNr/bAQIGQ6d68NAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUV7Srpw610vSwj8xLDmgL7avfqGMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM0MzcyZTM3Mzgy ZTMxMzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAJNOgDANBgkqhkiG9w0BAQsFAAOCAQEA39EHgcRSpGejjBvEym0zixEM yvFq8EqqNQ1Jr3jZnUUim4W6KDNNCzY0553V8LusCfVxhH11a2YEjjUDkvTfxCiz 4jKiPNOwuo908BMzGHqOkwFNGBw8XfudFdWTGcbJWGmaEGYBga7kRhKlJxbvfX+r gTJVvGO8jmn9XzTgYyBiweaDD2PzaSowBTgO5Wx4iNwh09VTwSx/CskIeW34WU2D 4wwctEiQkQDppphpj/9mvyLoN1rFq585yVi4Mb1TZIqYfKh3h6nEgaEBQD6Hesvk HUIaq5VgESwVKbrUFx/ImFT2VevBILrCb4eVWgrxqhkdWhAId49zU424IZ9TiA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:48:29 2025 by rpki-client