This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134372e37382e3132392e302f32342d3234203d3e20313336373837.roa File: 3134372e37382e3132392e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: FcFysWJL72+MzxvGQckEUWj99SvtW6ZgYhGuB4Lhf84= Subject key identifier: F8:B2:9E:89:0C:76:5D:B8:67:60:EC:77:12:18:31:24:20:4E:19:7A Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3421D7F7D1F1C50A16716ECA81DB5BD80C4AE348 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134372e37382e3132392e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:43 +0000 ROA not before: Fri 28 Nov 2025 11:44:43 +0000 ROA not after: Fri 27 Nov 2026 11:49:43 +0000 asID: 136787 IP address blocks: 147.78.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:21:d7:f7:d1:f1:c5:0a:16:71:6e:ca:81:db:5b:d8:0c:4a:e3:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:43 2025 GMT Not After : Nov 27 11:49:43 2026 GMT Subject: CN=F8B29E890C765DB86760EC7712183124204E197A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:21:0d:bd:6a:a3:3e:86:e5:77:a5:47:93: a4:08:9c:fc:20:04:9e:2e:f7:92:4d:e6:90:ae:65: 2a:0b:b2:1c:b8:b1:b3:bd:c4:5a:d4:67:e5:61:f5: f2:46:be:fa:f2:ef:dc:21:62:c9:77:89:23:9d:5a: 9f:95:a7:e3:93:27:31:b9:f0:da:b8:93:7f:65:3b: 90:28:07:25:46:e6:39:5c:df:3e:0f:7c:1e:c5:13: 98:c1:fc:8d:09:43:c0:b9:9a:e1:27:8e:3e:87:bd: 53:da:f7:20:9d:d3:55:12:6e:fc:1f:1d:7f:14:f3: d4:6d:64:e5:44:0b:2f:b0:11:35:be:79:68:b0:fd: 24:3d:c4:f7:4c:d2:3b:1a:eb:fc:91:b6:10:54:96: 67:f0:f9:6f:9e:c2:e0:f1:f6:fa:4b:9a:f9:5a:82: a7:80:02:0b:48:47:ea:92:81:0d:6f:67:05:55:fa: d2:9b:f6:49:bf:39:4a:b4:81:c2:11:c8:df:67:00: aa:84:1b:3a:87:d1:f1:a8:d3:90:73:b8:2b:09:e6: 55:f3:0b:b0:9e:d6:bb:28:3c:29:6c:db:23:5d:9e: 28:ca:a4:33:8d:ff:9b:95:c4:36:fe:dd:9f:05:8e: 32:20:8b:4c:ea:a2:40:7e:20:d6:ff:81:19:08:af: 3c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B2:9E:89:0C:76:5D:B8:67:60:EC:77:12:18:31:24:20:4E:19:7A X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134372e37382e3132392e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.129.0/24 Signature Algorithm: sha256WithRSAEncryption d9:0a:72:c0:20:c3:0f:19:b7:af:07:1e:61:bb:2b:ed:51:a2: 10:bd:8f:01:21:86:ee:df:7c:61:09:88:5b:2a:25:99:a1:d3: dd:23:60:0b:8f:6c:c8:c3:4b:b5:7a:7a:b0:7b:40:d3:f4:e3: b4:23:22:a8:15:71:82:ab:15:1f:ad:b3:25:d8:cf:7c:cd:e6: 42:51:ac:09:95:a2:59:ac:24:99:f1:9b:43:bc:22:67:9b:cb: a6:e4:f6:6d:51:4a:6e:4a:9e:85:a1:b5:22:ca:26:98:4f:17: e8:b9:c2:a2:d4:c7:7f:ef:e9:09:f4:60:b4:88:4e:29:23:6c: f4:90:a9:ce:b2:c5:a2:2a:15:5a:79:a2:96:90:d3:db:12:15: b7:7c:fa:35:1e:e1:a3:56:55:2b:f7:92:11:ee:85:eb:c8:07: d1:0c:c0:34:5d:60:12:42:f8:04:36:2c:1a:29:26:50:9d:71: c9:5d:ff:eb:62:8e:af:5a:54:7e:e2:23:ce:ee:a0:b3:a9:b5: 31:ee:70:4d:bb:57:56:32:69:b6:11:31:97:c1:5e:ef:5c:23: 82:16:7d:74:47:2f:ad:39:d1:ac:89:ef:91:3d:a7:0b:18:e2: d9:fe:81:09:2d:6e:88:a6:dc:61:bd:d2:4a:d0:b7:1f:d8:6c: 9a:f8:65:ca -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUNCHX99HxxQoWcW7Kgdtb2AxK40gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDNaFw0yNjExMjcxMTQ5NDNaMDMxMTAvBgNV BAMTKEY4QjI5RTg5MEM3NjVEQjg2NzYwRUM3NzEyMTgzMTI0MjA0RTE5N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oSENvWqjPobld6VHk6QInPwg BJ4u95JN5pCuZSoLshy4sbO9xFrUZ+Vh9fJGvvry79whYsl3iSOdWp+Vp+OTJzG5 8Nq4k39lO5AoByVG5jlc3z4PfB7FE5jB/I0JQ8C5muEnjj6HvVPa9yCd01USbvwf HX8U89RtZOVECy+wETW+eWiw/SQ9xPdM0jsa6/yRthBUlmfw+W+ewuDx9vpLmvla gqeAAgtIR+qSgQ1vZwVV+tKb9km/OUq0gcIRyN9nAKqEGzqH0fGo05BzuCsJ5lXz C7Ce1rsoPCls2yNdnijKpDON/5uVxDb+3Z8FjjIgi0zqokB+INb/gRkIrzylAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU+LKeiQx2XbhnYOx3EhgxJCBOGXowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM0MzcyZTM3Mzgy ZTMxMzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAJNOgTANBgkqhkiG9w0BAQsFAAOCAQEA2QpywCDDDxm3rwceYbsr7VGi EL2PASGG7t98YQmIWyolmaHT3SNgC49syMNLtXp6sHtA0/TjtCMiqBVxgqsVH62z JdjPfM3mQlGsCZWiWawkmfGbQ7wiZ5vLpuT2bVFKbkqehaG1IsommE8X6LnCotTH f+/pCfRgtIhOKSNs9JCpzrLFoioVWnmilpDT2xIVt3z6NR7ho1ZVK/eSEe6F68gH 0QzANF1gEkL4BDYsGikmUJ1xyV3/62KOr1pUfuIjzu6gs6m1Me5wTbtXVjJpthEx l8Fe71wjghZ9dEcvrTnRrInvkT2nCxji2f6BCS1uiKbcYb3SStC3H9hsmvhlyg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:48:29 2025 by rpki-client