This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33372e302f32342d3234203d3e203437353833.roa File: 3134392e36322e33372e302f32342d3234203d3e203437353833.roa (raw, json) Hash identifier: Kn/D2FYF+w26nkianfk2mVc5ShBVxLn+q2BRhj9ym0c= Subject key identifier: 09:DB:4C:1E:E7:93:4C:62:F1:04:86:F3:A7:E4:AD:0B:91:BF:DE:7C Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 27DEFC58936C447028CE80195AA1F9C83CB050EA Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33372e302f32342d3234203d3e203437353833.roa Signing time: Fri 28 Nov 2025 11:49:16 +0000 ROA not before: Fri 28 Nov 2025 11:44:16 +0000 ROA not after: Fri 27 Nov 2026 11:49:16 +0000 asID: 47583 IP address blocks: 149.62.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:de:fc:58:93:6c:44:70:28:ce:80:19:5a:a1:f9:c8:3c:b0:50:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:16 2025 GMT Not After : Nov 27 11:49:16 2026 GMT Subject: CN=09DB4C1EE7934C62F10486F3A7E4AD0B91BFDE7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8a:0b:d8:fa:89:a9:73:c4:b7:fb:09:14:26: c0:06:98:31:cd:1f:11:01:96:bc:79:62:34:9d:5e: 12:10:7e:32:2e:66:76:d9:c7:e2:6b:6b:8f:65:66: c4:a2:2e:62:9d:e3:09:00:75:5c:79:57:47:b3:73: ff:9f:87:06:e9:e0:64:92:85:a8:56:37:46:0d:6c: 66:af:eb:aa:fb:9c:27:20:ad:7e:91:76:8e:c6:59: c7:ad:be:6c:4b:33:9b:b6:67:89:aa:3b:17:bf:6a: 21:09:7f:99:03:60:4e:30:24:dc:f9:fe:d0:07:f8: 27:c6:4b:13:dd:fd:c6:ea:20:f2:1e:fe:45:fe:f7: 14:91:4a:53:ed:a7:18:d6:98:77:4f:e9:2a:4e:4d: d1:4c:44:d9:65:8c:1e:51:03:f2:46:2c:1b:7a:84: bf:94:36:55:f9:64:23:ad:6f:1f:eb:9f:bf:db:72: 29:40:84:8b:40:16:1c:b0:cf:01:f4:72:f9:52:22: 9b:88:1c:6c:78:06:12:e7:46:80:70:c2:a4:6c:d0: 57:ea:8f:7c:0e:85:d4:0d:39:e7:26:67:4c:3e:a2: 98:07:da:f1:68:f8:ca:84:cb:68:e6:23:06:db:b9: 81:55:df:db:43:9a:20:d4:d4:4e:20:f6:73:39:55: 11:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DB:4C:1E:E7:93:4C:62:F1:04:86:F3:A7:E4:AD:0B:91:BF:DE:7C X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33372e302f32342d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.62.37.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:af:dd:43:52:2c:88:14:6f:7c:57:95:ad:29:d2:70:96:5a: 07:58:9c:4a:31:3a:4c:ed:ee:22:75:af:f4:d5:99:94:58:49: d0:c3:11:36:d1:02:b5:f1:d4:7b:fe:f7:84:e2:ab:1f:0b:58: 9f:ab:9e:a7:f3:4d:b0:23:0a:a6:7a:cf:4a:d4:96:8d:3c:43: 40:8e:b2:ca:79:71:e6:40:df:56:f7:15:7f:36:52:04:55:e4: 6a:25:24:63:4d:e7:0f:42:61:80:40:68:51:9a:9b:3f:28:b2: 7c:fe:f3:08:b7:b4:a1:c9:e9:94:b0:d2:4d:2d:f9:0b:c4:37: 61:9f:cc:ac:8f:8c:ce:a7:94:0e:a9:62:5d:bf:bb:39:dd:34: 70:00:66:a8:cb:51:05:40:2f:cc:fd:4b:ac:12:0a:bf:7b:20: bb:44:ff:dd:dd:78:b3:59:9a:a1:b6:0a:4a:56:9e:b0:97:2b: 53:f6:03:0c:84:2a:c9:49:f9:73:1a:a1:90:8c:4b:37:12:74: 80:b2:a8:7a:e9:e0:2c:99:d8:47:bf:10:13:94:62:11:af:ec: 82:93:49:ea:f8:7d:64:04:15:5d:0f:a6:59:23:6b:1a:c6:2f: 4a:6e:7d:09:63:0f:4b:72:bf:39:53:f1:27:cc:68:8d:6a:dd: fd:13:c0:81 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUJ978WJNsRHAozoAZWqH5yDywUOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTZaFw0yNjExMjcxMTQ5MTZaMDMxMTAvBgNV BAMTKDA5REI0QzFFRTc5MzRDNjJGMTA0ODZGM0E3RTRBRDBCOTFCRkRFN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPigvY+ompc8S3+wkUJsAGmDHN HxEBlrx5YjSdXhIQfjIuZnbZx+Jra49lZsSiLmKd4wkAdVx5V0ezc/+fhwbp4GSS hahWN0YNbGav66r7nCcgrX6Rdo7GWcetvmxLM5u2Z4mqOxe/aiEJf5kDYE4wJNz5 /tAH+CfGSxPd/cbqIPIe/kX+9xSRSlPtpxjWmHdP6SpOTdFMRNlljB5RA/JGLBt6 hL+UNlX5ZCOtbx/rn7/bcilAhItAFhywzwH0cvlSIpuIHGx4BhLnRoBwwqRs0Ffq j3wOhdQNOecmZ0w+opgH2vFo+MqEy2jmIwbbuYFV39tDmiDU1E4g9nM5VRHbAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUCdtMHueTTGLxBIbzp+StC5G/3nwwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM0MzkyZTM2MzIy ZTMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAlT4lMA0GCSqGSIb3DQEBCwUAA4IBAQAfr91DUiyIFG98V5WtKdJwlloHWJxK MTpM7e4ida/01ZmUWEnQwxE20QK18dR7/veE4qsfC1ifq56n802wIwqmes9K1JaN PENAjrLKeXHmQN9W9xV/NlIEVeRqJSRjTecPQmGAQGhRmps/KLJ8/vMIt7ShyemU sNJNLfkLxDdhn8ysj4zOp5QOqWJdv7s53TRwAGaoy1EFQC/M/UusEgq/eyC7RP/d 3XizWZqhtgpKVp6wlytT9gMMhCrJSflzGqGQjEs3EnSAsqh66eAsmdhHvxATlGIR r+yCk0nq+H1kBBVdD6ZZI2saxi9Kbn0JYw9Lcr85U/EnzGiNat39E8CB -----END CERTIFICATE-----Generated at Fri Dec 5 18:54:41 2025 by rpki-client