This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136302e3233382e33372e302f32342d3234203d3e20313437303439.roa File: 3136302e3233382e33372e302f32342d3234203d3e20313437303439.roa (raw, json) Hash identifier: P9VrUwUzIho8TcOBCSbqv5Uf/z/G8Ckn2aMRMqaqKcw= Subject key identifier: 41:14:27:90:B7:E5:15:E7:8E:EC:9E:1F:6F:C8:9B:93:47:26:F1:2C Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 150C6A0CAA8A86217F83E4D3FA13F0DF9EFDAE3B Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136302e3233382e33372e302f32342d3234203d3e20313437303439.roa Signing time: Fri 28 Nov 2025 11:49:53 +0000 ROA not before: Fri 28 Nov 2025 11:44:53 +0000 ROA not after: Fri 27 Nov 2026 11:49:53 +0000 asID: 147049 IP address blocks: 160.238.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 02:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:0c:6a:0c:aa:8a:86:21:7f:83:e4:d3:fa:13:f0:df:9e:fd:ae:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:53 2025 GMT Not After : Nov 27 11:49:53 2026 GMT Subject: CN=41142790B7E515E78EEC9E1F6FC89B934726F12C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:08:41:23:03:d4:db:55:4c:ef:6d:13:e9:bb: 35:0f:1c:ab:90:09:07:d5:05:8c:27:01:06:02:03: 55:86:af:77:d2:be:b8:61:e0:66:de:8d:30:3e:bc: 8a:9b:cd:9f:46:8f:50:5e:99:d4:aa:5d:0f:d1:a8: 39:d1:50:5d:5f:8a:cd:99:f1:54:be:8b:f2:21:ab: 89:88:fd:8f:46:e1:7a:4b:e3:62:1c:c2:67:ef:4c: 14:29:60:cf:11:00:a8:74:53:16:8e:b4:64:0c:4c: 75:e3:77:fb:13:67:0e:3b:83:a3:14:e0:3c:48:45: ab:1b:d0:7b:fd:3e:43:85:b7:56:53:c9:b7:ea:7e: 4a:77:c3:2f:7b:a9:45:e0:53:7a:7f:88:e8:4f:41: 58:70:43:06:7d:c0:e6:97:02:54:e3:66:f8:0a:8d: bf:46:0b:31:c3:c3:98:4c:ef:09:72:5b:f1:ef:5a: d2:a7:a3:dc:22:17:72:73:10:76:c3:33:cc:d1:c6: 5f:80:5a:a7:32:24:c5:bb:e0:e7:15:6b:22:f4:25: 36:84:ea:19:db:a5:99:ca:73:90:bf:a5:dc:a6:1c: c3:62:ff:7c:f6:23:0b:79:87:07:d2:8e:04:21:1e: 2a:85:98:b1:ea:89:1e:18:f0:d0:cb:33:fb:89:72: 26:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:14:27:90:B7:E5:15:E7:8E:EC:9E:1F:6F:C8:9B:93:47:26:F1:2C X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136302e3233382e33372e302f32342d3234203d3e20313437303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.238.37.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:96:0b:d9:25:51:a3:75:e1:fe:74:42:62:cc:07:69:c7:ea: d3:69:0f:ee:85:37:5b:a5:d1:da:ad:49:31:2e:38:7f:09:cd: 18:06:31:01:e7:a9:35:00:68:cc:57:e1:aa:28:fe:34:0f:aa: b5:f2:3c:0a:e7:8e:04:70:d2:53:bd:33:08:3e:ae:0c:93:15: 47:99:da:da:97:e4:11:4b:bf:a9:d3:97:cf:50:c0:c1:31:cd: 9f:b3:92:39:1b:d5:a9:6d:83:e8:a9:60:24:9f:44:99:93:cf: 49:0b:08:4b:86:c5:31:59:02:1f:19:5c:5b:7f:11:84:01:6b: b9:74:b5:1c:17:bb:dc:4f:43:62:ee:8b:da:d2:6f:41:dc:5e: 4d:3a:e4:53:c9:f3:1d:7f:08:d2:9d:2c:a8:9f:75:8e:79:e5: db:bd:3f:cb:19:2d:8c:a1:41:76:a6:59:6f:59:c5:ba:d8:c5: e5:e7:63:b3:77:52:78:e3:a6:2b:1c:b0:a5:10:47:c0:36:e1: 9c:74:1e:42:e3:81:3d:49:bb:97:58:53:9f:fd:9a:0b:0f:44: 25:49:e7:0e:37:d2:0b:e0:aa:ce:0e:05:3f:b4:38:49:f2:33: 3f:c3:96:06:9e:b5:b9:36:08:3b:e1:40:55:1b:fa:03:2c:30: d9:d4:ff:52 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUFQxqDKqKhiF/g+TT+hPw3579rjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTNaFw0yNjExMjcxMTQ5NTNaMDMxMTAvBgNV BAMTKDQxMTQyNzkwQjdFNTE1RTc4RUVDOUUxRjZGQzg5QjkzNDcyNkYxMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQCEEjA9TbVUzvbRPpuzUPHKuQ CQfVBYwnAQYCA1WGr3fSvrhh4GbejTA+vIqbzZ9Gj1BemdSqXQ/RqDnRUF1fis2Z 8VS+i/Ihq4mI/Y9G4XpL42IcwmfvTBQpYM8RAKh0UxaOtGQMTHXjd/sTZw47g6MU 4DxIRasb0Hv9PkOFt1ZTybfqfkp3wy97qUXgU3p/iOhPQVhwQwZ9wOaXAlTjZvgK jb9GCzHDw5hM7wlyW/HvWtKno9wiF3JzEHbDM8zRxl+AWqcyJMW74OcVayL0JTaE 6hnbpZnKc5C/pdymHMNi/3z2Iwt5hwfSjgQhHiqFmLHqiR4Y8NDLM/uJciYvAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUQRQnkLflFeeO7J4fb8ibk0cm8SwwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM2MzAyZTMyMzMz ODJlMzMzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNzMwMzQzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAKDuJTANBgkqhkiG9w0BAQsFAAOCAQEAnZYL2SVRo3Xh/nRCYswHacfq 02kP7oU3W6XR2q1JMS44fwnNGAYxAeepNQBozFfhqij+NA+qtfI8CueOBHDSU70z CD6uDJMVR5na2pfkEUu/qdOXz1DAwTHNn7OSORvVqW2D6KlgJJ9EmZPPSQsIS4bF MVkCHxlcW38RhAFruXS1HBe73E9DYu6L2tJvQdxeTTrkU8nzHX8I0p0sqJ91jnnl 270/yxktjKFBdqZZb1nFutjF5edjs3dSeOOmKxywpRBHwDbhnHQeQuOBPUm7l1hT n/2aCw9EJUnnDjfSC+Cqzg4FP7Q4SfIzP8OWBp61uTYIO+FAVRv6Ayww2dT/Ug== -----END CERTIFICATE-----Generated at Fri Dec 5 11:33:43 2025 by rpki-client