This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136302e3233382e33382e302f32342d3234203d3e20323034313730.roa File: 3136302e3233382e33382e302f32342d3234203d3e20323034313730.roa (raw, json) Hash identifier: VOKCDlwwpDi+p9iHcQaeuFmr4+CVumQeolxnhftps4o= Subject key identifier: 30:AC:36:B7:0A:C1:49:3B:CD:BF:A6:38:9B:68:ED:FB:E2:DA:7F:EB Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 04E6BFACBDC636266DAA03DA4B1A9F4174451265 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136302e3233382e33382e302f32342d3234203d3e20323034313730.roa Signing time: Fri 28 Nov 2025 11:49:43 +0000 ROA not before: Fri 28 Nov 2025 11:44:43 +0000 ROA not after: Fri 27 Nov 2026 11:49:43 +0000 asID: 204170 IP address blocks: 160.238.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e6:bf:ac:bd:c6:36:26:6d:aa:03:da:4b:1a:9f:41:74:45:12:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:43 2025 GMT Not After : Nov 27 11:49:43 2026 GMT Subject: CN=30AC36B70AC1493BCDBFA6389B68EDFBE2DA7FEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:38:77:d7:16:c9:c4:ee:51:c6:3b:45:8d:de: a0:e6:0f:52:1c:b2:62:07:f7:df:91:35:fc:df:f3: d2:6d:7b:6c:98:42:21:0d:9a:20:ed:49:37:c7:c1: 81:36:23:a2:1b:5e:17:a9:9e:41:87:ea:42:f2:cf: d8:35:1b:58:0d:59:e2:88:17:d3:75:f8:f6:37:77: b8:2d:0a:60:e4:77:11:bf:31:ec:df:72:d7:6c:e8: 07:34:b8:c1:cd:01:b0:7a:c1:37:f0:37:cf:10:eb: d3:11:53:3b:48:30:78:31:dd:c8:b0:02:d1:18:17: e2:b0:92:7b:80:36:bf:90:b3:d0:67:de:53:02:f1: 1d:73:50:11:db:50:3e:72:a6:0e:29:83:a1:24:2f: 49:4f:42:48:97:ef:d5:a5:63:94:4b:85:a0:a5:23: be:dd:a4:d0:10:37:c7:4b:d8:99:ec:0f:da:2f:bf: e8:d6:9c:3f:5a:9d:ac:cc:59:c1:5f:17:82:ed:d6: 4c:05:6b:6d:11:ff:06:46:e8:49:65:c9:00:fb:58: 60:47:bb:9a:6f:52:61:05:a6:02:41:ea:0d:ee:79: ea:dc:19:6e:5b:0d:e5:7d:02:54:41:6f:df:64:11: b4:be:8a:91:87:7b:a3:0e:66:ad:31:f2:f8:7e:16: 48:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AC:36:B7:0A:C1:49:3B:CD:BF:A6:38:9B:68:ED:FB:E2:DA:7F:EB X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136302e3233382e33382e302f32342d3234203d3e20323034313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.238.38.0/24 Signature Algorithm: sha256WithRSAEncryption 76:1f:95:b0:8b:c3:d6:d6:95:a8:f1:ba:35:a3:bb:df:5d:59: 89:7d:91:5b:16:68:8a:3c:ca:50:d9:d8:a7:89:40:58:89:cb: f4:70:67:bf:8b:cf:0b:67:a5:06:86:78:46:8f:5a:56:bb:fe: 4d:d8:05:a4:8e:34:72:d0:ae:9d:90:48:aa:a1:05:25:c4:37: e6:f5:02:16:0c:46:36:69:9a:eb:a9:6d:e6:07:9c:db:32:4d: 89:23:e7:c7:e5:d2:b8:64:89:8b:94:71:2e:43:9e:6a:61:89: f9:8a:df:3b:fe:8c:a6:55:d1:74:1d:12:c7:19:dd:a5:a2:3f: 6a:bb:4b:a8:35:8b:d5:51:96:43:00:5b:6d:a0:4f:f3:b4:62: ee:75:fd:6f:9b:a2:09:2c:d1:2d:27:b9:0f:d2:a6:dd:06:c7: ee:61:ac:ff:f7:8d:e2:c4:08:35:26:47:20:8f:5a:ab:c7:97: fc:99:3b:79:d5:c0:35:48:19:63:1e:49:c0:1b:7a:92:60:9c: 49:b2:fd:22:a8:40:7c:95:3d:91:cc:b0:8e:2a:a5:2b:fd:de: e0:5e:f7:2d:2d:f9:d4:f8:b5:a5:93:28:2d:03:f8:bb:98:bf: ee:81:16:ff:09:0a:dd:a7:69:7a:0f:6f:6d:fa:e8:37:06:2c: 92:34:56:2e -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUBOa/rL3GNiZtqgPaSxqfQXRFEmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDNaFw0yNjExMjcxMTQ5NDNaMDMxMTAvBgNV BAMTKDMwQUMzNkI3MEFDMTQ5M0JDREJGQTYzODlCNjhFREZCRTJEQTdGRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4OHfXFsnE7lHGO0WN3qDmD1Ic smIH99+RNfzf89Jte2yYQiENmiDtSTfHwYE2I6IbXhepnkGH6kLyz9g1G1gNWeKI F9N1+PY3d7gtCmDkdxG/Mezfctds6Ac0uMHNAbB6wTfwN88Q69MRUztIMHgx3ciw AtEYF+KwknuANr+Qs9Bn3lMC8R1zUBHbUD5ypg4pg6EkL0lPQkiX79WlY5RLhaCl I77dpNAQN8dL2JnsD9ovv+jWnD9anazMWcFfF4Lt1kwFa20R/wZG6EllyQD7WGBH u5pvUmEFpgJB6g3ueercGW5bDeV9AlRBb99kEbS+ipGHe6MOZq0x8vh+FkhtAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUMKw2twrBSTvNv6Y4m2jt++Laf+swHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM2MzAyZTMyMzMz ODJlMzMzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDMxMzczMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAKDuJjANBgkqhkiG9w0BAQsFAAOCAQEAdh+VsIvD1taVqPG6NaO7311Z iX2RWxZoijzKUNnYp4lAWInL9HBnv4vPC2elBoZ4Ro9aVrv+TdgFpI40ctCunZBI qqEFJcQ35vUCFgxGNmma66lt5gec2zJNiSPnx+XSuGSJi5RxLkOeamGJ+YrfO/6M plXRdB0SxxndpaI/artLqDWL1VGWQwBbbaBP87Ri7nX9b5uiCSzRLSe5D9Km3QbH 7mGs//eN4sQINSZHII9aq8eX/Jk7edXANUgZYx5JwBt6kmCcSbL9IqhAfJU9kcyw jiqlK/3e4F73LS351Pi1pZMoLQP4u5i/7oEW/wkK3adpeg9vbfroNwYskjRWLg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:57:23 2025 by rpki-client