This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37372e302f32342d3234203d3e20313336373837.roa File: 3137362e3131332e37372e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 7fDbbHMZl5Hn6cUTmopNaPmw8XevbUWGO6+Hw8EeBqM= Subject key identifier: F7:6D:1C:DE:94:D6:04:93:4E:46:3F:EA:B4:53:68:41:6A:39:9D:4D Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 43A7721E2E0FA0FE358668CCDA4BBE8859FD9C52 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37372e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:00 +0000 ROA not before: Fri 21 Nov 2025 15:44:00 +0000 ROA not after: Fri 20 Nov 2026 15:49:00 +0000 asID: 136787 IP address blocks: 176.113.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a7:72:1e:2e:0f:a0:fe:35:86:68:cc:da:4b:be:88:59:fd:9c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:00 2025 GMT Not After : Nov 20 15:49:00 2026 GMT Subject: CN=F76D1CDE94D604934E463FEAB45368416A399D4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6b:19:5f:b3:ee:0e:3f:0f:47:73:a4:72:23: cd:48:76:90:13:d2:e3:ee:ae:9f:30:21:c5:ca:fa: 13:83:89:12:25:62:8a:c7:6b:33:18:f3:b0:90:3a: 2f:5d:9b:8d:91:72:75:c6:26:99:49:db:a6:8e:05: 5f:80:46:9e:64:a9:02:1d:aa:c5:fe:91:96:30:14: 9a:e3:dc:8c:e9:f4:43:8d:a0:7f:19:3d:f8:9a:19: f0:03:98:d5:39:4f:9e:e6:a5:af:dc:d2:86:bc:94: 46:d0:f7:e5:39:cd:a1:9d:76:ab:10:bf:40:f6:d9: 31:df:b1:d4:2c:7c:02:cc:a4:5b:34:7c:1e:14:69: b4:e5:fd:a5:d0:f9:3a:3e:ea:a3:57:de:ab:44:08: 51:57:fa:5f:3d:49:97:32:4a:de:d9:5d:32:f1:28: 09:6b:af:90:d8:b7:1c:ac:5a:57:27:c4:c2:10:68: 29:fb:fe:68:ff:0f:05:d5:7d:d4:3e:09:e4:af:b9: 75:ee:ad:7f:ea:86:82:8f:f3:4f:16:d2:79:4b:28: 15:61:6b:bd:54:1a:65:d4:c4:e5:04:ec:ca:4a:14: 61:b8:f1:a5:9c:90:ea:3c:a2:d4:36:9c:b4:96:14: 3d:69:5b:c1:5e:14:4d:d7:3f:15:ba:a8:26:f0:d5: 5e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:6D:1C:DE:94:D6:04:93:4E:46:3F:EA:B4:53:68:41:6A:39:9D:4D X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37372e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.113.77.0/24 Signature Algorithm: sha256WithRSAEncryption 99:d6:76:3f:3f:d8:0d:60:c3:74:06:8e:27:a2:b7:0e:f4:d2: 5f:83:ef:4d:b5:c3:b2:f1:90:b2:9a:5c:95:a8:76:1f:a4:76: 77:0c:37:0a:99:c8:1c:3a:72:dc:d5:04:71:27:30:c9:0a:e1: 0e:01:2e:13:59:80:96:d5:e9:85:f5:91:65:16:b3:12:24:98: e7:9e:69:25:e5:59:2b:01:29:ea:57:de:ec:64:1c:fb:2f:0f: 4c:37:68:78:3b:4e:2a:4a:e3:f5:2c:b4:c1:52:0f:c9:df:df: 43:9f:5e:6f:ae:2e:f7:30:de:6d:ef:e8:92:e0:d3:e3:d6:3d: 50:3b:57:2b:3e:1d:54:e0:88:ca:5e:16:d4:45:a7:99:01:07: 02:be:f4:23:65:51:d8:bb:22:21:50:ec:71:0c:5a:fa:47:3f: fa:ab:4b:15:de:fe:63:d3:cc:6c:c9:83:36:36:d0:2b:fd:cc: a1:7d:21:ad:1f:4e:94:fe:77:b6:08:9d:cc:82:c5:14:9f:5f: ee:cf:b1:81:f4:b1:fd:59:e0:58:17:34:2f:c1:9e:74:ac:ed: ec:9c:74:15:fc:6b:90:1e:c9:5f:d8:71:4a:56:7f:d5:e9:d9: c5:44:69:cd:00:f2:66:47:26:f3:62:3f:05:ef:ae:06:f1:98: 10:50:a7:19 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUQ6dyHi4PoP41hmjM2ku+iFn9nFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDBaFw0yNjExMjAxNTQ5MDBaMDMxMTAvBgNV BAMTKEY3NkQxQ0RFOTRENjA0OTM0RTQ2M0ZFQUI0NTM2ODQxNkEzOTlENEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8axlfs+4OPw9Hc6RyI81IdpAT 0uPurp8wIcXK+hODiRIlYorHazMY87CQOi9dm42RcnXGJplJ26aOBV+ARp5kqQId qsX+kZYwFJrj3Izp9EONoH8ZPfiaGfADmNU5T57mpa/c0oa8lEbQ9+U5zaGddqsQ v0D22THfsdQsfALMpFs0fB4UabTl/aXQ+To+6qNX3qtECFFX+l89SZcySt7ZXTLx KAlrr5DYtxysWlcnxMIQaCn7/mj/DwXVfdQ+CeSvuXXurX/qhoKP808W0nlLKBVh a71UGmXUxOUE7MpKFGG48aWckOo8otQ2nLSWFD1pW8FeFE3XPxW6qCbw1V5DAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU920c3pTWBJNORj/qtFNoQWo5nU0wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM3MzYyZTMxMzEz MzJlMzczNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALBxTTANBgkqhkiG9w0BAQsFAAOCAQEAmdZ2Pz/YDWDDdAaOJ6K3DvTS X4PvTbXDsvGQsppclah2H6R2dww3CpnIHDpy3NUEcScwyQrhDgEuE1mAltXphfWR ZRazEiSY555pJeVZKwEp6lfe7GQc+y8PTDdoeDtOKkrj9Sy0wVIPyd/fQ59eb64u 9zDebe/okuDT49Y9UDtXKz4dVOCIyl4W1EWnmQEHAr70I2VR2LsiIVDscQxa+kc/ +qtLFd7+Y9PMbMmDNjbQK/3MoX0hrR9OlP53tgidzILFFJ9f7s+xgfSx/VngWBc0 L8GedKzt7Jx0FfxrkB7JX9hxSlZ/1enZxURpzQDyZkcm82I/Be+uBvGYEFCnGQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:48:29 2025 by rpki-client