This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3232372e3234312e302f32342d3234203d3e20323039383534.roa File: 3137362e3232372e3234312e302f32342d3234203d3e20323039383534.roa (raw, json) Hash identifier: NqKY3ZfHr3plzBnNPY+mouYBg/gGZDA0KEVNq3k4rHE= Subject key identifier: 5F:15:64:19:C5:0C:86:BC:AE:3F:DF:27:F6:F0:35:47:01:D1:D2:51 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4A914ED16C36F9806DF066163D8296FB1220F121 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3232372e3234312e302f32342d3234203d3e20323039383534.roa Signing time: Fri 28 Nov 2025 11:49:35 +0000 ROA not before: Fri 28 Nov 2025 11:44:35 +0000 ROA not after: Fri 27 Nov 2026 11:49:35 +0000 asID: 209854 IP address blocks: 176.227.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 02:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:91:4e:d1:6c:36:f9:80:6d:f0:66:16:3d:82:96:fb:12:20:f1:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:35 2025 GMT Not After : Nov 27 11:49:35 2026 GMT Subject: CN=5F156419C50C86BCAE3FDF27F6F0354701D1D251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:16:bb:d3:e6:2c:ca:81:1c:f4:61:c4:7b:10: ed:e8:9d:44:31:c4:10:32:ef:5a:26:92:1e:43:df: d5:6e:f8:9d:ff:73:2d:fe:ff:78:4b:63:7d:9f:fa: 73:83:b6:ce:a4:45:cb:f1:8f:c8:8c:41:78:24:40: 87:65:20:a5:27:7c:7f:11:b9:b7:42:db:92:00:ed: fc:a6:3a:a2:cd:89:5b:33:9c:9e:12:c8:53:db:63: 10:79:7e:04:8f:e6:b6:0a:d4:44:d7:7d:e3:70:8f: e5:0c:5e:1c:d3:40:b3:64:1f:49:08:83:fd:ef:29: 31:dd:3c:00:5d:de:36:97:67:38:02:56:95:77:d4: 21:e4:08:61:b1:76:82:34:44:10:5f:ff:d4:2f:0c: 20:5b:10:9b:6d:9d:3c:39:4c:34:4b:2d:4d:20:cf: 5c:f3:a6:cd:8a:4a:de:2b:41:20:59:d3:93:f7:07: 38:1d:f1:0c:e4:b7:2f:b6:e4:dc:05:86:cd:fc:ea: 42:d5:45:ce:75:92:0e:08:4a:c9:ca:08:8c:23:c3: 6b:c8:19:fc:97:aa:5e:27:4f:10:a4:5c:7d:bb:56: 94:c7:97:39:72:18:72:47:c4:8e:67:12:b0:3e:12: 37:59:de:04:65:6a:47:1f:96:48:e6:ea:4f:24:45: 07:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:15:64:19:C5:0C:86:BC:AE:3F:DF:27:F6:F0:35:47:01:D1:D2:51 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3232372e3234312e302f32342d3234203d3e20323039383534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.227.241.0/24 Signature Algorithm: sha256WithRSAEncryption b6:0a:71:38:b1:78:cc:5f:7d:04:8d:71:ff:f2:34:4b:69:6f: 63:53:63:b5:50:59:26:47:87:51:a8:4e:7a:0f:0a:92:35:13: b6:85:43:2d:ba:67:f4:41:35:06:bb:8d:58:ed:67:e9:f1:f0: 41:1c:b0:12:29:bf:58:5c:88:d2:96:6d:3d:2e:eb:b4:d9:b4: 4b:cb:a7:64:bc:30:6d:2f:35:41:05:e2:c6:c4:f1:0c:65:4f: fd:fe:44:04:71:eb:2b:05:30:e7:cd:92:9c:28:8a:ba:52:b7: 32:a4:46:72:a8:7c:64:ce:a3:92:e3:88:61:e3:13:5e:2f:06: be:20:32:ea:5a:8d:9a:ca:2c:5c:6a:5d:ab:e8:bd:32:bf:3a: e8:a6:ba:6e:73:0e:dc:5f:16:07:bb:e5:93:14:70:5e:7d:72: c4:9d:e7:cd:70:55:09:8f:19:0b:98:1b:34:fd:eb:ba:63:80: 04:61:af:80:c4:42:5e:b7:2f:fc:56:67:1b:9f:fc:39:dd:50: 75:4b:4b:c8:68:48:6a:3d:64:76:73:91:cd:8f:26:5c:7f:96: 32:ee:0c:30:4e:6a:b6:c0:4e:35:fb:4c:b7:49:9a:16:56:66: 03:61:24:f0:f2:57:22:94:f2:d1:b2:12:6f:98:25:30:e0:f8: c1:4c:b2:9c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUSpFO0Ww2+YBt8GYWPYKW+xIg8SEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzVaFw0yNjExMjcxMTQ5MzVaMDMxMTAvBgNV BAMTKDVGMTU2NDE5QzUwQzg2QkNBRTNGREYyN0Y2RjAzNTQ3MDFEMUQyNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrFrvT5izKgRz0YcR7EO3onUQx xBAy71omkh5D39Vu+J3/cy3+/3hLY32f+nODts6kRcvxj8iMQXgkQIdlIKUnfH8R ubdC25IA7fymOqLNiVsznJ4SyFPbYxB5fgSP5rYK1ETXfeNwj+UMXhzTQLNkH0kI g/3vKTHdPABd3jaXZzgCVpV31CHkCGGxdoI0RBBf/9QvDCBbEJttnTw5TDRLLU0g z1zzps2KSt4rQSBZ05P3Bzgd8Qzkty+25NwFhs386kLVRc51kg4ISsnKCIwjw2vI GfyXql4nTxCkXH27VpTHlzlyGHJHxI5nErA+EjdZ3gRlakcflkjm6k8kRQc/AgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUXxVkGcUMhryuP98n9vA1RwHR0lEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM3MzYyZTMyMzIz NzJlMzIzNDMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM5MzgzNTM0LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAsOPxMA0GCSqGSIb3DQEBCwUAA4IBAQC2CnE4sXjMX30EjXH/8jRL aW9jU2O1UFkmR4dRqE56DwqSNRO2hUMtumf0QTUGu41Y7Wfp8fBBHLASKb9YXIjS lm09Luu02bRLy6dkvDBtLzVBBeLGxPEMZU/9/kQEcesrBTDnzZKcKIq6UrcypEZy qHxkzqOS44hh4xNeLwa+IDLqWo2ayixcal2r6L0yvzroprpucw7cXxYHu+WTFHBe fXLEnefNcFUJjxkLmBs0/eu6Y4AEYa+AxEJety/8Vmcbn/w53VB1S0vIaEhqPWR2 c5HNjyZcf5Yy7gwwTmq2wE41+0y3SZoWVmYDYSTw8lcilPLRshJvmCUw4PjBTLKc -----END CERTIFICATE-----Generated at Fri Dec 5 15:01:34 2025 by rpki-client