This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31362e302f32342d3234203d3e203631333137.roa File: 3138352e3139332e31362e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: sMd8AsFJLdEMcYRfb4bcITTTZvR8aBgaEcV8o4vK1PY= Subject key identifier: 76:CE:F5:FB:AB:DA:4E:C4:6A:7F:58:A9:C6:23:DF:A3:5E:04:AB:DE Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: A9594398DA9D7E8B5945113D79B16C46966BC7 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31362e302f32342d3234203d3e203631333137.roa Signing time: Fri 21 Nov 2025 15:49:10 +0000 ROA not before: Fri 21 Nov 2025 15:44:10 +0000 ROA not after: Fri 20 Nov 2026 15:49:10 +0000 asID: 61317 IP address blocks: 185.193.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 15:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a9:59:43:98:da:9d:7e:8b:59:45:11:3d:79:b1:6c:46:96:6b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:10 2025 GMT Not After : Nov 20 15:49:10 2026 GMT Subject: CN=76CEF5FBABDA4EC46A7F58A9C623DFA35E04ABDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:78:27:68:68:12:20:95:50:e9:56:9a:83:b6: e8:63:84:9e:dc:58:95:0e:ef:63:d7:5f:e6:bd:d6: f3:93:1c:c0:67:0c:ae:61:73:95:a5:27:b0:b8:3b: 15:e4:79:05:c5:a6:f5:08:6d:6d:5a:f5:4e:02:08: 8d:0c:91:9e:25:7e:05:5b:ea:53:ca:78:1a:c4:c3: 97:6b:37:c4:ae:f5:ef:1d:ee:34:e9:ad:09:c0:a5: 60:da:5d:19:cc:b2:e9:a5:24:1a:87:98:79:70:85: 5f:76:e5:a0:d1:0c:52:69:89:29:69:1e:ab:09:8d: 01:20:0a:98:ae:eb:ab:92:4c:1c:2a:92:6b:50:00: bc:0d:ac:1a:f6:8a:4e:bf:2d:82:ef:ab:ab:82:fd: b2:f5:d8:b5:17:eb:4c:f6:10:f4:0f:51:a0:5b:9c: dd:72:3c:7f:e1:c3:14:ab:69:5f:c1:b6:c5:40:9f: ad:4d:96:8c:12:77:ee:25:18:13:70:5d:3f:4a:6b: 3d:f9:be:0b:95:1c:ac:de:86:8c:bd:ac:00:47:d3: 20:32:5c:d6:cb:35:aa:23:e2:c7:f7:d2:90:b5:63: 0b:db:fc:ab:12:1b:49:9f:49:e2:59:94:45:1f:8b: c5:9d:32:a3:dd:0a:3d:80:f4:b7:e2:6b:97:22:a9: 52:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CE:F5:FB:AB:DA:4E:C4:6A:7F:58:A9:C6:23:DF:A3:5E:04:AB:DE X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31362e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.193.16.0/24 Signature Algorithm: sha256WithRSAEncryption 91:bf:74:46:e5:d3:91:62:c7:29:50:56:96:23:d3:d1:44:a6: 13:f3:18:3b:99:f8:10:4e:98:e9:ed:51:6c:79:77:4f:6f:ae: 9b:30:41:ca:7b:04:e6:cf:67:6e:e4:4d:9d:9b:51:fb:c9:11: 5f:85:91:f7:00:3a:22:f4:94:03:76:6a:09:af:58:27:66:2e: bf:6c:61:7f:c9:10:a0:f1:26:fb:1c:3b:96:0a:05:01:18:2e: 52:8a:b6:ea:1a:50:3d:7d:be:3b:31:46:3a:19:5c:1f:a7:0f: a4:45:24:9a:6d:74:79:55:8b:19:ed:58:48:af:81:01:fc:c7: f7:17:c2:1d:f7:c1:8a:de:cc:07:55:51:b9:aa:36:b4:fe:46: 94:9a:b2:16:03:9a:c2:73:29:9d:6a:e6:c7:42:ea:bf:d0:37: 8a:55:6f:5e:f5:f4:de:f3:56:4e:ed:01:81:ea:dc:5e:f1:f9: 6f:29:06:ec:00:43:eb:00:d7:00:ec:d9:1e:55:7d:3e:18:d6: 1c:dd:14:c1:fd:32:02:31:c4:ff:91:31:78:be:77:b4:e1:ea: 3a:6b:14:23:4c:21:f8:36:26:d5:05:9e:11:3a:f2:7e:91:3e: 0e:76:23:18:ff:29:f9:98:2a:64:5f:b6:d8:25:45:5a:a4:c0: 65:92:da:18 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUAKlZQ5janX6LWUURPXmxbEaWa8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTBaFw0yNjExMjAxNTQ5MTBaMDMxMTAvBgNV BAMTKDc2Q0VGNUZCQUJEQTRFQzQ2QTdGNThBOUM2MjNERkEzNUUwNEFCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMeCdoaBIglVDpVpqDtuhjhJ7c WJUO72PXX+a91vOTHMBnDK5hc5WlJ7C4OxXkeQXFpvUIbW1a9U4CCI0MkZ4lfgVb 6lPKeBrEw5drN8Su9e8d7jTprQnApWDaXRnMsumlJBqHmHlwhV925aDRDFJpiSlp HqsJjQEgCpiu66uSTBwqkmtQALwNrBr2ik6/LYLvq6uC/bL12LUX60z2EPQPUaBb nN1yPH/hwxSraV/BtsVAn61NlowSd+4lGBNwXT9Kaz35vguVHKzehoy9rABH0yAy XNbLNaoj4sf30pC1Ywvb/KsSG0mfSeJZlEUfi8WdMqPdCj2A9Lfia5ciqVLJAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUds71+6vaTsRqf1ipxiPfo14Eq94wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzkz MzJlMzEzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC5wRAwDQYJKoZIhvcNAQELBQADggEBAJG/dEbl05FixylQVpYj09FEphPz GDuZ+BBOmOntUWx5d09vrpswQcp7BObPZ27kTZ2bUfvJEV+FkfcAOiL0lAN2agmv WCdmLr9sYX/JEKDxJvscO5YKBQEYLlKKtuoaUD19vjsxRjoZXB+nD6RFJJptdHlV ixntWEivgQH8x/cXwh33wYrezAdVUbmqNrT+RpSashYDmsJzKZ1q5sdC6r/QN4pV b1719N7zVk7tAYHq3F7x+W8pBuwAQ+sA1wDs2R5VfT4Y1hzdFMH9MgIxxP+RMXi+ d7Th6jprFCNMIfg2JtUFnhE68n6RPg52Ixj/KfmYKmRfttglRVqkwGWS2hg= -----END CERTIFICATE-----Generated at Sun Nov 23 05:26:17 2025 by rpki-client