This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139362e302e302f32342d3234203d3e20323039383534.roa File: 3138352e3139362e302e302f32342d3234203d3e20323039383534.roa (raw, json) Hash identifier: 1heflR9fPC9dnqLCNhCyvbS0/vjG2wFoY5PCrkPmO6Y= Subject key identifier: DE:9A:49:21:3E:D5:91:E5:F5:D7:F3:80:09:BE:A1:CB:9B:9E:A3:DC Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 216B8C1860E92AD91823A4C63E6029D452A937FD Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139362e302e302f32342d3234203d3e20323039383534.roa Signing time: Fri 28 Nov 2025 11:49:48 +0000 ROA not before: Fri 28 Nov 2025 11:44:48 +0000 ROA not after: Fri 27 Nov 2026 11:49:48 +0000 asID: 209854 IP address blocks: 185.196.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 02:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6b:8c:18:60:e9:2a:d9:18:23:a4:c6:3e:60:29:d4:52:a9:37:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:48 2025 GMT Not After : Nov 27 11:49:48 2026 GMT Subject: CN=DE9A49213ED591E5F5D7F38009BEA1CB9B9EA3DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:37:ec:5f:82:8d:8a:ba:41:76:fd:97:35:c8: 50:cc:20:4e:f3:7e:ec:7e:28:b8:c8:eb:7e:3e:7c: 4c:29:fd:9c:69:b1:ea:f7:ea:82:5f:20:6d:d4:2c: 2b:b7:02:47:65:4a:65:e2:43:5c:7a:93:94:80:b9: 14:24:25:be:11:e1:a0:a1:ef:8f:60:c3:b1:b9:ab: 86:23:c5:70:dd:7a:79:62:7d:cc:d6:58:09:04:df: 6a:f7:1d:20:cb:82:80:a4:c8:78:a7:e5:74:8b:41: 4e:11:22:d2:c4:22:af:b9:e0:02:ee:66:9c:21:80: 5f:84:d9:c5:8d:3e:9a:b0:69:66:c5:03:20:0e:6b: e0:1b:78:15:f3:a4:78:3b:a3:1d:6a:e3:c3:1f:b3: 63:b7:ef:7e:c9:e6:d3:bf:41:63:fb:88:1c:e0:68: 95:ef:a3:10:74:6a:1b:f6:16:3e:cf:83:16:98:a7: ca:13:6e:5d:07:ff:c1:d0:79:5e:23:f8:72:14:b4: bc:af:9e:47:2c:7d:b7:5e:d7:54:bb:96:16:32:b8: 6a:ca:41:59:2f:5b:8e:ee:22:6a:f8:3e:c8:27:9b: bb:78:55:98:f1:fc:70:4e:9f:21:32:67:3d:b4:50: 67:6e:a9:12:2c:28:02:5b:30:44:d8:26:2f:4f:67: 17:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9A:49:21:3E:D5:91:E5:F5:D7:F3:80:09:BE:A1:CB:9B:9E:A3:DC X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139362e302e302f32342d3234203d3e20323039383534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.0.0/24 Signature Algorithm: sha256WithRSAEncryption de:12:08:42:77:b9:0a:b6:6f:34:07:b5:22:29:9b:95:58:bc: 3b:ea:fb:cd:ed:83:dc:df:0d:05:20:ad:62:f1:a8:3b:a1:67: 8f:57:d5:89:7e:31:f7:ae:0a:1f:8c:cc:8c:f8:86:65:59:94: cc:b0:da:e3:34:b6:a3:ca:8a:76:6b:09:da:4d:1f:b1:ea:6e: 29:06:1f:57:e1:7a:4c:a5:45:b1:9b:8b:ea:08:6f:bc:87:69: f6:7f:b4:aa:13:9b:a6:c8:ee:ac:c1:ee:9c:a5:7f:77:f9:22: b6:54:42:02:76:bb:c6:1b:0b:2e:9b:5e:fa:cc:13:54:f7:26: b4:4d:3a:af:2d:58:70:36:2b:7e:0e:09:b2:f3:41:55:2a:4c: c6:24:39:21:74:b5:14:09:73:0c:e9:cc:5d:14:a3:3b:fb:a0: 93:2c:08:bb:0a:a1:22:9f:4b:f3:bc:4d:76:5d:c7:82:34:d3: ce:8e:55:51:5e:8a:98:7f:04:7e:79:3c:f0:0c:da:b6:14:3d: 79:59:a0:f6:3e:a8:d7:4e:62:aa:72:b7:29:c8:8c:72:05:05: 31:81:89:a3:c5:5a:0f:d8:a4:aa:a1:d1:ca:4e:a1:51:22:f3: ee:a2:7a:1a:5f:ef:4a:07:fd:39:7c:af:27:7e:b2:b4:89:ce: c6:b3:69:83 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUIWuMGGDpKtkYI6TGPmAp1FKpN/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDhaFw0yNjExMjcxMTQ5NDhaMDMxMTAvBgNV BAMTKERFOUE0OTIxM0VENTkxRTVGNUQ3RjM4MDA5QkVBMUNCOUI5RUEzREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKN+xfgo2KukF2/Zc1yFDMIE7z fux+KLjI634+fEwp/Zxpser36oJfIG3ULCu3AkdlSmXiQ1x6k5SAuRQkJb4R4aCh 749gw7G5q4YjxXDdenlifczWWAkE32r3HSDLgoCkyHin5XSLQU4RItLEIq+54ALu ZpwhgF+E2cWNPpqwaWbFAyAOa+AbeBXzpHg7ox1q48Mfs2O3737J5tO/QWP7iBzg aJXvoxB0ahv2Fj7PgxaYp8oTbl0H/8HQeV4j+HIUtLyvnkcsfbde11S7lhYyuGrK QVkvW47uImr4Psgnm7t4VZjx/HBOnyEyZz20UGduqRIsKAJbMETYJi9PZxezAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU3ppJIT7VkeX11/OACb6hy5ueo9wwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzkz NjJlMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzkzODM1MzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC5xAAwDQYJKoZIhvcNAQELBQADggEBAN4SCEJ3uQq2bzQHtSIpm5VYvDvq +83tg9zfDQUgrWLxqDuhZ49X1Yl+MfeuCh+MzIz4hmVZlMyw2uM0tqPKinZrCdpN H7HqbikGH1fhekylRbGbi+oIb7yHafZ/tKoTm6bI7qzB7pylf3f5IrZUQgJ2u8Yb Cy6bXvrME1T3JrRNOq8tWHA2K34OCbLzQVUqTMYkOSF0tRQJcwzpzF0Uozv7oJMs CLsKoSKfS/O8TXZdx4I0086OVVFeiph/BH55PPAM2rYUPXlZoPY+qNdOYqpytynI jHIFBTGBiaPFWg/YpKqh0cpOoVEi8+6iehpf70oH/Tl8ryd+srSJzsazaYM= -----END CERTIFICATE-----Generated at Fri Dec 5 15:02:24 2025 by rpki-client