This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235352e3133302e302f32342d3234203d3e20313437303439.roa File: 3138352e3235352e3133302e302f32342d3234203d3e20313437303439.roa (raw, json) Hash identifier: r1aMa7WYeEiLwxtJXZMrOUkZ1bUeSZzeZ5QFQcS5JHg= Subject key identifier: 96:54:ED:8A:94:0A:40:C5:BC:F6:8F:E0:9A:1D:83:D3:10:CD:03:15 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0DDD30FDABE0225E72B6A52C71857DB66A5B6D05 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235352e3133302e302f32342d3234203d3e20313437303439.roa Signing time: Fri 28 Nov 2025 11:49:49 +0000 ROA not before: Fri 28 Nov 2025 11:44:49 +0000 ROA not after: Fri 27 Nov 2026 11:49:49 +0000 asID: 147049 IP address blocks: 185.255.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 02:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:dd:30:fd:ab:e0:22:5e:72:b6:a5:2c:71:85:7d:b6:6a:5b:6d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:49 2025 GMT Not After : Nov 27 11:49:49 2026 GMT Subject: CN=9654ED8A940A40C5BCF68FE09A1D83D310CD0315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8a:d2:76:62:2a:c2:8f:b8:cd:cf:d9:51:88: 27:ce:1a:c9:7e:11:d1:73:e2:5c:b4:f6:ea:0e:83: af:af:f5:0b:2b:06:4d:2a:57:5d:76:e7:98:62:4b: 71:ea:c3:42:41:77:ee:68:2f:c4:c6:8e:1b:97:fc: 3b:93:9d:bc:fe:06:97:79:59:7f:f9:21:bb:5a:91: 48:1e:7f:52:87:13:f3:b2:0d:9a:6a:96:ae:98:b0: 11:c8:5b:c5:0a:e5:4f:b6:13:68:54:6b:23:37:b9: da:f0:10:e6:6f:56:29:49:56:ef:a2:e4:25:b5:da: 38:c4:6a:00:4f:71:00:02:4d:8f:c2:ef:e5:ac:88: 75:b5:df:30:cb:af:d4:ed:12:2b:56:dd:3f:23:58: 60:7d:23:e2:38:88:23:4e:56:ae:4f:1e:7e:a0:50: 9e:c0:63:b4:56:49:33:56:af:81:44:ad:cf:d1:8f: 02:cd:cd:56:41:c0:fd:30:58:e8:b7:bd:a4:1d:aa: 57:19:61:9d:99:6c:57:d8:58:11:91:d2:c8:be:e0: bc:31:f4:4f:c6:a7:53:06:78:8f:c5:eb:17:79:24: fc:4e:27:36:a7:1c:4e:40:27:83:c7:4e:62:92:3b: 38:82:69:11:d1:23:cb:2d:04:d2:1a:be:14:dc:57: 2c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:54:ED:8A:94:0A:40:C5:BC:F6:8F:E0:9A:1D:83:D3:10:CD:03:15 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235352e3133302e302f32342d3234203d3e20313437303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.130.0/24 Signature Algorithm: sha256WithRSAEncryption 30:17:9d:0b:54:31:53:3f:ef:04:a8:3e:58:67:ac:73:6c:c9: 27:5d:cb:19:06:ff:ec:d7:77:92:3e:1e:4e:5e:47:44:e7:68: 38:d3:30:00:67:bf:a5:fd:f6:65:ad:e5:1d:ac:af:fc:bb:51: 5d:cd:f9:43:21:77:53:22:ab:7a:c4:f4:c3:28:ce:b2:62:d3: 9b:87:f0:36:02:46:46:72:3a:92:50:67:93:92:dd:06:88:ae: b9:cb:b2:5f:fb:75:fc:9d:c4:3b:be:d8:ba:72:76:aa:37:46: de:e2:bb:95:5f:a3:9e:11:a1:5c:bf:bd:12:7a:22:81:21:0b: 4c:46:d2:e6:50:9f:3e:ab:23:39:df:e3:2a:c4:7b:79:59:fc: a1:00:8e:ea:2f:48:d5:54:16:65:a5:0a:0b:6a:0d:e6:99:cf: 07:ed:39:0c:83:59:3a:3f:1e:83:41:68:08:8d:d4:6d:e3:d5: 99:8a:c1:a1:df:99:33:92:ce:f6:ce:af:4d:92:e2:88:0f:f4: 8e:c6:4f:11:3d:3d:3d:02:be:a7:70:2c:7f:a4:25:51:ac:84: d3:f1:3a:53:8c:c9:4c:2f:1c:8e:e0:41:be:8e:ab:62:83:4a: a9:9b:b1:f1:4e:f9:72:05:80:65:12:65:59:ab:7e:d6:66:18: 59:93:40:6f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUDd0w/avgIl5ytqUscYV9tmpbbQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDlaFw0yNjExMjcxMTQ5NDlaMDMxMTAvBgNV BAMTKDk2NTRFRDhBOTQwQTQwQzVCQ0Y2OEZFMDlBMUQ4M0QzMTBDRDAzMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvitJ2YirCj7jNz9lRiCfOGsl+ EdFz4ly09uoOg6+v9QsrBk0qV11255hiS3Hqw0JBd+5oL8TGjhuX/DuTnbz+Bpd5 WX/5IbtakUgef1KHE/OyDZpqlq6YsBHIW8UK5U+2E2hUayM3udrwEOZvVilJVu+i 5CW12jjEagBPcQACTY/C7+WsiHW13zDLr9TtEitW3T8jWGB9I+I4iCNOVq5PHn6g UJ7AY7RWSTNWr4FErc/RjwLNzVZBwP0wWOi3vaQdqlcZYZ2ZbFfYWBGR0si+4Lwx 9E/Gp1MGeI/F6xd5JPxOJzanHE5AJ4PHTmKSOziCaRHRI8stBNIavhTcVyyhAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUllTtipQKQMW89o/gmh2D0xDNAxUwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzUz NTJlMzEzMzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDM3MzAzNDM5LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAuf+CMA0GCSqGSIb3DQEBCwUAA4IBAQAwF50LVDFTP+8EqD5YZ6xz bMknXcsZBv/s13eSPh5OXkdE52g40zAAZ7+l/fZlreUdrK/8u1FdzflDIXdTIqt6 xPTDKM6yYtObh/A2AkZGcjqSUGeTkt0GiK65y7Jf+3X8ncQ7vti6cnaqN0be4ruV X6OeEaFcv70SeiKBIQtMRtLmUJ8+qyM53+MqxHt5WfyhAI7qL0jVVBZlpQoLag3m mc8H7TkMg1k6Px6DQWgIjdRt49WZisGh35kzks72zq9NkuKID/SOxk8RPT09Ar6n cCx/pCVRrITT8TpTjMlMLxyO4EG+jqtig0qpm7HxTvlyBYBlEmVZq37WZhhZk0Bv -----END CERTIFICATE-----Generated at Fri Dec 5 11:37:24 2025 by rpki-client