This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e39372e3134342e302f32332d3234203d3e203437353833.roa File: 3138352e39372e3134342e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: /+0KkNCxG9V7HI2jhsWFRf0yjTYf5suVdeV4L5awC6U= Subject key identifier: 4C:DE:F8:ED:90:75:F8:26:ED:FC:0D:E1:52:67:AF:B8:64:7A:FB:09 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0BCE16A005276D3D095769C8A64A306EE6FEFFDA Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e39372e3134342e302f32332d3234203d3e203437353833.roa Signing time: Fri 28 Nov 2025 11:49:38 +0000 ROA not before: Fri 28 Nov 2025 11:44:38 +0000 ROA not after: Fri 27 Nov 2026 11:49:38 +0000 asID: 47583 IP address blocks: 185.97.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ce:16:a0:05:27:6d:3d:09:57:69:c8:a6:4a:30:6e:e6:fe:ff:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:38 2025 GMT Not After : Nov 27 11:49:38 2026 GMT Subject: CN=4CDEF8ED9075F826EDFC0DE15267AFB8647AFB09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f8:d2:73:24:c6:0b:d9:49:e0:93:7e:f0:14: 47:d8:ff:87:cb:09:f1:c1:36:1d:f9:79:ce:0b:53: 3a:05:ed:9c:d7:8d:36:61:aa:c6:8d:34:f4:ad:00: c8:6d:24:64:8c:79:02:b7:3f:e3:fe:6a:0a:84:26: 76:6e:30:76:0c:14:04:f9:ce:6f:91:f8:9b:bb:57: 20:d6:9c:69:9f:96:0c:64:d0:86:e9:3c:55:7d:64: ad:67:1e:80:c9:cd:35:ec:3b:1c:36:d1:c2:ff:92: 1c:0a:a8:81:e9:8a:46:54:aa:11:97:ea:01:1a:e7: 8a:63:f1:25:98:72:c7:04:fa:07:29:bd:69:86:de: 05:87:a5:f0:58:33:12:3c:a6:cb:a0:7a:26:16:02: 4a:84:0a:a2:1c:03:20:36:bf:5b:fa:bc:b0:7c:57: 92:b6:f6:c2:2e:d5:82:13:7f:c7:7d:f3:79:17:6d: 72:0c:24:f4:81:8d:b4:81:d2:51:31:e8:88:c7:05: a9:ae:0d:b2:af:e3:e6:02:a4:8d:f9:f2:0e:cd:e5: a6:ff:0d:53:4d:22:99:75:28:8d:f8:2d:4b:ff:e8: 0b:98:1a:c7:62:45:56:08:39:b9:56:b4:ed:dc:fe: 7c:08:e5:8c:77:bd:4a:13:72:4c:1b:40:e0:ee:6b: 55:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DE:F8:ED:90:75:F8:26:ED:FC:0D:E1:52:67:AF:B8:64:7A:FB:09 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e39372e3134342e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.97.144.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:8c:c4:30:a3:9b:ba:ba:b4:83:6d:02:2b:22:71:67:3f:1d: 01:4a:63:f2:61:02:5a:7e:74:9f:18:c9:cb:1b:3a:88:bd:29: 25:2b:b1:0b:63:9f:32:57:82:6a:8a:03:89:c3:cf:8a:42:f1: 25:14:fd:5c:2f:9a:6f:65:8e:53:d5:a4:b6:72:ae:37:ad:4b: 46:67:76:0d:5c:0a:61:5b:1a:f3:46:6a:c5:d6:93:2f:3f:5f: 21:43:38:eb:c8:82:83:e8:cb:3c:99:d0:82:bd:6d:0e:3e:3b: 3c:15:43:d8:bf:79:1e:97:24:80:88:9b:1f:77:27:ac:ea:2a: a9:43:86:74:06:8b:c9:be:c0:67:bf:27:5e:94:8f:dc:21:3b: da:0f:e6:a2:24:57:0d:96:54:26:c6:05:bb:77:67:bd:6e:d0: fc:8d:0c:c1:b7:08:45:c2:67:97:2b:e4:f1:ff:82:c6:5c:0a: ad:c2:fb:2b:f7:37:69:6f:a4:4f:d5:b7:bd:7c:d3:19:d7:82: ad:72:da:73:b8:a8:66:1c:9c:17:16:84:d2:79:43:aa:bc:d5: cc:a3:f1:4e:7d:63:da:88:76:c0:44:4b:44:89:8c:27:2b:14: d5:85:c4:21:14:70:2d:8e:56:4c:6f:e4:4a:08:eb:e4:ea:ef: e7:15:eb:1f -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUC84WoAUnbT0JV2nIpkowbub+/9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzhaFw0yNjExMjcxMTQ5MzhaMDMxMTAvBgNV BAMTKDRDREVGOEVEOTA3NUY4MjZFREZDMERFMTUyNjdBRkI4NjQ3QUZCMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW+NJzJMYL2Ungk37wFEfY/4fL CfHBNh35ec4LUzoF7ZzXjTZhqsaNNPStAMhtJGSMeQK3P+P+agqEJnZuMHYMFAT5 zm+R+Ju7VyDWnGmflgxk0IbpPFV9ZK1nHoDJzTXsOxw20cL/khwKqIHpikZUqhGX 6gEa54pj8SWYcscE+gcpvWmG3gWHpfBYMxI8psugeiYWAkqECqIcAyA2v1v6vLB8 V5K29sIu1YITf8d983kXbXIMJPSBjbSB0lEx6IjHBamuDbKv4+YCpI358g7N5ab/ DVNNIpl1KI34LUv/6AuYGsdiRVYIOblWtO3c/nwI5Yx3vUoTckwbQODua1VhAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUTN747ZB1+Cbt/A3hUmevuGR6+wkwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTM5Mzcy ZTMxMzQzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAG5YZAwDQYJKoZIhvcNAQELBQADggEBAHyMxDCjm7q6tINtAisicWc/HQFK Y/JhAlp+dJ8YycsbOoi9KSUrsQtjnzJXgmqKA4nDz4pC8SUU/Vwvmm9ljlPVpLZy rjetS0Zndg1cCmFbGvNGasXWky8/XyFDOOvIgoPoyzyZ0IK9bQ4+OzwVQ9i/eR6X JICImx93J6zqKqlDhnQGi8m+wGe/J16Uj9whO9oP5qIkVw2WVCbGBbt3Z71u0PyN DMG3CEXCZ5cr5PH/gsZcCq3C+yv3N2lvpE/Vt7180xnXgq1y2nO4qGYcnBcWhNJ5 Q6q81cyj8U59Y9qIdsBES0SJjCcrFNWFxCEUcC2OVkxv5EoI6+Tq7+cV6x8= -----END CERTIFICATE-----Generated at Fri Dec 5 18:54:42 2025 by rpki-client