This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e39372e3134362e302f32332d3234203d3e203437353833.roa File: 3138352e39372e3134362e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: 6D12GTU5AawP7ILyr25tS/+TTifJ/iurso1/xU5HTE4= Subject key identifier: 6D:14:CC:A7:C3:DC:D2:01:9D:5C:3A:34:D9:FD:90:1A:89:9D:62:CF Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 37C8356E6AA16E3372B969C4BDFA320D1FC76358 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e39372e3134362e302f32332d3234203d3e203437353833.roa Signing time: Fri 28 Nov 2025 11:49:48 +0000 ROA not before: Fri 28 Nov 2025 11:44:48 +0000 ROA not after: Fri 27 Nov 2026 11:49:48 +0000 asID: 47583 IP address blocks: 185.97.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c8:35:6e:6a:a1:6e:33:72:b9:69:c4:bd:fa:32:0d:1f:c7:63:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:48 2025 GMT Not After : Nov 27 11:49:48 2026 GMT Subject: CN=6D14CCA7C3DCD2019D5C3A34D9FD901A899D62CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:94:a8:be:03:39:6a:c4:da:ac:ef:39:f9:b6: 4c:c3:2c:b4:14:9f:19:3b:56:8d:99:e8:a0:e2:c9: 40:29:38:53:b5:66:a8:d7:2c:23:ee:09:9d:5e:af: 20:84:1b:87:18:19:42:d7:7b:c6:80:18:22:0e:a3: 7a:3e:8f:1f:d2:60:bf:41:0d:55:a3:2e:af:2c:c9: 2b:bd:61:7b:2c:97:37:9c:65:a6:c5:1b:f0:c1:98: e2:0b:8f:35:b8:d7:78:1e:49:c6:74:d6:2a:63:9b: 4f:b4:59:90:fb:0d:19:3e:bf:bd:35:21:35:ba:cf: e2:17:8f:8a:c6:f4:22:de:76:f2:dc:fb:6b:dc:95: b6:19:67:d0:df:55:58:44:e0:d8:ca:c6:d7:64:cb: 34:7c:b4:16:9f:c4:12:8f:4e:f6:97:37:fc:f0:6a: ec:d8:43:71:a7:7b:a8:b4:d5:cb:da:6c:5d:a1:5d: c4:33:25:3c:8b:c1:61:83:c3:8e:4f:2b:c5:c2:90: 6b:a2:8c:73:93:98:93:a3:21:5a:1d:ed:37:6e:67: dc:a3:49:b0:5a:7c:e8:d7:51:79:c8:6a:a7:99:51: ad:50:39:e1:cb:47:a7:3a:e9:37:80:53:44:ff:9a: 21:17:58:bc:f0:ac:40:31:aa:54:c5:bd:b5:84:8c: e0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:14:CC:A7:C3:DC:D2:01:9D:5C:3A:34:D9:FD:90:1A:89:9D:62:CF X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e39372e3134362e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.97.146.0/23 Signature Algorithm: sha256WithRSAEncryption b2:d9:d1:41:a9:20:0c:c8:18:59:a9:e5:90:3d:86:1c:11:4e: e1:39:c0:77:c4:7b:14:50:f4:8d:79:f8:67:ff:90:19:eb:cf: d4:cb:e8:9d:5a:aa:ae:b7:01:a3:07:b3:a7:f5:d6:be:21:2d: fd:75:37:69:38:47:1e:8b:18:38:01:76:dd:4d:56:cf:66:ae: c7:cf:f8:cc:20:85:95:6b:87:16:36:27:92:c7:4a:95:fe:ac: a3:61:0c:56:fc:38:84:d9:44:86:ba:5a:63:02:45:6c:aa:c5: e0:e0:a6:3c:ee:f6:10:b5:77:e3:67:ed:0f:d2:fb:b0:3b:eb: b0:af:46:f7:db:bd:26:9e:a8:b0:7d:61:7f:72:b3:dd:c7:a5: da:73:5b:86:85:55:69:67:17:83:d5:9f:ec:bd:57:fb:04:f0: 00:cf:22:11:ab:e0:59:7d:45:af:da:37:96:a0:eb:17:93:36: 2c:80:e4:9d:64:ab:a1:34:5f:39:7d:31:be:1d:8b:e2:4d:62: db:c1:2a:96:61:ee:72:a3:73:30:1e:1a:58:72:cc:47:b8:3d: d9:7a:18:9b:23:6e:f5:02:28:20:f6:94:4d:ba:74:e7:cb:cc: d6:85:69:59:79:51:fc:1f:b0:81:c8:89:97:c8:f2:9e:cb:87: 3d:07:e3:64 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUN8g1bmqhbjNyuWnEvfoyDR/HY1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDhaFw0yNjExMjcxMTQ5NDhaMDMxMTAvBgNV BAMTKDZEMTRDQ0E3QzNEQ0QyMDE5RDVDM0EzNEQ5RkQ5MDFBODk5RDYyQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQlKi+AzlqxNqs7zn5tkzDLLQU nxk7Vo2Z6KDiyUApOFO1ZqjXLCPuCZ1eryCEG4cYGULXe8aAGCIOo3o+jx/SYL9B DVWjLq8sySu9YXsslzecZabFG/DBmOILjzW413geScZ01ipjm0+0WZD7DRk+v701 ITW6z+IXj4rG9CLedvLc+2vclbYZZ9DfVVhE4NjKxtdkyzR8tBafxBKPTvaXN/zw auzYQ3Gne6i01cvabF2hXcQzJTyLwWGDw45PK8XCkGuijHOTmJOjIVod7TduZ9yj SbBafOjXUXnIaqeZUa1QOeHLR6c66TeAU0T/miEXWLzwrEAxqlTFvbWEjOC7AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUbRTMp8Pc0gGdXDo02f2QGomdYs8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTM5Mzcy ZTMxMzQzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAG5YZIwDQYJKoZIhvcNAQELBQADggEBALLZ0UGpIAzIGFmp5ZA9hhwRTuE5 wHfEexRQ9I15+Gf/kBnrz9TL6J1aqq63AaMHs6f11r4hLf11N2k4Rx6LGDgBdt1N Vs9mrsfP+MwghZVrhxY2J5LHSpX+rKNhDFb8OITZRIa6WmMCRWyqxeDgpjzu9hC1 d+Nn7Q/S+7A767CvRvfbvSaeqLB9YX9ys93HpdpzW4aFVWlnF4PVn+y9V/sE8ADP IhGr4Fl9Ra/aN5ag6xeTNiyA5J1kq6E0Xzl9Mb4di+JNYtvBKpZh7nKjczAeGlhy zEe4Pdl6GJsjbvUCKCD2lE26dOfLzNaFaVl5UfwfsIHIiZfI8p7Lhz0H42Q= -----END CERTIFICATE-----Generated at Fri Dec 5 18:55:03 2025 by rpki-client