This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e342e302f32342d3234203d3e203437353833.roa File: 3231332e3139302e342e302f32342d3234203d3e203437353833.roa (raw, json) Hash identifier: yo9iKzpZQP6ctpnZAarA44lcuZdJkynxAUVCqNcZV9Q= Subject key identifier: 7B:4C:28:5B:E7:D7:16:B0:D0:16:2F:E0:B1:83:CC:97:E5:66:FB:73 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 58622A9BB27674C87F2DF5A66A03996FD7B47725 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e342e302f32342d3234203d3e203437353833.roa Signing time: Fri 21 Nov 2025 15:49:12 +0000 ROA not before: Fri 21 Nov 2025 15:44:12 +0000 ROA not after: Fri 20 Nov 2026 15:49:12 +0000 asID: 47583 IP address blocks: 213.190.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:62:2a:9b:b2:76:74:c8:7f:2d:f5:a6:6a:03:99:6f:d7:b4:77:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:12 2025 GMT Not After : Nov 20 15:49:12 2026 GMT Subject: CN=7B4C285BE7D716B0D0162FE0B183CC97E566FB73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:68:33:33:9f:d6:32:17:d0:3a:90:45:7a:39: 53:a5:60:8d:51:44:70:b1:de:a0:df:88:72:5a:6b: ba:e1:04:49:b0:78:03:98:ca:f8:2f:38:80:12:b3: 73:48:24:80:d7:12:6a:7e:4b:30:2d:0a:01:75:3d: 01:f4:d3:7c:55:3f:8b:52:1e:db:42:4e:26:c0:e6: 5f:b9:57:b4:e1:d7:11:d5:2d:00:b6:51:c8:cf:29: bf:4c:bc:fd:31:29:52:4b:c3:6b:62:5c:f4:1a:d0: d9:4e:b0:b4:c5:26:bd:c5:63:86:c3:57:29:29:9c: 0a:d4:07:db:61:5f:40:e2:1d:b6:6d:c0:8a:d6:a6: 5e:b0:4d:be:69:31:b8:2b:ec:2c:14:1a:d5:b4:c0: af:66:bb:13:02:f6:7c:cb:fe:db:69:2e:c2:91:e8: 4d:96:64:2b:4f:2a:1f:3d:e7:29:03:31:99:ae:d1: 05:bc:ba:55:4b:5a:b1:b3:62:58:75:7b:eb:76:42: 37:d6:46:f4:dd:e3:86:e2:5a:2c:b7:7e:ed:3b:e5: 09:4c:71:49:ec:ce:02:02:06:85:04:e1:2b:ef:b3: d8:e8:5b:64:f7:89:de:25:04:4a:2b:77:17:0f:5a: eb:60:2b:3e:03:78:7b:19:6b:c4:e1:c5:c3:65:87: a9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4C:28:5B:E7:D7:16:B0:D0:16:2F:E0:B1:83:CC:97:E5:66:FB:73 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e342e302f32342d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.190.4.0/24 Signature Algorithm: sha256WithRSAEncryption a3:dc:40:30:25:cd:f1:06:d4:49:d4:c3:80:f6:d8:77:4f:4a: f7:b7:aa:10:bf:1e:19:a1:72:e7:f7:ef:4b:e9:6a:1e:ed:0a: 8b:d6:23:35:c0:5e:0d:65:eb:19:0c:b1:84:8a:c8:ed:2a:bc: 2e:03:66:27:1c:8f:80:b8:48:66:6a:90:ab:d4:47:1c:b3:4b: 65:2a:c2:8b:4b:1b:f6:f1:26:cc:99:dd:56:6f:14:71:75:5d: 23:3d:16:b7:a4:b8:fa:2d:ce:0c:f1:52:68:57:75:4f:fd:7f: fc:69:d7:ed:ac:6a:3f:28:30:2f:2f:cc:87:93:ef:dd:72:f1: aa:6e:5a:07:6d:8c:08:dd:62:3c:9c:6c:0e:2a:02:20:9a:c8: 1d:6b:b5:e3:fa:6c:e4:35:93:db:b9:6b:06:bc:d8:e5:1f:b8: 5c:09:44:79:94:ba:c5:53:41:14:34:81:da:90:8c:f7:3b:1d: 03:61:93:60:23:3d:1a:d4:e9:e5:0d:48:d4:c6:4a:6d:aa:6f: 47:28:bb:df:ce:af:5b:86:a6:b8:22:b6:87:9c:8d:93:99:f4: f8:55:fc:f1:8d:db:86:6f:e1:b1:71:e8:4f:e0:7c:1c:5d:26: 64:95:a3:b7:94:c1:bf:32:bc:34:92:2e:fd:9a:b4:8a:52:5d: 93:45:0e:16 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUWGIqm7J2dMh/LfWmagOZb9e0dyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTJaFw0yNjExMjAxNTQ5MTJaMDMxMTAvBgNV BAMTKDdCNEMyODVCRTdENzE2QjBEMDE2MkZFMEIxODNDQzk3RTU2NkZCNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfaDMzn9YyF9A6kEV6OVOlYI1R RHCx3qDfiHJaa7rhBEmweAOYyvgvOIASs3NIJIDXEmp+SzAtCgF1PQH003xVP4tS HttCTibA5l+5V7Th1xHVLQC2UcjPKb9MvP0xKVJLw2tiXPQa0NlOsLTFJr3FY4bD VykpnArUB9thX0DiHbZtwIrWpl6wTb5pMbgr7CwUGtW0wK9muxMC9nzL/ttpLsKR 6E2WZCtPKh895ykDMZmu0QW8ulVLWrGzYlh1e+t2QjfWRvTd44biWiy3fu075QlM cUnszgICBoUE4Svvs9joW2T3id4lBEordxcPWutgKz4DeHsZa8ThxcNlh6mzAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUe0woW+fXFrDQFi/gsYPMl+Vm+3MwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjMxMzMyZTMxMzkz MDJlMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQA1b4EMA0GCSqGSIb3DQEBCwUAA4IBAQCj3EAwJc3xBtRJ1MOA9th3T0r3t6oQ vx4ZoXLn9+9L6Woe7QqL1iM1wF4NZesZDLGEisjtKrwuA2YnHI+AuEhmapCr1Ecc s0tlKsKLSxv28SbMmd1WbxRxdV0jPRa3pLj6Lc4M8VJoV3VP/X/8adftrGo/KDAv L8yHk+/dcvGqbloHbYwI3WI8nGwOKgIgmsgda7Xj+mzkNZPbuWsGvNjlH7hcCUR5 lLrFU0EUNIHakIz3Ox0DYZNgIz0a1OnlDUjUxkptqm9HKLvfzq9bhqa4IraHnI2T mfT4VfzxjduGb+GxcehP4HwcXSZklaO3lMG/Mrw0ki79mrSKUl2TRQ4W -----END CERTIFICATE-----Generated at Fri Dec 5 18:56:22 2025 by rpki-client