This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e352e302f32342d3234203d3e203437353833.roa File: 3231332e3139302e352e302f32342d3234203d3e203437353833.roa (raw, json) Hash identifier: KvJxB1PetYCXnDO/27+55BAhxPkoYo2wriLu1qMfLsw= Subject key identifier: 62:18:6F:D6:41:BD:64:59:BD:3B:44:CD:97:A9:63:E2:71:F5:87:E0 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 70270CADCC21DD0A0DC78289EE449FDBF58B91A2 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e352e302f32342d3234203d3e203437353833.roa Signing time: Fri 21 Nov 2025 15:49:06 +0000 ROA not before: Fri 21 Nov 2025 15:44:06 +0000 ROA not after: Fri 20 Nov 2026 15:49:06 +0000 asID: 47583 IP address blocks: 213.190.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:27:0c:ad:cc:21:dd:0a:0d:c7:82:89:ee:44:9f:db:f5:8b:91:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:06 2025 GMT Not After : Nov 20 15:49:06 2026 GMT Subject: CN=62186FD641BD6459BD3B44CD97A963E271F587E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:81:f3:81:2f:b7:ab:6a:c0:9a:84:ce:a6:d4: 87:9c:0a:55:17:32:6b:fd:41:94:40:db:7c:6c:d4: e5:63:75:a0:f8:68:67:d7:b2:d8:f1:7f:f1:a7:bf: 8b:11:d2:1b:7c:42:34:bf:9a:fd:fb:54:77:36:65: e4:93:c8:41:31:d0:2e:42:8f:e1:a4:f0:32:2e:ab: 5d:75:76:01:5c:7b:e0:7c:d3:63:2c:2e:84:55:df: 44:35:69:ce:68:54:9e:84:db:97:33:4a:2d:6c:97: d6:5c:92:85:ad:aa:31:92:4f:81:64:bf:0c:d6:1c: c2:d5:65:25:99:3d:66:d3:cc:8c:43:9a:fd:25:a5: e7:d6:7a:56:1b:38:59:51:55:b4:3e:42:ed:66:3f: 9a:0c:58:04:d7:d6:27:dc:3f:d8:58:6d:fe:07:4f: 0b:a1:40:ba:93:1a:9d:3b:9a:2e:11:60:11:98:39: ad:9f:bb:51:b1:70:8f:a1:29:28:3f:31:2d:21:bf: 3c:53:47:0e:d2:d6:6c:03:8a:2d:bb:dc:ab:f4:6a: b5:14:b3:c2:27:14:4f:fe:2e:86:7d:46:91:3d:dd: d3:46:a1:40:5a:42:53:79:9f:df:51:e0:66:33:fe: ff:6e:e7:c3:d0:1e:ef:00:a9:1b:14:d1:0b:01:c5: a2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:18:6F:D6:41:BD:64:59:BD:3B:44:CD:97:A9:63:E2:71:F5:87:E0 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e352e302f32342d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.190.5.0/24 Signature Algorithm: sha256WithRSAEncryption 04:1d:ae:24:2f:62:07:d6:e2:e6:04:c1:02:e1:b1:5e:c3:78: 62:9a:d0:b3:a0:91:9f:56:7b:e9:3c:93:e3:b7:91:9d:50:80: f8:a4:a0:93:b5:8d:16:d9:3f:42:6e:71:7c:c8:ee:b1:70:7e: 77:82:ad:da:d7:a5:58:33:18:d7:a2:24:a2:05:73:6e:84:fd: d2:a1:7f:b0:9e:89:e0:bf:ed:17:05:6a:8d:df:9d:54:c5:02: 72:8f:80:76:a9:35:f8:a5:3b:df:af:37:93:58:d6:44:2c:20: 67:35:d6:4b:0c:c9:d2:91:26:ed:ec:d2:44:5f:64:a5:51:b1: 14:85:00:80:e4:fe:1e:37:ab:8e:d3:0c:65:e6:4f:2e:a3:54: b6:61:5d:18:68:01:8f:b7:af:58:10:70:9e:d0:df:be:d0:5e: 97:c2:5a:e5:a3:a9:bd:45:c5:be:26:8b:33:2c:e0:92:56:f3: 5c:01:8a:19:33:cc:3d:7c:6f:47:a2:20:1e:7a:e8:cb:12:6a: 96:85:ad:76:9c:90:68:9b:4a:57:b3:65:ea:a2:12:78:96:ff: 68:12:0b:74:37:15:7c:c7:e9:3d:a2:24:52:e0:9c:38:80:f2: d7:36:ae:90:eb:28:22:96:ac:f9:80:fd:36:ef:49:f0:57:f5: d1:f8:14:45 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUcCcMrcwh3QoNx4KJ7kSf2/WLkaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDZaFw0yNjExMjAxNTQ5MDZaMDMxMTAvBgNV BAMTKDYyMTg2RkQ2NDFCRDY0NTlCRDNCNDRDRDk3QTk2M0UyNzFGNTg3RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTgfOBL7erasCahM6m1IecClUX Mmv9QZRA23xs1OVjdaD4aGfXstjxf/Gnv4sR0ht8QjS/mv37VHc2ZeSTyEEx0C5C j+Gk8DIuq111dgFce+B802MsLoRV30Q1ac5oVJ6E25czSi1sl9ZckoWtqjGST4Fk vwzWHMLVZSWZPWbTzIxDmv0lpefWelYbOFlRVbQ+Qu1mP5oMWATX1ifcP9hYbf4H TwuhQLqTGp07mi4RYBGYOa2fu1GxcI+hKSg/MS0hvzxTRw7S1mwDii273Kv0arUU s8InFE/+LoZ9RpE93dNGoUBaQlN5n99R4GYz/v9u58PQHu8AqRsU0QsBxaKpAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUYhhv1kG9ZFm9O0TNl6lj4nH1h+AwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjMxMzMyZTMxMzkz MDJlMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQA1b4FMA0GCSqGSIb3DQEBCwUAA4IBAQAEHa4kL2IH1uLmBMEC4bFew3himtCz oJGfVnvpPJPjt5GdUID4pKCTtY0W2T9CbnF8yO6xcH53gq3a16VYMxjXoiSiBXNu hP3SoX+wnongv+0XBWqN351UxQJyj4B2qTX4pTvfrzeTWNZELCBnNdZLDMnSkSbt 7NJEX2SlUbEUhQCA5P4eN6uO0wxl5k8uo1S2YV0YaAGPt69YEHCe0N++0F6Xwlrl o6m9RcW+JoszLOCSVvNcAYoZM8w9fG9HoiAeeujLEmqWha12nJBom0pXs2XqohJ4 lv9oEgt0NxV8x+k9oiRS4Jw4gPLXNq6Q6ygilqz5gP0270nwV/XR+BRF -----END CERTIFICATE-----Generated at Fri Dec 5 18:56:54 2025 by rpki-client