This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e362e302f32342d3234203d3e203437353833.roa File: 3231332e3139302e362e302f32342d3234203d3e203437353833.roa (raw, json) Hash identifier: w9fLwI5TTNb1RRNgXMP3YGMq2bZVVYrJW9xBVPLfF2k= Subject key identifier: 7C:91:5C:9F:F6:E7:A5:88:A1:ED:2D:31:2B:2B:E0:70:AB:5A:03:60 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2A6E7822E61BAED940E0446B81BEFF5C5114C87A Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e362e302f32342d3234203d3e203437353833.roa Signing time: Fri 21 Nov 2025 15:49:03 +0000 ROA not before: Fri 21 Nov 2025 15:44:03 +0000 ROA not after: Fri 20 Nov 2026 15:49:03 +0000 asID: 47583 IP address blocks: 213.190.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:6e:78:22:e6:1b:ae:d9:40:e0:44:6b:81:be:ff:5c:51:14:c8:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:03 2025 GMT Not After : Nov 20 15:49:03 2026 GMT Subject: CN=7C915C9FF6E7A588A1ED2D312B2BE070AB5A0360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:96:d9:15:09:6e:39:52:b3:e8:11:0a:79:0c: c4:c0:0e:fa:4c:dd:8e:a9:4a:27:d4:26:9c:24:96: de:02:66:9d:3e:57:4f:86:06:d7:22:9d:c1:a1:09: 85:5f:9b:04:e3:94:22:e0:93:fe:71:66:31:4d:73: c9:de:00:30:f2:d2:05:7b:1d:ee:b5:3f:03:4b:df: 42:a2:03:84:c4:64:58:49:8c:df:60:0b:c5:2b:e3: 3f:73:6b:bb:3a:8f:0f:ca:b5:05:75:ff:22:4c:71: 60:29:76:d1:75:68:6a:6e:f9:3a:d7:08:4c:a2:b7: 83:f3:f5:af:9f:f7:8e:3c:f2:a7:0b:6d:8d:fa:96: db:52:88:56:2a:32:7c:6f:8d:38:3e:8a:ed:30:4d: cf:63:b1:5a:73:e0:9b:b9:50:0f:a0:06:5b:4d:6a: 2d:a9:5d:c9:88:51:1d:b1:0a:99:53:b8:49:7c:ef: fc:76:87:8d:01:5d:30:5f:22:1d:87:a7:14:f4:2a: 4a:e3:c5:f5:3a:10:16:38:6b:f2:f6:2c:8d:f9:37: 2a:68:37:c7:b1:a7:d7:4f:df:1d:89:83:52:a5:28: 7e:16:f8:28:09:87:3b:f7:2e:e0:ef:d2:28:02:a0: f1:25:4d:1d:df:53:b4:6e:5f:88:77:d2:fc:6b:69: 7f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:91:5C:9F:F6:E7:A5:88:A1:ED:2D:31:2B:2B:E0:70:AB:5A:03:60 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e362e302f32342d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.190.6.0/24 Signature Algorithm: sha256WithRSAEncryption a6:26:f3:53:bc:0b:91:bb:65:ec:d0:4c:05:df:59:e9:e0:7a: eb:ed:cf:95:4f:bd:e5:33:b1:0f:5a:b4:0f:8b:b4:20:88:63: ce:be:c6:33:a4:19:1e:5b:66:e2:99:00:24:80:df:b8:c9:a5: ac:64:8d:67:4c:2a:a8:78:10:22:42:4a:f7:dd:d7:0c:b0:77: c8:b8:6c:8d:24:25:66:cb:9d:5e:30:c7:d3:f9:b3:32:d3:ad: 34:e8:e4:ee:3d:7b:67:a0:bb:fd:01:ea:32:75:8b:6f:a4:c9: f6:3c:0a:90:95:57:5b:b8:bf:73:27:b2:1d:3a:40:70:9f:87: 52:ad:5e:c8:8e:7c:6e:0a:b8:b2:c6:09:b3:1c:32:4a:eb:46: 4a:ac:47:01:5e:b4:56:54:fa:fc:9f:92:b2:18:48:1f:b2:78: e9:d3:99:e2:b9:31:3a:3c:1e:c0:8f:18:90:8c:df:6a:30:c0: 77:ad:e9:a1:a1:13:64:6b:fc:c6:c7:d8:3e:8f:95:5d:b2:97: e5:42:83:df:e1:da:d0:ec:27:b2:3f:8f:a3:ac:0c:eb:af:f1: 0a:6b:36:33:cb:17:85:64:2b:a8:a4:30:03:fc:c7:ed:8f:0d: 8f:8b:b0:98:ec:f8:4e:d2:ef:b5:59:f2:20:25:a7:18:34:01: d1:da:9f:e7 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUKm54IuYbrtlA4ERrgb7/XFEUyHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDNaFw0yNjExMjAxNTQ5MDNaMDMxMTAvBgNV BAMTKDdDOTE1QzlGRjZFN0E1ODhBMUVEMkQzMTJCMkJFMDcwQUI1QTAzNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDltkVCW45UrPoEQp5DMTADvpM 3Y6pSifUJpwklt4CZp0+V0+GBtcincGhCYVfmwTjlCLgk/5xZjFNc8neADDy0gV7 He61PwNL30KiA4TEZFhJjN9gC8Ur4z9za7s6jw/KtQV1/yJMcWApdtF1aGpu+TrX CEyit4Pz9a+f94488qcLbY36lttSiFYqMnxvjTg+iu0wTc9jsVpz4Ju5UA+gBltN ai2pXcmIUR2xCplTuEl87/x2h40BXTBfIh2HpxT0KkrjxfU6EBY4a/L2LI35Nypo N8exp9dP3x2Jg1KlKH4W+CgJhzv3LuDv0igCoPElTR3fU7RuX4h30vxraX/1AgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUfJFcn/bnpYih7S0xKyvgcKtaA2AwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjMxMzMyZTMxMzkz MDJlMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQA1b4GMA0GCSqGSIb3DQEBCwUAA4IBAQCmJvNTvAuRu2Xs0EwF31np4Hrr7c+V T73lM7EPWrQPi7QgiGPOvsYzpBkeW2bimQAkgN+4yaWsZI1nTCqoeBAiQkr33dcM sHfIuGyNJCVmy51eMMfT+bMy06006OTuPXtnoLv9AeoydYtvpMn2PAqQlVdbuL9z J7IdOkBwn4dSrV7IjnxuCriyxgmzHDJK60ZKrEcBXrRWVPr8n5KyGEgfsnjp05ni uTE6PB7AjxiQjN9qMMB3remhoRNka/zGx9g+j5VdspflQoPf4drQ7CeyP4+jrAzr r/EKazYzyxeFZCuopDAD/Mftjw2Pi7CY7PhO0u+1WfIgJacYNAHR2p/n -----END CERTIFICATE-----Generated at Fri Dec 5 18:56:21 2025 by rpki-client