This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e372e302f32342d3234203d3e203437353833.roa File: 3231332e3139302e372e302f32342d3234203d3e203437353833.roa (raw, json) Hash identifier: JXgnTryvgd1WNBLZAOdi8fwZQW2XKzOiTmLvS4nZFc4= Subject key identifier: A7:AC:C5:CD:F6:07:DD:3A:03:99:0A:42:F5:FF:C1:36:7C:F1:D0:11 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2427E2852481D60307F0B3E8C113683580E48C93 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e372e302f32342d3234203d3e203437353833.roa Signing time: Fri 21 Nov 2025 15:49:05 +0000 ROA not before: Fri 21 Nov 2025 15:44:05 +0000 ROA not after: Fri 20 Nov 2026 15:49:05 +0000 asID: 47583 IP address blocks: 213.190.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:27:e2:85:24:81:d6:03:07:f0:b3:e8:c1:13:68:35:80:e4:8c:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:05 2025 GMT Not After : Nov 20 15:49:05 2026 GMT Subject: CN=A7ACC5CDF607DD3A03990A42F5FFC1367CF1D011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:37:59:89:46:ee:49:b6:45:1e:b6:0e:60:7e: c4:48:f5:22:aa:7d:ee:1a:21:69:a1:aa:16:74:17: b4:83:48:7b:ce:25:9b:05:85:03:fd:68:d5:10:f6: 22:86:a6:24:19:43:3c:69:07:1d:b3:66:96:c2:f6: d1:57:eb:6a:dc:87:bf:34:5e:08:1e:91:61:c1:91: fe:32:ba:3d:fe:ca:6f:0c:aa:b8:44:62:c1:bc:6e: 92:b4:2d:31:55:95:6f:ac:1c:04:65:c5:3e:cd:21: 66:c2:a3:c4:8b:4e:67:b8:2c:b5:60:48:47:48:3a: b2:30:a0:5e:d7:c1:28:59:b8:fc:f0:91:10:33:59: d0:73:5d:77:df:10:06:fe:dd:3d:62:b8:d2:b6:3d: 39:c2:82:ae:34:51:5e:b0:fd:cd:42:2d:85:18:6a: 03:21:0d:fd:48:7c:bb:62:51:57:0a:b6:2d:a8:63: a8:d2:1f:15:08:66:6c:54:66:59:bc:80:4f:43:9c: e1:da:5d:e4:c9:8d:d3:2d:f3:97:ca:72:76:28:1c: 54:06:48:eb:47:f0:60:af:ed:44:c3:aa:90:6a:61: 7b:af:ab:34:8a:e6:33:9f:71:e8:6e:ae:37:20:1e: d2:4d:21:17:ab:43:61:f6:49:fb:27:0a:27:b6:77: bd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AC:C5:CD:F6:07:DD:3A:03:99:0A:42:F5:FF:C1:36:7C:F1:D0:11 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e372e302f32342d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.190.7.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:21:e9:91:5d:ae:71:b1:b9:d5:9d:2d:9a:59:de:ad:82:e7: 39:d8:93:f4:6a:27:c9:aa:ff:d4:ee:29:44:e1:38:6c:9f:92: 44:39:de:06:6d:f9:d4:5d:6d:73:51:da:40:39:8a:98:b2:44: 4d:3a:47:86:d6:0f:42:10:41:fe:8f:a6:5f:a1:16:6c:9f:e2: d7:49:5c:98:51:08:34:87:1c:cd:5e:48:a3:30:74:41:38:0e: 95:90:8a:69:d2:c1:2e:80:87:90:2c:a3:f4:e3:16:26:12:5f: 3a:7b:c3:69:44:33:f3:f5:5f:68:5e:7c:19:72:3c:02:67:65: ef:92:07:6e:ac:9d:88:ea:eb:c2:87:2a:ea:a6:bf:7d:51:e6: 5d:e4:08:2a:d6:7e:0e:a8:f5:bc:4a:8e:d4:ea:0b:6f:53:ba: c7:56:da:04:84:f8:88:05:5d:04:4d:fd:47:31:d8:13:94:c4: 74:07:7b:97:4b:4d:9d:42:1b:dc:c0:85:54:88:72:f8:fc:4c: f1:f2:15:d7:b8:2b:5d:b0:29:1c:2a:12:b1:15:c3:06:25:26: 5a:cf:2b:56:9e:42:38:83:a0:9c:a8:d5:64:d4:3b:23:d2:88: 12:60:96:a4:da:21:36:fb:92:04:d9:fb:b9:7e:d6:73:b0:24: db:85:c8:a5 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUJCfihSSB1gMH8LPowRNoNYDkjJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDVaFw0yNjExMjAxNTQ5MDVaMDMxMTAvBgNV BAMTKEE3QUNDNUNERjYwN0REM0EwMzk5MEE0MkY1RkZDMTM2N0NGMUQwMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDN1mJRu5JtkUetg5gfsRI9SKq fe4aIWmhqhZ0F7SDSHvOJZsFhQP9aNUQ9iKGpiQZQzxpBx2zZpbC9tFX62rch780 XggekWHBkf4yuj3+ym8MqrhEYsG8bpK0LTFVlW+sHARlxT7NIWbCo8SLTme4LLVg SEdIOrIwoF7XwShZuPzwkRAzWdBzXXffEAb+3T1iuNK2PTnCgq40UV6w/c1CLYUY agMhDf1IfLtiUVcKti2oY6jSHxUIZmxUZlm8gE9DnOHaXeTJjdMt85fKcnYoHFQG SOtH8GCv7UTDqpBqYXuvqzSK5jOfcehurjcgHtJNIRerQ2H2SfsnCie2d709AgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUp6zFzfYH3ToDmQpC9f/BNnzx0BEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjMxMzMyZTMxMzkz MDJlMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQA1b4HMA0GCSqGSIb3DQEBCwUAA4IBAQBKIemRXa5xsbnVnS2aWd6tguc52JP0 aifJqv/U7ilE4Thsn5JEOd4GbfnUXW1zUdpAOYqYskRNOkeG1g9CEEH+j6ZfoRZs n+LXSVyYUQg0hxzNXkijMHRBOA6VkIpp0sEugIeQLKP04xYmEl86e8NpRDPz9V9o XnwZcjwCZ2XvkgdurJ2I6uvChyrqpr99UeZd5Agq1n4OqPW8So7U6gtvU7rHVtoE hPiIBV0ETf1HMdgTlMR0B3uXS02dQhvcwIVUiHL4/Ezx8hXXuCtdsCkcKhKxFcMG JSZazytWnkI4g6CcqNVk1Dsj0ogSYJak2iE2+5IE2fu5ftZzsCTbhcil -----END CERTIFICATE-----Generated at Fri Dec 5 18:56:22 2025 by rpki-client