This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132302e302f32342d3234203d3e20323039383534.roa File: 33312e3136392e3132302e302f32342d3234203d3e20323039383534.roa (raw, json) Hash identifier: qOIR5Ky5EoOJtW1OkXWnz+MjbZVxA+oN/iSvaIIspQ8= Subject key identifier: 27:69:1F:BE:8B:84:84:52:99:60:17:CD:22:D8:AD:0B:35:0F:77:FF Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4E4AE3DEA11F4687E353F697C819F9B63AFC5860 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132302e302f32342d3234203d3e20323039383534.roa Signing time: Fri 28 Nov 2025 11:49:18 +0000 ROA not before: Fri 28 Nov 2025 11:44:18 +0000 ROA not after: Fri 27 Nov 2026 11:49:18 +0000 asID: 209854 IP address blocks: 31.169.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 02:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:4a:e3:de:a1:1f:46:87:e3:53:f6:97:c8:19:f9:b6:3a:fc:58:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:18 2025 GMT Not After : Nov 27 11:49:18 2026 GMT Subject: CN=27691FBE8B848452996017CD22D8AD0B350F77FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b3:dd:cf:ce:5b:54:07:8f:03:df:75:b7:7b: ee:5f:eb:01:f9:12:e4:e1:8d:29:57:3b:e2:0b:f9: 34:80:a6:db:60:92:46:a1:3f:42:b7:6d:0f:5d:ce: 3e:f3:54:ef:10:4d:9f:fc:aa:5b:7e:25:f4:38:7d: 09:61:65:12:0c:52:c1:8c:a6:7d:aa:c4:97:00:a8: 5a:c1:d6:ee:5e:02:e8:b2:53:3c:70:ea:f1:65:15: e0:fc:0a:75:73:49:2b:7d:df:9f:b9:f8:a1:49:b6: d7:08:40:96:60:67:a4:8e:9e:e5:6a:62:fe:b6:4f: 75:c2:02:9d:23:ba:a3:24:5e:30:d8:f6:5e:ff:8f: 36:11:73:9f:21:56:57:1c:b3:96:12:cf:a6:c5:3a: c7:1b:9f:af:72:70:0a:f5:0f:f9:67:62:32:8b:96: 10:e4:46:0a:8c:7b:21:24:15:d8:2a:ac:fa:87:96: be:2f:31:03:f6:fd:ec:c2:39:95:02:3e:5f:39:ad: b8:a5:67:e1:ed:ba:4e:f0:cd:b2:41:67:6c:34:3e: 3c:11:39:f3:49:a9:78:8b:ad:34:e8:d8:21:b8:58: b2:c0:ef:d8:6d:59:d3:03:cb:d2:80:5f:d4:62:12: eb:cc:6d:56:c8:c7:42:f9:ec:15:46:4d:0f:78:5b: 3b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:69:1F:BE:8B:84:84:52:99:60:17:CD:22:D8:AD:0B:35:0F:77:FF X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132302e302f32342d3234203d3e20323039383534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.169.120.0/24 Signature Algorithm: sha256WithRSAEncryption 17:5c:5d:e7:78:7e:a9:c9:f2:62:b2:60:1d:70:6b:ca:f1:a6: ae:86:b9:58:eb:c7:87:7a:35:39:df:b8:e6:79:fa:3c:df:b8: 08:81:c4:64:96:33:f3:10:8e:01:cb:1a:8d:a6:ad:b4:37:52: 33:12:e1:2e:14:3c:16:dd:79:28:f8:8f:a6:3f:a2:30:25:07: e7:0d:51:55:c4:8b:5d:e1:21:aa:2d:fe:b4:1b:03:cf:e5:54: 1b:e5:c0:85:d8:8e:ee:bb:b7:95:45:51:03:b6:15:84:9e:04: db:8a:96:19:4f:b6:4e:dd:ee:e2:f1:5a:ed:bb:b7:47:9d:cc: fe:4e:2a:5d:80:e2:5f:70:c6:bc:1a:af:4b:e1:5d:48:df:1f: 41:7e:d6:ef:be:05:06:78:f8:f0:ea:f2:79:78:48:56:da:f5: c7:91:be:97:9a:df:0b:95:f8:31:80:79:99:80:e5:38:78:c9: e3:b7:a9:f8:22:fe:f4:17:d8:4f:e8:24:af:8a:b6:f6:16:1d: 12:08:7a:78:bb:52:8c:0a:9d:e5:73:32:c8:ed:c8:c0:b1:b7: 16:d6:2d:53:80:b9:e6:0a:15:e0:8e:17:37:79:4c:70:32:79: 30:07:2b:87:96:7c:58:3e:82:3d:86:bb:e8:7c:df:34:1e:d0: d8:51:d8:ae -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUTkrj3qEfRofjU/aXyBn5tjr8WGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MThaFw0yNjExMjcxMTQ5MThaMDMxMTAvBgNV BAMTKDI3NjkxRkJFOEI4NDg0NTI5OTYwMTdDRDIyRDhBRDBCMzUwRjc3RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1s93PzltUB48D33W3e+5f6wH5 EuThjSlXO+IL+TSApttgkkahP0K3bQ9dzj7zVO8QTZ/8qlt+JfQ4fQlhZRIMUsGM pn2qxJcAqFrB1u5eAuiyUzxw6vFlFeD8CnVzSSt935+5+KFJttcIQJZgZ6SOnuVq Yv62T3XCAp0juqMkXjDY9l7/jzYRc58hVlccs5YSz6bFOscbn69ycAr1D/lnYjKL lhDkRgqMeyEkFdgqrPqHlr4vMQP2/ezCOZUCPl85rbilZ+Htuk7wzbJBZ2w0PjwR OfNJqXiLrTTo2CG4WLLA79htWdMDy9KAX9RiEuvMbVbIx0L57BVGTQ94WzuTAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUJ2kfvouEhFKZYBfNItitCzUPd/8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMzMxMmUzMTM2Mzky ZTMxMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzOTM4MzUzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAB+peDANBgkqhkiG9w0BAQsFAAOCAQEAF1xd53h+qcnyYrJgHXBryvGm roa5WOvHh3o1Od+45nn6PN+4CIHEZJYz8xCOAcsajaattDdSMxLhLhQ8Ft15KPiP pj+iMCUH5w1RVcSLXeEhqi3+tBsDz+VUG+XAhdiO7ru3lUVRA7YVhJ4E24qWGU+2 Tt3u4vFa7bu3R53M/k4qXYDiX3DGvBqvS+FdSN8fQX7W774FBnj48OryeXhIVtr1 x5G+l5rfC5X4MYB5mYDlOHjJ47ep+CL+9BfYT+gkr4q29hYdEgh6eLtSjAqd5XMy yO3IwLG3FtYtU4C55goV4I4XN3lMcDJ5MAcrh5Z8WD6CPYa76HzfNB7Q2FHYrg== -----END CERTIFICATE-----Generated at Fri Dec 5 15:05:37 2025 by rpki-client