This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132312e302f32342d3234203d3e20323039383534.roa File: 33312e3136392e3132312e302f32342d3234203d3e20323039383534.roa (raw, json) Hash identifier: cq7GNSbuzroGxr3RabMmxyXzlcyfGZfWXPxbQyhOdu0= Subject key identifier: 9E:A8:D4:4B:83:3C:29:D9:82:55:A6:0A:9A:AF:5A:BA:5A:BC:B5:6B Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 074C91A04699A535271C6167AC66B6DC1A0660D2 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132312e302f32342d3234203d3e20323039383534.roa Signing time: Fri 28 Nov 2025 11:49:35 +0000 ROA not before: Fri 28 Nov 2025 11:44:35 +0000 ROA not after: Fri 27 Nov 2026 11:49:35 +0000 asID: 209854 IP address blocks: 31.169.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 02:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:4c:91:a0:46:99:a5:35:27:1c:61:67:ac:66:b6:dc:1a:06:60:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:35 2025 GMT Not After : Nov 27 11:49:35 2026 GMT Subject: CN=9EA8D44B833C29D98255A60A9AAF5ABA5ABCB56B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ac:c1:9a:2b:60:26:fe:9a:4c:2a:09:28:b2: a2:51:b9:a9:85:09:1f:b7:b3:ad:03:22:c8:8f:82: 12:1d:f1:9a:38:0c:2c:b1:76:ba:36:bf:4f:3d:70: 9a:aa:64:cd:ca:f8:1e:6d:95:d0:92:25:1e:24:bb: 35:38:da:f2:3a:6c:27:79:fe:a7:d6:a6:d1:6b:d3: e2:51:b8:9f:af:33:40:15:eb:87:81:7f:54:37:7f: 7e:f1:a1:ea:99:56:a5:3a:a1:c2:5f:5f:69:bb:a2: 2e:75:f8:76:94:d5:55:69:71:37:3f:e5:7c:98:c1: 56:17:97:7e:7d:7f:c2:c3:fd:ce:a2:07:cd:a7:0d: 92:fd:2a:58:68:cb:71:32:61:29:bc:d8:b2:08:e3: 49:99:0b:05:3c:93:b7:30:94:77:00:d3:fa:de:85: c2:5f:3c:f2:cc:8d:79:27:6e:1f:01:a9:1b:c4:c6: f8:0e:96:ee:53:5b:62:cd:47:a5:89:cf:83:6e:48: e8:ba:b1:5b:d4:dc:2c:46:99:1c:4a:b8:92:a3:f4: ec:09:7d:23:86:2c:02:ea:d1:17:ad:a4:04:77:2d: 35:1e:74:79:6f:76:b9:5d:67:0b:9e:22:1e:73:cc: 2a:c3:d8:57:fc:41:d1:28:76:8c:5b:56:2a:3c:3f: 87:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A8:D4:4B:83:3C:29:D9:82:55:A6:0A:9A:AF:5A:BA:5A:BC:B5:6B X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132312e302f32342d3234203d3e20323039383534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.169.121.0/24 Signature Algorithm: sha256WithRSAEncryption a5:35:9d:41:15:2d:dd:b4:03:a8:1c:4e:a0:71:a7:db:34:e6: dc:ed:74:cc:12:b5:0b:c1:cb:bb:24:48:ca:e4:8e:8a:fa:26: 80:3c:a6:8a:4a:54:12:1c:f2:59:b5:75:e5:55:73:bc:2a:83: b9:e0:b3:b4:43:82:6b:27:d8:cd:6c:4a:0f:2d:b3:92:41:10: 55:c7:85:68:73:91:d5:ab:23:bc:90:d3:7e:8b:19:d1:bf:51: f6:4c:3a:3c:e7:21:68:43:97:35:63:26:5e:84:37:88:8f:71: f1:f3:49:a0:70:f3:60:5a:01:88:d5:d9:b4:d4:66:fb:c2:33: 34:f7:d5:ca:d8:ee:d7:75:5d:81:0f:cc:6a:50:54:20:3b:1b: 1c:a2:bb:8e:1c:6a:c2:a2:5e:83:2c:17:0c:ee:54:1b:fe:13: f4:ef:a7:d8:66:07:0f:33:c6:8f:c9:ff:31:63:3a:d6:4a:a7: 4a:af:15:a0:d3:4c:07:52:84:5f:4d:e6:a9:80:16:da:ea:cf: 15:5d:b8:c4:15:70:5e:af:55:8e:52:44:5d:37:b2:bc:14:7d: 49:df:43:d5:89:d0:bd:fd:da:09:f6:7d:8a:b4:69:fa:4d:67: b1:9a:69:ac:9e:06:73:88:49:73:36:e4:31:7c:1d:ea:d8:10: 8d:9a:8c:6e -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUB0yRoEaZpTUnHGFnrGa23BoGYNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzVaFw0yNjExMjcxMTQ5MzVaMDMxMTAvBgNV BAMTKDlFQThENDRCODMzQzI5RDk4MjU1QTYwQTlBQUY1QUJBNUFCQ0I1NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9rMGaK2Am/ppMKgkosqJRuamF CR+3s60DIsiPghId8Zo4DCyxdro2v089cJqqZM3K+B5tldCSJR4kuzU42vI6bCd5 /qfWptFr0+JRuJ+vM0AV64eBf1Q3f37xoeqZVqU6ocJfX2m7oi51+HaU1VVpcTc/ 5XyYwVYXl359f8LD/c6iB82nDZL9Klhoy3EyYSm82LII40mZCwU8k7cwlHcA0/re hcJfPPLMjXknbh8BqRvExvgOlu5TW2LNR6WJz4NuSOi6sVvU3CxGmRxKuJKj9OwJ fSOGLALq0RetpAR3LTUedHlvdrldZwueIh5zzCrD2Ff8QdEodoxbVio8P4dfAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUnqjUS4M8KdmCVaYKmq9aulq8tWswHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMzMxMmUzMTM2Mzky ZTMxMzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzOTM4MzUzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAB+peTANBgkqhkiG9w0BAQsFAAOCAQEApTWdQRUt3bQDqBxOoHGn2zTm 3O10zBK1C8HLuyRIyuSOivomgDymikpUEhzyWbV15VVzvCqDueCztEOCayfYzWxK Dy2zkkEQVceFaHOR1asjvJDTfosZ0b9R9kw6POchaEOXNWMmXoQ3iI9x8fNJoHDz YFoBiNXZtNRm+8IzNPfVytju13VdgQ/MalBUIDsbHKK7jhxqwqJegywXDO5UG/4T 9O+n2GYHDzPGj8n/MWM61kqnSq8VoNNMB1KEX03mqYAW2urPFV24xBVwXq9VjlJE XTeyvBR9Sd9D1YnQvf3aCfZ9irRp+k1nsZpprJ4Gc4hJczbkMXwd6tgQjZqMbg== -----END CERTIFICATE-----Generated at Fri Dec 5 15:05:37 2025 by rpki-client