This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132322e302f32342d3234203d3e20323039383534.roa File: 33312e3136392e3132322e302f32342d3234203d3e20323039383534.roa (raw, json) Hash identifier: iWN8kl/yWLM6UI/r2AaHyinBGd6fIX3+S4ZJ8C8cklQ= Subject key identifier: 9B:B8:98:24:0B:39:9C:EF:6D:CE:FC:8E:B1:E6:45:E7:4A:DE:63:43 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 528565A5F95C11C6D50EB3E424371AE855A383D8 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132322e302f32342d3234203d3e20323039383534.roa Signing time: Fri 28 Nov 2025 11:49:18 +0000 ROA not before: Fri 28 Nov 2025 11:44:18 +0000 ROA not after: Fri 27 Nov 2026 11:49:18 +0000 asID: 209854 IP address blocks: 31.169.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 02:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:85:65:a5:f9:5c:11:c6:d5:0e:b3:e4:24:37:1a:e8:55:a3:83:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:18 2025 GMT Not After : Nov 27 11:49:18 2026 GMT Subject: CN=9BB898240B399CEF6DCEFC8EB1E645E74ADE6343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:bf:40:65:8c:66:2b:c5:45:bf:0f:79:36:88: 35:bf:5d:c2:70:02:16:a1:4b:7e:2c:46:bb:d1:c7: 3e:ca:72:79:3b:72:85:ab:5d:2a:b1:43:f9:72:61: 5a:ab:c9:2a:e8:eb:7e:cc:c5:6d:bf:fe:7d:c5:0f: 80:b4:4d:fd:4d:16:bd:21:d1:0e:28:64:f8:45:6e: e7:aa:6d:d8:24:cb:e0:d2:9b:a8:73:27:4f:e3:4b: 56:56:83:06:1e:d4:92:fe:a9:5e:97:f1:23:cb:38: d0:c7:cd:f8:25:fb:bf:48:d9:53:e5:4c:27:67:d3: e2:76:5a:82:98:46:b4:36:18:16:c7:3a:35:84:f8: f2:6e:c4:52:3b:21:65:e5:b0:77:6a:69:42:4a:57: d1:cc:7e:8a:ad:b5:60:52:b4:d8:32:8a:27:25:c6: a5:68:a9:0a:df:b3:1e:44:35:be:6f:91:18:e9:25: b4:a9:56:bf:7b:5b:82:30:e7:12:a6:1d:46:28:dd: b3:80:e7:6c:03:5d:d0:5a:22:eb:88:6e:fe:e2:6a: 19:8f:f8:00:ba:78:c7:13:c9:df:10:23:3c:2c:02: e1:a7:cd:ca:23:54:d5:5d:39:fb:7a:19:16:a1:97: df:74:21:aa:aa:b0:c1:32:2b:39:59:5b:f0:d5:a2: d7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B8:98:24:0B:39:9C:EF:6D:CE:FC:8E:B1:E6:45:E7:4A:DE:63:43 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132322e302f32342d3234203d3e20323039383534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.169.122.0/24 Signature Algorithm: sha256WithRSAEncryption 86:7b:77:5c:fe:89:b3:eb:73:81:4f:16:3d:f7:a2:4f:c1:99: 58:1a:56:b3:c1:18:9b:6b:f1:ed:59:ae:8d:af:82:b2:d0:22: bb:a2:66:ad:5f:cb:71:28:8e:c8:a1:80:f4:5f:b4:e8:a8:a8: 37:76:1f:4b:8a:99:95:52:f3:20:04:e6:dc:2b:86:7e:3d:47: 47:b4:87:59:00:1b:db:13:74:8d:0e:34:c3:30:87:15:cd:3d: 29:bb:a1:c3:27:b1:0c:5e:aa:48:fa:ad:ec:51:d1:ed:e2:af: a9:97:bd:6e:6d:b6:1f:bd:e7:84:ea:71:e2:1f:1b:30:57:26: 86:23:38:4f:5e:06:05:2a:33:53:4b:c5:4e:6d:33:65:14:ca: 51:0b:81:e2:03:2c:db:f8:65:d4:ae:fd:94:67:bc:5c:35:ce: db:27:a2:72:bd:5b:2a:3e:5b:4a:4e:3a:96:e1:aa:ff:a4:8a: 5e:c8:a2:52:8f:57:b6:bf:2c:ec:90:96:10:4e:72:bd:e8:30: 78:0f:9e:f6:61:b3:75:5e:66:7a:ca:77:cc:71:cf:d6:f6:0c: bd:48:70:51:4c:57:36:01:82:5f:10:8e:14:da:a7:fc:90:fc: c5:e4:82:3a:ec:3e:a1:dd:b1:1b:91:5f:35:fa:65:5b:d6:e5: 23:06:67:8a -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUUoVlpflcEcbVDrPkJDca6FWjg9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MThaFw0yNjExMjcxMTQ5MThaMDMxMTAvBgNV BAMTKDlCQjg5ODI0MEIzOTlDRUY2RENFRkM4RUIxRTY0NUU3NEFERTYzNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtv0BljGYrxUW/D3k2iDW/XcJw AhahS34sRrvRxz7Kcnk7coWrXSqxQ/lyYVqrySro637MxW2//n3FD4C0Tf1NFr0h 0Q4oZPhFbueqbdgky+DSm6hzJ0/jS1ZWgwYe1JL+qV6X8SPLONDHzfgl+79I2VPl TCdn0+J2WoKYRrQ2GBbHOjWE+PJuxFI7IWXlsHdqaUJKV9HMfoqttWBStNgyiicl xqVoqQrfsx5ENb5vkRjpJbSpVr97W4Iw5xKmHUYo3bOA52wDXdBaIuuIbv7iahmP +AC6eMcTyd8QIzwsAuGnzcojVNVdOft6GRahl990IaqqsMEyKzlZW/DVotcXAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUm7iYJAs5nO9tzvyOseZF50reY0MwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMzMxMmUzMTM2Mzky ZTMxMzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzOTM4MzUzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAB+pejANBgkqhkiG9w0BAQsFAAOCAQEAhnt3XP6Js+tzgU8WPfeiT8GZ WBpWs8EYm2vx7Vmuja+CstAiu6JmrV/LcSiOyKGA9F+06KioN3YfS4qZlVLzIATm 3CuGfj1HR7SHWQAb2xN0jQ40wzCHFc09KbuhwyexDF6qSPqt7FHR7eKvqZe9bm22 H73nhOpx4h8bMFcmhiM4T14GBSozU0vFTm0zZRTKUQuB4gMs2/hl1K79lGe8XDXO 2yeicr1bKj5bSk46luGq/6SKXsiiUo9Xtr8s7JCWEE5yvegweA+e9mGzdV5mesp3 zHHP1vYMvUhwUUxXNgGCXxCOFNqn/JD8xeSCOuw+od2xG5FfNfplW9blIwZnig== -----END CERTIFICATE-----Generated at Fri Dec 5 15:00:29 2025 by rpki-client