This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132332e302f32342d3234203d3e20323039383534.roa
File: 33312e3136392e3132332e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: C+BMuDMF7FzcDZS6nYfPm2nXY3SHkkvunJaJho+ElHQ=
Subject key identifier: 6C:B7:29:40:9E:6B:29:EC:B9:54:F0:AB:AA:A6:F8:8F:7E:22:C2:1C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 733042C291351BA9600498AEF33654FA3FB7DE65
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132332e302f32342d3234203d3e20323039383534.roa
Signing time: Fri 28 Nov 2025 11:49:26 +0000
ROA not before: Fri 28 Nov 2025 11:44:26 +0000
ROA not after: Fri 27 Nov 2026 11:49:26 +0000
asID: 209854
IP address blocks: 31.169.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 02:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:30:42:c2:91:35:1b:a9:60:04:98:ae:f3:36:54:fa:3f:b7:de:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 28 11:44:26 2025 GMT
Not After : Nov 27 11:49:26 2026 GMT
Subject: CN=6CB729409E6B29ECB954F0ABAAA6F88F7E22C21C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f4:32:72:c8:27:b2:8b:f4:b3:2a:93:f4:b4:
cb:a3:40:fc:d1:6b:6e:73:40:5b:4a:67:ca:0c:a0:
ac:7e:57:66:fe:7b:d3:96:c9:66:ba:0c:06:db:78:
fc:24:6d:4d:f1:d3:ea:f7:25:94:ea:ff:f6:ad:32:
87:1e:70:b3:c3:4a:b6:1a:e9:3e:67:4d:20:96:0a:
04:1c:32:6a:93:5b:b3:a4:d3:68:6c:7a:01:e2:62:
a0:39:9d:51:fa:3f:ad:db:7a:0f:d1:77:2f:f0:93:
51:24:68:33:7d:56:cc:39:5e:b4:5e:80:22:09:ff:
bf:eb:bd:87:c0:3d:5e:00:1c:ad:20:7e:86:f2:95:
b5:3c:96:7c:31:cb:60:30:a6:e0:78:6b:c1:62:b0:
55:f8:45:11:c3:5f:8a:b6:30:c1:1f:a2:14:32:a2:
c7:59:50:c3:49:e1:1c:73:aa:f8:88:0c:6e:77:82:
6d:bd:7e:2a:48:03:4c:10:b2:9b:fc:94:a3:10:71:
11:5f:d6:b3:75:1d:4d:0a:f6:ab:1e:71:80:7f:dc:
e7:47:a6:ed:41:9e:f3:e5:a9:76:5c:e2:74:6f:f8:
54:3c:f0:65:d0:7f:df:9d:4b:0c:0d:f3:b8:e2:36:
38:9a:4f:78:14:e4:02:d5:06:92:d2:4f:ae:c1:d2:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B7:29:40:9E:6B:29:EC:B9:54:F0:AB:AA:A6:F8:8F:7E:22:C2:1C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132332e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.123.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:18:d3:60:dd:21:b6:76:40:e4:f5:1b:80:95:98:58:8d:1a:
2c:6a:de:4a:2c:5e:74:d3:bd:5e:42:3e:62:8c:48:53:fb:55:
d5:e5:f1:3b:d6:6f:9a:7f:8f:17:2c:3a:f2:8a:5c:b8:cf:88:
d9:b4:db:96:91:83:58:a8:d6:f7:cd:81:e5:63:5e:bf:bd:3a:
aa:66:ee:00:18:dc:c5:67:c9:19:22:78:74:af:6e:09:a6:7a:
14:4f:c1:fe:b0:3b:88:25:02:c8:7d:4b:53:21:2d:da:a7:9d:
2f:1d:ca:93:62:4c:43:ab:32:3b:ce:8a:6d:88:2b:68:8a:36:
b5:c3:8b:3f:37:e8:ac:a7:ab:f3:21:18:e1:4c:c3:86:75:3f:
34:17:22:79:71:a3:d1:a1:f2:79:34:f8:66:f5:29:5e:95:de:
f1:ff:6a:e6:92:1f:f3:73:a7:87:15:2d:66:b8:9a:ff:70:a0:
9f:66:4f:ef:7b:45:ec:de:bb:21:41:61:5f:7e:84:51:5d:8c:
f9:72:ba:51:87:b8:60:26:19:ed:fc:6c:21:80:1f:d9:76:ff:
7d:25:0a:93:43:20:33:a5:43:d1:49:f4:9d:46:6c:38:d8:e1:
d1:c3:c6:da:cd:4b:08:52:bc:89:38:5f:e3:5d:92:8d:ea:27:
c5:6f:44:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Dec 5 15:05:38 2025 by rpki-client