This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3232322e3235342e302f32342d3234203d3e20313437303439.roa File: 33312e3232322e3235342e302f32342d3234203d3e20313437303439.roa (raw, json) Hash identifier: Dzgtg8/XIa+E3CVnKa4nm+Wz4jClsWtXLhAfVFrW49M= Subject key identifier: 3B:20:C6:A6:C5:35:2C:47:A1:14:FE:6E:3E:92:9F:CF:80:41:E8:11 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0D67AFFA3A40A182FAC9A47C44305A18CC213BB6 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3232322e3235342e302f32342d3234203d3e20313437303439.roa Signing time: Fri 21 Nov 2025 15:49:07 +0000 ROA not before: Fri 21 Nov 2025 15:44:07 +0000 ROA not after: Fri 20 Nov 2026 15:49:07 +0000 asID: 147049 IP address blocks: 31.222.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:67:af:fa:3a:40:a1:82:fa:c9:a4:7c:44:30:5a:18:cc:21:3b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:07 2025 GMT Not After : Nov 20 15:49:07 2026 GMT Subject: CN=3B20C6A6C5352C47A114FE6E3E929FCF8041E811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:40:34:6f:eb:4f:96:21:51:54:60:5e:da:7d: 51:c7:c2:7f:b7:ec:29:35:7e:84:c1:38:43:b7:a6: 76:38:54:24:56:db:74:71:bf:06:de:8e:5b:38:e1: ae:c9:32:71:28:59:9b:8a:66:fc:af:f9:de:1c:43: b5:63:58:c2:be:23:4e:65:f1:06:fe:f5:ca:09:91: 13:2e:16:5f:4e:60:57:8d:bc:e5:35:19:32:77:fd: 1b:aa:00:57:62:b0:af:e8:dd:77:27:a0:6b:c3:70: 75:c1:11:5e:4d:35:82:d7:d2:dc:f0:b1:01:55:c6: 2a:9c:0b:ed:d8:a9:4b:d0:fa:dc:1d:28:d7:be:40: e2:2c:0a:26:74:10:4f:a6:f6:ad:5b:24:58:7f:e3: eb:0b:95:dc:90:e0:b0:36:ed:87:bd:10:c6:18:9e: 66:e9:a9:3c:ad:05:83:8c:b1:3d:2d:7e:dd:63:e5: f1:6f:e7:9d:2d:a8:c7:55:c9:65:51:f4:4f:60:da: f6:ca:b3:47:a4:6e:00:8a:e1:2f:5e:6f:a9:30:2e: a8:19:79:43:97:cd:a9:ad:1a:0b:6c:0f:be:07:c3: 01:46:fd:f4:90:56:7d:44:7b:94:c5:dd:c4:a1:83: f4:fc:1d:77:bb:de:a2:87:ff:0e:76:fa:cb:53:3d: 93:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:20:C6:A6:C5:35:2C:47:A1:14:FE:6E:3E:92:9F:CF:80:41:E8:11 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3232322e3235342e302f32342d3234203d3e20313437303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.254.0/24 Signature Algorithm: sha256WithRSAEncryption 55:8f:45:c5:33:9f:22:91:b5:42:c8:c3:79:3b:c7:cd:66:1d: 86:66:4e:d0:6d:32:31:12:41:08:cf:c2:81:a5:dd:2f:1f:36: 2f:89:19:bc:59:0c:23:b2:75:e8:e4:09:57:5c:49:c1:39:a9: 64:33:2b:e1:4e:c5:1d:d9:48:39:d1:1f:83:a7:db:19:54:30: 0e:3d:fa:6d:c8:74:27:2a:3a:73:71:89:46:85:01:f8:c8:a3: 7d:95:c6:f8:3e:69:4e:7c:2f:6f:f8:c9:13:32:48:c9:f8:54: 66:c2:6d:dc:d1:85:0b:20:1d:6f:c4:92:d4:c1:e0:24:d1:98: 51:61:22:8c:84:ee:3f:d3:f0:0c:76:f9:08:a0:27:43:9c:e3: 6f:fa:5d:31:22:f8:63:98:be:8b:53:c0:19:5b:a8:81:eb:68: 5c:34:03:6e:9f:d4:00:4d:53:a6:3d:70:b3:66:61:8d:e3:89: 79:15:61:31:32:76:92:c7:0d:97:d2:90:ea:74:d0:6d:a0:c5: 7f:9a:67:22:8a:20:3b:db:8f:40:70:e3:9f:dd:3a:a3:35:87: b7:22:57:d0:f5:90:f6:75:4c:ee:49:bf:99:96:b6:93:b3:71: 9a:a1:4c:4c:1f:8d:81:b3:0c:fb:06:bd:a1:9a:9d:08:15:34: 70:79:97:80 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUDWev+jpAoYL6yaR8RDBaGMwhO7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDdaFw0yNjExMjAxNTQ5MDdaMDMxMTAvBgNV BAMTKDNCMjBDNkE2QzUzNTJDNDdBMTE0RkU2RTNFOTI5RkNGODA0MUU4MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQDRv60+WIVFUYF7afVHHwn+3 7Ck1foTBOEO3pnY4VCRW23Rxvwbejls44a7JMnEoWZuKZvyv+d4cQ7VjWMK+I05l 8Qb+9coJkRMuFl9OYFeNvOU1GTJ3/RuqAFdisK/o3XcnoGvDcHXBEV5NNYLX0tzw sQFVxiqcC+3YqUvQ+twdKNe+QOIsCiZ0EE+m9q1bJFh/4+sLldyQ4LA27Ye9EMYY nmbpqTytBYOMsT0tft1j5fFv550tqMdVyWVR9E9g2vbKs0ekbgCK4S9eb6kwLqgZ eUOXzamtGgtsD74HwwFG/fSQVn1Ee5TF3cShg/T8HXe73qKH/w52+stTPZPfAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUOyDGpsU1LEehFP5uPpKfz4BB6BEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMzMxMmUzMjMyMzIy ZTMyMzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNzMwMzQzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAB/e/jANBgkqhkiG9w0BAQsFAAOCAQEAVY9FxTOfIpG1QsjDeTvHzWYd hmZO0G0yMRJBCM/CgaXdLx82L4kZvFkMI7J16OQJV1xJwTmpZDMr4U7FHdlIOdEf g6fbGVQwDj36bch0Jyo6c3GJRoUB+MijfZXG+D5pTnwvb/jJEzJIyfhUZsJt3NGF CyAdb8SS1MHgJNGYUWEijITuP9PwDHb5CKAnQ5zjb/pdMSL4Y5i+i1PAGVuogeto XDQDbp/UAE1Tpj1ws2ZhjeOJeRVhMTJ2kscNl9KQ6nTQbaDFf5pnIoogO9uPQHDj n906ozWHtyJX0PWQ9nVM7km/mZa2k7NxmqFMTB+NgbMM+wa9oZqdCBU0cHmXgA== -----END CERTIFICATE-----Generated at Fri Dec 5 11:34:19 2025 by rpki-client