This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e34302e3231332e302f32342d3234203d3e20313336373837.roa File: 33312e34302e3231332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: kvF17A7nDPWlyvTr0O1IaajJHjro8oLSNH/Pn+Odvg0= Subject key identifier: 07:2D:00:91:12:C0:54:93:51:7C:EE:96:9D:6B:55:3C:8E:30:47:D5 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6AC7A87854A711DC6F2E26DFA1F1D6EFB11F1606 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e34302e3231332e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:36 +0000 ROA not before: Fri 28 Nov 2025 11:44:36 +0000 ROA not after: Fri 27 Nov 2026 11:49:36 +0000 asID: 136787 IP address blocks: 31.40.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c7:a8:78:54:a7:11:dc:6f:2e:26:df:a1:f1:d6:ef:b1:1f:16:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:36 2025 GMT Not After : Nov 27 11:49:36 2026 GMT Subject: CN=072D009112C05493517CEE969D6B553C8E3047D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:32:77:82:4c:65:74:03:cf:40:0b:94:6c: 6f:73:a0:45:4a:74:8d:f7:f0:c6:52:1f:56:4f:55: 6a:28:f6:2d:89:5c:af:b6:b3:69:12:27:c6:57:30: 99:3a:36:c2:96:58:bf:f5:1c:c8:91:bb:98:b7:f0: d8:65:e1:fd:43:3d:36:74:36:10:0e:01:64:1e:2d: ef:5a:1f:39:c9:91:80:3b:4e:a7:a2:c0:47:0a:2d: 20:9f:9d:d5:3a:e3:f2:85:0e:18:8e:15:58:ae:1a: 15:eb:82:db:15:b0:54:21:1c:ad:6d:d1:34:05:53: 81:62:f9:91:e5:b3:6b:2b:d9:ca:14:09:5e:21:27: 5d:47:e5:a3:e5:5c:1c:b4:5d:f5:a3:5d:4c:81:49: f9:13:b8:9f:b9:ce:4f:6b:9e:08:eb:65:bc:d1:e8: 1f:3c:58:cf:3d:24:ee:0d:ca:23:8d:80:ed:59:c1: 44:ba:0a:24:a4:4e:f3:83:cf:89:27:9f:88:35:81: a1:c0:98:a3:98:43:66:42:a9:f0:f4:52:7b:ba:b7: 01:ea:e3:46:a0:ab:22:4e:d3:ec:bf:4b:25:ff:01: 5c:cf:09:2b:f0:3f:bd:31:80:81:c6:f4:e2:6a:c3: fa:cc:f9:e0:6a:c6:f8:c3:45:e0:00:50:01:9d:80: 86:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2D:00:91:12:C0:54:93:51:7C:EE:96:9D:6B:55:3C:8E:30:47:D5 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e34302e3231332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.213.0/24 Signature Algorithm: sha256WithRSAEncryption b5:3c:0d:62:cd:3e:6f:78:eb:0b:98:c4:aa:16:45:ce:9c:94: 38:94:f6:00:d8:e7:9d:d6:b6:e1:13:16:33:1a:a3:d2:2f:78: 55:21:e2:df:c9:82:8a:f3:36:6e:58:1d:28:f8:d1:ad:47:cf: c9:1c:c9:a8:b3:ea:ac:99:23:c4:ba:a9:43:42:ef:aa:2c:1d: 78:be:b2:e7:c3:85:56:e6:15:c6:08:df:91:ad:25:62:14:24: a2:91:25:8d:aa:b2:df:87:9e:15:e8:ab:e7:50:af:37:b1:2f: f1:13:fa:53:a0:40:d0:0b:77:9e:6e:0c:7e:a1:32:3b:19:49: bf:26:4d:93:ce:3e:40:74:10:85:d1:6f:da:7c:50:0d:05:20: 23:d1:48:3a:41:f7:17:7a:0e:ae:0d:22:48:74:8d:08:dd:08: 3d:f6:a3:7e:96:fc:fc:fe:c4:a2:5d:d6:06:51:8a:e0:47:6e: fe:18:73:93:d0:4e:e9:2c:c9:d2:b2:b6:99:55:a6:23:de:d9: bc:00:b0:e8:00:a9:9f:46:1b:49:c0:ad:64:79:eb:95:96:05: e9:bc:ec:8b:8a:f1:9d:29:cd:3a:c8:f9:d3:47:bd:5d:5d:b2: 92:f8:71:2a:0e:4c:72:db:40:d1:93:cd:f3:43:aa:6f:30:fe: 1d:98:8c:29 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUaseoeFSnEdxvLibfofHW77EfFgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzZaFw0yNjExMjcxMTQ5MzZaMDMxMTAvBgNV BAMTKDA3MkQwMDkxMTJDMDU0OTM1MTdDRUU5NjlENkI1NTNDOEUzMDQ3RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCztDJ3gkxldAPPQAuUbG9zoEVK dI338MZSH1ZPVWoo9i2JXK+2s2kSJ8ZXMJk6NsKWWL/1HMiRu5i38Nhl4f1DPTZ0 NhAOAWQeLe9aHznJkYA7TqeiwEcKLSCfndU64/KFDhiOFViuGhXrgtsVsFQhHK1t 0TQFU4Fi+ZHls2sr2coUCV4hJ11H5aPlXBy0XfWjXUyBSfkTuJ+5zk9rngjrZbzR 6B88WM89JO4NyiONgO1ZwUS6CiSkTvODz4knn4g1gaHAmKOYQ2ZCqfD0Unu6twHq 40agqyJO0+y/SyX/AVzPCSvwP70xgIHG9OJqw/rM+eBqxvjDReAAUAGdgIafAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUBy0AkRLAVJNRfO6WnWtVPI4wR9UwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMzMxMmUzNDMwMmUz MjMxMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAfKNUwDQYJKoZIhvcNAQELBQADggEBALU8DWLNPm946wuYxKoWRc6clDiU 9gDY553WtuETFjMao9IveFUh4t/JgorzNm5YHSj40a1Hz8kcyaiz6qyZI8S6qUNC 76osHXi+sufDhVbmFcYI35GtJWIUJKKRJY2qst+HnhXoq+dQrzexL/ET+lOgQNAL d55uDH6hMjsZSb8mTZPOPkB0EIXRb9p8UA0FICPRSDpB9xd6Dq4NIkh0jQjdCD32 o36W/Pz+xKJd1gZRiuBHbv4Yc5PQTuksydKytplVpiPe2bwAsOgAqZ9GG0nArWR5 65WWBem87IuK8Z0pzTrI+dNHvV1dspL4cSoOTHLbQNGTzfNDqm8w/h2YjCk= -----END CERTIFICATE-----Generated at Sun Dec 7 01:48:21 2025 by rpki-client