This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33362e302f32342d3234203d3e20383334.roa File: 38312e32322e33362e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: 9K0go976enI1vdVMrmQDqdcGbzJByNm2DG53LT+C6w8= Subject key identifier: 4D:94:FE:3A:7D:CD:0D:9A:CC:91:4B:BC:85:23:60:DA:F0:AE:4C:7C Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0182C59C1ADB35E5134F27AFF51E77F9DE6E73A9 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33362e302f32342d3234203d3e20383334.roa Signing time: Fri 19 Dec 2025 21:27:06 +0000 ROA not before: Fri 19 Dec 2025 21:22:06 +0000 ROA not after: Fri 18 Dec 2026 21:27:06 +0000 asID: 834 IP address blocks: 81.22.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 14:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:82:c5:9c:1a:db:35:e5:13:4f:27:af:f5:1e:77:f9:de:6e:73:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Dec 19 21:22:06 2025 GMT Not After : Dec 18 21:27:06 2026 GMT Subject: CN=4D94FE3A7DCD0D9ACC914BBC852360DAF0AE4C7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e0:60:d6:f1:fb:96:34:a2:cb:38:7b:af:ef: 4f:95:e5:f3:54:9f:3d:04:fe:42:53:00:9c:d1:70: 30:a3:e0:57:39:ff:95:d4:c1:24:a6:5f:9f:9c:f0: c1:2c:b0:32:fb:a0:04:48:a1:c0:56:f2:8c:0b:64: bf:78:f8:2f:64:29:5f:db:60:73:bf:14:d5:c9:e0: 7b:13:8d:b1:5b:c4:7e:ef:80:2e:09:23:ff:76:58: 84:1e:15:6c:91:0d:61:c4:f0:7e:36:f8:00:03:86: 50:31:a6:47:8c:aa:ae:f9:9b:48:89:da:a3:58:71: 90:9a:51:5f:fc:93:79:a8:2f:09:32:5d:7e:b8:8b: 99:69:9a:ba:81:cd:3e:35:d5:33:e7:83:c6:82:53: e8:da:7a:55:9e:8e:5e:13:f5:b4:45:f2:ba:5d:40: 0c:8e:31:b3:d4:cb:e2:19:0e:89:1a:2a:ab:b7:cd: f1:59:d8:88:54:7b:5f:5d:b6:91:68:af:49:c8:80: f4:48:3c:64:e4:86:7d:09:26:ac:8c:ac:35:d4:9f: 10:59:85:0a:87:5f:9f:1d:56:e3:60:ae:9d:83:82: 06:cf:4f:ba:66:4e:ff:8f:98:29:d3:c0:6b:ea:d2: c3:9c:8f:34:0b:63:1d:c4:c8:94:97:50:c5:63:15: 4e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:94:FE:3A:7D:CD:0D:9A:CC:91:4B:BC:85:23:60:DA:F0:AE:4C:7C X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33362e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.36.0/24 Signature Algorithm: sha256WithRSAEncryption 82:30:e5:f3:f5:7a:55:d1:9e:7f:f4:b1:eb:d5:d0:ba:2f:f0: d9:b9:04:b8:a6:4c:65:60:55:3c:b6:50:0e:fa:19:cc:3d:78: 30:3d:93:77:2f:6b:c0:d2:44:67:36:cd:ae:01:f0:37:59:9f: 23:cf:27:c7:34:2c:af:a5:36:ca:c1:a7:77:22:10:44:4d:e6: 12:13:a4:39:75:06:06:01:f7:74:73:bf:7f:65:56:4b:1b:a1: a2:1b:98:cc:18:87:f8:56:8f:ac:c0:61:71:d9:9a:f3:47:f7: 58:42:07:0d:b5:1a:a0:d5:b9:2a:7b:f6:07:f5:e5:16:70:c4: d6:9d:0c:99:81:ea:93:85:d8:6f:ed:9b:e5:aa:58:89:29:43: 07:7d:04:93:2f:6b:e7:a2:45:52:11:fb:03:f3:15:d0:0a:d3: b5:d6:3c:96:1d:d6:6a:d1:66:14:23:af:ae:ba:6f:f8:77:13: e3:30:03:af:87:c2:79:38:a2:e9:e4:e3:14:1b:9b:e3:40:3c: e0:5f:cf:dd:67:02:65:6f:b6:f3:13:0f:67:4f:b3:0d:2d:41: 5c:62:dc:da:ca:d4:2e:b8:6f:d4:62:eb:1e:f4:05:cc:26:f0: 09:66:4b:88:2c:f1:8a:b4:a1:90:c2:56:14:15:70:f9:7d:9c: 6b:b3:66:bf -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUAYLFnBrbNeUTTyev9R53+d5uc6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTEyMTkyMTIyMDZaFw0yNjEyMTgyMTI3MDZaMDMxMTAvBgNV BAMTKDREOTRGRTNBN0RDRDBEOUFDQzkxNEJCQzg1MjM2MERBRjBBRTRDN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO4GDW8fuWNKLLOHuv70+V5fNU nz0E/kJTAJzRcDCj4Fc5/5XUwSSmX5+c8MEssDL7oARIocBW8owLZL94+C9kKV/b YHO/FNXJ4HsTjbFbxH7vgC4JI/92WIQeFWyRDWHE8H42+AADhlAxpkeMqq75m0iJ 2qNYcZCaUV/8k3moLwkyXX64i5lpmrqBzT411TPng8aCU+jaelWejl4T9bRF8rpd QAyOMbPUy+IZDokaKqu3zfFZ2IhUe19dtpFor0nIgPRIPGTkhn0JJqyMrDXUnxBZ hQqHX58dVuNgrp2DggbPT7pmTv+PmCnTwGvq0sOcjzQLYx3EyJSXUMVjFU5bAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUTZT+On3NDZrMkUu8hSNg2vCuTHwwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMxMmUzMjMyMmUz MzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURYk MA0GCSqGSIb3DQEBCwUAA4IBAQCCMOXz9XpV0Z5/9LHr1dC6L/DZuQS4pkxlYFU8 tlAO+hnMPXgwPZN3L2vA0kRnNs2uAfA3WZ8jzyfHNCyvpTbKwad3IhBETeYSE6Q5 dQYGAfd0c79/ZVZLG6GiG5jMGIf4Vo+swGFx2ZrzR/dYQgcNtRqg1bkqe/YH9eUW cMTWnQyZgeqThdhv7ZvlqliJKUMHfQSTL2vnokVSEfsD8xXQCtO11jyWHdZq0WYU I6+uum/4dxPjMAOvh8J5OKLp5OMUG5vjQDzgX8/dZwJlb7bzEw9nT7MNLUFcYtza ytQuuG/UYuse9AXMJvAJZkuILPGKtKGQwlYUFXD5fZxrs2a/ -----END CERTIFICATE-----Generated at Tue Dec 30 21:05:23 2025 by rpki-client