This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33382e302f32342d3332203d3e203430303231.roa File: 38312e32322e33382e302f32342d3332203d3e203430303231.roa (raw, json) Hash identifier: LF+syusz9E3XVKqjPDhnceoNuIbSclsvfb25L+92xGo= Subject key identifier: 67:80:A5:27:01:20:B9:5D:97:77:40:A0:88:90:F5:B4:70:21:8E:EF Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6675C31AAF71409F1B03BC8B9F026DC130EF5639 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33382e302f32342d3332203d3e203430303231.roa Signing time: Fri 21 Nov 2025 15:49:12 +0000 ROA not before: Fri 21 Nov 2025 15:44:12 +0000 ROA not after: Fri 20 Nov 2026 15:49:12 +0000 asID: 40021 IP address blocks: 81.22.38.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 02:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:75:c3:1a:af:71:40:9f:1b:03:bc:8b:9f:02:6d:c1:30:ef:56:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:12 2025 GMT Not After : Nov 20 15:49:12 2026 GMT Subject: CN=6780A5270120B95D977740A08890F5B470218EEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:25:a6:a7:c4:75:b5:a0:de:77:2e:37:da:b8: e2:09:7a:6d:d7:34:bf:32:13:68:12:8f:5a:2b:c3: 6f:1d:45:29:7d:e6:3e:c2:6e:9d:85:6e:db:b8:b3: 57:19:0d:96:bd:0f:35:e7:ac:46:f7:2a:66:87:ba: 71:8c:67:c9:5a:f0:66:22:90:a4:0f:41:48:35:b5: 40:10:ef:c2:a3:e6:97:ff:5f:af:02:7d:4e:9d:e9: b3:e9:60:89:c7:7a:a2:d7:69:b9:1f:32:5f:47:ab: 8e:35:b5:4d:08:8f:90:bc:0c:65:61:72:39:7a:10: 91:83:6a:7a:ed:98:e3:e9:7f:ea:47:56:0c:23:1d: d5:04:72:d3:85:01:85:e1:c5:06:74:6f:7f:05:3d: d4:06:a6:37:84:67:89:cb:8c:36:23:9a:0e:cc:86: 95:c3:5c:a1:a2:2f:3d:55:94:d5:65:a1:fe:bf:5d: d8:45:78:cb:4f:ce:85:e2:cc:e0:32:9f:45:12:d9: 34:d4:17:b0:18:36:d5:e2:8b:7d:fa:e7:e7:f8:c2: 08:5f:0c:8a:84:dd:de:bc:cf:65:95:64:78:2f:5d: 80:4c:14:81:e5:80:66:e6:d7:94:ed:14:39:29:cf: 13:d5:f1:dc:d8:16:9f:28:14:d7:61:c2:d3:1d:67: 90:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:80:A5:27:01:20:B9:5D:97:77:40:A0:88:90:F5:B4:70:21:8E:EF X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33382e302f32342d3332203d3e203430303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.38.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:b5:77:a7:3b:90:b0:bb:fb:b9:89:e3:3d:52:5e:52:7a:1e: 90:db:e4:8f:d8:20:c0:b6:be:ad:30:f2:ee:9d:97:19:3f:31: ca:5e:3d:0c:8a:4f:fe:0b:76:f4:df:22:4f:6c:fe:1c:cc:1f: 41:3a:55:a4:c6:75:3b:ed:a9:3c:c1:fc:6e:97:51:78:9e:4d: 26:99:7e:68:4c:25:08:7c:f7:f1:a3:4e:ee:26:67:5d:0a:ad: e8:de:52:b6:cf:16:7a:cb:d3:b3:eb:ef:48:bb:f4:40:c6:8f: 10:ca:34:ee:1f:32:dd:43:32:ed:2d:f0:32:bf:d7:56:e3:cc: 30:e8:b5:5e:45:b9:6f:0a:9d:c3:a6:f7:bc:74:57:58:76:c2: 1d:32:98:63:15:11:79:9f:78:8a:5f:ba:57:ea:7f:e8:40:ee: 10:ff:94:94:9a:30:cd:30:25:67:1d:95:75:fa:df:5a:89:3b: 6b:4c:3c:9b:eb:23:72:6a:9c:f8:0d:48:cd:d7:c9:73:03:46: aa:72:3f:0b:e8:76:17:fc:b8:69:1d:9c:2c:b0:10:63:d8:de: 68:45:0a:fe:3f:ab:46:c4:4b:8a:bd:ef:c1:f5:93:8b:c9:4e: 20:15:d3:49:ac:49:df:f3:9e:3b:44:a7:c5:de:86:28:55:14: 6c:78:fc:2c -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUZnXDGq9xQJ8bA7yLnwJtwTDvVjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTJaFw0yNjExMjAxNTQ5MTJaMDMxMTAvBgNV BAMTKDY3ODBBNTI3MDEyMEI5NUQ5Nzc3NDBBMDg4OTBGNUI0NzAyMThFRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1JaanxHW1oN53LjfauOIJem3X NL8yE2gSj1orw28dRSl95j7Cbp2Fbtu4s1cZDZa9DzXnrEb3KmaHunGMZ8la8GYi kKQPQUg1tUAQ78Kj5pf/X68CfU6d6bPpYInHeqLXabkfMl9Hq441tU0Ij5C8DGVh cjl6EJGDanrtmOPpf+pHVgwjHdUEctOFAYXhxQZ0b38FPdQGpjeEZ4nLjDYjmg7M hpXDXKGiLz1VlNVlof6/XdhFeMtPzoXizOAyn0US2TTUF7AYNtXii3365+f4wghf DIqE3d68z2WVZHgvXYBMFIHlgGbm15TtFDkpzxPV8dzYFp8oFNdhwtMdZ5CnAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUZ4ClJwEguV2Xd0CgiJD1tHAhju8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMxMmUzMjMyMmUz MzM4MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzQzMDMwMzIzMS5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AFEWJjANBgkqhkiG9w0BAQsFAAOCAQEAG7V3pzuQsLv7uYnjPVJeUnoekNvkj9gg wLa+rTDy7p2XGT8xyl49DIpP/gt29N8iT2z+HMwfQTpVpMZ1O+2pPMH8bpdReJ5N Jpl+aEwlCHz38aNO7iZnXQqt6N5Sts8WesvTs+vvSLv0QMaPEMo07h8y3UMy7S3w Mr/XVuPMMOi1XkW5bwqdw6b3vHRXWHbCHTKYYxUReZ94il+6V+p/6EDuEP+UlJow zTAlZx2VdfrfWok7a0w8m+sjcmqc+A1IzdfJcwNGqnI/C+h2F/y4aR2cLLAQY9je aEUK/j+rRsRLir3vwfWTi8lOIBXTSaxJ3/OeO0Snxd6GKFUUbHj8LA== -----END CERTIFICATE-----Generated at Fri Dec 5 14:51:21 2025 by rpki-client