This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3133362e3231362e302f32332d3234203d3e203437353833.roa File: 38332e3133362e3231362e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: 9CNO+pZ2IdVzhjynCYue4ooFqGiRkTIrrEMwZeievjI= Subject key identifier: 84:28:C6:DA:50:5E:0C:63:1C:CB:89:BD:94:68:F3:7E:AD:48:0D:18 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4C74141AD15DEF9EFA577BE931D459B7669E7BED Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3133362e3231362e302f32332d3234203d3e203437353833.roa Signing time: Fri 21 Nov 2025 15:48:58 +0000 ROA not before: Fri 21 Nov 2025 15:43:58 +0000 ROA not after: Fri 20 Nov 2026 15:48:58 +0000 asID: 47583 IP address blocks: 83.136.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:74:14:1a:d1:5d:ef:9e:fa:57:7b:e9:31:d4:59:b7:66:9e:7b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:43:58 2025 GMT Not After : Nov 20 15:48:58 2026 GMT Subject: CN=8428C6DA505E0C631CCB89BD9468F37EAD480D18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a0:79:ab:8c:15:1b:22:62:63:9b:90:f9:9d: f1:e7:6c:10:01:ee:45:eb:d6:7c:fa:2f:f0:6c:51: 81:ac:09:2e:41:04:21:2d:c5:1e:30:18:24:e7:33: 52:39:56:79:ba:27:10:38:51:c7:44:50:39:cc:e5: 97:cd:02:be:1e:63:47:d2:30:fe:9e:64:e0:19:c6: 8c:cb:38:45:b7:4e:b5:c1:4f:0e:93:b0:9c:78:10: 1f:74:df:10:24:b7:3e:f4:6f:94:6d:99:71:4e:56: ea:8d:e7:0d:d4:65:d0:e5:5e:e2:9c:c2:83:5b:10: bf:f6:28:42:ee:3f:ae:cf:a0:77:cf:af:e8:c0:0a: cd:87:dd:ee:bd:4b:a9:be:08:d5:f6:5f:e0:01:98: 61:53:db:40:33:63:0c:b5:f7:e6:76:dc:60:e9:4e: 2e:e6:4b:89:14:db:e5:34:62:9d:ea:bd:c3:6d:67: 94:3d:b0:c1:53:c0:d9:51:33:a8:31:96:65:55:21: a8:bc:cc:9f:d5:4f:b2:2b:5d:47:a1:3e:d2:21:d4: 4d:39:f8:7b:f4:f7:6a:bf:1e:bc:9e:ae:a4:95:35: ee:a8:9e:9f:bb:1e:b6:0b:ef:aa:bb:6d:af:e7:23: 79:d2:db:25:f9:4c:33:d9:52:2f:ca:6e:d4:46:89: 5f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:28:C6:DA:50:5E:0C:63:1C:CB:89:BD:94:68:F3:7E:AD:48:0D:18 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3133362e3231362e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.136.216.0/23 Signature Algorithm: sha256WithRSAEncryption 16:87:87:54:ca:d4:8e:f3:6a:23:45:58:35:3b:ca:aa:0a:ba: 2d:d2:33:08:80:81:a0:b2:c2:80:2a:73:ab:b5:2d:d6:1b:ec: 71:6c:c2:fe:a2:9c:91:df:4c:08:6d:2e:84:92:7c:6d:8b:3f: 93:5c:35:6d:ad:3f:8d:5f:59:6e:46:d6:40:82:7d:d7:b5:3c: 34:5d:cd:31:5e:17:23:e6:cf:1a:13:3d:cf:ab:28:a4:65:3f: ae:a2:33:78:45:cb:19:d6:30:60:ae:a2:b2:10:94:c9:ef:be: 95:6f:b9:d1:bb:c2:9f:26:ea:92:1e:e2:7e:76:aa:a8:62:81: f4:2e:22:6a:9e:d7:7c:da:0e:77:d7:a1:13:3f:2d:05:c9:2d: dc:a2:e7:0d:db:7e:af:a2:8c:e1:ee:5f:ec:de:db:2f:71:0e: b8:f2:cb:6a:83:3d:a4:88:06:01:85:2a:8e:01:3a:f0:b2:cd: 7c:5e:ff:10:00:ba:a3:f0:b5:a6:88:20:ba:56:a9:32:30:86: 53:09:83:32:24:14:f8:5f:37:c6:5b:5f:56:66:f2:fd:3e:27: d4:ad:5f:e2:6d:48:a8:47:0d:7c:56:53:f6:d8:92:ec:ff:ac: 16:cc:d3:cb:f0:55:1c:8a:41:40:c9:49:57:fe:ea:7b:3b:eb: 1c:b0:b0:d8 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUTHQUGtFd7576V3vpMdRZt2aee+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQzNThaFw0yNjExMjAxNTQ4NThaMDMxMTAvBgNV BAMTKDg0MjhDNkRBNTA1RTBDNjMxQ0NCODlCRDk0NjhGMzdFQUQ0ODBEMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuoHmrjBUbImJjm5D5nfHnbBAB 7kXr1nz6L/BsUYGsCS5BBCEtxR4wGCTnM1I5Vnm6JxA4UcdEUDnM5ZfNAr4eY0fS MP6eZOAZxozLOEW3TrXBTw6TsJx4EB903xAktz70b5RtmXFOVuqN5w3UZdDlXuKc woNbEL/2KELuP67PoHfPr+jACs2H3e69S6m+CNX2X+ABmGFT20AzYwy19+Z23GDp Ti7mS4kU2+U0Yp3qvcNtZ5Q9sMFTwNlRM6gxlmVVIai8zJ/VT7IrXUehPtIh1E05 +Hv092q/HryerqSVNe6onp+7HrYL76q7ba/nI3nS2yX5TDPZUi/KbtRGiV+rAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUhCjG2lBeDGMcy4m9lGjzfq1IDRgwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMzMmUzMTMzMzYy ZTMyMzEzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFTiNgwDQYJKoZIhvcNAQELBQADggEBABaHh1TK1I7zaiNFWDU7yqoKui3S MwiAgaCywoAqc6u1LdYb7HFswv6inJHfTAhtLoSSfG2LP5NcNW2tP41fWW5G1kCC fde1PDRdzTFeFyPmzxoTPc+rKKRlP66iM3hFyxnWMGCuorIQlMnvvpVvudG7wp8m 6pIe4n52qqhigfQuImqe13zaDnfXoRM/LQXJLdyi5w3bfq+ijOHuX+ze2y9xDrjy y2qDPaSIBgGFKo4BOvCyzXxe/xAAuqPwtaaIILpWqTIwhlMJgzIkFPhfN8ZbX1Zm 8v0+J9StX+JtSKhHDXxWU/bYkuz/rBbM08vwVRyKQUDJSVf+6ns76xywsNg= -----END CERTIFICATE-----Generated at Fri Dec 5 18:55:02 2025 by rpki-client