This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3230332e302f32342d3234203d3e20323033303631.roa File: 38332e3137312e3230332e302f32342d3234203d3e20323033303631.roa (raw, json) Hash identifier: hXPi7awi0xLPC1ACyHw3TnyIoYFZyq5ABbURxhBEkhI= Subject key identifier: 11:96:7E:E5:71:09:06:AE:49:E5:25:52:D7:2E:C8:96:71:77:61:4C Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2CD8654BB53C6B5AFC9FD68920DD09AC3BE31679 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3230332e302f32342d3234203d3e20323033303631.roa Signing time: Fri 28 Nov 2025 11:49:39 +0000 ROA not before: Fri 28 Nov 2025 11:44:39 +0000 ROA not after: Fri 27 Nov 2026 11:49:39 +0000 asID: 203061 IP address blocks: 83.171.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d8:65:4b:b5:3c:6b:5a:fc:9f:d6:89:20:dd:09:ac:3b:e3:16:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:39 2025 GMT Not After : Nov 27 11:49:39 2026 GMT Subject: CN=11967EE5710906AE49E52552D72EC8967177614C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4a:e4:32:fd:b3:f0:4f:36:3a:28:f0:ec:8a: 90:6c:3e:a9:6b:3d:a7:a1:52:22:7c:b7:32:16:33: a1:10:05:1a:7e:2f:31:de:f2:9f:75:5c:1f:d4:1e: 7f:78:28:f6:4c:14:61:e2:4a:7d:fb:04:46:aa:64: c3:6b:83:d7:a0:5e:e3:d6:df:0e:0a:e9:12:34:63: 52:d8:54:c3:44:7d:f7:69:bd:53:06:65:8f:66:c2: 2d:3b:92:59:80:f2:a8:06:9c:ba:2b:5f:a0:fa:1c: ab:2e:ef:74:ff:8a:48:fc:e8:e8:2c:1b:12:5c:a3: eb:dc:62:b0:29:c9:8f:f5:98:30:b4:9b:5f:a1:c4: c3:a2:52:e2:eb:a0:58:7f:fd:0d:3e:57:fb:0f:e1: 46:a8:43:14:9e:82:51:3c:96:80:38:ce:13:5b:c0: 1d:31:16:5b:74:82:a8:a1:fe:6d:f7:94:0e:6a:3a: da:16:c0:9d:2a:25:0c:66:51:79:77:51:d9:95:96: 97:a1:bf:4b:dc:70:19:49:c1:82:e6:4e:59:75:df: f7:80:eb:7d:a8:56:92:37:94:b8:cb:1c:2b:ab:bc: 8d:71:68:3b:75:47:db:5e:9d:91:af:e0:6e:72:c0: 1c:03:9d:d4:e9:06:2e:2b:88:5a:d5:7a:2d:2c:71: f4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:96:7E:E5:71:09:06:AE:49:E5:25:52:D7:2E:C8:96:71:77:61:4C X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3230332e302f32342d3234203d3e20323033303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.171.203.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:6b:42:2a:64:36:11:b9:66:cd:13:d7:8d:4e:1c:7e:a4:5c: 56:b2:fa:24:e8:12:d2:a6:4b:aa:2d:66:fd:40:32:24:64:21: 1b:c0:bf:d8:93:c8:ee:73:bc:55:7c:1b:78:f0:a2:e2:81:ae: 6b:cb:c4:bf:43:5d:03:da:54:0c:b7:15:50:ba:41:b9:16:de: b7:99:32:08:20:d4:de:fe:e0:ae:8d:0c:02:a9:74:cb:cf:c4: 0b:77:dd:6f:68:97:6e:9e:01:9d:08:46:db:11:72:22:98:4d: c2:71:f7:55:51:b0:c0:91:13:53:34:e7:88:58:38:bc:b2:9b: 19:b8:fd:48:fc:bb:42:da:b7:e6:e9:ab:32:d8:d6:3c:28:84: 79:09:3b:cb:6f:24:22:e4:83:0d:ea:e1:43:16:e4:0c:a4:77: 58:fa:cd:ef:fd:50:8c:60:1e:d7:2b:d2:99:33:19:6e:81:f7: dd:6e:74:ab:3d:be:30:26:61:34:60:24:89:bc:c9:d4:6e:a0: d5:cd:88:62:45:c8:d3:e2:d6:48:75:38:c8:01:50:da:ae:b1: e4:2b:af:c3:5c:34:6d:ed:a1:78:83:87:6c:d7:f9:62:a8:22: df:ed:d1:63:eb:e4:d3:9c:38:f4:8a:45:54:46:9a:16:17:a6: 67:ef:6c:c5 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIULNhlS7U8a1r8n9aJIN0JrDvjFnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzlaFw0yNjExMjcxMTQ5MzlaMDMxMTAvBgNV BAMTKDExOTY3RUU1NzEwOTA2QUU0OUU1MjU1MkQ3MkVDODk2NzE3NzYxNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDSuQy/bPwTzY6KPDsipBsPqlr PaehUiJ8tzIWM6EQBRp+LzHe8p91XB/UHn94KPZMFGHiSn37BEaqZMNrg9egXuPW 3w4K6RI0Y1LYVMNEffdpvVMGZY9mwi07klmA8qgGnLorX6D6HKsu73T/ikj86Ogs GxJco+vcYrApyY/1mDC0m1+hxMOiUuLroFh//Q0+V/sP4UaoQxSeglE8loA4zhNb wB0xFlt0gqih/m33lA5qOtoWwJ0qJQxmUXl3UdmVlpehv0vccBlJwYLmTll13/eA 632oVpI3lLjLHCurvI1xaDt1R9tenZGv4G5ywBwDndTpBi4riFrVei0scfTnAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUEZZ+5XEJBq5J5SVS1y7IlnF3YUwwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMzMmUzMTM3MzEy ZTMyMzAzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMzMwMzYzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAFOryzANBgkqhkiG9w0BAQsFAAOCAQEAD2tCKmQ2EblmzRPXjU4cfqRc VrL6JOgS0qZLqi1m/UAyJGQhG8C/2JPI7nO8VXwbePCi4oGua8vEv0NdA9pUDLcV ULpBuRbet5kyCCDU3v7gro0MAql0y8/EC3fdb2iXbp4BnQhG2xFyIphNwnH3VVGw wJETUzTniFg4vLKbGbj9SPy7Qtq35umrMtjWPCiEeQk7y28kIuSDDerhQxbkDKR3 WPrN7/1QjGAe1yvSmTMZboH33W50qz2+MCZhNGAkibzJ1G6g1c2IYkXI0+LWSHU4 yAFQ2q6x5Cuvw1w0be2heIOHbNf5Yqgi3+3RY+vk05w49IpFVEaaFhemZ+9sxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:08:02 2025 by rpki-client