This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131322e302f32342d3234203d3e20323039383534.roa File: 38332e39372e3131322e302f32342d3234203d3e20323039383534.roa (raw, json) Hash identifier: FD9YmH2vqoXL8bPxRDzNsw/c7oE3esDQQjauxoKsszw= Subject key identifier: E0:3C:74:B9:68:15:05:04:3B:D5:A7:40:EC:D2:88:7F:A6:40:15:91 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4D82F4A1F5A42C9FAE0E28E814E95FD12B11CA0D Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131322e302f32342d3234203d3e20323039383534.roa Signing time: Fri 28 Nov 2025 11:49:23 +0000 ROA not before: Fri 28 Nov 2025 11:44:23 +0000 ROA not after: Fri 27 Nov 2026 11:49:23 +0000 asID: 209854 IP address blocks: 83.97.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 02:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:82:f4:a1:f5:a4:2c:9f:ae:0e:28:e8:14:e9:5f:d1:2b:11:ca:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:23 2025 GMT Not After : Nov 27 11:49:23 2026 GMT Subject: CN=E03C74B9681505043BD5A740ECD2887FA6401591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:3a:dd:b1:28:0d:9c:fa:4d:b0:63:19:ab:58: f8:19:fd:3a:08:e6:67:8d:49:42:bb:26:13:3f:3b: c0:c2:b7:a0:5e:51:43:b8:15:fd:71:9e:fe:65:67: 79:65:a9:06:e0:0a:4e:c8:f5:d9:ad:01:1d:89:24: cd:f9:71:4f:f1:72:ac:5a:32:60:98:29:85:1b:29: d4:44:5b:d9:5f:7e:e9:f2:f5:d4:90:28:6f:77:8a: 6b:51:11:40:6b:39:e8:56:76:05:e9:ae:73:3b:be: 51:d1:b3:3a:32:fc:14:89:25:43:69:d6:7b:ba:88: 1b:a6:e4:d9:4e:47:6c:a9:82:a4:5c:e7:bc:b9:69: b3:40:d8:05:58:08:1d:71:05:12:17:6b:ad:58:5f: 60:8d:2e:eb:d1:d1:84:d1:58:78:fa:35:c9:f8:80: 35:23:9f:17:c9:ea:52:37:b4:20:f6:8c:a1:49:9b: 20:92:fb:8d:c1:13:a7:c8:6c:d3:3a:6f:25:dd:08: cf:0e:d1:4a:76:e2:b6:14:bc:2f:7f:87:4c:b4:34: 10:4a:05:80:cc:04:c2:d5:ff:65:0d:6b:f8:74:4d: 31:dd:37:a6:f7:be:fc:af:78:3c:a2:5d:93:a3:ba: 98:ea:86:05:48:45:b4:03:b7:d6:bb:56:79:6f:41: 4c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3C:74:B9:68:15:05:04:3B:D5:A7:40:EC:D2:88:7F:A6:40:15:91 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131322e302f32342d3234203d3e20323039383534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.97.112.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:61:17:7c:7e:86:77:1c:57:29:54:9b:86:c5:f6:55:04:fa: a3:66:1c:e4:e2:49:80:4e:0f:5a:ba:c4:53:83:87:56:2f:1c: 40:fc:6b:2a:42:23:87:73:75:d9:7d:e0:61:8b:ed:b0:47:01: f1:cb:5c:a9:ef:fa:18:22:d2:b9:7b:dc:82:95:8b:a1:39:22: 67:d3:c9:d2:6e:43:15:d5:72:96:83:b6:8f:19:c0:5e:db:b6: 9e:25:f4:ce:9b:30:3d:02:0d:14:f2:bc:a7:88:e3:dd:b6:b2: e1:86:6f:2e:88:56:ea:ea:73:ca:2d:f6:f7:18:4e:1c:a9:68: 43:a8:19:6e:64:a2:22:8d:e3:c0:fc:95:0b:f1:25:83:a0:db: 5b:34:7a:29:ac:e6:84:99:ad:9b:04:36:2f:61:37:13:83:d4: e4:a5:c7:9b:3c:38:0e:8d:07:a3:a2:e9:23:1b:5d:72:92:88: 4b:b6:07:c4:06:64:e0:54:d2:cd:05:e0:75:61:fa:48:ef:f2: 60:b8:1b:53:87:57:b2:62:28:4b:8a:a5:3f:f5:7c:92:35:1c: 76:53:22:06:0b:d8:f1:49:98:a5:6f:a7:39:ba:48:98:71:b7: ab:88:4a:1d:2d:03:12:14:4b:2d:fa:34:d4:df:58:4b:1c:e6: 95:f2:cc:59 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUTYL0ofWkLJ+uDijoFOlf0SsRyg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjNaFw0yNjExMjcxMTQ5MjNaMDMxMTAvBgNV BAMTKEUwM0M3NEI5NjgxNTA1MDQzQkQ1QTc0MEVDRDI4ODdGQTY0MDE1OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1Ot2xKA2c+k2wYxmrWPgZ/ToI 5meNSUK7JhM/O8DCt6BeUUO4Ff1xnv5lZ3llqQbgCk7I9dmtAR2JJM35cU/xcqxa MmCYKYUbKdREW9lffuny9dSQKG93imtREUBrOehWdgXprnM7vlHRszoy/BSJJUNp 1nu6iBum5NlOR2ypgqRc57y5abNA2AVYCB1xBRIXa61YX2CNLuvR0YTRWHj6Ncn4 gDUjnxfJ6lI3tCD2jKFJmyCS+43BE6fIbNM6byXdCM8O0Up24rYUvC9/h0y0NBBK BYDMBMLV/2UNa/h0TTHdN6b3vvyveDyiXZOjupjqhgVIRbQDt9a7VnlvQUwVAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU4Dx0uWgVBQQ71adA7NKIf6ZAFZEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMzMmUzOTM3MmUz MTMxMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzkzODM1MzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABTYXAwDQYJKoZIhvcNAQELBQADggEBAGxhF3x+hnccVylUm4bF9lUE+qNm HOTiSYBOD1q6xFODh1YvHED8aypCI4dzddl94GGL7bBHAfHLXKnv+hgi0rl73IKV i6E5ImfTydJuQxXVcpaDto8ZwF7btp4l9M6bMD0CDRTyvKeI4922suGGby6IVurq c8ot9vcYThypaEOoGW5koiKN48D8lQvxJYOg21s0eims5oSZrZsENi9hNxOD1OSl x5s8OA6NB6Oi6SMbXXKSiEu2B8QGZOBU0s0F4HVh+kjv8mC4G1OHV7JiKEuKpT/1 fJI1HHZTIgYL2PFJmKVvpzm6SJhxt6uISh0tAxIUSy36NNTfWEsc5pXyzFk= -----END CERTIFICATE-----Generated at Fri Dec 5 15:05:36 2025 by rpki-client