This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131332e302f32342d3234203d3e20323039383534.roa File: 38332e39372e3131332e302f32342d3234203d3e20323039383534.roa (raw, json) Hash identifier: zqFGO5vYZcGqGlnbEOz4WINrvSNOgNeEWXUoKepido0= Subject key identifier: DE:1F:DC:CC:E5:51:DB:BE:6A:C2:1B:A1:D1:AA:34:DC:DA:0A:A1:7D Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1E7C77FF19504D2845510F22B44B632C43B48667 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131332e302f32342d3234203d3e20323039383534.roa Signing time: Fri 28 Nov 2025 11:49:45 +0000 ROA not before: Fri 28 Nov 2025 11:44:45 +0000 ROA not after: Fri 27 Nov 2026 11:49:45 +0000 asID: 209854 IP address blocks: 83.97.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 02:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:7c:77:ff:19:50:4d:28:45:51:0f:22:b4:4b:63:2c:43:b4:86:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:45 2025 GMT Not After : Nov 27 11:49:45 2026 GMT Subject: CN=DE1FDCCCE551DBBE6AC21BA1D1AA34DCDA0AA17D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c8:d3:47:ff:3f:70:c0:4d:af:75:fb:1d:30: b6:80:f0:bc:d9:97:9c:26:1e:53:8b:7e:d4:8c:74: ea:84:81:29:25:fb:11:4e:22:49:0b:68:99:5d:67: d9:56:b9:26:7b:e4:c0:c1:7c:fd:73:8d:7d:6f:8a: 17:06:4e:14:4b:2c:0a:0e:75:20:90:1d:a9:4c:50: 69:60:16:58:70:c8:ce:31:98:e2:04:59:b1:8c:b2: 70:31:ef:41:13:ef:89:2f:ef:a6:cf:d6:0c:2e:1d: 99:33:2d:e1:47:42:ad:fd:3e:54:c1:85:1c:a7:66: 9b:3d:50:2a:fc:75:a2:5a:31:ce:95:95:bd:78:e7: 7b:b1:0f:6d:0c:79:1b:33:80:9d:a1:fd:c7:57:dc: 79:10:91:df:fa:9c:4f:e8:9e:68:2f:59:4b:d9:7f: a9:4f:19:11:80:cc:a8:79:62:d6:ef:e4:96:27:c2: 1d:75:77:ce:b3:f2:50:1f:49:cf:9b:d9:fe:2d:69: 1f:bf:da:a6:69:f9:0d:ef:5c:67:0e:23:ed:d1:92: 3a:77:66:2c:bf:ba:93:d1:52:46:1f:43:4a:65:85: d5:2e:15:fe:5c:7a:aa:98:87:40:4f:87:05:3d:05: 18:c6:ae:79:f6:fd:db:1c:e2:92:97:fe:15:6e:7e: eb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1F:DC:CC:E5:51:DB:BE:6A:C2:1B:A1:D1:AA:34:DC:DA:0A:A1:7D X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131332e302f32342d3234203d3e20323039383534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.97.113.0/24 Signature Algorithm: sha256WithRSAEncryption c1:87:71:1d:62:2c:84:4f:f0:26:0f:62:b5:42:91:7d:5c:88: f6:67:51:e6:ed:ad:44:4e:b3:91:48:9a:66:71:1a:40:2c:fc: 1c:1a:b1:3c:ad:00:52:23:6d:b5:b5:ea:43:cd:d1:ab:22:1b: bb:7e:b8:8f:7d:0f:72:ae:a1:d5:98:8b:1d:d8:ff:ef:4e:f7: c3:72:41:ad:df:f0:a6:89:51:8b:86:43:b3:a0:21:c3:74:e3: 67:bc:78:e4:7c:89:5b:53:b2:49:cf:51:6a:00:9d:a9:bb:9f: cd:44:8b:6c:e6:b2:fa:b6:58:d4:5a:04:02:84:b4:ba:f3:78: 76:b9:2d:e7:d6:57:21:86:3c:b1:b0:b8:e1:a6:5a:4e:b6:09: 47:86:7a:94:27:8b:4b:ce:50:9d:ff:16:40:38:45:20:f4:2f: 6b:3f:7c:ec:26:6f:09:02:2e:2b:31:71:a9:df:9c:e9:ed:b1: 90:d2:bc:54:ae:96:03:c4:f6:93:e3:09:27:7d:aa:aa:3b:cd: 4b:e8:75:0d:3d:9c:e0:79:81:5e:93:31:93:dc:a8:d2:24:43: a5:63:3b:94:ff:29:c1:26:e9:57:d1:b0:c6:70:6c:50:24:9e: 65:b7:7b:0f:e2:1a:26:b2:df:d7:63:fd:3d:47:58:03:b8:30: ba:e0:ed:a9 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUHnx3/xlQTShFUQ8itEtjLEO0hmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDVaFw0yNjExMjcxMTQ5NDVaMDMxMTAvBgNV BAMTKERFMUZEQ0NDRTU1MURCQkU2QUMyMUJBMUQxQUEzNERDREEwQUExN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSyNNH/z9wwE2vdfsdMLaA8LzZ l5wmHlOLftSMdOqEgSkl+xFOIkkLaJldZ9lWuSZ75MDBfP1zjX1vihcGThRLLAoO dSCQHalMUGlgFlhwyM4xmOIEWbGMsnAx70ET74kv76bP1gwuHZkzLeFHQq39PlTB hRynZps9UCr8daJaMc6Vlb1453uxD20MeRszgJ2h/cdX3HkQkd/6nE/onmgvWUvZ f6lPGRGAzKh5Ytbv5JYnwh11d86z8lAfSc+b2f4taR+/2qZp+Q3vXGcOI+3Rkjp3 Ziy/upPRUkYfQ0plhdUuFf5ceqqYh0BPhwU9BRjGrnn2/dsc4pKX/hVufuubAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU3h/czOVR275qwhuh0ao03NoKoX0wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMzMmUzOTM3MmUz MTMxMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzkzODM1MzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABTYXEwDQYJKoZIhvcNAQELBQADggEBAMGHcR1iLIRP8CYPYrVCkX1ciPZn UebtrUROs5FImmZxGkAs/BwasTytAFIjbbW16kPN0asiG7t+uI99D3KuodWYix3Y /+9O98NyQa3f8KaJUYuGQ7OgIcN042e8eOR8iVtTsknPUWoAnam7n81Ei2zmsvq2 WNRaBAKEtLrzeHa5LefWVyGGPLGwuOGmWk62CUeGepQni0vOUJ3/FkA4RSD0L2s/ fOwmbwkCLisxcanfnOntsZDSvFSulgPE9pPjCSd9qqo7zUvodQ09nOB5gV6TMZPc qNIkQ6VjO5T/KcEm6VfRsMZwbFAknmW3ew/iGiay39dj/T1HWAO4MLrg7ak= -----END CERTIFICATE-----Generated at Fri Dec 5 15:05:36 2025 by rpki-client