This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131352e302f32342d3234203d3e20323039383534.roa File: 38332e39372e3131352e302f32342d3234203d3e20323039383534.roa (raw, json) Hash identifier: Ix049ugcCGTKsODIoW8IbxIo054UcKGsmHj4hYdA0bQ= Subject key identifier: 7A:44:B1:52:90:CF:29:BB:04:6F:E4:CF:0D:0A:46:F7:73:05:02:30 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 67536B8A360EF6C74C601E109552EF1ED2D75340 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131352e302f32342d3234203d3e20323039383534.roa Signing time: Fri 28 Nov 2025 11:49:51 +0000 ROA not before: Fri 28 Nov 2025 11:44:51 +0000 ROA not after: Fri 27 Nov 2026 11:49:51 +0000 asID: 209854 IP address blocks: 83.97.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 02:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:53:6b:8a:36:0e:f6:c7:4c:60:1e:10:95:52:ef:1e:d2:d7:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:51 2025 GMT Not After : Nov 27 11:49:51 2026 GMT Subject: CN=7A44B15290CF29BB046FE4CF0D0A46F773050230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bf:6f:18:3f:1c:8c:19:13:e7:84:93:3e:19: be:67:06:2c:b9:67:3c:68:25:9d:16:3f:ee:0d:5d: 5b:ae:78:19:8c:83:15:94:b9:cc:dd:4e:5e:e6:f2: 80:75:b4:c6:23:73:21:45:ce:86:be:c0:5a:f0:ab: 3e:12:68:fa:44:7e:38:66:e8:89:cf:63:5e:40:ab: 82:5a:6b:d6:e2:b7:b3:42:e6:cd:35:7b:59:02:ae: 1a:94:5d:40:9b:3b:82:2a:6b:5b:1e:be:46:7a:52: a1:db:b4:2f:68:95:c0:7c:86:48:2c:b5:14:d4:7e: 41:68:bb:86:d0:99:01:02:72:2b:f9:34:5a:24:15: 88:43:96:66:88:5b:b4:14:2f:27:a4:2e:4c:50:b8: a7:91:f6:5d:e8:15:c0:7c:44:a2:1c:21:38:d6:fd: ff:f2:a2:c5:92:79:ce:f5:9c:ab:60:7d:16:1e:ea: c2:5c:b8:1d:97:16:c9:20:a2:7e:eb:81:8a:f9:3e: f9:58:a6:eb:33:d2:84:56:51:18:6f:bc:e9:2d:b8: d6:d9:88:33:f0:11:40:6d:c9:31:52:40:c3:2c:4d: 74:7a:5e:59:43:4a:df:95:0c:11:48:66:5e:4f:9b: b3:5f:db:1e:db:86:89:93:62:df:a9:ed:4b:54:50: 3e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:44:B1:52:90:CF:29:BB:04:6F:E4:CF:0D:0A:46:F7:73:05:02:30 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131352e302f32342d3234203d3e20323039383534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.97.115.0/24 Signature Algorithm: sha256WithRSAEncryption 30:42:dc:28:f4:eb:a1:f0:9a:1c:82:ea:b6:35:c3:88:3b:44: bc:86:5c:01:67:d6:d7:9d:57:72:48:46:fc:4d:1c:55:e8:45: 1c:d1:8b:23:5d:a4:85:c2:04:dc:12:69:24:f5:f6:0e:1b:45: c9:a7:73:d6:5e:9b:cd:52:33:d5:7d:80:ec:22:4a:a0:a8:84: 9d:8c:f3:37:5f:9c:df:42:f7:6f:b5:81:ac:43:df:2b:98:15: eb:f6:11:0b:cd:20:9c:24:50:31:24:c5:76:15:8a:25:88:4e: 64:91:be:2b:97:39:24:f4:8c:c6:a3:4a:9f:4b:6b:19:45:e4: 17:f9:dc:1f:22:02:27:f9:7d:7f:0e:9a:6c:a5:b8:94:7a:61: 49:f0:84:ec:3d:f1:01:6f:93:d1:e4:88:5c:cb:43:f5:38:9d: 23:3a:31:dd:25:89:b1:20:0a:41:2d:15:dd:f1:00:7d:d1:84: 1b:9f:b1:1d:ee:e9:f7:04:f3:c6:56:e1:77:b9:51:54:99:11: 1c:9c:14:30:3e:77:aa:cb:09:7d:24:a6:f6:78:5d:c8:0e:97: d2:1a:9f:15:d8:a7:c5:d7:f9:1d:ad:5d:d0:85:4c:be:96:04: ad:cb:c5:fc:3a:b3:a7:19:4c:e8:d8:8d:c3:31:bd:76:05:4d: 30:49:71:7d -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUZ1NrijYO9sdMYB4QlVLvHtLXU0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTFaFw0yNjExMjcxMTQ5NTFaMDMxMTAvBgNV BAMTKDdBNDRCMTUyOTBDRjI5QkIwNDZGRTRDRjBEMEE0NkY3NzMwNTAyMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFv28YPxyMGRPnhJM+Gb5nBiy5 ZzxoJZ0WP+4NXVuueBmMgxWUuczdTl7m8oB1tMYjcyFFzoa+wFrwqz4SaPpEfjhm 6InPY15Aq4Jaa9bit7NC5s01e1kCrhqUXUCbO4Iqa1sevkZ6UqHbtC9olcB8hkgs tRTUfkFou4bQmQECciv5NFokFYhDlmaIW7QULyekLkxQuKeR9l3oFcB8RKIcITjW /f/yosWSec71nKtgfRYe6sJcuB2XFskgon7rgYr5PvlYpusz0oRWURhvvOktuNbZ iDPwEUBtyTFSQMMsTXR6XllDSt+VDBFIZl5Pm7Nf2x7bhomTYt+p7UtUUD6FAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUekSxUpDPKbsEb+TPDQpG93MFAjAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMzMmUzOTM3MmUz MTMxMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzkzODM1MzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABTYXMwDQYJKoZIhvcNAQELBQADggEBADBC3Cj066HwmhyC6rY1w4g7RLyG XAFn1tedV3JIRvxNHFXoRRzRiyNdpIXCBNwSaST19g4bRcmnc9Zem81SM9V9gOwi SqCohJ2M8zdfnN9C92+1gaxD3yuYFev2EQvNIJwkUDEkxXYViiWITmSRviuXOST0 jMajSp9LaxlF5Bf53B8iAif5fX8OmmyluJR6YUnwhOw98QFvk9HkiFzLQ/U4nSM6 Md0libEgCkEtFd3xAH3RhBufsR3u6fcE88ZW4Xe5UVSZERycFDA+d6rLCX0kpvZ4 XcgOl9IanxXYp8XX+R2tXdCFTL6WBK3Lxfw6s6cZTOjYjcMxvXYFTTBJcX0= -----END CERTIFICATE-----Generated at Fri Dec 5 15:01:34 2025 by rpki-client