This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3136382e302f32342d3234203d3e20313336373837.roa File: 38342e32312e3136382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: TsO8XiZ6qr6lvuX7232CaULopiNk46pAj2Z75NRX57w= Subject key identifier: 5C:06:41:9D:AB:41:9B:B2:6C:08:17:5C:3A:72:40:66:DC:47:32:31 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6E181583A1ECCF97420A7C44DA7A6D82D37AC70B Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3136382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:12 +0000 ROA not before: Fri 21 Nov 2025 15:44:12 +0000 ROA not after: Fri 20 Nov 2026 15:49:12 +0000 asID: 136787 IP address blocks: 84.21.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:18:15:83:a1:ec:cf:97:42:0a:7c:44:da:7a:6d:82:d3:7a:c7:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:12 2025 GMT Not After : Nov 20 15:49:12 2026 GMT Subject: CN=5C06419DAB419BB26C08175C3A724066DC473231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bb:9e:fe:94:54:c4:d9:6e:0e:89:d7:86:3e: e8:f8:f7:76:20:0b:9d:e3:d7:44:05:3c:a0:29:2c: b8:7a:d6:22:ec:dc:e8:df:00:45:ab:4a:46:ea:6e: 6d:f7:a9:02:ef:b0:40:96:78:74:37:c7:1e:59:67: 2c:b6:d0:59:c6:b4:69:07:c7:24:e0:af:c9:6d:9c: f7:53:9b:cc:0e:5e:9a:ae:20:06:20:c4:36:09:56: 28:c9:3b:9a:ea:62:23:ca:53:97:a0:df:7e:c5:6a: 24:82:29:50:d4:3c:58:8f:36:13:00:2d:c8:6e:80: 97:b9:81:25:f6:c1:6d:69:7d:b1:6b:af:39:09:ca: c4:d8:a6:80:58:20:36:f8:3d:9c:11:4b:45:e1:d2: b4:7b:9e:46:b4:21:85:08:53:15:58:56:f4:ea:72: fd:9c:34:6d:c9:08:67:1b:9f:c4:c6:cd:80:60:1b: ba:89:f2:39:11:b2:45:76:80:e7:b0:09:f2:b7:48: 0b:a2:e2:d8:bd:cb:1a:9e:d3:9b:a7:5f:ad:b5:04: 0a:8c:0a:39:04:41:54:70:22:a1:8a:a5:59:de:25: c7:6c:e1:3f:0e:6f:90:ca:63:4c:aa:30:eb:c0:d7: 86:b3:1e:02:88:ac:8f:e2:b4:9f:ed:87:ba:0a:3c: f7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:06:41:9D:AB:41:9B:B2:6C:08:17:5C:3A:72:40:66:DC:47:32:31 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3136382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.21.168.0/24 Signature Algorithm: sha256WithRSAEncryption c2:bd:7a:66:16:14:c0:96:95:a9:66:e0:9d:01:b8:f5:8a:64: 64:db:5a:4a:b5:05:60:00:75:c1:c6:ed:cd:00:e1:1e:bf:9b: ce:85:1f:0e:b5:60:ed:83:62:98:08:ac:a8:dd:0d:76:94:19: 96:95:42:4d:05:2a:c0:70:4c:fa:6a:64:28:a7:88:bf:09:bf: 97:8e:19:ae:00:49:9b:1d:69:65:70:59:88:27:0a:f7:06:0b: f4:59:a0:4a:49:8a:b9:60:6c:bb:d9:8a:c6:ff:57:f9:c2:89: 8b:6b:12:6a:ae:8e:b7:42:9e:fd:5d:a4:98:15:5a:91:4c:19: 30:34:c6:1d:07:18:7e:4d:ab:64:5e:e9:b2:d6:43:65:95:0b: 44:b3:ae:95:eb:15:e1:b1:c2:de:ff:9f:85:f8:c9:80:89:f3: ca:de:19:b2:0d:f9:4e:bc:f7:15:ae:b6:59:59:8c:14:0d:b0: 6c:f1:03:30:11:bc:47:44:a3:6e:14:01:44:43:1d:21:46:9d: d9:88:db:3b:54:06:bb:a5:e7:af:fe:81:4a:c7:af:e9:01:c0: ee:57:53:6d:d5:03:82:09:e4:d4:73:4b:4b:54:f2:0b:a4:ec: 35:16:a4:64:d6:a0:ca:18:02:77:94:1a:af:ff:60:5a:aa:20: 99:77:d0:ed -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUbhgVg6Hsz5dCCnxE2nptgtN6xwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTJaFw0yNjExMjAxNTQ5MTJaMDMxMTAvBgNV BAMTKDVDMDY0MTlEQUI0MTlCQjI2QzA4MTc1QzNBNzI0MDY2REM0NzMyMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5u57+lFTE2W4OideGPuj493Yg C53j10QFPKApLLh61iLs3OjfAEWrSkbqbm33qQLvsECWeHQ3xx5ZZyy20FnGtGkH xyTgr8ltnPdTm8wOXpquIAYgxDYJVijJO5rqYiPKU5eg337FaiSCKVDUPFiPNhMA LchugJe5gSX2wW1pfbFrrzkJysTYpoBYIDb4PZwRS0Xh0rR7nka0IYUIUxVYVvTq cv2cNG3JCGcbn8TGzYBgG7qJ8jkRskV2gOewCfK3SAui4ti9yxqe05unX621BAqM CjkEQVRwIqGKpVneJcds4T8Ob5DKY0yqMOvA14azHgKIrI/itJ/th7oKPPdlAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUXAZBnatBm7JsCBdcOnJAZtxHMjEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODM0MmUzMjMxMmUz MTM2MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABUFagwDQYJKoZIhvcNAQELBQADggEBAMK9emYWFMCWlalm4J0BuPWKZGTb Wkq1BWAAdcHG7c0A4R6/m86FHw61YO2DYpgIrKjdDXaUGZaVQk0FKsBwTPpqZCin iL8Jv5eOGa4ASZsdaWVwWYgnCvcGC/RZoEpJirlgbLvZisb/V/nCiYtrEmqujrdC nv1dpJgVWpFMGTA0xh0HGH5Nq2Re6bLWQ2WVC0SzrpXrFeGxwt7/n4X4yYCJ88re GbIN+U689xWutllZjBQNsGzxAzARvEdEo24UAURDHSFGndmI2ztUBrul56/+gUrH r+kBwO5XU23VA4IJ5NRzS0tU8guk7DUWpGTWoMoYAneUGq//YFqqIJl30O0= -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:12 2025 by rpki-client