This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3136392e302f32342d3234203d3e20313336373837.roa File: 38342e32312e3136392e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: XgBjHdU/ECzOgxran5qfe1GLMnV+PMIkRAyp7CKJN9w= Subject key identifier: 0A:61:EB:82:D4:8E:26:43:BD:9C:F2:C9:BB:57:6C:FA:77:41:28:AC Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7748FFE74D662D90D265C6413BF96D75FE21E288 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3136392e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:03 +0000 ROA not before: Fri 21 Nov 2025 15:44:03 +0000 ROA not after: Fri 20 Nov 2026 15:49:03 +0000 asID: 136787 IP address blocks: 84.21.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:48:ff:e7:4d:66:2d:90:d2:65:c6:41:3b:f9:6d:75:fe:21:e2:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:03 2025 GMT Not After : Nov 20 15:49:03 2026 GMT Subject: CN=0A61EB82D48E2643BD9CF2C9BB576CFA774128AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d0:55:51:e3:df:09:a0:5a:f9:39:80:04:d2: b1:49:3b:60:56:22:58:04:2f:ca:15:7c:c0:1f:b3: b3:c9:d0:63:db:1d:cd:cf:81:a6:55:b3:9d:14:b5: 10:fd:95:f7:4d:61:29:3f:95:87:2b:6c:db:61:11: 9c:80:22:19:d2:a2:0d:6b:fa:16:39:93:07:45:37: da:d6:f5:e2:70:77:22:e6:7b:d1:50:cc:e2:29:18: 80:7e:ce:13:a5:29:17:a4:f2:28:fe:82:89:8e:d4: 94:ba:ad:99:b2:45:51:62:b7:d4:38:bf:82:26:b9: 14:44:f9:42:ae:c9:ec:a3:37:27:73:91:a0:2f:8f: 54:3d:b1:44:9a:9d:85:20:7b:20:d8:41:9d:4d:4f: 89:c9:9e:76:62:10:fa:8e:9d:3b:c1:e8:36:d6:fd: 95:df:a9:ce:bb:1a:ba:d0:f6:1f:88:ff:0d:91:dd: a5:19:ce:68:2b:2a:3a:c2:2e:2a:0c:f6:5c:aa:a3: bf:66:57:3c:17:e2:ea:eb:ea:db:e3:cc:02:ec:a4: 5e:4d:0f:65:f1:63:84:ee:ee:5b:20:2d:44:30:e6: a1:bb:16:e2:81:63:00:1f:f0:3c:83:67:22:0e:a7: c3:08:37:2d:de:7b:86:e4:7d:37:7d:73:ef:07:74: 86:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:61:EB:82:D4:8E:26:43:BD:9C:F2:C9:BB:57:6C:FA:77:41:28:AC X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3136392e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.21.169.0/24 Signature Algorithm: sha256WithRSAEncryption b4:52:e9:3a:d6:cb:1f:85:bc:44:0c:a0:bf:f7:4f:55:fc:71: e9:c4:fe:4e:ef:f3:00:6e:5d:ea:d4:c4:a9:77:d6:a7:e2:6e: 48:49:60:1b:41:e4:e4:67:61:e7:6d:d5:d9:d9:fd:e5:bb:00: aa:73:6f:fc:ef:1e:7c:40:25:1b:dd:7e:bb:7f:74:a8:df:70: 43:6b:c3:36:d9:59:fa:6d:05:d4:f6:9b:b5:51:98:30:24:94: e5:0d:f2:06:ac:d3:ac:ef:8a:cd:b3:e2:21:8f:b9:03:70:1d: 7d:97:65:18:a3:59:cd:e3:09:fd:35:8e:59:92:4b:c3:73:54: fc:0f:a6:00:49:a7:a5:63:0f:78:03:89:91:fa:fd:7a:f3:da: 53:4c:23:a1:3a:b1:7c:af:3e:aa:92:f9:ff:d4:ab:2d:c1:4c: 0e:46:b2:6a:92:58:02:fc:d3:7a:90:0b:1b:3a:9a:b1:e3:1d: 17:de:c8:77:1c:a8:98:e8:80:be:04:3a:eb:6d:87:1b:7f:f8: 9d:38:4a:3d:cb:86:2f:35:ae:27:79:71:bc:dc:77:09:f4:74: ed:8a:69:e7:1c:37:16:e4:cf:ca:78:c1:4a:1b:a0:49:e1:fe: 48:13:e6:8d:46:14:23:30:a8:17:5c:2b:64:c8:e7:04:85:43: 67:56:be:f9 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUd0j/501mLZDSZcZBO/ltdf4h4ogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDNaFw0yNjExMjAxNTQ5MDNaMDMxMTAvBgNV BAMTKDBBNjFFQjgyRDQ4RTI2NDNCRDlDRjJDOUJCNTc2Q0ZBNzc0MTI4QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy0FVR498JoFr5OYAE0rFJO2BW IlgEL8oVfMAfs7PJ0GPbHc3PgaZVs50UtRD9lfdNYSk/lYcrbNthEZyAIhnSog1r +hY5kwdFN9rW9eJwdyLme9FQzOIpGIB+zhOlKRek8ij+gomO1JS6rZmyRVFit9Q4 v4ImuRRE+UKuyeyjNydzkaAvj1Q9sUSanYUgeyDYQZ1NT4nJnnZiEPqOnTvB6DbW /ZXfqc67GrrQ9h+I/w2R3aUZzmgrKjrCLioM9lyqo79mVzwX4urr6tvjzALspF5N D2XxY4Tu7lsgLUQw5qG7FuKBYwAf8DyDZyIOp8MINy3ee4bkfTd9c+8HdIYDAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUCmHrgtSOJkO9nPLJu1ds+ndBKKwwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODM0MmUzMjMxMmUz MTM2MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABUFakwDQYJKoZIhvcNAQELBQADggEBALRS6TrWyx+FvEQMoL/3T1X8cenE /k7v8wBuXerUxKl31qfibkhJYBtB5ORnYedt1dnZ/eW7AKpzb/zvHnxAJRvdfrt/ dKjfcENrwzbZWfptBdT2m7VRmDAklOUN8gas06zvis2z4iGPuQNwHX2XZRijWc3j Cf01jlmSS8NzVPwPpgBJp6VjD3gDiZH6/Xrz2lNMI6E6sXyvPqqS+f/Uqy3BTA5G smqSWAL803qQCxs6mrHjHRfeyHccqJjogL4EOutthxt/+J04Sj3Lhi81rid5cbzc dwn0dO2KaeccNxbkz8p4wUoboEnh/kgT5o1GFCMwqBdcK2TI5wSFQ2dWvvk= -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:12 2025 by rpki-client