This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230392e39322e302f32332d3234203d3e203437353833.roa File: 38352e3230392e39322e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: OefcOyKLG/sLj+eiR/SjDoqUEK8JtXw+3Ze8AiAtWKg= Subject key identifier: 95:F4:FA:F1:E0:F6:7D:0E:A6:7B:DF:B7:D3:78:D2:5D:85:6B:D1:C1 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 194C85C66596849719ABAC6D3CCD2B876D3C1D0A Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230392e39322e302f32332d3234203d3e203437353833.roa Signing time: Fri 28 Nov 2025 11:49:40 +0000 ROA not before: Fri 28 Nov 2025 11:44:40 +0000 ROA not after: Fri 27 Nov 2026 11:49:40 +0000 asID: 47583 IP address blocks: 85.209.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:4c:85:c6:65:96:84:97:19:ab:ac:6d:3c:cd:2b:87:6d:3c:1d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:40 2025 GMT Not After : Nov 27 11:49:40 2026 GMT Subject: CN=95F4FAF1E0F67D0EA67BDFB7D378D25D856BD1C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6e:cd:34:16:d2:a9:4a:43:df:07:96:41:0b: 05:96:3a:93:6e:5c:d3:7c:10:5a:8c:ac:e3:ce:e0: 6a:33:08:62:46:12:37:d5:60:70:68:7b:8a:ad:c9: 12:f2:b8:de:7d:28:dd:88:4a:49:54:fc:88:8a:a6: f0:82:3f:da:3c:a8:ef:1b:91:b0:3b:94:e5:2e:78: 44:bf:f7:a6:49:a7:22:81:af:01:fc:96:b1:06:05: 45:31:64:4c:eb:43:69:71:88:5c:67:cc:99:80:99: 27:76:71:40:67:24:80:9f:bb:20:d7:89:74:e3:1a: 1f:40:6b:f1:c6:77:db:31:e2:ec:9a:4d:ef:d8:62: 2e:50:34:e3:f1:37:79:41:84:4c:43:72:26:ba:61: ba:e8:3f:8e:a7:81:80:96:d0:78:46:31:35:1b:d7: be:49:0d:4b:46:51:a0:0a:8f:5b:fa:64:fa:68:25: 97:2d:5c:b9:fd:33:ed:59:af:bf:49:43:ba:e7:f4: 62:e2:47:ad:fd:cb:8e:26:c9:0b:1b:d3:10:d2:f7: c2:59:c3:74:32:90:4a:aa:09:28:21:f0:9a:f2:13: 5c:8c:18:a3:f7:9a:a6:77:69:de:73:dc:3b:ce:32: 45:09:1b:75:49:c7:f1:64:13:09:de:dc:f8:5d:48: 8e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F4:FA:F1:E0:F6:7D:0E:A6:7B:DF:B7:D3:78:D2:5D:85:6B:D1:C1 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230392e39322e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.92.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:c3:65:67:c6:da:1e:d2:97:29:92:d9:cd:9b:c4:a4:4a:85: c6:83:33:9d:da:20:15:67:76:87:66:27:fa:ec:9b:b6:92:21: 96:b5:07:4d:9c:e4:79:cb:65:e0:d2:a8:de:19:28:c4:8f:03: 0d:0d:06:2e:b5:1f:80:da:da:fc:14:b7:b3:f2:b3:2b:09:9e: 00:1f:a5:c3:aa:00:30:86:e4:c9:80:6b:83:71:60:cf:b0:e1: c6:2f:42:39:06:e8:45:bb:38:78:e1:b8:28:53:19:3c:fd:b4: ba:cc:97:2b:90:c5:80:e3:a5:e7:34:20:c5:a7:ca:3e:d0:72: b9:ee:6d:6b:7b:57:b0:b3:96:0c:cb:3b:86:60:4b:79:80:87: ba:e4:32:c9:ee:e7:cc:9c:67:c1:de:a3:70:f1:20:2f:99:6c: d6:ab:c9:02:c3:14:37:71:3b:70:74:9d:52:42:8a:c7:ca:4f: e0:51:65:4f:f2:7a:b6:da:69:9e:9f:3a:d8:ee:3b:e2:b9:be: d4:c2:29:6b:e9:e0:51:3d:bb:9f:6b:ad:39:1a:ee:e5:a2:21: 00:3b:8f:fd:30:fa:74:81:cf:01:c2:fd:c6:80:43:2d:e1:1d: 33:39:e2:c8:9c:18:dc:4d:a2:aa:20:6f:29:07:f1:bc:37:eb: 49:7a:20:6e -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUGUyFxmWWhJcZq6xtPM0rh208HQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDBaFw0yNjExMjcxMTQ5NDBaMDMxMTAvBgNV BAMTKDk1RjRGQUYxRTBGNjdEMEVBNjdCREZCN0QzNzhEMjVEODU2QkQxQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVbs00FtKpSkPfB5ZBCwWWOpNu XNN8EFqMrOPO4GozCGJGEjfVYHBoe4qtyRLyuN59KN2ISklU/IiKpvCCP9o8qO8b kbA7lOUueES/96ZJpyKBrwH8lrEGBUUxZEzrQ2lxiFxnzJmAmSd2cUBnJICfuyDX iXTjGh9Aa/HGd9sx4uyaTe/YYi5QNOPxN3lBhExDcia6YbroP46ngYCW0HhGMTUb 175JDUtGUaAKj1v6ZPpoJZctXLn9M+1Zr79JQ7rn9GLiR639y44myQsb0xDS98JZ w3QykEqqCSgh8JryE1yMGKP3mqZ3ad5z3DvOMkUJG3VJx/FkEwne3PhdSI6pAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUlfT68eD2fQ6me9+303jSXYVr0cEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODM1MmUzMjMwMzky ZTM5MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBVdFcMA0GCSqGSIb3DQEBCwUAA4IBAQBdw2Vnxtoe0pcpktnNm8SkSoXGgzOd 2iAVZ3aHZif67Ju2kiGWtQdNnOR5y2Xg0qjeGSjEjwMNDQYutR+A2tr8FLez8rMr CZ4AH6XDqgAwhuTJgGuDcWDPsOHGL0I5BuhFuzh44bgoUxk8/bS6zJcrkMWA46Xn NCDFp8o+0HK57m1re1ews5YMyzuGYEt5gIe65DLJ7ufMnGfB3qNw8SAvmWzWq8kC wxQ3cTtwdJ1SQorHyk/gUWVP8nq22mmenzrY7jviub7Uwilr6eBRPbufa605Gu7l oiEAO4/9MPp0gc8Bwv3GgEMt4R0zOeLInBjcTaKqIG8pB/G8N+tJeiBu -----END CERTIFICATE-----Generated at Fri Dec 5 18:56:54 2025 by rpki-client