This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230392e39342e302f32332d3234203d3e203437353833.roa File: 38352e3230392e39342e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: dwhxlpECZaLc7/awcIMCNuCD4vEkH17bJtnIZBeIXL4= Subject key identifier: 4E:6A:42:4B:43:82:2A:42:B3:5D:3F:2D:9C:B7:2D:DD:A7:38:56:EA Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 580CF59A35F45E9831F80D7EEC5BD3D8029E9DDC Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230392e39342e302f32332d3234203d3e203437353833.roa Signing time: Fri 28 Nov 2025 11:49:32 +0000 ROA not before: Fri 28 Nov 2025 11:44:32 +0000 ROA not after: Fri 27 Nov 2026 11:49:32 +0000 asID: 47583 IP address blocks: 85.209.94.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:0c:f5:9a:35:f4:5e:98:31:f8:0d:7e:ec:5b:d3:d8:02:9e:9d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:32 2025 GMT Not After : Nov 27 11:49:32 2026 GMT Subject: CN=4E6A424B43822A42B35D3F2D9CB72DDDA73856EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8c:0d:b8:3f:db:f4:9d:30:fe:9e:d2:a4:ec: cc:d8:95:a7:6d:2e:36:d1:62:3d:31:3f:e4:bd:e6: 28:a2:f1:fe:4f:e0:0c:1a:31:07:dd:87:f9:f0:6e: 6f:0a:41:78:cf:17:4c:b9:6a:29:09:c1:39:58:71: 5e:78:54:ea:12:f7:ff:f6:db:63:24:4a:26:58:91: 15:cf:a6:99:12:fc:fb:52:97:40:fb:85:ee:d6:fb: 4b:76:7c:16:42:f3:b9:07:02:8d:b3:95:9c:7a:d4: 36:00:17:85:cf:82:7c:53:50:fa:70:77:4b:7a:61: 6a:bd:87:e0:81:63:00:c5:a1:27:9f:ba:9d:21:2a: 0d:7d:c2:f0:56:cf:ed:35:6b:1b:91:8a:08:72:51: 53:ea:9c:61:a1:f5:cd:71:46:63:9e:25:bd:27:59: 85:5f:76:be:fb:f8:c7:37:01:d1:7b:8e:cc:90:0f: e4:11:6e:3d:15:cf:0e:2a:2a:20:3f:7f:1b:cc:39: 0c:86:6c:1d:90:f7:73:90:9e:30:dc:aa:7f:3e:95: d9:b0:19:ac:49:a2:23:7b:6f:51:6b:ca:3b:d8:ca: 53:0a:65:e8:f5:54:fb:37:02:bf:88:b5:46:35:80: 17:3a:46:39:36:8b:75:05:5f:ef:f9:88:81:ab:5d: b6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6A:42:4B:43:82:2A:42:B3:5D:3F:2D:9C:B7:2D:DD:A7:38:56:EA X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230392e39342e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.94.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:5c:6e:02:f0:02:5a:c0:59:ba:52:a6:8d:84:7f:9d:42:ae: 53:23:a6:fe:ed:c5:f4:17:0b:64:1b:32:0a:9d:e8:24:e3:f7: c9:1e:ca:a6:dc:71:4a:49:63:e9:f4:95:c4:63:4e:98:ab:0a: 71:5a:1b:ac:3f:5a:41:f4:6b:83:fb:23:a0:93:b8:34:92:87: 63:e7:2f:56:d0:24:cd:3d:b4:d4:86:b8:33:86:cb:4f:9c:5d: f0:a1:40:e4:85:0e:0b:ce:f1:68:ef:fa:4d:36:8d:19:5f:52: 33:5d:e3:89:ca:59:27:26:f0:4c:15:c4:2a:b8:d1:b4:b9:49: e1:1b:01:d7:d4:9b:29:25:3f:e6:22:5c:53:ca:ee:2a:9b:0e: f2:e4:c3:78:38:d7:35:6f:9b:e3:71:f9:11:ec:06:d9:a1:1e: 41:08:71:c3:a7:93:ed:a6:cb:8d:89:25:07:a2:3c:57:da:8b: 2b:98:0f:8b:3f:86:85:54:ff:05:98:11:1a:69:00:f9:ef:10: aa:0a:5a:0a:85:39:68:64:0d:30:16:80:4f:ee:2c:b5:bd:a0: 7d:bc:fb:de:62:2e:aa:48:bc:27:86:62:6b:16:eb:30:d8:10: 29:cc:16:52:41:98:06:89:fd:5a:59:bd:05:2d:0c:1e:72:94: b7:cf:e0:e7 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUWAz1mjX0Xpgx+A1+7FvT2AKendwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzJaFw0yNjExMjcxMTQ5MzJaMDMxMTAvBgNV BAMTKDRFNkE0MjRCNDM4MjJBNDJCMzVEM0YyRDlDQjcyREREQTczODU2RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDljA24P9v0nTD+ntKk7MzYladt LjbRYj0xP+S95iii8f5P4AwaMQfdh/nwbm8KQXjPF0y5aikJwTlYcV54VOoS9//2 22MkSiZYkRXPppkS/PtSl0D7he7W+0t2fBZC87kHAo2zlZx61DYAF4XPgnxTUPpw d0t6YWq9h+CBYwDFoSefup0hKg19wvBWz+01axuRighyUVPqnGGh9c1xRmOeJb0n WYVfdr77+Mc3AdF7jsyQD+QRbj0Vzw4qKiA/fxvMOQyGbB2Q93OQnjDcqn8+ldmw GaxJoiN7b1FryjvYylMKZej1VPs3Ar+ItUY1gBc6Rjk2i3UFX+/5iIGrXbbxAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUTmpCS0OCKkKzXT8tnLct3ac4VuowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODM1MmUzMjMwMzky ZTM5MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBVdFeMA0GCSqGSIb3DQEBCwUAA4IBAQBOXG4C8AJawFm6UqaNhH+dQq5TI6b+ 7cX0FwtkGzIKnegk4/fJHsqm3HFKSWPp9JXEY06YqwpxWhusP1pB9GuD+yOgk7g0 kodj5y9W0CTNPbTUhrgzhstPnF3woUDkhQ4LzvFo7/pNNo0ZX1IzXeOJylknJvBM FcQquNG0uUnhGwHX1JspJT/mIlxTyu4qmw7y5MN4ONc1b5vjcfkR7AbZoR5BCHHD p5PtpsuNiSUHojxX2osrmA+LP4aFVP8FmBEaaQD57xCqCloKhTloZA0wFoBP7iy1 vaB9vPveYi6qSLwnhmJrFusw2BApzBZSQZgGif1aWb0FLQwecpS3z+Dn -----END CERTIFICATE-----Generated at Fri Dec 5 18:54:40 2025 by rpki-client