This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38382e3231382e3136362e302f32332d3233203d3e20323033303631.roa File: 38382e3231382e3136362e302f32332d3233203d3e20323033303631.roa (raw, json) Hash identifier: QKvxIj7qUTjaAVzlVgAkD4SpHXdPdz8kyqQ6FHmajXM= Subject key identifier: 08:16:D9:5A:0E:FF:3F:1C:F2:34:E6:E8:10:57:2B:5B:5B:F0:EE:F7 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4B661EC2179917311859B5FCEF3082842EBEC58E Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38382e3231382e3136362e302f32332d3233203d3e20323033303631.roa Signing time: Fri 21 Nov 2025 15:49:00 +0000 ROA not before: Fri 21 Nov 2025 15:44:00 +0000 ROA not after: Fri 20 Nov 2026 15:49:00 +0000 asID: 203061 IP address blocks: 88.218.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:66:1e:c2:17:99:17:31:18:59:b5:fc:ef:30:82:84:2e:be:c5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:00 2025 GMT Not After : Nov 20 15:49:00 2026 GMT Subject: CN=0816D95A0EFF3F1CF234E6E810572B5B5BF0EEF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e2:82:f5:cd:bd:74:fa:ea:b9:53:8e:08:24: 48:4b:5f:98:c0:40:61:6e:d3:63:cf:c1:3a:d9:29: 1d:92:0e:4b:f3:93:ff:22:0c:98:f7:f2:3d:ae:4e: b2:43:ff:3c:b2:a3:5f:b8:84:cf:0a:c4:65:7f:cf: 71:eb:ce:6c:67:c1:3e:4b:45:b7:00:c8:a9:db:7d: ee:33:ad:0a:55:83:e7:a4:1d:1a:89:36:aa:0a:5f: 16:32:cd:17:1a:96:42:9f:4c:2a:d1:50:ef:e0:00: 9a:82:4c:4f:29:36:5d:24:5c:9b:45:1f:d7:27:48: 71:73:09:21:4f:08:3d:28:32:41:63:f7:e4:9a:3f: 91:f8:b4:ec:0d:98:d5:eb:7b:db:5a:fb:b9:fc:19: f3:5e:83:12:8a:18:91:15:89:8c:b9:d3:d0:14:bd: 5a:5f:4a:69:25:5c:63:da:c8:88:3c:3a:d2:ce:b0: e4:94:7a:90:e2:8c:46:33:62:5a:4d:c7:8c:45:82: 34:a7:06:66:42:45:4e:b4:75:a9:3d:ba:cb:2a:80: 50:02:5f:06:97:cd:b1:f3:99:4d:c3:3d:ee:11:b4: 47:47:c2:19:07:38:f5:8a:4c:15:bd:f6:9a:1d:ce: fe:49:3e:1f:4f:ac:99:ba:0b:c3:33:bf:31:9f:55: d4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:16:D9:5A:0E:FF:3F:1C:F2:34:E6:E8:10:57:2B:5B:5B:F0:EE:F7 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38382e3231382e3136362e302f32332d3233203d3e20323033303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.166.0/23 Signature Algorithm: sha256WithRSAEncryption 22:90:56:54:f2:a4:29:6e:7d:88:4d:3f:e0:07:ae:e8:db:44: 5f:07:d9:6b:34:ba:da:c6:62:e8:3c:e9:2d:7e:94:9d:59:91: 93:8d:7f:09:35:bb:c8:53:84:2e:5b:a2:01:15:54:5e:47:44: 66:fb:a5:b2:9c:ee:34:ab:93:1d:8c:ae:dd:8d:76:98:be:4b: 8b:51:7e:a1:1a:de:62:4a:02:88:02:ea:08:39:9c:73:6d:e6: 35:3d:3a:a2:58:c9:f5:c8:8e:34:04:aa:29:97:30:6e:09:36: bf:e5:90:aa:e3:ca:18:56:3b:df:1f:26:e9:22:8f:2e:b6:40: 90:53:bb:21:49:f5:ce:ec:ee:1b:55:42:10:88:11:dc:b9:3e: 50:1f:96:c5:04:1f:67:7a:72:21:ec:8c:30:eb:cf:4d:44:92: c9:47:7b:48:c4:11:3b:09:b1:98:31:9a:4d:bc:8e:12:4c:e2: da:ac:6d:45:67:5a:ad:0b:13:23:08:ce:7e:a8:cb:9c:f2:f6: 58:57:94:fe:5e:a8:86:ff:15:b2:5c:a4:27:ec:54:84:72:96: f9:5c:e4:83:2c:34:66:c9:e4:ec:28:63:89:d4:e1:ee:28:f9: 8e:11:59:ce:fa:38:f8:47:78:03:f9:54:68:11:b5:37:27:55: f8:05:6d:66 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUS2YewheZFzEYWbX87zCChC6+xY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDBaFw0yNjExMjAxNTQ5MDBaMDMxMTAvBgNV BAMTKDA4MTZEOTVBMEVGRjNGMUNGMjM0RTZFODEwNTcyQjVCNUJGMEVFRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj4oL1zb10+uq5U44IJEhLX5jA QGFu02PPwTrZKR2SDkvzk/8iDJj38j2uTrJD/zyyo1+4hM8KxGV/z3HrzmxnwT5L RbcAyKnbfe4zrQpVg+ekHRqJNqoKXxYyzRcalkKfTCrRUO/gAJqCTE8pNl0kXJtF H9cnSHFzCSFPCD0oMkFj9+SaP5H4tOwNmNXre9ta+7n8GfNegxKKGJEViYy509AU vVpfSmklXGPayIg8OtLOsOSUepDijEYzYlpNx4xFgjSnBmZCRU60dak9ussqgFAC XwaXzbHzmU3DPe4RtEdHwhkHOPWKTBW99podzv5JPh9PrJm6C8MzvzGfVdTtAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUCBbZWg7/PxzyNOboEFcrW1vw7vcwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODM4MmUzMjMxMzgy ZTMxMzYzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzAzMzMwMzYzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAVjapjANBgkqhkiG9w0BAQsFAAOCAQEAIpBWVPKkKW59iE0/4Aeu6NtE XwfZazS62sZi6DzpLX6UnVmRk41/CTW7yFOELluiARVUXkdEZvulspzuNKuTHYyu 3Y12mL5Li1F+oRreYkoCiALqCDmcc23mNT06oljJ9ciONASqKZcwbgk2v+WQquPK GFY73x8m6SKPLrZAkFO7IUn1zuzuG1VCEIgR3Lk+UB+WxQQfZ3pyIeyMMOvPTUSS yUd7SMQROwmxmDGaTbyOEkzi2qxtRWdarQsTIwjOfqjLnPL2WFeU/l6ohv8Vslyk J+xUhHKW+Vzkgyw0Zsnk7ChjidTh7ij5jhFZzvo4+Ed4A/lUaBG1NydV+AVtZg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:04:09 2025 by rpki-client