This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36302e302f32342d3332203d3e203531313637.roa File: 3130392e3233362e36302e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: gYwKWQ11hxQ1zVDCm40eWDoAiWmA/He0YzumoYQZF54= Subject key identifier: 32:41:18:B5:DF:C6:BE:7D:41:0A:42:FD:B8:44:77:1D:93:AB:42:F3 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 46B8EDE1F9DAFB1109F807D1A3203F4D5316BE61 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36302e302f32342d3332203d3e203531313637.roa Signing time: Fri 21 Nov 2025 15:49:02 +0000 ROA not before: Fri 21 Nov 2025 15:44:02 +0000 ROA not after: Fri 20 Nov 2026 15:49:02 +0000 asID: 51167 IP address blocks: 109.236.60.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b8:ed:e1:f9:da:fb:11:09:f8:07:d1:a3:20:3f:4d:53:16:be:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:02 2025 GMT Not After : Nov 20 15:49:02 2026 GMT Subject: CN=324118B5DFC6BE7D410A42FDB844771D93AB42F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cc:f4:6f:94:88:f2:b3:72:5e:78:65:7e:7b: b0:b7:7d:67:c3:d5:87:89:38:d2:64:fb:a7:ee:b9: 87:cc:ef:6c:18:e3:8b:4b:c8:53:3f:d3:12:ec:31: a1:36:73:af:46:70:9e:50:88:3e:fe:b1:76:7d:90: 11:98:20:dd:ab:53:12:02:3b:69:3f:a0:cf:ac:07: 67:e9:53:7a:2e:c1:66:eb:10:44:31:fa:d5:ad:67: 3a:7d:4e:60:09:64:d3:3d:4a:b4:8c:6e:09:ac:67: 86:0d:da:ec:0d:76:06:f2:c5:e3:b7:88:cf:7c:55: c6:42:42:79:27:1f:c2:7b:30:56:a3:bc:8a:59:38: 76:89:92:2a:dc:73:f5:e7:c9:76:6f:07:f7:a7:2f: fe:6c:9c:49:c8:86:9b:c0:9c:e3:77:c6:64:23:12: 9b:15:2b:07:3e:f9:80:d5:43:8a:1e:9e:e5:1c:58: 61:9a:0d:a1:30:7c:e6:e3:07:f6:53:7f:44:3f:98: 93:3c:64:4b:75:5f:1a:b3:41:59:0f:95:64:65:1a: dd:d6:c7:d8:57:81:7c:96:83:19:64:42:44:be:42: 6f:8d:3d:d6:cb:7d:6a:28:b1:34:75:97:b1:77:0f: df:39:b0:c5:ea:1e:1d:03:31:86:8e:87:68:ce:ab: 27:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:41:18:B5:DF:C6:BE:7D:41:0A:42:FD:B8:44:77:1D:93:AB:42:F3 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36302e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.236.60.0/24 Signature Algorithm: sha256WithRSAEncryption 01:69:b6:13:24:67:fe:73:e4:8d:0f:1f:ee:c2:ae:0f:39:c5: ec:f7:6c:b9:89:cd:be:1b:51:e0:ff:a5:3e:79:58:94:de:46: 74:e3:ce:27:fa:f4:4f:29:9d:a3:4d:61:0f:10:37:07:fb:7f: b5:e7:62:c7:8e:c7:70:f9:b0:f8:82:b6:d0:fc:28:a5:90:b8: 21:0e:f6:25:d0:cc:d5:9d:5e:93:52:07:89:25:5a:70:41:ba: 50:36:cd:4b:af:df:a2:32:dd:e5:37:f7:2a:dd:22:ad:42:06: f8:b6:52:44:3c:fe:35:56:43:b5:8b:63:fe:bb:bd:5d:51:dc: 0e:4d:0e:43:4d:13:38:66:04:ca:25:3f:1d:4f:77:62:b3:af: 42:01:44:81:0d:7b:54:23:eb:56:66:96:6d:44:e7:09:c7:47: 94:fd:20:fb:16:8b:2c:80:f2:9f:b7:ee:06:fd:8a:f4:70:69: 7b:29:3e:c1:69:c3:7b:3e:0f:99:43:69:7b:3c:d2:4b:fc:0c: f9:1a:f1:92:e6:e6:44:0f:65:ed:d4:48:29:3f:d2:83:da:23: d0:a8:08:a5:47:53:4f:de:eb:40:ad:fe:e7:07:85:bf:47:b5: a5:9d:b0:0e:9b:a8:39:34:13:eb:9d:c6:b5:27:14:59:06:60: 5a:d0:86:ea -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIURrjt4fna+xEJ+AfRoyA/TVMWvmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDJaFw0yNjExMjAxNTQ5MDJaMDMxMTAvBgNV BAMTKDMyNDExOEI1REZDNkJFN0Q0MTBBNDJGREI4NDQ3NzFEOTNBQjQyRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDazPRvlIjys3JeeGV+e7C3fWfD 1YeJONJk+6fuuYfM72wY44tLyFM/0xLsMaE2c69GcJ5QiD7+sXZ9kBGYIN2rUxIC O2k/oM+sB2fpU3ouwWbrEEQx+tWtZzp9TmAJZNM9SrSMbgmsZ4YN2uwNdgbyxeO3 iM98VcZCQnknH8J7MFajvIpZOHaJkircc/XnyXZvB/enL/5snEnIhpvAnON3xmQj EpsVKwc++YDVQ4oenuUcWGGaDaEwfObjB/ZTf0Q/mJM8ZEt1XxqzQVkPlWRlGt3W x9hXgXyWgxlkQkS+Qm+NPdbLfWoosTR1l7F3D985sMXqHh0DMYaOh2jOqyf1AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUMkEYtd/Gvn1BCkL9uER3HZOrQvMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTMwMzkyZTMyMzMz NjJlMzYzMDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABt7DwwDQYJKoZIhvcNAQELBQADggEBAAFpthMkZ/5z5I0PH+7Crg85xez3 bLmJzb4bUeD/pT55WJTeRnTjzif69E8pnaNNYQ8QNwf7f7XnYseOx3D5sPiCttD8 KKWQuCEO9iXQzNWdXpNSB4klWnBBulA2zUuv36Iy3eU39yrdIq1CBvi2UkQ8/jVW Q7WLY/67vV1R3A5NDkNNEzhmBMolPx1Pd2Kzr0IBRIENe1Qj61Zmlm1E5wnHR5T9 IPsWiyyA8p+37gb9ivRwaXspPsFpw3s+D5lDaXs80kv8DPka8ZLm5kQPZe3USCk/ 0oPaI9CoCKVHU0/e60Ct/ucHhb9HtaWdsA6bqDk0E+udxrUnFFkGYFrQhuo= -----END CERTIFICATE-----Generated at Sat Dec 6 12:52:09 2025 by rpki-client