This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36312e302f32342d3234203d3e20323133363133.roa File: 3130392e3233362e36312e302f32342d3234203d3e20323133363133.roa (raw, json) Hash identifier: itGvmZQoVMALlqJcbxKAizAujwm9Oyx6bEqbzd4cMyY= Subject key identifier: D6:91:4D:17:4D:CB:1E:E4:76:B3:84:8D:0F:6F:45:E5:1F:0A:B0:40 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4DDA71115AF9287D9D1596E25482A461612B100C Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36312e302f32342d3234203d3e20323133363133.roa Signing time: Mon 15 Dec 2025 14:50:17 +0000 ROA not before: Mon 15 Dec 2025 14:45:17 +0000 ROA not after: Mon 14 Dec 2026 14:50:17 +0000 asID: 213613 IP address blocks: 109.236.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:da:71:11:5a:f9:28:7d:9d:15:96:e2:54:82:a4:61:61:2b:10:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Dec 15 14:45:17 2025 GMT Not After : Dec 14 14:50:17 2026 GMT Subject: CN=D6914D174DCB1EE476B3848D0F6F45E51F0AB040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f5:4f:2d:75:af:31:52:10:db:9a:3b:f5:34: 6d:5a:e4:85:12:23:b3:1c:53:c5:9c:6f:b1:c7:95: e9:b0:e6:73:ee:49:d4:33:a2:4a:bb:9f:0d:95:95: 40:2d:b0:a5:81:43:9d:7b:85:72:de:a4:5d:cc:c3: e0:e6:11:2f:dd:7e:3a:40:0a:37:00:31:1b:88:b3: a4:9f:50:c8:ab:1f:c6:24:4b:d5:62:3c:2e:2a:44: 09:c7:57:72:18:aa:f8:5f:f3:17:0a:9e:97:fc:74: c3:01:dd:06:68:7f:e6:15:63:5b:a6:3d:83:32:93: 57:c3:82:99:02:e2:58:96:48:29:8f:44:04:27:c9: 6c:cd:96:c5:68:9c:bb:d0:c6:c4:b6:82:11:3a:88: c1:0c:ef:fd:b4:1c:ee:39:20:6a:bc:c3:a1:ee:e9: 5a:f8:16:aa:9e:e9:ab:3e:0c:f5:c1:3d:0f:b6:ec: 70:ca:ed:28:fa:03:84:08:b5:e7:5b:25:16:49:63: 29:57:b0:57:b6:48:2d:cf:fc:82:92:7f:b0:c5:ad: e2:3a:68:50:78:5a:de:8b:33:ad:5e:81:56:ea:e4: c9:33:30:a3:b0:0d:6f:b1:61:6e:3c:54:49:45:f6: f9:ed:10:f3:01:12:0b:27:46:c6:68:4a:c7:d6:b3: e4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:91:4D:17:4D:CB:1E:E4:76:B3:84:8D:0F:6F:45:E5:1F:0A:B0:40 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36312e302f32342d3234203d3e20323133363133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.236.61.0/24 Signature Algorithm: sha256WithRSAEncryption c2:48:50:e2:a5:8c:8f:d9:a1:d5:4d:18:75:ac:bb:e5:19:bb: a0:b7:5c:aa:eb:04:a1:ac:0c:ca:a0:b3:f4:62:d4:75:2a:4f: a8:15:be:2a:49:28:80:e6:73:22:44:c1:58:4b:d6:f0:68:e2: 6c:08:b7:c0:5e:ec:b9:ba:79:7a:f7:06:ab:28:c0:ad:20:3f: f0:2f:3c:f3:63:01:4e:f0:56:fb:98:9b:20:cd:ef:c0:f4:84: 4a:46:be:43:7d:c5:97:e2:66:18:f3:84:ae:c6:13:3d:1f:02: 1b:26:bf:2f:66:9b:86:15:24:a9:3f:b6:67:ea:6d:80:a0:cc: 1c:37:69:66:d7:14:db:f6:eb:da:40:fa:b3:ea:5c:0f:d4:c4: 69:fe:74:99:1a:8f:9c:48:07:58:71:cd:3f:7e:3f:c1:83:08: c5:a8:e0:bf:10:d4:10:94:8d:4c:4c:06:38:eb:c7:93:cf:07: 4f:a8:99:d9:aa:37:ba:6f:6d:18:b3:f4:c1:de:82:06:7f:f1: be:24:a6:be:77:ce:28:de:d6:26:76:8a:6c:7e:7a:64:59:9e: 80:f2:23:56:27:70:3d:22:64:37:17:02:3e:4c:7b:9b:99:cf: dd:76:7d:a0:f8:a5:5e:16:b5:89:70:93:66:1e:0f:3c:44:96: 4a:c5:52:c4 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUTdpxEVr5KH2dFZbiVIKkYWErEAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTEyMTUxNDQ1MTdaFw0yNjEyMTQxNDUwMTdaMDMxMTAvBgNV BAMTKEQ2OTE0RDE3NERDQjFFRTQ3NkIzODQ4RDBGNkY0NUU1MUYwQUIwNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA9U8tda8xUhDbmjv1NG1a5IUS I7McU8Wcb7HHlemw5nPuSdQzokq7nw2VlUAtsKWBQ517hXLepF3Mw+DmES/dfjpA CjcAMRuIs6SfUMirH8YkS9ViPC4qRAnHV3IYqvhf8xcKnpf8dMMB3QZof+YVY1um PYMyk1fDgpkC4liWSCmPRAQnyWzNlsVonLvQxsS2ghE6iMEM7/20HO45IGq8w6Hu 6Vr4Fqqe6as+DPXBPQ+27HDK7Sj6A4QItedbJRZJYylXsFe2SC3P/IKSf7DFreI6 aFB4Wt6LM61egVbq5MkzMKOwDW+xYW48VElF9vntEPMBEgsnRsZoSsfWs+RHAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU1pFNF03LHuR2s4SND29F5R8KsEAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTMwMzkyZTMyMzMz NjJlMzYzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMzM2MzEzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAG3sPTANBgkqhkiG9w0BAQsFAAOCAQEAwkhQ4qWMj9mh1U0Yday75Rm7 oLdcqusEoawMyqCz9GLUdSpPqBW+KkkogOZzIkTBWEvW8GjibAi3wF7subp5evcG qyjArSA/8C8882MBTvBW+5ibIM3vwPSESka+Q33Fl+JmGPOErsYTPR8CGya/L2ab hhUkqT+2Z+ptgKDMHDdpZtcU2/br2kD6s+pcD9TEaf50mRqPnEgHWHHNP34/wYMI xajgvxDUEJSNTEwGOOvHk88HT6iZ2ao3um9tGLP0wd6CBn/xviSmvnfOKN7WJnaK bH56ZFmegPIjVidwPSJkNxcCPkx7m5nP3XZ9oPilXha1iXCTZh4PPESWSsVSxA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:14:29 2025 by rpki-client