This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36322e302f32342d3234203d3e20313336373837.roa File: 3130392e3233362e36322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: Th9NQxKKe2AyG0vnqgFhC2rWhLO9Be99hCSwM1IFGgQ= Subject key identifier: 23:8B:19:86:D4:36:CD:50:1C:FF:1B:D8:B9:21:01:DE:82:7E:53:EB Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0CA3D0FA695A0CBEA09E796B926A81BA650A9D8F Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36322e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:07 +0000 ROA not before: Fri 21 Nov 2025 15:44:07 +0000 ROA not after: Fri 20 Nov 2026 15:49:07 +0000 asID: 136787 IP address blocks: 109.236.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a3:d0:fa:69:5a:0c:be:a0:9e:79:6b:92:6a:81:ba:65:0a:9d:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:07 2025 GMT Not After : Nov 20 15:49:07 2026 GMT Subject: CN=238B1986D436CD501CFF1BD8B92101DE827E53EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:31:ff:dd:51:6d:b1:8f:cd:a3:1b:a5:f9:8d: fb:43:bc:6e:8e:e3:13:07:83:56:cb:1b:69:16:4b: ee:4a:94:5c:b3:d8:3d:8b:d3:dc:15:b2:2f:4f:a5: 84:3c:67:d7:7d:5f:7c:84:6a:4b:2f:4a:a8:17:23: 94:9d:be:fd:af:af:d1:d4:58:07:4f:90:a0:55:3a: 3c:21:f2:f3:35:be:55:5f:11:48:56:93:a1:3d:82: 35:a9:0f:4b:6f:f5:62:e5:e9:6c:0e:9a:d6:ce:7c: ba:ab:a4:c7:98:82:f3:d0:9d:65:ed:6a:1a:bb:23: ce:5e:ff:9a:30:97:26:d9:bb:14:16:d7:78:29:13: 45:76:05:a7:56:cc:a0:78:13:00:e8:78:7c:b1:ac: d6:4f:8a:c8:49:19:21:28:02:d6:93:74:c2:a9:1d: 66:95:b4:4c:83:d7:32:03:72:59:ab:f9:63:c2:f0: 67:0a:38:e2:b1:54:ab:a3:08:20:ef:b9:f4:48:c3: b2:bf:68:ea:24:7b:d6:57:0a:fc:07:82:73:97:a8: be:50:c3:47:92:93:6d:38:43:85:64:7d:04:78:21: 49:21:64:ef:5e:37:ae:de:59:70:7e:97:77:ea:b8: b3:04:7c:38:7e:0c:85:ec:4a:4a:a4:3d:fb:77:f5: 58:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8B:19:86:D4:36:CD:50:1C:FF:1B:D8:B9:21:01:DE:82:7E:53:EB X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.236.62.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:b6:4f:a2:3b:8d:5c:53:7a:d5:ea:e8:72:3a:74:0d:ab:e8: 5b:78:e9:c3:f8:25:14:fa:d3:87:75:ad:37:b1:d8:04:9e:06: 30:24:ff:fd:e8:f4:b4:20:0a:61:70:ff:e3:ec:fd:b7:72:72: 3d:c5:df:ea:a9:41:75:37:5f:0d:62:58:fd:ac:61:b2:31:bc: f8:d0:46:f9:f9:3b:36:e8:f0:5a:c9:5d:95:b7:c7:f5:38:63: 54:b5:8d:fb:f3:56:48:e2:80:82:a2:39:c0:1c:80:19:6e:ad: 84:1e:02:fd:43:b3:75:77:c8:0e:79:02:2b:0c:93:83:80:d6: f1:84:65:8b:ae:ef:19:24:7d:45:e4:eb:09:2e:8a:82:db:7f: 88:d0:11:da:a4:eb:85:da:8a:ed:32:b6:00:40:c7:86:35:82: c9:fc:03:ec:5e:4f:e6:f7:bd:77:0a:dd:1d:01:52:e4:0e:a2: b2:b1:1a:ec:8b:d4:76:84:6e:11:d7:a7:38:bd:63:76:df:fe: 26:d6:29:49:a9:e1:1d:68:fe:3b:cf:26:8b:e0:c4:8b:4b:93: 33:c9:63:ca:fc:f8:12:53:e9:a7:57:06:16:c8:69:a3:83:61: 72:26:44:f7:3f:b7:9e:d1:2d:b7:05:69:30:84:9a:aa:5b:9f: e2:99:9f:42 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUDKPQ+mlaDL6gnnlrkmqBumUKnY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDdaFw0yNjExMjAxNTQ5MDdaMDMxMTAvBgNV BAMTKDIzOEIxOTg2RDQzNkNENTAxQ0ZGMUJEOEI5MjEwMURFODI3RTUzRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLMf/dUW2xj82jG6X5jftDvG6O 4xMHg1bLG2kWS+5KlFyz2D2L09wVsi9PpYQ8Z9d9X3yEaksvSqgXI5Sdvv2vr9HU WAdPkKBVOjwh8vM1vlVfEUhWk6E9gjWpD0tv9WLl6WwOmtbOfLqrpMeYgvPQnWXt ahq7I85e/5owlybZuxQW13gpE0V2BadWzKB4EwDoeHyxrNZPishJGSEoAtaTdMKp HWaVtEyD1zIDclmr+WPC8GcKOOKxVKujCCDvufRIw7K/aOoke9ZXCvwHgnOXqL5Q w0eSk204Q4VkfQR4IUkhZO9eN67eWXB+l3fquLMEfDh+DIXsSkqkPft39Vi1AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUI4sZhtQ2zVAc/xvYuSEB3oJ+U+swHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTMwMzkyZTMyMzMz NjJlMzYzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAG3sPjANBgkqhkiG9w0BAQsFAAOCAQEAS7ZPojuNXFN61erocjp0Davo W3jpw/glFPrTh3WtN7HYBJ4GMCT//ej0tCAKYXD/4+z9t3JyPcXf6qlBdTdfDWJY /axhsjG8+NBG+fk7NujwWsldlbfH9ThjVLWN+/NWSOKAgqI5wByAGW6thB4C/UOz dXfIDnkCKwyTg4DW8YRli67vGSR9ReTrCS6Kgtt/iNAR2qTrhdqK7TK2AEDHhjWC yfwD7F5P5ve9dwrdHQFS5A6isrEa7IvUdoRuEdenOL1jdt/+JtYpSanhHWj+O88m i+DEi0uTM8ljyvz4ElPpp1cGFshpo4NhciZE9z+3ntEttwVpMISaqluf4pmfQg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:24 2025 by rpki-client