This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36332e302f32342d3234203d3e20313336373837.roa File: 3130392e3233362e36332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 25vayugbv7sbVX0PrFdif0L1+Yp3sA35vUeVYjEJDT0= Subject key identifier: 0E:28:4D:04:F8:20:80:93:FE:E5:C1:1C:B4:9F:5B:51:3C:1E:70:CA Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 33DDFF351B4E877D311EBC5E73E9708DD0556D65 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36332e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:48:58 +0000 ROA not before: Fri 21 Nov 2025 15:43:58 +0000 ROA not after: Fri 20 Nov 2026 15:48:58 +0000 asID: 136787 IP address blocks: 109.236.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:dd:ff:35:1b:4e:87:7d:31:1e:bc:5e:73:e9:70:8d:d0:55:6d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:43:58 2025 GMT Not After : Nov 20 15:48:58 2026 GMT Subject: CN=0E284D04F8208093FEE5C11CB49F5B513C1E70CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:95:7a:d4:8d:ca:e4:d9:61:b7:bf:e3:09:f2: a0:a7:8e:1e:e8:64:d7:a8:24:43:51:c7:62:fc:a5: c2:0d:8c:84:0f:63:d3:95:59:3b:ce:2b:cf:94:95: 1d:ed:c5:a8:65:27:ba:86:86:87:0d:72:11:b0:09: fa:d8:69:4a:36:bd:36:c0:a3:b1:31:77:2f:d7:98: 1f:6b:a5:ab:58:27:65:b1:cd:85:9c:b7:df:82:08: 8a:4a:53:45:e0:9f:49:81:e5:24:c6:d6:7a:87:b2: 3e:40:13:57:f6:e2:4a:ae:25:a7:fe:54:ca:f1:ae: 47:3c:3e:74:48:e3:f5:a0:1d:d1:1d:ae:fb:84:69: 22:de:0c:4f:46:4c:d0:6c:31:5a:51:67:17:2a:78: 1b:6d:11:ae:00:4a:af:83:d4:f8:74:4d:37:f9:d5: 1e:06:01:ee:47:24:64:14:f7:79:1c:7d:70:57:1b: 17:41:3a:09:53:a1:8b:81:87:93:13:f1:00:db:24: e3:7b:e4:6e:48:65:19:d3:bd:ac:4a:eb:2a:d3:32: 42:03:bd:cf:54:51:49:16:3e:a1:e0:bc:d3:d2:4c: c9:ac:f9:90:22:1e:7e:0c:06:a8:da:40:92:3c:88: 23:7e:58:23:34:cc:5d:1b:c5:e5:a6:ff:b5:85:e6: 7f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:28:4D:04:F8:20:80:93:FE:E5:C1:1C:B4:9F:5B:51:3C:1E:70:CA X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.236.63.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:6f:d5:d7:c0:0e:71:e0:49:b4:60:bf:98:69:f8:2d:c0:49: 01:6c:99:43:ae:b5:30:64:8d:d7:5b:d3:cb:b3:41:3a:f6:33: f0:8b:70:a3:02:09:4f:84:d5:36:b7:6b:b9:db:80:03:51:b4: 3c:95:0b:22:9e:29:8e:c8:fc:c8:2f:35:43:37:cd:84:d7:50: 9a:71:7c:5f:0c:2f:13:a4:f4:b8:ac:4b:22:9f:9f:83:f6:cc: 47:fa:1d:6e:ad:ff:6e:8c:37:75:6f:46:62:76:95:51:67:bc: 99:c8:9f:df:7e:91:68:34:67:4c:ab:9d:35:0b:b5:3b:b2:c7: 08:95:8e:0e:95:93:47:72:bd:2a:f5:91:c9:c0:6e:6d:e9:1f: 7d:a9:49:78:5d:99:e8:dd:44:a1:37:1d:14:a9:c2:2a:f4:38: cf:76:33:56:29:dd:03:2e:0d:c7:7e:bc:05:d6:a5:cc:40:60: 13:0e:a8:5e:d6:42:0f:67:43:2c:35:04:9e:ce:1e:70:cb:22: a6:c4:ea:91:57:9e:b6:50:59:6d:12:f2:4e:49:d0:c9:3d:ba: 97:00:fe:45:c3:d5:80:a3:0b:79:20:38:7c:b4:da:d8:bb:a3: d2:51:2f:68:24:51:b8:6e:05:7f:ba:53:34:d2:10:50:0b:6b: ce:e1:50:4f -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUM93/NRtOh30xHrxec+lwjdBVbWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQzNThaFw0yNjExMjAxNTQ4NThaMDMxMTAvBgNV BAMTKDBFMjg0RDA0RjgyMDgwOTNGRUU1QzExQ0I0OUY1QjUxM0MxRTcwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOlXrUjcrk2WG3v+MJ8qCnjh7o ZNeoJENRx2L8pcINjIQPY9OVWTvOK8+UlR3txahlJ7qGhocNchGwCfrYaUo2vTbA o7Exdy/XmB9rpatYJ2WxzYWct9+CCIpKU0Xgn0mB5STG1nqHsj5AE1f24kquJaf+ VMrxrkc8PnRI4/WgHdEdrvuEaSLeDE9GTNBsMVpRZxcqeBttEa4ASq+D1Ph0TTf5 1R4GAe5HJGQU93kcfXBXGxdBOglToYuBh5MT8QDbJON75G5IZRnTvaxK6yrTMkID vc9UUUkWPqHgvNPSTMms+ZAiHn4MBqjaQJI8iCN+WCM0zF0bxeWm/7WF5n+5AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUDihNBPgggJP+5cEctJ9bUTwecMowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTMwMzkyZTMyMzMz NjJlMzYzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAG3sPzANBgkqhkiG9w0BAQsFAAOCAQEAPW/V18AOceBJtGC/mGn4LcBJ AWyZQ661MGSN11vTy7NBOvYz8ItwowIJT4TVNrdruduAA1G0PJULIp4pjsj8yC81 QzfNhNdQmnF8XwwvE6T0uKxLIp+fg/bMR/odbq3/bow3dW9GYnaVUWe8mcif336R aDRnTKudNQu1O7LHCJWODpWTR3K9KvWRycBubekffalJeF2Z6N1EoTcdFKnCKvQ4 z3YzVindAy4Nx368BdalzEBgEw6oXtZCD2dDLDUEns4ecMsipsTqkVeetlBZbRLy TknQyT26lwD+RcPVgKMLeSA4fLTa2Luj0lEvaCRRuG4Ff7pTNNIQUAtrzuFQTw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:31:01 2025 by rpki-client