This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3133302e3138352e3131372e302f32342d3234203d3e203632323430.roa File: 3133302e3138352e3131372e302f32342d3234203d3e203632323430.roa (raw, json) Hash identifier: rYsYPpWDgNeuYUD+VeiuPfJ1X2WYE/PBUlZ8KNtWhGQ= Subject key identifier: 07:EF:DD:F7:DD:3E:AE:C5:5E:2B:F2:73:57:E3:9D:3C:DE:74:1D:BD Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 150315878C7118223E6C58419BD0A78B9F78AA02 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3133302e3138352e3131372e302f32342d3234203d3e203632323430.roa Signing time: Fri 28 Nov 2025 11:49:16 +0000 ROA not before: Fri 28 Nov 2025 11:44:16 +0000 ROA not after: Fri 27 Nov 2026 11:49:16 +0000 asID: 62240 IP address blocks: 130.185.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:03:15:87:8c:71:18:22:3e:6c:58:41:9b:d0:a7:8b:9f:78:aa:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:16 2025 GMT Not After : Nov 27 11:49:16 2026 GMT Subject: CN=07EFDDF7DD3EAEC55E2BF27357E39D3CDE741DBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1f:77:70:fb:2e:06:55:a9:8e:21:50:fd:f2: d7:a9:29:01:71:87:a1:30:06:86:1b:7d:44:00:33: d2:77:6c:dc:b2:0b:ca:72:ae:70:87:2c:cc:54:10: 02:f7:ee:d1:67:f6:6e:24:bc:85:1e:16:76:f8:d3: 48:13:b0:75:ef:18:0a:c0:ab:30:1e:95:42:30:d5: 84:b0:fc:bb:c9:ee:b3:ef:09:9f:77:e6:c4:9f:8b: 5d:41:da:4d:6e:35:09:d1:a0:dc:44:4e:64:dd:39: ac:95:ba:d6:db:4f:80:45:db:58:d2:9e:93:44:e4: 30:24:54:da:cd:0e:81:53:7a:c4:2c:15:78:ea:65: 0e:5e:c9:00:cd:9b:1e:87:8d:14:67:3c:6a:b5:00: 29:20:5d:55:31:67:73:84:ba:fe:c4:f7:40:2b:d1: e3:8e:56:e4:93:6d:67:42:1d:25:99:3c:59:08:ec: 99:dd:4a:1b:ad:13:80:2a:de:6e:bb:a6:35:c3:c9: 51:db:85:21:d9:9e:86:15:1d:37:be:17:52:c9:4a: 4c:b7:41:5e:f3:73:58:86:a6:3d:27:ef:e1:6f:bc: 76:28:d0:1f:a0:82:8e:bf:33:dd:7a:78:b2:4b:a6: 7d:9c:7a:1f:45:2e:f3:c5:91:b0:71:82:eb:10:32: 9d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EF:DD:F7:DD:3E:AE:C5:5E:2B:F2:73:57:E3:9D:3C:DE:74:1D:BD X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3133302e3138352e3131372e302f32342d3234203d3e203632323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.185.117.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:6f:6e:4b:b2:99:e7:6f:f3:c0:25:db:fb:b3:e4:b1:61:04: ce:87:68:e5:71:3a:62:bc:31:01:50:ee:45:a5:88:96:8d:83: 74:9f:83:48:a1:ae:a3:35:2d:c6:6f:33:16:3e:32:88:2a:fe: 33:d6:29:f3:ba:19:64:c1:75:44:64:df:b8:b8:31:96:25:51: 27:db:8c:65:ef:ca:4d:0f:bc:0b:f4:8c:ef:dc:ff:7b:d1:c6: 3e:a0:d0:81:01:24:a8:68:47:b5:06:80:79:fb:1b:fb:b6:81: 36:93:e3:dc:c6:a6:bc:ad:06:d7:c0:87:17:96:46:be:7b:b1: 86:54:e0:4e:19:58:8e:b7:0f:97:d9:33:c4:36:5a:45:1f:b9: 51:54:83:94:be:5e:a5:72:57:38:e6:4e:2a:bb:dd:be:c2:fa: 19:b3:64:9f:34:cc:72:bb:8b:3f:03:69:0f:ac:12:15:3a:73: f4:36:08:2e:c6:ae:90:0a:bf:da:8c:d2:8b:ff:66:2a:e4:5d: 25:a8:03:d8:3d:c6:47:c0:62:0b:f7:d1:de:d2:5a:d7:55:66: 22:6e:5e:9a:ac:6a:8f:26:f6:78:16:11:17:32:1a:84:b7:88: 06:46:10:cd:4c:32:6c:f8:be:5b:e7:e5:db:9a:af:69:aa:60: ac:6e:bc:b4 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUFQMVh4xxGCI+bFhBm9Cni594qgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTZaFw0yNjExMjcxMTQ5MTZaMDMxMTAvBgNV BAMTKDA3RUZEREY3REQzRUFFQzU1RTJCRjI3MzU3RTM5RDNDREU3NDFEQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDH3dw+y4GVamOIVD98tepKQFx h6EwBoYbfUQAM9J3bNyyC8pyrnCHLMxUEAL37tFn9m4kvIUeFnb400gTsHXvGArA qzAelUIw1YSw/LvJ7rPvCZ935sSfi11B2k1uNQnRoNxETmTdOayVutbbT4BF21jS npNE5DAkVNrNDoFTesQsFXjqZQ5eyQDNmx6HjRRnPGq1ACkgXVUxZ3OEuv7E90Ar 0eOOVuSTbWdCHSWZPFkI7JndShutE4Aq3m67pjXDyVHbhSHZnoYVHTe+F1LJSky3 QV7zc1iGpj0n7+FvvHYo0B+ggo6/M916eLJLpn2ceh9FLvPFkbBxgusQMp0ZAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUB+/d990+rsVeK/JzV+OdPN50Hb0wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTMzMzAyZTMxMzgz NTJlMzEzMTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMjMyMzQzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAIK5dTANBgkqhkiG9w0BAQsFAAOCAQEAGm9uS7KZ52/zwCXb+7PksWEE zodo5XE6YrwxAVDuRaWIlo2DdJ+DSKGuozUtxm8zFj4yiCr+M9Yp87oZZMF1RGTf uLgxliVRJ9uMZe/KTQ+8C/SM79z/e9HGPqDQgQEkqGhHtQaAefsb+7aBNpPj3Mam vK0G18CHF5ZGvnuxhlTgThlYjrcPl9kzxDZaRR+5UVSDlL5epXJXOOZOKrvdvsL6 GbNknzTMcruLPwNpD6wSFTpz9DYILsaukAq/2ozSi/9mKuRdJagD2D3GR8BiC/fR 3tJa11VmIm5emqxqjyb2eBYRFzIahLeIBkYQzUwybPi+W+fl25qvaapgrG68tA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:44:21 2025 by rpki-client