This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3133302e3138352e3131382e302f32342d3332203d3e203531313637.roa File: 3133302e3138352e3131382e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: 7Yp5ZpgUlwHn3vKuNAlOvDZWLhyyCVYSlHEHL+J0eGQ= Subject key identifier: BF:FD:68:0F:2F:3C:A9:43:8E:8E:8A:F6:DC:B1:DB:D0:2D:BE:64:10 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 5F4332271642560ABA412F7EE74F09AC63EDB253 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3133302e3138352e3131382e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:41 +0000 ROA not before: Fri 28 Nov 2025 11:44:41 +0000 ROA not after: Fri 27 Nov 2026 11:49:41 +0000 asID: 51167 IP address blocks: 130.185.118.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:43:32:27:16:42:56:0a:ba:41:2f:7e:e7:4f:09:ac:63:ed:b2:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:41 2025 GMT Not After : Nov 27 11:49:41 2026 GMT Subject: CN=BFFD680F2F3CA9438E8E8AF6DCB1DBD02DBE6410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f6:f4:d1:47:39:1f:72:6f:53:5c:0d:41:d4: a9:46:68:60:21:4c:81:0e:a2:c0:b8:66:54:cc:37: c4:9a:79:48:48:9f:72:c8:42:62:b4:05:af:d2:ee: b3:c2:18:cf:4e:76:78:9d:9c:30:e4:ee:af:59:9e: 6f:40:81:3f:20:4a:8b:cd:7e:9a:51:17:15:44:b2: 00:0c:82:dd:6e:4c:e5:1c:39:70:4d:85:03:a8:02: 3c:88:17:9f:df:09:2c:79:7c:13:94:44:84:78:d6: 98:04:f3:05:65:3e:37:45:e9:a5:e2:01:4e:64:39: 2d:5b:b4:74:74:87:c9:f0:9e:79:bb:f8:68:1d:b6: 52:6e:91:ca:fe:6a:20:09:b8:46:f9:16:27:4f:de: 15:33:20:1f:00:18:0a:45:15:c7:ba:c4:84:44:1c: b8:d3:90:1e:93:6c:e8:57:81:e8:b4:d2:0f:c5:46: 42:dc:2d:73:2d:8d:e8:60:c8:ec:13:43:9e:53:5f: fc:8c:a1:b6:4c:80:e5:f8:22:a5:46:94:bd:bf:0c: 49:ef:c8:14:a7:44:62:db:75:8d:f7:a7:22:12:ab: 13:50:65:67:e3:d8:81:89:91:b4:d1:1c:19:67:db: a7:d5:30:77:b1:45:1c:97:91:57:bb:88:d7:5b:93: 4a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FD:68:0F:2F:3C:A9:43:8E:8E:8A:F6:DC:B1:DB:D0:2D:BE:64:10 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3133302e3138352e3131382e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.185.118.0/24 Signature Algorithm: sha256WithRSAEncryption e3:16:9c:f2:58:b1:d3:0c:e2:99:66:29:6e:37:a0:3b:c0:02: 8c:27:f6:6d:3f:35:66:26:69:c3:54:57:3e:f2:6b:e3:67:31: 5b:91:78:ce:18:57:5c:c7:dd:38:3c:6b:bc:c9:2f:ba:08:e7: 35:ad:0d:b4:67:ba:b9:e8:4c:47:a8:ab:4f:9d:63:2d:27:eb: 28:2f:72:63:50:fe:a8:2c:56:7f:3d:45:19:01:65:29:e3:5c: f1:21:c3:e6:03:b7:6f:b2:0e:fa:2b:87:dd:42:c4:55:04:94: a9:e0:77:ef:29:e7:74:bb:2e:71:e5:59:50:12:df:ae:ee:0a: 56:57:bb:6b:b9:30:9d:25:6b:52:69:b9:fe:7e:59:8e:ad:cb: c2:57:4e:b0:21:b1:49:3b:19:01:8b:4b:50:04:c4:e6:8e:82: 24:1c:6a:03:a7:6c:3f:d8:bd:07:fb:b1:a8:47:4b:f8:ac:4c: e7:91:af:3e:a2:88:a5:49:b7:a5:3a:d7:0a:06:fd:8d:69:f1: 21:fe:f3:7f:b0:1d:df:f2:9f:5b:1f:df:87:d2:13:e9:97:b3: 07:d4:a3:8c:44:ec:c2:70:d0:aa:56:35:a9:1c:9e:d5:ea:ce: 9a:b8:4c:30:e0:eb:40:00:38:75:23:6f:0a:1c:c6:6e:9b:1d: 33:25:d9:33 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUX0MyJxZCVgq6QS9+508JrGPtslMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDFaFw0yNjExMjcxMTQ5NDFaMDMxMTAvBgNV BAMTKEJGRkQ2ODBGMkYzQ0E5NDM4RThFOEFGNkRDQjFEQkQwMkRCRTY0MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI9vTRRzkfcm9TXA1B1KlGaGAh TIEOosC4ZlTMN8SaeUhIn3LIQmK0Ba/S7rPCGM9OdnidnDDk7q9Znm9AgT8gSovN fppRFxVEsgAMgt1uTOUcOXBNhQOoAjyIF5/fCSx5fBOURIR41pgE8wVlPjdF6aXi AU5kOS1btHR0h8nwnnm7+GgdtlJukcr+aiAJuEb5FidP3hUzIB8AGApFFce6xIRE HLjTkB6TbOhXgei00g/FRkLcLXMtjehgyOwTQ55TX/yMobZMgOX4IqVGlL2/DEnv yBSnRGLbdY33pyISqxNQZWfj2IGJkbTRHBln26fVMHexRRyXkVe7iNdbk0oRAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUv/1oDy88qUOOjor23LHb0C2+ZBAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTMzMzAyZTMxMzgz NTJlMzEzMTM4MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAIK5djANBgkqhkiG9w0BAQsFAAOCAQEA4xac8lix0wzimWYpbjegO8AC jCf2bT81ZiZpw1RXPvJr42cxW5F4zhhXXMfdODxrvMkvugjnNa0NtGe6uehMR6ir T51jLSfrKC9yY1D+qCxWfz1FGQFlKeNc8SHD5gO3b7IO+iuH3ULEVQSUqeB37ynn dLsuceVZUBLfru4KVle7a7kwnSVrUmm5/n5Zjq3LwldOsCGxSTsZAYtLUATE5o6C JBxqA6dsP9i9B/uxqEdL+KxM55GvPqKIpUm3pTrXCgb9jWnxIf7zf7Ad3/KfWx/f h9IT6ZezB9SjjETswnDQqlY1qRye1erOmrhMMODrQAA4dSNvChzGbpsdMyXZMw== -----END CERTIFICATE-----Generated at Tue Dec 16 14:00:50 2025 by rpki-client