This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3133302e3138352e3131392e302f32342d3332203d3e203531313637.roa File: 3133302e3138352e3131392e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: P1Byqo3P5age5EXrlLCAuKSbZ4DlrMZ5PplWOyNHcyY= Subject key identifier: 36:DF:CF:F2:03:FD:D1:06:F2:C5:DC:E7:5F:06:1A:96:4E:40:D3:CB Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4349EF8CEC5348292DDCD7CBA9B258D613C841E6 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3133302e3138352e3131392e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:18 +0000 ROA not before: Fri 28 Nov 2025 11:44:18 +0000 ROA not after: Fri 27 Nov 2026 11:49:18 +0000 asID: 51167 IP address blocks: 130.185.119.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:49:ef:8c:ec:53:48:29:2d:dc:d7:cb:a9:b2:58:d6:13:c8:41:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:18 2025 GMT Not After : Nov 27 11:49:18 2026 GMT Subject: CN=36DFCFF203FDD106F2C5DCE75F061A964E40D3CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:83:f4:ba:1d:7a:ee:c4:44:4d:0c:f9:80:d8: 0f:68:3a:d1:a1:12:25:3f:81:6f:d0:88:80:d1:c8: 2d:12:f0:38:cb:2b:b1:4b:45:98:9b:f5:31:a9:0d: 6c:9a:92:81:20:4a:98:4e:88:5d:52:4d:71:42:fa: ea:cb:d7:a7:01:8c:26:f8:b2:03:2f:26:8a:30:99: 35:a0:74:01:89:4c:30:5f:12:42:4f:48:eb:2b:d7: f8:fd:bf:26:ee:c8:a7:5e:32:89:66:f1:42:a1:79: ec:26:77:60:bb:3f:69:7b:cf:e3:c0:95:05:9d:d0: 61:95:40:a0:e7:1f:51:e7:ba:2f:b8:0e:b8:c9:30: 34:ee:f9:28:c1:d6:de:a4:05:e8:77:61:52:67:5a: 22:0d:2d:ab:52:8d:9a:83:e4:6c:5f:f5:e3:cf:d7: 13:6a:51:ab:c3:55:d8:cc:0a:c0:a7:d4:59:42:a7: 36:98:63:61:24:44:37:b0:0e:b2:c2:37:f6:1f:a5: 03:88:80:0a:85:fc:61:89:a2:08:dd:35:d9:8c:9c: cd:94:8a:1d:91:13:6c:0b:bd:2b:48:f3:8d:64:88: e0:ec:88:4d:29:95:5b:d5:a4:50:13:6a:8a:f4:7f: d3:d3:1b:48:5f:f8:e5:24:53:e7:6e:52:d0:74:44: c0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DF:CF:F2:03:FD:D1:06:F2:C5:DC:E7:5F:06:1A:96:4E:40:D3:CB X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3133302e3138352e3131392e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.185.119.0/24 Signature Algorithm: sha256WithRSAEncryption 07:1b:f5:18:c8:95:77:6a:87:51:5c:90:0e:8f:a2:ef:f4:65: bb:be:87:c5:e6:3e:91:cb:6f:4a:94:32:37:c1:24:cf:95:ad: c4:2e:af:40:39:2f:4a:d7:7f:d1:1d:02:b4:d5:11:45:a4:a5: 7a:ab:66:e5:af:f4:15:d4:a6:27:e4:8f:a2:ba:5f:98:51:da: 94:1e:38:b0:f8:52:72:7e:a4:b1:63:2b:d1:2a:96:df:4d:02: 0c:6c:5c:7b:85:f6:75:a0:da:64:7f:d9:2a:88:55:f4:ee:78: ec:91:c9:3c:46:51:98:5c:7c:a9:37:5b:26:e4:2d:9a:71:fb: 8e:63:d0:32:92:06:c2:89:d5:3e:49:d5:f3:42:1f:aa:f8:45: 4b:a7:28:40:7f:b7:c2:73:14:04:e2:c3:f5:18:75:de:47:09: 1e:87:87:69:95:a2:7e:9b:5a:40:ac:d1:13:68:94:b1:41:e1: 4f:a9:ec:4b:7b:92:81:c3:87:c7:81:d7:86:27:a8:1f:11:04: a9:c7:60:b3:70:b7:aa:ce:73:08:bf:a4:77:71:23:33:55:10: 98:8d:e6:4a:fa:ff:b1:c2:0b:e5:a0:74:e4:c3:db:6f:30:43: dc:7e:7d:2e:6a:3a:42:28:47:63:db:8e:c7:5c:10:b4:9e:ce: 6b:5c:35:ad -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUQ0nvjOxTSCkt3NfLqbJY1hPIQeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MThaFw0yNjExMjcxMTQ5MThaMDMxMTAvBgNV BAMTKDM2REZDRkYyMDNGREQxMDZGMkM1RENFNzVGMDYxQTk2NEU0MEQzQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9g/S6HXruxERNDPmA2A9oOtGh EiU/gW/QiIDRyC0S8DjLK7FLRZib9TGpDWyakoEgSphOiF1STXFC+urL16cBjCb4 sgMvJoowmTWgdAGJTDBfEkJPSOsr1/j9vybuyKdeMolm8UKheewmd2C7P2l7z+PA lQWd0GGVQKDnH1Hnui+4DrjJMDTu+SjB1t6kBeh3YVJnWiINLatSjZqD5Gxf9ePP 1xNqUavDVdjMCsCn1FlCpzaYY2EkRDewDrLCN/YfpQOIgAqF/GGJogjdNdmMnM2U ih2RE2wLvStI841kiODsiE0plVvVpFATaor0f9PTG0hf+OUkU+duUtB0RMAZAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUNt/P8gP90QbyxdznXwYalk5A08swHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTMzMzAyZTMxMzgz NTJlMzEzMTM5MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAIK5dzANBgkqhkiG9w0BAQsFAAOCAQEABxv1GMiVd2qHUVyQDo+i7/Rl u76HxeY+kctvSpQyN8Ekz5WtxC6vQDkvStd/0R0CtNURRaSleqtm5a/0FdSmJ+SP orpfmFHalB44sPhScn6ksWMr0SqW300CDGxce4X2daDaZH/ZKohV9O547JHJPEZR mFx8qTdbJuQtmnH7jmPQMpIGwonVPknV80IfqvhFS6coQH+3wnMUBOLD9Rh13kcJ HoeHaZWifptaQKzRE2iUsUHhT6nsS3uSgcOHx4HXhieoHxEEqcdgs3C3qs5zCL+k d3EjM1UQmI3mSvr/scIL5aB05MPbbzBD3H59Lmo6QihHY9uOx1wQtJ7Oa1w1rQ== -----END CERTIFICATE-----Generated at Tue Dec 16 14:00:51 2025 by rpki-client