This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134312e39382e3135322e302f32322d3332203d3e203531313637.roa File: 3134312e39382e3135322e302f32322d3332203d3e203531313637.roa (raw, json) Hash identifier: Drt4YhpB7E5Nr3xVyLGm4JgUzIG01nEShKLTa833bl0= Subject key identifier: FD:21:77:06:DA:3E:47:AA:B1:23:DA:8E:21:60:E1:94:F9:19:F7:9E Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 427EEBB50CCBB30D2A1F1F17B4A13F8CC124AE70 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134312e39382e3135322e302f32322d3332203d3e203531313637.roa Signing time: Fri 21 Nov 2025 15:49:11 +0000 ROA not before: Fri 21 Nov 2025 15:44:11 +0000 ROA not after: Fri 20 Nov 2026 15:49:11 +0000 asID: 51167 IP address blocks: 141.98.152.0/22 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7e:eb:b5:0c:cb:b3:0d:2a:1f:1f:17:b4:a1:3f:8c:c1:24:ae:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:11 2025 GMT Not After : Nov 20 15:49:11 2026 GMT Subject: CN=FD217706DA3E47AAB123DA8E2160E194F919F79E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1b:0a:1c:f6:c7:10:5c:45:0f:12:e5:94:14: ae:ec:4f:67:96:65:9a:a0:c7:fa:f4:f5:5e:f0:79: 66:6d:c6:39:52:42:d5:d5:70:4c:4b:33:51:e6:7b: d7:59:dc:f5:90:d5:56:22:cf:ba:77:e9:e7:ff:2c: 39:76:a5:57:01:43:f0:b3:93:38:fb:86:dd:6f:9d: 06:14:f6:2f:1f:85:5d:85:84:9a:a1:d8:d3:ba:fe: f8:74:93:c9:b1:15:76:a8:72:f8:5d:a2:89:fe:fe: 32:4d:09:f6:cc:91:75:4b:0d:e5:85:fb:b5:f7:e3: 79:3e:0e:cf:c5:88:a5:cc:81:3b:2c:30:2c:b0:29: b7:51:57:f4:9a:6d:14:52:92:c4:fe:eb:76:31:ec: e2:c4:fc:7e:b3:1a:df:92:2d:d0:fc:2e:ab:ad:e7: 35:da:45:8c:2a:5c:f4:7c:07:3b:a2:c5:6b:00:e5: b1:45:54:26:23:6e:4c:59:49:a6:51:cc:9e:30:5c: e0:28:54:00:5d:cf:89:c8:c2:9d:1a:8d:6f:a3:d0: 35:47:3a:46:af:1e:af:06:eb:63:18:6c:14:a8:c4: da:89:b4:9d:21:3a:2b:3c:34:a4:f9:3a:53:af:68: 95:ac:46:5d:d4:1e:bb:ea:c2:63:52:fa:c5:cf:3c: d3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:21:77:06:DA:3E:47:AA:B1:23:DA:8E:21:60:E1:94:F9:19:F7:9E X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134312e39382e3135322e302f32322d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.152.0/22 Signature Algorithm: sha256WithRSAEncryption 16:f9:f6:3d:ec:11:a5:e0:b9:96:38:be:3c:80:50:61:50:fb: 3e:e9:18:b0:97:1b:85:3a:3d:ea:26:30:78:b5:1f:38:6e:39: cc:ec:3a:f4:8d:6c:72:d4:05:16:48:96:cf:23:77:4f:88:ad: 8b:d5:22:7e:61:e4:81:50:67:35:51:50:bb:c2:e5:0e:18:a1: 05:cb:15:05:7e:0d:ce:07:33:1d:df:f2:4c:8f:e2:8c:53:9e: d3:17:95:ab:f8:b3:08:bf:f7:ba:17:63:00:4b:ad:99:a1:29: cc:51:2f:0e:45:33:24:c8:af:48:69:25:d5:45:dd:63:f0:53: 83:ef:5c:a7:ef:3f:e8:ae:96:54:26:03:95:3d:d3:44:14:bf: 09:39:34:31:c6:4f:7b:c7:e3:f3:97:15:12:54:0d:72:08:d0: e9:e1:e6:00:8d:45:3f:7c:25:c4:05:1d:af:93:d4:79:78:80: 53:a8:9b:42:a7:e4:56:a8:8b:0c:b6:8f:67:3c:d7:1b:ad:d2: 0b:20:ec:c0:14:5d:9c:25:dd:a7:3e:a3:ec:cf:aa:19:3f:d6: 86:ee:68:8c:20:54:7d:87:19:d1:c2:c2:dd:48:bf:18:63:a3: f6:63:fa:e2:f9:c1:b7:56:b6:4c:46:c4:99:2e:06:67:11:c3: 9e:8d:b9:7e -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUQn7rtQzLsw0qHx8XtKE/jMEkrnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTFaFw0yNjExMjAxNTQ5MTFaMDMxMTAvBgNV BAMTKEZEMjE3NzA2REEzRTQ3QUFCMTIzREE4RTIxNjBFMTk0RjkxOUY3OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbGwoc9scQXEUPEuWUFK7sT2eW ZZqgx/r09V7weWZtxjlSQtXVcExLM1Hme9dZ3PWQ1VYiz7p36ef/LDl2pVcBQ/Cz kzj7ht1vnQYU9i8fhV2FhJqh2NO6/vh0k8mxFXaocvhdoon+/jJNCfbMkXVLDeWF +7X343k+Ds/FiKXMgTssMCywKbdRV/SabRRSksT+63Yx7OLE/H6zGt+SLdD8Lqut 5zXaRYwqXPR8BzuixWsA5bFFVCYjbkxZSaZRzJ4wXOAoVABdz4nIwp0ajW+j0DVH OkavHq8G62MYbBSoxNqJtJ0hOis8NKT5OlOvaJWsRl3UHrvqwmNS+sXPPNOnAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU/SF3Bto+R6qxI9qOIWDhlPkZ954wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM0MzEyZTM5Mzgy ZTMxMzUzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKNYpgwDQYJKoZIhvcNAQELBQADggEBABb59j3sEaXguZY4vjyAUGFQ+z7p GLCXG4U6PeomMHi1HzhuOczsOvSNbHLUBRZIls8jd0+IrYvVIn5h5IFQZzVRULvC 5Q4YoQXLFQV+Dc4HMx3f8kyP4oxTntMXlav4swi/97oXYwBLrZmhKcxRLw5FMyTI r0hpJdVF3WPwU4PvXKfvP+iullQmA5U900QUvwk5NDHGT3vH4/OXFRJUDXII0Onh 5gCNRT98JcQFHa+T1Hl4gFOom0Kn5Faoiwy2j2c81xut0gsg7MAUXZwl3ac+o+zP qhk/1obuaIwgVH2HGdHCwt1Ivxhjo/Zj+uL5wbdWtkxGxJkuBmcRw56NuX4= -----END CERTIFICATE-----Generated at Sat Dec 6 13:02:19 2025 by rpki-client