This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33382e302f32342d3234203d3e20313336373837.roa File: 3134392e36322e33382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: ZZAekOvnA60uuR9H5p428mSzuD4KQuBBc9558NjjcHc= Subject key identifier: 2C:D1:38:45:C0:AF:F6:21:47:0F:18:8E:8A:D9:80:4D:F6:97:DD:7A Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7F7348C170B3CE269A56EEAE316C5A5D8392478C Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:17 +0000 ROA not before: Fri 28 Nov 2025 11:44:17 +0000 ROA not after: Fri 27 Nov 2026 11:49:17 +0000 asID: 136787 IP address blocks: 149.62.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:73:48:c1:70:b3:ce:26:9a:56:ee:ae:31:6c:5a:5d:83:92:47:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:17 2025 GMT Not After : Nov 27 11:49:17 2026 GMT Subject: CN=2CD13845C0AFF621470F188E8AD9804DF697DD7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0d:13:d5:b4:3f:d9:2c:84:f4:c6:6c:04:3b: f2:b3:66:a6:74:2d:f6:2f:88:02:62:1b:42:23:ca: ba:3c:00:c6:cf:ee:c7:82:47:a2:94:67:0e:f4:a9: 85:e3:04:aa:21:74:d9:bf:1f:69:e6:b2:2c:c3:25: 56:f8:fd:c4:45:b7:d6:fb:a1:87:8c:8a:d6:03:33: 2b:af:75:a3:ed:2c:90:86:37:db:26:a9:72:da:73: 43:e3:4f:71:9f:88:f1:ac:c8:a5:1a:25:99:cd:a4: 77:c8:46:c7:74:83:49:39:e3:3a:da:76:fd:45:96: 0d:81:9d:f3:68:63:50:fd:35:5a:8b:4d:f2:f5:a3: a1:f2:1a:77:13:7c:c0:97:20:76:7e:b4:5b:65:5a: 70:92:f7:41:c5:25:02:d5:9f:fb:2f:64:51:8e:78: b0:4c:8e:aa:59:33:c5:af:31:6b:e9:80:2d:c1:96: 9f:37:18:d3:23:66:12:f6:4f:7b:d0:ba:4f:7c:23: 32:4b:31:f9:7c:85:c0:fd:86:96:e3:20:5b:38:0d: 27:34:0a:f1:c1:07:73:a6:4e:e9:2c:e8:46:03:16: 9a:cd:7a:10:7a:e7:89:97:e7:b7:54:be:ab:aa:3f: e1:98:c3:f0:bd:ea:b1:92:61:4c:ce:b3:af:4f:7e: e0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D1:38:45:C0:AF:F6:21:47:0F:18:8E:8A:D9:80:4D:F6:97:DD:7A X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.62.38.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:87:5e:0b:41:d3:f4:ab:6d:d0:56:97:d0:17:ed:25:77:c0: df:32:26:13:29:a7:fc:31:be:b2:20:f0:3c:68:9b:90:4a:c5: 53:ea:b5:f4:01:1b:a0:08:ee:a0:38:cc:02:63:15:9b:e5:8e: d5:b9:ac:4c:85:ac:2f:e6:c9:2a:23:2e:48:75:68:5c:fb:a9: a8:91:4f:4c:12:b3:db:8d:12:a4:14:da:02:a0:16:3f:b0:92: 9d:c2:96:86:56:90:cb:c8:92:9f:4d:b2:b3:63:c2:05:86:33: 0f:af:79:e2:01:72:33:cd:f3:6c:1c:41:bc:f3:b1:2b:6c:a2: 6b:1b:34:69:95:56:bf:e3:d2:be:86:a1:4a:98:98:89:18:45: 40:50:20:db:74:09:c0:0a:ac:96:7e:13:25:2a:be:df:db:63: eb:05:3f:94:8c:34:a6:aa:0e:14:17:ba:c8:93:a2:20:ea:1c: fd:6f:18:8e:fc:21:69:fd:69:a3:72:e7:0d:c0:2f:f8:66:25: 65:6a:72:42:67:19:34:eb:b3:a4:72:c6:7c:fb:f4:e7:5a:c6: 3e:c5:8d:07:02:7d:3b:2f:24:08:02:81:c6:54:d2:32:62:3a: 19:af:d4:a0:f5:47:22:6b:94:aa:51:0f:d0:6b:eb:16:45:4b: 6e:1a:0d:1a -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUf3NIwXCzziaaVu6uMWxaXYOSR4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTdaFw0yNjExMjcxMTQ5MTdaMDMxMTAvBgNV BAMTKDJDRDEzODQ1QzBBRkY2MjE0NzBGMTg4RThBRDk4MDRERjY5N0REN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDRPVtD/ZLIT0xmwEO/KzZqZ0 LfYviAJiG0Ijyro8AMbP7seCR6KUZw70qYXjBKohdNm/H2nmsizDJVb4/cRFt9b7 oYeMitYDMyuvdaPtLJCGN9smqXLac0PjT3GfiPGsyKUaJZnNpHfIRsd0g0k54zra dv1Flg2BnfNoY1D9NVqLTfL1o6HyGncTfMCXIHZ+tFtlWnCS90HFJQLVn/svZFGO eLBMjqpZM8WvMWvpgC3Blp83GNMjZhL2T3vQuk98IzJLMfl8hcD9hpbjIFs4DSc0 CvHBB3OmTuks6EYDFprNehB654mX57dUvquqP+GYw/C96rGSYUzOs69PfuDZAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQULNE4RcCv9iFHDxiOitmATfaX3XowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM0MzkyZTM2MzIy ZTMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACVPiYwDQYJKoZIhvcNAQELBQADggEBACqHXgtB0/SrbdBWl9AX7SV3wN8y JhMpp/wxvrIg8Dxom5BKxVPqtfQBG6AI7qA4zAJjFZvljtW5rEyFrC/mySojLkh1 aFz7qaiRT0wSs9uNEqQU2gKgFj+wkp3CloZWkMvIkp9NsrNjwgWGMw+veeIBcjPN 82wcQbzzsStsomsbNGmVVr/j0r6GoUqYmIkYRUBQINt0CcAKrJZ+EyUqvt/bY+sF P5SMNKaqDhQXusiToiDqHP1vGI78IWn9aaNy5w3AL/hmJWVqckJnGTTrs6Ryxnz7 9Odaxj7FjQcCfTsvJAgCgcZU0jJiOhmv1KD1RyJrlKpRD9Br6xZFS24aDRo= -----END CERTIFICATE-----Generated at Sat Dec 6 17:01:24 2025 by rpki-client