This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3135322e38392e38382e302f32322d3232203d3e203536333736.roa File: 3135322e38392e38382e302f32322d3232203d3e203536333736.roa (raw, json) Hash identifier: Bz8tzruKp0Ge8lEuZqTLkibxVeOcJVfHbWiH4wLxKZ0= Subject key identifier: C7:84:34:75:32:87:74:E2:36:9B:9A:43:B8:C1:35:EF:CC:C7:4B:E4 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 11C86D961BDA77626D7EA228BA598FBE8590A64C Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3135322e38392e38382e302f32322d3232203d3e203536333736.roa Signing time: Fri 21 Nov 2025 15:49:09 +0000 ROA not before: Fri 21 Nov 2025 15:44:09 +0000 ROA not after: Fri 20 Nov 2026 15:49:09 +0000 asID: 56376 IP address blocks: 152.89.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c8:6d:96:1b:da:77:62:6d:7e:a2:28:ba:59:8f:be:85:90:a6:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:09 2025 GMT Not After : Nov 20 15:49:09 2026 GMT Subject: CN=C7843475328774E2369B9A43B8C135EFCCC74BE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8e:d5:29:1e:da:91:0c:2b:72:ff:98:17:49: e8:9c:f1:cb:c8:09:71:07:2e:d6:e1:ae:f0:52:56: 06:31:db:28:60:83:4e:ce:80:03:92:94:62:1a:ac: f7:e6:f7:90:30:5e:e0:b7:0c:10:10:e5:be:2e:90: 6b:61:ca:95:2b:f1:d7:ae:91:d2:ee:81:a0:5d:90: 82:0f:67:7b:6a:5e:90:64:3c:01:7e:f4:97:d9:3a: 86:66:45:c8:3e:f0:30:23:0a:2f:e6:90:f4:6a:0c: 6e:62:04:df:ec:bc:9c:e6:ab:f3:54:70:1e:ca:76: bd:73:ea:82:b2:f4:56:42:7c:c3:49:a5:50:d3:6d: 98:0b:46:c0:02:4c:07:3b:6d:2a:64:e6:e5:0a:f7: b3:26:37:7e:ba:b6:ec:b4:3f:77:48:62:18:56:ae: e5:66:d6:3d:1b:5f:21:d7:75:59:e9:5d:80:fc:80: bc:01:eb:30:d8:ff:eb:07:3d:10:ad:27:25:b2:7a: 30:65:28:f9:48:23:37:33:d6:ef:58:80:20:df:8c: f5:11:3a:f5:91:59:b5:0e:dc:1b:6f:cb:f8:1d:95: 50:35:86:47:ff:84:05:42:67:f6:e4:de:12:21:bc: 3a:e2:de:3f:c6:55:52:5f:0a:23:f7:a0:22:72:4a: 82:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:84:34:75:32:87:74:E2:36:9B:9A:43:B8:C1:35:EF:CC:C7:4B:E4 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3135322e38392e38382e302f32322d3232203d3e203536333736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.88.0/22 Signature Algorithm: sha256WithRSAEncryption ca:e8:06:8e:c0:95:8d:1b:84:86:af:9c:9f:a0:cf:56:81:00: 84:30:b8:a9:c0:86:2a:d7:22:c8:f1:c3:e4:91:c2:4b:5b:a2: 82:da:e2:e5:18:51:29:c8:cf:a6:59:b1:cf:f5:21:b0:2a:b0: c2:df:ca:ff:52:d0:d5:73:8b:cf:ab:de:3a:b9:b9:fe:31:88: 62:86:78:b9:1b:cd:f4:62:cc:56:29:ea:76:29:11:34:5c:8e: 6d:7b:c5:a9:e7:cb:5e:09:5d:0f:73:b0:1e:52:70:5c:83:1b: 0e:ff:47:e3:b8:3e:88:ab:9c:83:5e:ed:e2:ea:da:b8:ea:44: b4:0e:7c:79:65:66:22:1e:81:fe:1b:ba:1e:01:e4:ea:7e:63: 99:62:70:fa:4b:09:90:5b:8f:aa:2b:77:36:92:d9:c2:ff:7c: 4f:52:48:06:01:88:04:fa:16:4f:4f:0a:00:ee:92:8b:4f:a1: 88:9f:e5:03:1a:21:a1:a1:5e:43:69:e9:15:4f:b4:00:85:a6: 60:39:c4:34:7d:5d:23:82:26:d6:33:b5:7b:fc:86:4d:31:2a: 81:29:0d:97:a4:65:96:15:44:eb:12:03:b1:49:95:2a:af:12: 2a:87:84:33:11:d6:a1:aa:51:55:a5:22:9d:b0:83:e2:61:c1: 59:ef:db:9a -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUEchtlhvad2JtfqIoulmPvoWQpkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDlaFw0yNjExMjAxNTQ5MDlaMDMxMTAvBgNV BAMTKEM3ODQzNDc1MzI4Nzc0RTIzNjlCOUE0M0I4QzEzNUVGQ0NDNzRCRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJjtUpHtqRDCty/5gXSeic8cvI CXEHLtbhrvBSVgYx2yhgg07OgAOSlGIarPfm95AwXuC3DBAQ5b4ukGthypUr8deu kdLugaBdkIIPZ3tqXpBkPAF+9JfZOoZmRcg+8DAjCi/mkPRqDG5iBN/svJzmq/NU cB7Kdr1z6oKy9FZCfMNJpVDTbZgLRsACTAc7bSpk5uUK97MmN366tuy0P3dIYhhW ruVm1j0bXyHXdVnpXYD8gLwB6zDY/+sHPRCtJyWyejBlKPlIIzcz1u9YgCDfjPUR OvWRWbUO3Btvy/gdlVA1hkf/hAVCZ/bk3hIhvDri3j/GVVJfCiP3oCJySoKPAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUx4Q0dTKHdOI2m5pDuME178zHS+QwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM1MzIyZTM4Mzky ZTM4MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTM2MzMzNzM2LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCmFlYMA0GCSqGSIb3DQEBCwUAA4IBAQDK6AaOwJWNG4SGr5yfoM9WgQCEMLip wIYq1yLI8cPkkcJLW6KC2uLlGFEpyM+mWbHP9SGwKrDC38r/UtDVc4vPq946ubn+ MYhihni5G830YsxWKep2KRE0XI5te8Wp58teCV0Pc7AeUnBcgxsO/0fjuD6Iq5yD Xu3i6tq46kS0Dnx5ZWYiHoH+G7oeAeTqfmOZYnD6SwmQW4+qK3c2ktnC/3xPUkgG AYgE+hZPTwoA7pKLT6GIn+UDGiGhoV5DaekVT7QAhaZgOcQ0fV0jgibWM7V7/IZN MSqBKQ2XpGWWFUTrEgOxSZUqrxIqh4QzEdahqlFVpSKdsIPiYcFZ79ua -----END CERTIFICATE-----Generated at Sat Dec 6 16:59:06 2025 by rpki-client