This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136302e3233382e33392e302f32342d3332203d3e20313336373837.roa File: 3136302e3233382e33392e302f32342d3332203d3e20313336373837.roa (raw, json) Hash identifier: gJgLIXSHwjGEfsyO3WtGbYynKTf1Gk1eV7aT6k6Ef9U= Subject key identifier: 17:0F:A4:18:91:28:31:2A:BA:37:5A:0F:98:46:65:03:8A:56:B7:A6 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 70F70E8FA7855C1B5AAC884BC5155A4277C89860 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136302e3233382e33392e302f32342d3332203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:49 +0000 ROA not before: Fri 28 Nov 2025 11:44:49 +0000 ROA not after: Fri 27 Nov 2026 11:49:49 +0000 asID: 136787 IP address blocks: 160.238.39.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f7:0e:8f:a7:85:5c:1b:5a:ac:88:4b:c5:15:5a:42:77:c8:98:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:49 2025 GMT Not After : Nov 27 11:49:49 2026 GMT Subject: CN=170FA4189128312ABA375A0F984665038A56B7A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:8b:58:21:43:35:6c:71:06:a5:e8:a6:fe:62: 51:6c:92:0d:ed:b5:43:50:44:a5:4d:19:a9:9a:12: 1e:99:e8:52:57:cf:65:28:26:fb:c7:09:e5:46:e0: f5:ed:8b:4a:4d:e0:76:14:6c:02:52:89:56:50:72: da:24:0c:1c:65:1a:70:be:c3:f1:fa:62:aa:18:59: 35:64:ee:d9:4b:df:30:53:73:4b:25:b8:54:93:e3: c4:3e:4c:45:24:8f:04:ad:b7:6c:47:06:a5:d0:1e: ba:47:ca:e7:48:11:11:9d:71:3f:5b:cb:27:4d:68: 97:74:28:86:81:e0:ec:1c:7c:a5:e4:75:c9:b6:02: 75:ec:b5:5f:38:94:66:21:6b:43:cb:48:c6:c9:c1: 0b:f2:9b:81:79:4f:a1:bb:42:f8:34:69:96:06:f5: 8c:4f:a6:0d:45:b0:e7:eb:b5:4f:43:c6:b9:40:45: 21:75:7e:8f:b9:93:94:43:9b:54:cd:c1:50:84:77: 22:42:0f:a7:fa:e9:d8:30:48:58:d2:30:17:e1:fb: b5:b5:89:6f:ce:67:d5:63:4d:f5:b7:dc:10:ee:6c: 1e:a7:c8:b6:46:81:1d:35:3e:c7:16:75:33:e0:ed: 8f:73:d3:8f:10:0f:66:90:3a:fb:26:5f:0f:bf:73: 5a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0F:A4:18:91:28:31:2A:BA:37:5A:0F:98:46:65:03:8A:56:B7:A6 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136302e3233382e33392e302f32342d3332203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.238.39.0/24 Signature Algorithm: sha256WithRSAEncryption a3:f1:9d:e1:f3:a9:2b:7d:c1:4e:db:37:d2:95:bc:30:b8:5f: b2:22:41:ea:54:f8:a9:6e:fb:cd:5d:1a:19:80:99:8b:80:14: 23:61:03:08:e9:17:c4:a4:04:d6:a9:3b:49:28:e6:ac:44:8f: 4b:73:33:11:38:26:3f:61:d5:82:ec:10:2b:1d:d8:55:70:ac: fb:4d:ab:26:f8:99:4b:3d:d2:11:7f:74:70:ab:8d:09:ed:cc: fe:d6:69:bd:d9:10:ea:92:9a:3a:0f:ff:6a:6a:8c:a5:9d:ec: 60:7b:d7:f8:ef:5c:d8:4d:b0:1f:ee:04:c3:bf:dd:83:9a:b2: 74:fa:7d:cd:f5:78:52:6b:cc:f4:2f:8e:18:8d:db:af:83:7b: 12:11:b6:91:b5:82:d6:80:df:fe:b3:8a:10:86:74:a9:20:e4: 6a:d3:82:e0:0e:b7:27:b1:cf:df:50:e0:b3:95:d7:9a:0d:0b: 6a:4d:92:f3:8e:22:fa:52:4d:a5:3f:4e:03:7d:1f:8f:87:be: dc:fc:d2:5b:76:c5:7e:5b:76:55:0c:84:9a:ba:b4:ef:d7:a9: fb:39:47:5e:59:ee:3c:f6:d4:7a:7a:b2:2b:93:1b:64:bd:75: 2d:c5:40:3e:1f:19:86:38:d1:f7:65:15:e4:d0:3c:38:33:ae: a0:b0:d7:4a -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUcPcOj6eFXBtarIhLxRVaQnfImGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDlaFw0yNjExMjcxMTQ5NDlaMDMxMTAvBgNV BAMTKDE3MEZBNDE4OTEyODMxMkFCQTM3NUEwRjk4NDY2NTAzOEE1NkI3QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyi1ghQzVscQal6Kb+YlFskg3t tUNQRKVNGamaEh6Z6FJXz2UoJvvHCeVG4PXti0pN4HYUbAJSiVZQctokDBxlGnC+ w/H6YqoYWTVk7tlL3zBTc0sluFST48Q+TEUkjwStt2xHBqXQHrpHyudIERGdcT9b yydNaJd0KIaB4OwcfKXkdcm2AnXstV84lGYha0PLSMbJwQvym4F5T6G7Qvg0aZYG 9YxPpg1FsOfrtU9DxrlARSF1fo+5k5RDm1TNwVCEdyJCD6f66dgwSFjSMBfh+7W1 iW/OZ9VjTfW33BDubB6nyLZGgR01PscWdTPg7Y9z048QD2aQOvsmXw+/c1rDAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUFw+kGJEoMSq6N1oPmEZlA4pWt6YwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM2MzAyZTMyMzMz ODJlMzMzOTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAKDuJzANBgkqhkiG9w0BAQsFAAOCAQEAo/Gd4fOpK33BTts30pW8MLhf siJB6lT4qW77zV0aGYCZi4AUI2EDCOkXxKQE1qk7SSjmrESPS3MzETgmP2HVguwQ Kx3YVXCs+02rJviZSz3SEX90cKuNCe3M/tZpvdkQ6pKaOg//amqMpZ3sYHvX+O9c 2E2wH+4Ew7/dg5qydPp9zfV4UmvM9C+OGI3br4N7EhG2kbWC1oDf/rOKEIZ0qSDk atOC4A63J7HP31Dgs5XXmg0Lak2S844i+lJNpT9OA30fj4e+3PzSW3bFflt2VQyE mrq079ep+zlHXlnuPPbUenqyK5MbZL11LcVAPh8ZhjjR92UV5NA8ODOuoLDXSg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:34:05 2025 by rpki-client