This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136322e3234342e32342e302f32312d3332203d3e203531313637.roa File: 3136322e3234342e32342e302f32312d3332203d3e203531313637.roa (raw, json) Hash identifier: yhG07vkhiXYvZSUbPmP0LTNz7v5H4tMxzUWYt4jFmFY= Subject key identifier: CA:80:B1:80:79:13:0C:DA:0D:25:37:D3:E8:C6:DE:15:00:FD:2A:AC Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3FD8E65532310BD8B786B68A42D153E315061C6F Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136322e3234342e32342e302f32312d3332203d3e203531313637.roa Signing time: Thu 13 Nov 2025 17:48:51 +0000 ROA not before: Thu 13 Nov 2025 17:43:51 +0000 ROA not after: Thu 12 Nov 2026 17:48:51 +0000 asID: 51167 IP address blocks: 162.244.24.0/21 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d8:e6:55:32:31:0b:d8:b7:86:b6:8a:42:d1:53:e3:15:06:1c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 13 17:43:51 2025 GMT Not After : Nov 12 17:48:51 2026 GMT Subject: CN=CA80B18079130CDA0D2537D3E8C6DE1500FD2AAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9e:c8:eb:70:80:12:f6:38:fe:f8:53:b6:e2: 91:c7:9b:07:07:ae:a8:da:b8:01:41:5b:63:2a:3e: 0f:3f:5b:e3:d3:8c:14:7b:96:7c:79:8b:83:0f:b3: 34:51:45:bf:16:2a:b7:df:f2:38:72:a2:ae:db:9a: f1:a4:16:35:96:e2:94:6a:bb:22:10:5b:23:6c:88: 8a:38:14:03:ab:2e:6f:08:cc:d9:ea:6a:35:87:35: c9:8e:ab:99:03:d0:48:34:16:94:7b:5c:91:07:d9: bf:4a:86:1c:c8:2b:ea:8d:5c:e9:af:c2:66:d7:4b: 8c:82:ca:32:e6:6f:db:84:90:a7:be:32:a8:db:b4: cb:01:37:a9:43:97:5e:a2:26:cd:18:88:39:58:db: b0:22:53:62:9a:8b:0e:46:7c:4f:84:6a:10:31:cc: dd:42:53:e0:c2:47:bb:60:25:4d:79:aa:36:a4:d3: b3:4b:01:92:eb:a6:73:63:25:7b:bc:49:e9:6c:eb: 5f:d3:da:7b:36:3b:67:24:ae:49:0b:92:dd:5a:08: 9a:39:ba:e9:7f:fe:c4:39:5d:13:b1:65:ee:ef:08: d4:73:97:0e:17:1d:9a:01:bc:07:0c:a1:96:8e:5c: b3:50:7c:1e:2b:e4:f1:17:fb:c6:bd:16:ae:55:20: e7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:80:B1:80:79:13:0C:DA:0D:25:37:D3:E8:C6:DE:15:00:FD:2A:AC X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136322e3234342e32342e302f32312d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.244.24.0/21 Signature Algorithm: sha256WithRSAEncryption 80:ec:8c:ea:ff:98:9a:dc:c3:fc:18:e6:6c:7d:8d:88:36:5f: f7:dd:8d:b0:57:bc:fb:f9:23:0e:d6:7a:77:29:c8:b2:a3:7f: 7c:a3:3f:dc:9c:e7:4c:d5:51:b0:e3:54:fa:9f:73:0a:9e:b8: e6:bf:cd:03:2a:36:37:d1:29:3c:d2:fc:08:70:c7:dc:4a:5b: f9:3f:e0:4c:6f:f9:00:e6:2f:7f:ec:2f:95:fc:b8:06:3b:ce: 9a:25:c1:ff:0e:0b:25:4a:96:f5:85:e8:19:28:34:ef:ca:c9: 27:59:59:f4:02:f4:28:23:a5:c7:27:dd:77:ec:06:46:af:ea: a3:ab:18:e8:76:be:f6:39:b5:8c:f9:92:bb:33:a1:c5:73:02: 69:59:7f:8e:06:f1:3d:5a:77:47:d5:d6:85:3a:d0:48:80:a5: f2:df:1b:37:9c:98:07:4d:a9:6d:26:9d:68:f3:76:b0:7f:d8: 2c:44:23:ff:66:03:60:59:c9:a4:fd:71:04:90:c7:52:71:ae: 23:9b:1c:0d:60:f4:c2:79:5d:8e:2b:8b:a4:62:f6:e9:27:fd: 63:1b:16:ba:57:0d:28:db:a1:b1:c5:1e:d8:5f:6c:05:36:b0: 8a:66:05:7d:91:a8:ff:70:44:08:fa:00:e4:b9:5c:0b:6f:2e: e1:46:d4:82 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUP9jmVTIxC9i3hraKQtFT4xUGHG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMTMxNzQzNTFaFw0yNjExMTIxNzQ4NTFaMDMxMTAvBgNV BAMTKENBODBCMTgwNzkxMzBDREEwRDI1MzdEM0U4QzZERTE1MDBGRDJBQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdnsjrcIAS9jj++FO24pHHmwcH rqjauAFBW2MqPg8/W+PTjBR7lnx5i4MPszRRRb8WKrff8jhyoq7bmvGkFjWW4pRq uyIQWyNsiIo4FAOrLm8IzNnqajWHNcmOq5kD0Eg0FpR7XJEH2b9KhhzIK+qNXOmv wmbXS4yCyjLmb9uEkKe+MqjbtMsBN6lDl16iJs0YiDlY27AiU2Kaiw5GfE+EahAx zN1CU+DCR7tgJU15qjak07NLAZLrpnNjJXu8Sels61/T2ns2O2ckrkkLkt1aCJo5 uul//sQ5XROxZe7vCNRzlw4XHZoBvAcMoZaOXLNQfB4r5PEX+8a9Fq5VIOfjAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUyoCxgHkTDNoNJTfT6MbeFQD9KqwwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM2MzIyZTMyMzQz NDJlMzIzNDJlMzAyZjMyMzEyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOi9BgwDQYJKoZIhvcNAQELBQADggEBAIDsjOr/mJrcw/wY5mx9jYg2X/fd jbBXvPv5Iw7WencpyLKjf3yjP9yc50zVUbDjVPqfcwqeuOa/zQMqNjfRKTzS/Ahw x9xKW/k/4Exv+QDmL3/sL5X8uAY7zpolwf8OCyVKlvWF6BkoNO/KySdZWfQC9Cgj pccn3XfsBkav6qOrGOh2vvY5tYz5krszocVzAmlZf44G8T1ad0fV1oU60EiApfLf GzecmAdNqW0mnWjzdrB/2CxEI/9mA2BZyaT9cQSQx1JxriObHA1g9MJ5XY4ri6Ri 9ukn/WMbFrpXDSjbobHFHthfbAU2sIpmBX2RqP9wRAj6AOS5XAtvLuFG1II= -----END CERTIFICATE-----Generated at Sat Dec 6 12:50:54 2025 by rpki-client