This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37362e302f32322d3232203d3e20313336373837.roa File: 3137362e3131332e37362e302f32322d3232203d3e20313336373837.roa (raw, json) Hash identifier: KD7p0SZsQnVbXUIXdm8ds0PZ5ug9GoEZ8u1qIz+Dt2k= Subject key identifier: 01:C5:B3:40:97:0C:27:17:28:D6:AF:FC:F0:DA:3A:B0:08:B5:53:58 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 217B34933B210065B178D58E54A8F2CEE02DAF45 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37362e302f32322d3232203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:08 +0000 ROA not before: Fri 21 Nov 2025 15:44:08 +0000 ROA not after: Fri 20 Nov 2026 15:49:08 +0000 asID: 136787 IP address blocks: 176.113.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:7b:34:93:3b:21:00:65:b1:78:d5:8e:54:a8:f2:ce:e0:2d:af:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:08 2025 GMT Not After : Nov 20 15:49:08 2026 GMT Subject: CN=01C5B340970C271728D6AFFCF0DA3AB008B55358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ce:d4:6f:86:34:d3:b1:ed:e5:3c:e8:dd:ba: ad:0d:09:e3:c7:42:71:81:d6:8a:4d:5f:62:3a:59: 02:d8:d3:2e:c4:a2:5b:37:c5:61:fa:cd:74:4f:1b: 6e:73:25:7a:10:c7:26:32:0f:10:a5:82:77:04:48: 30:8d:ca:71:10:2e:d4:43:15:b5:15:13:2a:e8:7b: 1e:c6:90:06:63:53:d6:97:2c:e9:b2:6a:08:c3:c1: 0c:fb:cd:3e:cd:60:de:45:6b:80:33:e8:6c:98:bc: 5e:c8:66:13:3c:ca:d8:58:2c:aa:8e:56:dd:2b:a0: f0:81:c7:82:36:3b:a3:7f:0f:d5:c6:1a:59:56:73: 3e:ad:5a:8f:2a:a2:fb:dc:38:64:96:98:8e:c0:58: 2f:d3:2d:5f:67:32:90:8a:2e:29:14:e5:8c:4b:80: 87:d5:25:35:dc:66:9d:e5:bd:00:c9:64:0f:0b:4f: 10:1a:96:36:46:7c:30:bd:36:78:01:16:55:40:5c: 89:e4:e7:bd:32:b3:f7:a3:ff:97:26:04:01:71:4e: 20:e6:d2:f3:54:5a:4b:cc:01:c7:53:9f:13:84:6b: c3:8e:7f:4a:63:91:2a:26:90:6a:6f:02:16:0c:04: 3e:81:dc:c3:c1:33:ca:11:01:a3:65:3e:d0:26:18: 55:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C5:B3:40:97:0C:27:17:28:D6:AF:FC:F0:DA:3A:B0:08:B5:53:58 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37362e302f32322d3232203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.113.76.0/22 Signature Algorithm: sha256WithRSAEncryption 61:84:f6:9b:4b:8a:cd:39:95:5a:92:86:de:2e:33:34:7d:df: 86:2a:a9:b8:cd:5a:52:4b:41:dc:48:56:4c:08:83:f7:2c:86: 73:c7:ec:05:00:dd:c9:d3:4f:af:35:94:88:bd:aa:8f:d6:00: 6b:be:aa:86:ed:8d:06:69:e8:f0:32:ad:cd:93:0c:15:c5:13: 8b:16:1d:03:ec:c4:fe:0e:56:99:15:f0:e0:2e:48:76:35:c9: b9:92:62:20:7f:18:76:6f:f1:ab:ec:64:69:fe:b5:8e:27:25: 1c:e6:be:a7:25:26:b8:35:95:80:a9:60:e3:63:18:28:ab:22: 7e:cd:78:e3:ad:55:30:b3:95:8f:27:c7:fe:d2:80:f6:8a:68: 4f:43:78:19:3b:bb:3c:00:12:b8:17:33:4b:c2:a0:de:fa:29: 71:49:21:84:e4:e2:6c:c1:e4:b8:70:e5:aa:b7:52:ab:18:a8: 0c:03:12:ac:6e:4c:29:b7:d3:97:e8:1e:3a:c9:de:39:20:f1: 18:27:a7:7e:98:24:64:3a:07:eb:c4:c4:67:93:63:f9:20:03: d9:08:e7:3f:bc:ba:c1:79:da:fd:0d:a9:8f:5e:5c:9d:0a:97: 57:a4:7c:b4:9d:2c:4e:81:33:4a:79:86:9e:12:90:3b:ca:c8: 45:e0:4b:40 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUIXs0kzshAGWxeNWOVKjyzuAtr0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDhaFw0yNjExMjAxNTQ5MDhaMDMxMTAvBgNV BAMTKDAxQzVCMzQwOTcwQzI3MTcyOEQ2QUZGQ0YwREEzQUIwMDhCNTUzNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHztRvhjTTse3lPOjduq0NCePH QnGB1opNX2I6WQLY0y7Eols3xWH6zXRPG25zJXoQxyYyDxClgncESDCNynEQLtRD FbUVEyroex7GkAZjU9aXLOmyagjDwQz7zT7NYN5Fa4Az6GyYvF7IZhM8ythYLKqO Vt0roPCBx4I2O6N/D9XGGllWcz6tWo8qovvcOGSWmI7AWC/TLV9nMpCKLikU5YxL gIfVJTXcZp3lvQDJZA8LTxAaljZGfDC9NngBFlVAXInk570ys/ej/5cmBAFxTiDm 0vNUWkvMAcdTnxOEa8OOf0pjkSomkGpvAhYMBD6B3MPBM8oRAaNlPtAmGFWbAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUAcWzQJcMJxco1q/88No6sAi1U1gwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM3MzYyZTMxMzEz MzJlMzczNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEArBxTDANBgkqhkiG9w0BAQsFAAOCAQEAYYT2m0uKzTmVWpKG3i4zNH3f hiqpuM1aUktB3EhWTAiD9yyGc8fsBQDdydNPrzWUiL2qj9YAa76qhu2NBmno8DKt zZMMFcUTixYdA+zE/g5WmRXw4C5IdjXJuZJiIH8Ydm/xq+xkaf61jiclHOa+pyUm uDWVgKlg42MYKKsifs14461VMLOVjyfH/tKA9opoT0N4GTu7PAASuBczS8Kg3vop cUkhhOTibMHkuHDlqrdSqxioDAMSrG5MKbfTl+geOsneOSDxGCenfpgkZDoH68TE Z5Nj+SAD2QjnP7y6wXna/Q2pj15cnQqXV6R8tJ0sToEzSnmGnhKQO8rIReBLQA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:34:13 2025 by rpki-client