This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37362e302f32342d3234203d3e20313336373837.roa File: 3137362e3131332e37362e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: aeMm30qMth06xHHxJOlJ7THshpfd+Gbl8SDZdAbbdFI= Subject key identifier: 21:C2:BD:BB:32:83:AA:27:A8:82:C2:5D:27:57:C8:6D:9E:25:75:D4 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0C968195BAD45605D380B518FA3AD88D75CC82B0 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37362e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:48:57 +0000 ROA not before: Fri 21 Nov 2025 15:43:57 +0000 ROA not after: Fri 20 Nov 2026 15:48:57 +0000 asID: 136787 IP address blocks: 176.113.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:96:81:95:ba:d4:56:05:d3:80:b5:18:fa:3a:d8:8d:75:cc:82:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:43:57 2025 GMT Not After : Nov 20 15:48:57 2026 GMT Subject: CN=21C2BDBB3283AA27A882C25D2757C86D9E2575D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d9:75:4c:2b:61:e8:46:93:46:6e:3b:b1:0b: a8:92:5f:62:f0:21:27:fd:6c:7b:f4:7c:38:c4:d1: 23:b6:ad:38:bb:a2:fd:11:86:7d:12:d9:27:4a:c0: fc:8d:a1:c5:3c:14:84:3b:0a:bc:0b:2b:24:36:3e: 91:bb:00:27:87:95:e2:47:8a:30:41:37:9f:ff:91: 3b:33:1d:b6:ac:5d:1e:d4:e6:b4:81:cc:e6:48:f0: 38:6c:34:48:35:11:7d:b4:8f:af:43:cd:89:a5:3a: 74:14:46:eb:44:42:4c:6b:59:c2:9b:23:ec:9c:67: 92:56:12:fa:ce:aa:28:54:64:0f:8d:77:ca:ce:6b: 04:d4:a9:a5:f1:76:78:e5:6a:ec:af:c7:81:b5:7a: 27:1f:04:9f:80:cd:18:be:85:88:9e:da:2b:42:2c: cc:5d:57:99:3a:e4:2e:65:d1:e8:9d:6e:9d:0a:dc: fd:a0:b4:03:ef:17:c4:06:0c:85:b9:19:51:50:2e: b2:f4:d4:92:8a:8c:35:7e:e5:14:fc:2c:ec:b2:c3: fb:9c:c1:45:b5:ab:94:8b:7c:87:39:5e:90:a7:f5: 42:f3:8d:5e:62:40:ff:fb:c3:7f:48:c6:ea:cf:f0: 42:4c:3c:13:b3:c1:b6:e2:bc:47:7d:0b:9a:bd:6c: 2c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C2:BD:BB:32:83:AA:27:A8:82:C2:5D:27:57:C8:6D:9E:25:75:D4 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37362e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.113.76.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:85:8e:e1:d5:04:b4:4a:33:c6:be:ba:73:ad:07:15:b2:68: 09:aa:43:95:96:f5:d7:06:d9:6e:40:89:20:68:1d:d2:f4:72: 85:81:8b:9b:1d:ee:34:82:ed:73:ba:b9:2e:da:ca:34:20:06: 91:a4:60:9b:cc:79:45:53:1b:f4:5d:eb:64:8b:5c:4c:f6:1b: 82:a4:40:5f:25:e3:a1:93:43:89:15:3a:bc:87:c5:06:b9:f9: 5c:dd:92:66:4d:e0:9e:5b:57:7a:14:6b:48:28:df:36:08:c7: bb:b3:a1:25:64:36:9e:01:84:7f:d7:80:96:fa:58:41:70:60: 4a:5c:83:8d:0e:4b:e8:f4:c0:14:42:e7:18:64:05:79:df:11: 15:d0:e7:93:a2:54:fb:b6:05:31:1d:3e:96:85:31:aa:88:49: a0:8e:a2:b8:53:7a:b2:38:68:3c:4f:7d:71:50:ef:1e:16:98: ef:af:0b:a3:bb:ed:6b:85:ea:b1:f1:2d:88:f0:a7:ba:66:20: ad:b8:70:26:87:13:d2:37:cc:37:02:e7:fc:53:5c:7d:6a:fe: de:ea:21:9a:0c:d5:e1:10:eb:fe:84:d2:95:84:07:05:fa:8a: 65:65:72:30:25:a7:32:c5:cc:4c:ac:db:7c:ed:ed:8a:d7:e4: 8d:87:2f:79 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUDJaBlbrUVgXTgLUY+jrYjXXMgrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQzNTdaFw0yNjExMjAxNTQ4NTdaMDMxMTAvBgNV BAMTKDIxQzJCREJCMzI4M0FBMjdBODgyQzI1RDI3NTdDODZEOUUyNTc1RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52XVMK2HoRpNGbjuxC6iSX2Lw ISf9bHv0fDjE0SO2rTi7ov0Rhn0S2SdKwPyNocU8FIQ7CrwLKyQ2PpG7ACeHleJH ijBBN5//kTszHbasXR7U5rSBzOZI8DhsNEg1EX20j69DzYmlOnQURutEQkxrWcKb I+ycZ5JWEvrOqihUZA+Nd8rOawTUqaXxdnjlauyvx4G1eicfBJ+AzRi+hYie2itC LMxdV5k65C5l0eidbp0K3P2gtAPvF8QGDIW5GVFQLrL01JKKjDV+5RT8LOyyw/uc wUW1q5SLfIc5XpCn9ULzjV5iQP/7w39IxurP8EJMPBOzwbbivEd9C5q9bCzvAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUIcK9uzKDqieogsJdJ1fIbZ4lddQwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM3MzYyZTMxMzEz MzJlMzczNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALBxTDANBgkqhkiG9w0BAQsFAAOCAQEAf4WO4dUEtEozxr66c60HFbJo CapDlZb11wbZbkCJIGgd0vRyhYGLmx3uNILtc7q5LtrKNCAGkaRgm8x5RVMb9F3r ZItcTPYbgqRAXyXjoZNDiRU6vIfFBrn5XN2SZk3gnltXehRrSCjfNgjHu7OhJWQ2 ngGEf9eAlvpYQXBgSlyDjQ5L6PTAFELnGGQFed8RFdDnk6JU+7YFMR0+loUxqohJ oI6iuFN6sjhoPE99cVDvHhaY768Lo7vta4XqsfEtiPCnumYgrbhwJocT0jfMNwLn /FNcfWr+3uohmgzV4RDr/oTSlYQHBfqKZWVyMCWnMsXMTKzbfO3titfkjYcveQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:49:20 2025 by rpki-client