This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37382e302f32342d3234203d3e20313336373837.roa File: 3137362e3131332e37382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: ksdSHTERUPjFAY+ivMQ9eCEubfrPu9AS7yjNXJtCh8k= Subject key identifier: DB:39:C0:8F:8D:2C:A0:2D:9A:0C:5A:F5:D3:4C:01:A9:4C:0F:FC:58 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3A3FAA278E384B91B01BD52CFEBF2F7959498D0C Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:48:59 +0000 ROA not before: Fri 21 Nov 2025 15:43:59 +0000 ROA not after: Fri 20 Nov 2026 15:48:59 +0000 asID: 136787 IP address blocks: 176.113.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:3f:aa:27:8e:38:4b:91:b0:1b:d5:2c:fe:bf:2f:79:59:49:8d:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:43:59 2025 GMT Not After : Nov 20 15:48:59 2026 GMT Subject: CN=DB39C08F8D2CA02D9A0C5AF5D34C01A94C0FFC58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:02:d4:5f:14:ee:b3:0d:a9:d6:7b:d5:ff:d6: 3f:67:1c:38:fb:ce:ff:12:33:ed:91:63:8a:75:28: 72:a6:16:54:69:0a:b1:45:de:2c:f9:f1:fc:da:29: ab:87:e9:a8:ee:25:7f:b8:51:f1:f9:97:86:b3:03: 37:d4:25:a3:d8:89:33:5b:53:ad:dd:df:42:76:56: f8:e8:04:73:22:35:a5:72:c8:f7:bd:6e:7a:73:34: f1:5f:f6:f0:f3:09:54:90:01:6a:69:df:ea:38:5d: 8b:45:44:72:04:14:f5:8e:98:61:e5:22:a0:2c:f3: b6:ea:bb:11:92:81:61:b9:5c:e0:b7:d4:a3:33:98: 13:38:b0:5a:d9:3a:78:64:15:5a:98:2d:91:d8:43: 5e:f0:16:76:a3:bb:51:06:08:ef:73:b5:b7:2b:2a: 56:e3:a2:84:55:11:cc:00:2a:9d:10:d9:12:12:76: b0:2d:91:cc:5f:93:6b:80:07:a1:58:92:bd:e3:e5: e5:c4:38:2d:78:5e:59:05:b1:a0:54:1c:c6:85:75: bc:5b:bb:75:f2:87:db:f6:a5:7a:80:cd:aa:b7:ac: 24:af:d4:a6:d5:4f:72:94:61:e1:15:63:b7:0b:ee: fe:37:11:f5:c1:26:11:9e:c8:ae:58:09:bf:bb:b0: 5c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:39:C0:8F:8D:2C:A0:2D:9A:0C:5A:F5:D3:4C:01:A9:4C:0F:FC:58 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.113.78.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:4f:54:a9:24:36:71:f1:2d:a1:d5:a9:a3:60:65:06:cc:9d: 4d:2c:25:4d:2e:2a:c1:66:c1:ee:c4:c1:77:fa:20:d8:21:df: a3:ad:48:d9:b5:3d:0e:f8:d6:bc:6b:cb:3f:1e:1a:d0:e3:da: 8f:bf:5d:ba:a0:be:b4:2c:d2:b9:23:69:59:62:4b:fa:5a:66: 78:cd:bf:c5:62:3b:ab:2d:e2:a2:75:eb:f6:89:e4:3b:85:6f: 9d:95:65:58:bf:d1:2c:65:e5:fd:6e:f1:aa:1a:b2:88:ef:ec: eb:54:d0:b5:e4:58:d3:67:6f:45:15:bf:f0:ad:32:9e:61:bf: ef:0e:5a:a8:c7:33:c8:68:d2:de:3f:7d:d0:21:ce:bd:46:1c: 92:da:22:db:a4:5c:b7:5d:84:5f:c6:bd:ec:8e:bf:95:aa:2f: d3:b1:b2:27:6a:2f:b5:0b:8b:e9:91:47:ee:1c:f5:dd:92:9d: 39:cc:31:d7:3f:4d:b0:6c:91:9c:e4:91:54:0d:32:6d:7f:69: 3a:45:e2:bc:9e:2b:a3:fa:af:02:c2:d0:f6:52:d2:63:10:a7: 4b:2d:49:ca:ef:55:b5:24:ba:10:94:ac:94:65:29:1b:7f:c5: e6:5d:47:c9:48:c7:cd:38:5b:bf:63:61:dc:0e:12:a0:15:26: 58:33:01:75 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUOj+qJ444S5GwG9Us/r8veVlJjQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQzNTlaFw0yNjExMjAxNTQ4NTlaMDMxMTAvBgNV BAMTKERCMzlDMDhGOEQyQ0EwMkQ5QTBDNUFGNUQzNEMwMUE5NEMwRkZDNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzAtRfFO6zDanWe9X/1j9nHDj7 zv8SM+2RY4p1KHKmFlRpCrFF3iz58fzaKauH6ajuJX+4UfH5l4azAzfUJaPYiTNb U63d30J2VvjoBHMiNaVyyPe9bnpzNPFf9vDzCVSQAWpp3+o4XYtFRHIEFPWOmGHl IqAs87bquxGSgWG5XOC31KMzmBM4sFrZOnhkFVqYLZHYQ17wFnaju1EGCO9ztbcr KlbjooRVEcwAKp0Q2RISdrAtkcxfk2uAB6FYkr3j5eXEOC14XlkFsaBUHMaFdbxb u3Xyh9v2pXqAzaq3rCSv1KbVT3KUYeEVY7cL7v43EfXBJhGeyK5YCb+7sFz5AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU2znAj40soC2aDFr100wBqUwP/FgwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM3MzYyZTMxMzEz MzJlMzczODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALBxTjANBgkqhkiG9w0BAQsFAAOCAQEAa09UqSQ2cfEtodWpo2BlBsyd TSwlTS4qwWbB7sTBd/og2CHfo61I2bU9DvjWvGvLPx4a0OPaj79duqC+tCzSuSNp WWJL+lpmeM2/xWI7qy3ionXr9onkO4VvnZVlWL/RLGXl/W7xqhqyiO/s61TQteRY 02dvRRW/8K0ynmG/7w5aqMczyGjS3j990CHOvUYcktoi26Rct12EX8a97I6/laov 07GyJ2ovtQuL6ZFH7hz13ZKdOcwx1z9NsGyRnOSRVA0ybX9pOkXivJ4ro/qvAsLQ 9lLSYxCnSy1Jyu9VtSS6EJSslGUpG3/F5l1HyUjHzThbv2Nh3A4SoBUmWDMBdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:47:27 2025 by rpki-client