This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37392e302f32342d3234203d3e20313336373837.roa File: 3137362e3131332e37392e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: iVziPXuH0UUdw1Hs4HTgcYU6sAxWVDIzqJHM4As0Weo= Subject key identifier: 29:93:05:D2:63:81:94:44:CD:F7:BF:AA:2B:32:CC:77:71:6F:1C:61 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 231473F633A0A71BE894A863FB683F6A5A87B8D0 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37392e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:00 +0000 ROA not before: Fri 21 Nov 2025 15:44:00 +0000 ROA not after: Fri 20 Nov 2026 15:49:00 +0000 asID: 136787 IP address blocks: 176.113.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:14:73:f6:33:a0:a7:1b:e8:94:a8:63:fb:68:3f:6a:5a:87:b8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:00 2025 GMT Not After : Nov 20 15:49:00 2026 GMT Subject: CN=299305D263819444CDF7BFAA2B32CC77716F1C61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d2:c1:94:58:d9:bf:e7:ce:fb:30:ab:f0:29: e8:c6:b2:0a:69:c8:13:8d:85:66:e4:d0:65:89:ca: 55:16:93:45:c6:84:3e:98:f4:4a:15:21:ae:dd:c5: a0:b8:4c:56:d9:3c:2f:9b:30:5b:5c:72:27:5d:f2: 89:45:2e:02:2e:75:b9:40:b7:b3:0c:32:43:4b:e5: 9d:eb:15:80:c2:bb:72:5c:02:22:79:25:af:9c:e5: f6:2d:df:57:47:bd:e0:c1:d2:bc:e4:7c:e9:f7:73: 2a:b0:e3:c2:f2:52:61:ab:62:30:c7:39:3f:ad:10: d3:46:58:69:fd:a6:89:a9:17:dd:16:ab:39:7e:07: 90:55:dd:44:88:ad:ef:b7:b0:b3:50:ab:46:42:98: 17:0b:b2:78:7c:f1:8c:56:f0:40:93:13:f2:2a:e6: 4d:41:00:59:a7:3c:91:6d:67:3f:65:f2:3b:64:87: b9:9a:dd:42:4a:27:8a:84:60:8d:e5:cc:a8:fc:44: 23:0b:21:0f:80:8c:2b:8b:0d:ba:55:5c:53:4e:30: 17:3c:12:2d:f9:3b:7d:9c:46:95:d5:98:95:a6:f9: 0e:94:ac:b2:02:44:51:25:c1:7f:fd:dc:3f:dc:16: a2:cd:df:12:b0:73:93:f0:47:c9:1a:6f:76:87:8a: 09:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:93:05:D2:63:81:94:44:CD:F7:BF:AA:2B:32:CC:77:71:6F:1C:61 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37392e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.113.79.0/24 Signature Algorithm: sha256WithRSAEncryption b9:ca:9c:24:c8:26:fa:aa:4d:48:c2:ce:43:1b:10:ff:45:15: 57:bf:d0:cf:7d:f8:8a:61:5f:05:29:4d:7d:4d:f9:3e:f4:0b: 66:44:35:1e:be:01:34:9b:74:a8:3d:fb:d1:58:78:9e:33:b7: 58:16:54:43:73:2b:aa:fa:d8:57:3a:83:46:e7:a8:56:d9:44: 5b:0e:a8:29:2d:4e:1c:11:74:8e:57:1b:1c:cb:f9:37:a8:ac: 87:9c:68:97:b9:cb:1e:8d:7e:2d:80:16:95:d7:ca:a7:d6:00: a3:9d:0c:58:14:a8:c9:32:f9:b8:2f:ff:cc:39:a4:f3:e6:59: ab:a7:70:f3:7f:49:9e:3d:f5:8f:a9:0b:12:10:62:df:73:3b: 48:0b:c5:6f:5d:27:68:53:18:be:b4:0a:c5:f9:2d:3e:b3:e9: 92:b0:1a:d2:fc:02:86:11:72:05:5b:db:4b:d9:a3:cc:dc:7b: 90:d2:a6:7b:88:af:c9:28:39:99:11:93:8c:46:20:49:33:df: 30:e4:66:cb:5c:f8:d2:df:97:96:b5:c1:b0:43:4b:6d:e0:b1: 8b:b9:2f:f0:9d:89:97:d0:e0:6a:05:ae:3a:3a:1c:a2:79:04: 38:9c:26:3d:5b:cc:45:6a:c2:a9:c7:65:7a:d1:6c:be:b0:7e: 83:86:36:08 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUIxRz9jOgpxvolKhj+2g/alqHuNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDBaFw0yNjExMjAxNTQ5MDBaMDMxMTAvBgNV BAMTKDI5OTMwNUQyNjM4MTk0NDRDREY3QkZBQTJCMzJDQzc3NzE2RjFDNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK0sGUWNm/5877MKvwKejGsgpp yBONhWbk0GWJylUWk0XGhD6Y9EoVIa7dxaC4TFbZPC+bMFtccidd8olFLgIudblA t7MMMkNL5Z3rFYDCu3JcAiJ5Ja+c5fYt31dHveDB0rzkfOn3cyqw48LyUmGrYjDH OT+tENNGWGn9pompF90Wqzl+B5BV3USIre+3sLNQq0ZCmBcLsnh88YxW8ECTE/Iq 5k1BAFmnPJFtZz9l8jtkh7ma3UJKJ4qEYI3lzKj8RCMLIQ+AjCuLDbpVXFNOMBc8 Ei35O32cRpXVmJWm+Q6UrLICRFElwX/93D/cFqLN3xKwc5PwR8kab3aHigl7AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUKZMF0mOBlETN97+qKzLMd3FvHGEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM3MzYyZTMxMzEz MzJlMzczOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALBxTzANBgkqhkiG9w0BAQsFAAOCAQEAucqcJMgm+qpNSMLOQxsQ/0UV V7/Qz334imFfBSlNfU35PvQLZkQ1Hr4BNJt0qD370Vh4njO3WBZUQ3MrqvrYVzqD RueoVtlEWw6oKS1OHBF0jlcbHMv5N6ish5xol7nLHo1+LYAWldfKp9YAo50MWBSo yTL5uC//zDmk8+ZZq6dw839Jnj31j6kLEhBi33M7SAvFb10naFMYvrQKxfktPrPp krAa0vwChhFyBVvbS9mjzNx7kNKme4ivySg5mRGTjEYgSTPfMORmy1z40t+XlrXB sENLbeCxi7kv8J2Jl9DgagWuOjoconkEOJwmPVvMRWrCqcdletFsvrB+g4Y2CA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:47:59 2025 by rpki-client