This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3232372e3234322e302f32342d3234203d3e20313336373837.roa File: 3137362e3232372e3234322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 2ZiKxZDFRfnGkmWbLnJpwtPlmSqSQFmIcHp1uSv4eas= Subject key identifier: AE:88:7F:69:79:D6:C9:D4:B3:1C:1C:46:0F:15:39:5B:11:80:35:74 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7A198D53F92905D9C816AD0C6DCCFB07E5F50DA8 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3232372e3234322e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:29 +0000 ROA not before: Fri 28 Nov 2025 11:44:29 +0000 ROA not after: Fri 27 Nov 2026 11:49:29 +0000 asID: 136787 IP address blocks: 176.227.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:19:8d:53:f9:29:05:d9:c8:16:ad:0c:6d:cc:fb:07:e5:f5:0d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:29 2025 GMT Not After : Nov 27 11:49:29 2026 GMT Subject: CN=AE887F6979D6C9D4B31C1C460F15395B11803574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c4:11:e4:26:c1:4d:75:2c:66:07:0e:13:8a: 4a:3b:ce:17:1f:4c:6e:e6:e9:61:b4:b0:74:11:f4: bd:7c:cb:5c:e4:9a:61:0e:3c:2a:5b:ba:a0:f8:7e: 73:5e:04:4d:ac:5c:17:e8:92:e2:5e:59:ec:6b:43: 9a:ac:32:82:da:e7:fe:2a:23:52:4c:f2:1b:5b:ba: dd:ba:d1:b4:ec:e5:51:33:22:09:ac:8b:8a:6e:6a: a2:af:7b:94:c9:ba:ee:d7:b2:ca:02:03:21:6f:1a: 40:b2:37:84:46:5d:56:9f:18:15:a7:34:63:ea:84: 67:b2:23:55:34:fd:4e:77:43:a2:e7:d3:90:76:b1: 17:82:83:5c:46:ae:85:be:36:bc:8f:15:90:a4:f0: b7:59:50:f4:45:1e:a2:f9:40:7b:9d:05:71:4c:72: 4b:1a:f1:e8:1b:37:b4:38:69:d7:99:08:22:8d:3a: f0:82:fc:84:e0:ac:e2:a6:7e:3a:04:96:b2:2f:e8: 9b:dc:ad:d0:9b:b6:96:56:48:af:c6:d4:9b:5a:7d: 83:2b:b6:1d:5c:c1:2f:3b:f5:38:45:0c:b2:e8:74: 6e:dc:7a:2b:89:22:c5:22:7f:ba:df:b4:af:dd:29: 1a:ed:de:62:67:06:95:db:23:1c:ee:4d:65:b6:00: 44:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:88:7F:69:79:D6:C9:D4:B3:1C:1C:46:0F:15:39:5B:11:80:35:74 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3232372e3234322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.227.242.0/24 Signature Algorithm: sha256WithRSAEncryption da:82:b9:b4:56:7b:77:67:27:82:85:fb:0b:94:89:97:95:15: 7e:2b:e9:52:6c:f9:a0:f5:f4:5d:e9:f8:f7:8b:f8:52:e9:92: 14:c5:1b:47:68:0a:68:bf:f0:99:47:4e:a7:b3:8d:a2:ec:fd: 66:a4:de:5f:59:63:56:2d:07:ac:e0:46:97:5a:e5:0c:02:4f: 12:5a:47:bc:62:49:6d:44:af:25:1b:db:f7:ec:4c:18:7a:be: a9:87:a1:1b:dc:f3:84:08:47:5d:df:8f:8a:3b:78:4c:2d:03: a7:e2:e4:e9:96:a8:da:dd:dd:ff:e1:77:41:5f:af:9f:6c:27: 1e:66:35:3a:ce:4d:f8:65:f9:d9:d1:dc:83:f4:66:ef:4e:ff: ef:a7:5e:9f:a8:be:a1:86:4e:6a:0f:08:5a:da:61:58:be:ee: 13:64:09:fa:34:54:46:72:4d:c2:e7:c8:64:2f:b8:cd:a5:cc: dc:8d:5f:d4:3e:64:b6:23:f5:43:16:46:b8:1a:08:6c:4f:27: dd:17:a0:a3:ea:be:1e:ba:79:bc:62:e3:e7:c2:f0:74:b4:53: d5:15:d3:7a:74:59:7d:9f:0d:ee:a2:f9:a1:92:57:71:e5:4b: 93:d1:d8:98:43:ca:17:13:66:8a:8e:80:49:e6:c8:76:cc:a4: 1a:e6:84:7a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUehmNU/kpBdnIFq0Mbcz7B+X1DagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjlaFw0yNjExMjcxMTQ5MjlaMDMxMTAvBgNV BAMTKEFFODg3RjY5NzlENkM5RDRCMzFDMUM0NjBGMTUzOTVCMTE4MDM1NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXxBHkJsFNdSxmBw4Tiko7zhcf TG7m6WG0sHQR9L18y1zkmmEOPCpbuqD4fnNeBE2sXBfokuJeWexrQ5qsMoLa5/4q I1JM8htbut260bTs5VEzIgmsi4puaqKve5TJuu7XssoCAyFvGkCyN4RGXVafGBWn NGPqhGeyI1U0/U53Q6Ln05B2sReCg1xGroW+NryPFZCk8LdZUPRFHqL5QHudBXFM cksa8egbN7Q4adeZCCKNOvCC/ITgrOKmfjoElrIv6JvcrdCbtpZWSK/G1JtafYMr th1cwS879ThFDLLodG7ceiuJIsUif7rftK/dKRrt3mJnBpXbIxzuTWW2AEQ5AgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUroh/aXnWydSzHBxGDxU5WxGANXQwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM3MzYyZTMyMzIz NzJlMzIzNDMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAsOPyMA0GCSqGSIb3DQEBCwUAA4IBAQDagrm0Vnt3ZyeChfsLlImX lRV+K+lSbPmg9fRd6fj3i/hS6ZIUxRtHaApov/CZR06ns42i7P1mpN5fWWNWLQes 4EaXWuUMAk8SWke8YkltRK8lG9v37EwYer6ph6Eb3POECEdd34+KO3hMLQOn4uTp lqja3d3/4XdBX6+fbCceZjU6zk34ZfnZ0dyD9GbvTv/vp16fqL6hhk5qDwha2mFY vu4TZAn6NFRGck3C58hkL7jNpczcjV/UPmS2I/VDFka4GghsTyfdF6Cj6r4eunm8 YuPnwvB0tFPVFdN6dFl9nw3uovmhkldx5UuT0diYQ8oXE2aKjoBJ5sh2zKQa5oR6 -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:27 2025 by rpki-client