This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e39372e3230362e302f32342d3234203d3e20313336373837.roa
File: 3137362e39372e3230362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 4ji8CTV9CKStdY44wqypUT8W3zeDlAWjl070s9qCAK0=
Subject key identifier: E0:D8:78:6D:CF:1A:EA:48:70:EF:B5:47:03:D3:5F:0B:52:A7:1B:01
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 49659DED38C84B22E1FDA38E72349F9EC691809A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e39372e3230362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 28 Nov 2025 11:49:30 +0000
ROA not before: Fri 28 Nov 2025 11:44:30 +0000
ROA not after: Fri 27 Nov 2026 11:49:30 +0000
asID: 136787
IP address blocks: 176.97.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:65:9d:ed:38:c8:4b:22:e1:fd:a3:8e:72:34:9f:9e:c6:91:80:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 28 11:44:30 2025 GMT
Not After : Nov 27 11:49:30 2026 GMT
Subject: CN=E0D8786DCF1AEA4870EFB54703D35F0B52A71B01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:0c:fd:47:d1:f5:eb:7a:34:0e:07:6a:9a:
3c:ad:86:b5:a4:3b:23:a6:38:5e:8c:08:e6:74:54:
69:9d:ca:5c:96:0f:9c:4c:95:bb:3c:54:7b:5e:bc:
27:08:7e:36:de:72:05:2e:f8:ee:e9:6e:ce:9d:34:
5c:e5:35:07:2e:af:19:a9:a6:93:0c:b8:2d:2f:a5:
29:8f:db:5d:9b:fa:54:db:f0:24:b9:a8:48:ca:5a:
f7:78:9c:f1:75:50:66:50:66:76:74:90:3d:34:0e:
bb:bd:c4:2e:58:24:96:fd:23:c2:03:c3:34:5b:e0:
ed:e2:f8:0a:a2:0a:0d:c2:71:b0:96:42:b2:6b:d6:
5b:2f:63:81:88:35:11:0e:f7:22:94:a5:35:6b:1c:
dc:5d:dd:6e:82:d6:87:d3:96:7b:1a:8c:0b:f2:a8:
3a:fe:29:07:39:c2:2c:5d:0f:d2:38:3a:e3:80:3e:
98:ca:3c:3f:47:d1:b3:b9:09:fa:25:87:ba:d4:a0:
9b:b0:9c:ed:bd:30:9a:77:a1:01:64:30:4b:04:51:
f8:08:3d:cc:99:44:c6:37:c8:c4:6b:71:aa:cf:87:
37:72:cc:8a:cd:49:dd:6a:b2:c3:96:64:b9:c5:31:
0e:d8:bc:0f:8a:70:9f:a9:32:92:e6:4f:12:9c:4e:
c7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D8:78:6D:CF:1A:EA:48:70:EF:B5:47:03:D3:5F:0B:52:A7:1B:01
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e39372e3230362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.206.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:0e:a4:20:57:de:27:6b:57:28:f6:7e:19:b0:73:82:3d:d0:
eb:ad:87:d1:c3:2d:23:f2:6c:60:34:5e:33:15:a7:b9:ad:b9:
fc:28:4d:78:e9:fa:30:44:c9:24:26:8c:1f:c2:18:bc:17:86:
00:4c:ba:3d:c7:5f:37:21:41:08:2a:23:99:ff:95:30:90:2d:
bd:a2:23:a9:ae:ee:fd:de:16:d9:9e:80:c6:9e:01:5f:a0:3d:
77:0a:48:4b:91:bd:03:09:6e:c4:67:7e:ca:1a:ae:75:03:ba:
e3:d0:4a:f1:de:c5:5c:9f:28:e3:e5:65:71:ed:13:f9:ed:94:
03:10:c7:f9:c1:26:ae:e0:01:ff:c7:08:18:db:c7:92:aa:fb:
9d:29:bf:ad:23:7c:10:a0:56:a4:8f:7f:40:bd:c0:4a:7b:ef:
ea:22:72:56:e0:95:73:bd:37:7e:7c:fb:bd:c1:93:0c:c9:e4:
7f:c0:fc:ae:c1:d5:48:c0:a7:52:4a:9d:d7:ce:ac:83:b9:57:
8c:e2:d1:ad:fa:3b:a7:bb:91:67:e1:18:51:01:6c:12:eb:9f:
7a:dc:c3:e4:4c:ad:21:76:de:3a:d0:38:22:b6:4f:80:19:a9:
d0:81:33:b0:b1:e6:05:52:54:41:bf:ee:d1:62:45:0b:75:3c:
56:4a:37:34
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:33:09 2025 by rpki-client