This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33322e302f32342d3234203d3e203632323430.roa File: 3137382e3231322e33322e302f32342d3234203d3e203632323430.roa (raw, json) Hash identifier: aShGTD7a8SIy3qpDqMfPFJWg47JS9P+thMYIfpJr24g= Subject key identifier: D5:0A:26:AE:A0:CD:A2:4A:78:38:C0:01:52:19:36:63:4C:F3:0D:02 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 20E3D3C0E90A17FC10B13EE989FA30F079DB3004 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33322e302f32342d3234203d3e203632323430.roa Signing time: Fri 21 Nov 2025 15:49:05 +0000 ROA not before: Fri 21 Nov 2025 15:44:05 +0000 ROA not after: Fri 20 Nov 2026 15:49:05 +0000 asID: 62240 IP address blocks: 178.212.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e3:d3:c0:e9:0a:17:fc:10:b1:3e:e9:89:fa:30:f0:79:db:30:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:05 2025 GMT Not After : Nov 20 15:49:05 2026 GMT Subject: CN=D50A26AEA0CDA24A7838C001521936634CF30D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b0:80:fe:41:d3:05:45:12:b7:e0:11:e8:15: 08:a7:70:ce:ef:b6:07:ed:4a:88:28:79:cd:5d:ab: 51:01:fa:10:ff:b8:bf:fd:16:68:c5:83:c3:81:d7: bc:96:9e:e2:b3:f1:03:ad:f0:2e:54:22:76:5a:16: c0:2d:9f:e0:cb:32:b2:33:00:92:53:30:1f:f1:f2: b6:fe:12:8c:4c:cb:8e:58:54:a2:df:5c:cd:a3:6e: a3:15:6f:38:71:1a:56:04:6b:cf:ea:2e:d5:36:10: f0:55:a0:08:9e:8f:28:a3:be:2c:48:07:50:c7:5b: 19:41:c7:fc:a3:f9:fe:08:c8:12:3f:d5:80:76:d2: b6:fc:da:1f:0a:a0:73:ae:c0:9e:66:b3:0f:6b:42: 2c:1c:2c:bf:88:52:e2:7c:c4:33:95:af:77:51:82: cc:a6:b5:52:1c:d9:c9:b4:b6:e6:81:5d:30:5a:9a: db:38:10:28:91:a0:98:d5:0c:01:81:26:e0:b6:81: 68:f6:c5:11:d6:4c:92:9a:c3:a8:1d:4c:22:39:8f: 18:4f:4d:bd:58:b9:c2:fe:cb:85:d0:2a:c3:d3:a6: c2:65:e5:a8:a8:a0:24:64:22:eb:a6:4c:ab:28:9b: a1:52:d4:14:aa:0c:c5:95:41:5a:46:6f:64:76:07: 89:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0A:26:AE:A0:CD:A2:4A:78:38:C0:01:52:19:36:63:4C:F3:0D:02 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33322e302f32342d3234203d3e203632323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.212.32.0/24 Signature Algorithm: sha256WithRSAEncryption b6:f6:f0:ec:fb:29:c5:0c:63:d6:8e:6b:0a:1f:71:f1:1e:2f: 24:d5:4b:00:45:74:ad:fd:d2:6d:30:92:a7:f2:eb:81:b7:36: ee:7a:2b:31:3d:b0:86:55:1f:96:ce:be:8e:90:98:71:ad:d0: de:bd:d2:d0:d0:e1:a2:5b:af:70:88:03:b9:b5:6e:ec:85:d2: ff:5d:53:01:bc:2f:a0:9a:30:b0:5b:95:be:68:cd:0f:69:cc: 5f:cd:d1:5d:83:27:3c:94:a1:cd:36:1c:f8:99:e7:be:16:52: 7a:d6:01:f9:2f:88:1c:10:72:a1:72:5e:0b:ae:50:33:58:1f: be:37:b6:46:c2:aa:46:28:20:e0:6f:83:43:db:86:ab:db:a3: 32:4c:4e:03:07:4b:f1:ee:14:ca:85:df:57:22:d7:7c:70:85: dd:61:b0:65:d0:1d:96:6e:94:f5:37:7b:94:82:b7:ff:8c:52: be:c4:8c:3a:55:97:5c:00:45:fd:fd:b8:1f:8b:ef:0c:7d:07: c7:68:5c:84:1f:f4:80:0f:55:8f:e6:7e:3b:17:65:18:b6:71: 9c:f7:ad:56:f7:fc:1e:6f:ab:e1:d0:84:b4:53:0e:7a:2c:83: 7e:4b:b9:46:62:81:2e:79:0b:6a:83:d7:a4:f5:86:96:ea:21: f6:7e:8a:a5 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUIOPTwOkKF/wQsT7pifow8HnbMAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDVaFw0yNjExMjAxNTQ5MDVaMDMxMTAvBgNV BAMTKEQ1MEEyNkFFQTBDREEyNEE3ODM4QzAwMTUyMTkzNjYzNENGMzBEMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDksID+QdMFRRK34BHoFQincM7v tgftSogoec1dq1EB+hD/uL/9FmjFg8OB17yWnuKz8QOt8C5UInZaFsAtn+DLMrIz AJJTMB/x8rb+EoxMy45YVKLfXM2jbqMVbzhxGlYEa8/qLtU2EPBVoAiejyijvixI B1DHWxlBx/yj+f4IyBI/1YB20rb82h8KoHOuwJ5msw9rQiwcLL+IUuJ8xDOVr3dR gsymtVIc2cm0tuaBXTBamts4ECiRoJjVDAGBJuC2gWj2xRHWTJKaw6gdTCI5jxhP Tb1YucL+y4XQKsPTpsJl5aiooCRkIuumTKsom6FS1BSqDMWVQVpGb2R2B4lJAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU1QomrqDNokp4OMABUhk2Y0zzDQIwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM3MzgyZTMyMzEz MjJlMzMzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzIzMjM0MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACy1CAwDQYJKoZIhvcNAQELBQADggEBALb28Oz7KcUMY9aOawofcfEeLyTV SwBFdK390m0wkqfy64G3Nu56KzE9sIZVH5bOvo6QmHGt0N690tDQ4aJbr3CIA7m1 buyF0v9dUwG8L6CaMLBblb5ozQ9pzF/N0V2DJzyUoc02HPiZ574WUnrWAfkviBwQ cqFyXguuUDNYH743tkbCqkYoIOBvg0PbhqvbozJMTgMHS/HuFMqF31ci13xwhd1h sGXQHZZulPU3e5SCt/+MUr7EjDpVl1wARf39uB+L7wx9B8doXIQf9IAPVY/mfjsX ZRi2cZz3rVb3/B5vq+HQhLRTDnosg35LuUZigS55C2qD16T1hpbqIfZ+iqU= -----END CERTIFICATE-----Generated at Sat Dec 6 23:38:32 2025 by rpki-client