This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33332e302f32342d3332203d3e20313431393935.roa File: 3137382e3231322e33332e302f32342d3332203d3e20313431393935.roa (raw, json) Hash identifier: tFyjdvjZvgqZF4olPw8mR81JWgaj01jAJa6hnlyyfK4= Subject key identifier: 2D:DA:18:F0:1F:A3:86:AB:DB:1C:87:E9:14:E5:2F:25:06:29:0F:C9 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 5E4C945747953A9A8A604ABDAA7ECB1DD3743D1E Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33332e302f32342d3332203d3e20313431393935.roa Signing time: Fri 21 Nov 2025 15:49:02 +0000 ROA not before: Fri 21 Nov 2025 15:44:02 +0000 ROA not after: Fri 20 Nov 2026 15:49:02 +0000 asID: 141995 IP address blocks: 178.212.33.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:4c:94:57:47:95:3a:9a:8a:60:4a:bd:aa:7e:cb:1d:d3:74:3d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:02 2025 GMT Not After : Nov 20 15:49:02 2026 GMT Subject: CN=2DDA18F01FA386ABDB1C87E914E52F2506290FC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fd:e1:e3:74:57:02:b6:3d:cd:40:ab:c3:68: ce:ff:14:7b:ef:ca:7f:40:83:0b:8f:ff:79:b4:84: b0:07:76:15:a6:21:c5:a9:0c:ce:00:44:b6:0a:c1: bb:82:74:58:1c:39:fa:a9:f3:ee:f0:26:49:4a:a3: 72:9c:22:a9:ce:5f:e3:fb:72:c0:e4:4c:9d:3f:f1: d2:f6:9d:59:15:99:ed:07:85:bb:88:bd:84:02:2e: 5d:91:7b:6b:51:07:09:42:ab:10:6b:7d:36:08:6a: 81:fe:d7:d1:87:5d:84:38:ff:88:ea:d1:2b:46:41: c3:3c:d3:6b:54:83:a0:71:f3:df:7b:22:c0:3d:ac: 9b:ae:be:f4:5b:9d:46:72:fd:51:7c:4d:6c:c9:3b: 71:dd:bb:36:e8:9b:8d:8a:2c:ed:21:7b:f0:79:90: bf:ab:92:2b:46:c7:51:6a:99:8a:0c:bb:ae:f7:e8: 48:97:32:ce:31:b6:c6:6f:98:da:61:4c:48:42:e2: 28:ed:cf:f5:e3:78:75:2f:1e:37:71:ac:c6:fd:f6: 66:81:06:15:97:5a:c8:82:74:bb:02:8b:d3:d3:de: e1:1a:fe:79:c9:c1:35:c0:22:30:11:e9:70:e7:bb: bd:c6:d9:84:d0:3d:ea:e3:5d:37:2f:39:4a:0c:f7: 67:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DA:18:F0:1F:A3:86:AB:DB:1C:87:E9:14:E5:2F:25:06:29:0F:C9 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33332e302f32342d3332203d3e20313431393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.212.33.0/24 Signature Algorithm: sha256WithRSAEncryption b2:84:4a:53:df:f4:66:91:63:f0:0a:1c:9e:d3:e7:a0:8a:08: 5b:f8:62:6d:71:77:68:be:4b:be:87:86:a7:98:38:cd:f2:47: ea:16:c3:ab:70:14:6f:97:cd:2f:52:5b:5d:91:8b:f7:3a:91: ec:8f:c1:69:12:de:80:10:19:ed:0b:39:14:06:e2:4a:58:1e: 26:c3:55:3b:9f:31:20:5b:b8:d8:05:0a:09:84:d8:98:7d:35: af:75:9d:de:9f:95:98:ca:4e:56:c2:fa:4a:c7:1c:d5:5e:44: c4:05:f7:00:ac:4b:eb:c6:21:e8:0c:6e:51:18:a3:d4:ec:46: 8d:21:c1:bd:fb:ca:ed:53:eb:9c:7b:6b:d3:f0:16:73:81:a1: 99:16:74:60:96:83:80:df:14:bf:d9:7b:df:2e:f1:70:46:14: 23:59:0c:ca:e9:d5:f9:b7:0a:84:24:44:a8:c3:c5:b8:bd:25: ac:1f:2c:42:2f:93:ee:8d:95:8c:80:6e:07:ca:61:b9:de:9b: d1:f6:a7:8c:8b:ed:40:c6:36:2e:08:7c:74:88:d6:e1:d0:f6: 99:52:00:8b:f2:da:42:5e:a4:86:0a:7c:69:31:f7:3e:18:13: 18:a7:10:39:0b:7d:b1:41:55:ea:4e:d5:16:20:ea:8a:4b:3d: c3:4b:62:3f -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUXkyUV0eVOpqKYEq9qn7LHdN0PR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDJaFw0yNjExMjAxNTQ5MDJaMDMxMTAvBgNV BAMTKDJEREExOEYwMUZBMzg2QUJEQjFDODdFOTE0RTUyRjI1MDYyOTBGQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/eHjdFcCtj3NQKvDaM7/FHvv yn9AgwuP/3m0hLAHdhWmIcWpDM4ARLYKwbuCdFgcOfqp8+7wJklKo3KcIqnOX+P7 csDkTJ0/8dL2nVkVme0HhbuIvYQCLl2Re2tRBwlCqxBrfTYIaoH+19GHXYQ4/4jq 0StGQcM802tUg6Bx8997IsA9rJuuvvRbnUZy/VF8TWzJO3Hduzbom42KLO0he/B5 kL+rkitGx1FqmYoMu6736EiXMs4xtsZvmNphTEhC4ijtz/XjeHUvHjdxrMb99maB BhWXWsiCdLsCi9PT3uEa/nnJwTXAIjAR6XDnu73G2YTQPerjXTcvOUoM92dFAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQULdoY8B+jhqvbHIfpFOUvJQYpD8kwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM3MzgyZTMyMzEz MjJlMzMzMzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzQzMTM5MzkzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALLUITANBgkqhkiG9w0BAQsFAAOCAQEAsoRKU9/0ZpFj8AocntPnoIoI W/hibXF3aL5LvoeGp5g4zfJH6hbDq3AUb5fNL1JbXZGL9zqR7I/BaRLegBAZ7Qs5 FAbiSlgeJsNVO58xIFu42AUKCYTYmH01r3Wd3p+VmMpOVsL6Sscc1V5ExAX3AKxL 68Yh6AxuURij1OxGjSHBvfvK7VPrnHtr0/AWc4GhmRZ0YJaDgN8Uv9l73y7xcEYU I1kMyunV+bcKhCREqMPFuL0lrB8sQi+T7o2VjIBuB8phud6b0fanjIvtQMY2Lgh8 dIjW4dD2mVIAi/LaQl6khgp8aTH3PhgTGKcQOQt9sUFV6k7VFiDqiks9w0tiPw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:30:43 2025 by rpki-client