This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33352e302f32342d3332203d3e20313431393935.roa File: 3137382e3231322e33352e302f32342d3332203d3e20313431393935.roa (raw, json) Hash identifier: G8oOnLazQiJSQj98df0eBai++ABgkAjN+jdKptX4ZKc= Subject key identifier: 77:97:11:CE:4E:EF:07:9E:D0:00:4B:CE:57:14:F8:9D:73:C4:2D:62 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 42CC82B2C8158EDF6C4EC972DA5FD39968C75CC0 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33352e302f32342d3332203d3e20313431393935.roa Signing time: Fri 21 Nov 2025 15:49:04 +0000 ROA not before: Fri 21 Nov 2025 15:44:04 +0000 ROA not after: Fri 20 Nov 2026 15:49:04 +0000 asID: 141995 IP address blocks: 178.212.35.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:cc:82:b2:c8:15:8e:df:6c:4e:c9:72:da:5f:d3:99:68:c7:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:04 2025 GMT Not After : Nov 20 15:49:04 2026 GMT Subject: CN=779711CE4EEF079ED0004BCE5714F89D73C42D62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dd:5f:bc:8c:3f:44:d5:e4:72:99:a7:44:d4: ed:d4:19:f2:6e:42:1b:e3:bb:e7:b4:0a:14:b8:5a: d5:4f:1e:ec:62:17:6a:af:53:36:99:a4:29:50:a6: 71:30:b7:59:e7:4c:44:13:f2:19:5c:7f:bf:1e:8e: e3:17:2b:ae:2b:97:c9:2d:c3:ad:ad:98:f7:57:a0: d7:6b:d0:c8:9c:01:0a:28:9f:61:d2:c4:16:3f:c9: 62:d1:c6:63:93:f4:5a:af:9e:ee:7c:ed:e2:a0:06: bf:c1:90:30:1c:64:a0:7c:8e:97:20:ee:8c:5e:e6: e9:48:4e:3a:af:b4:cc:53:c8:e8:43:5c:e9:ff:2e: 08:5d:fd:ba:a1:39:fd:3a:33:59:c6:13:c9:40:df: ad:51:46:2b:e5:f8:d7:a2:ba:e1:f9:02:9b:41:1e: f8:22:45:9e:a5:c8:e9:8e:23:30:12:2e:f8:f6:d0: de:18:38:db:53:7b:39:2f:f6:66:8c:46:97:0c:02: 9a:30:54:78:c9:68:6a:6e:9a:4c:d3:5b:b6:6e:32: c6:c3:6b:7c:2c:72:50:00:71:ee:da:13:2a:40:39: dd:d4:fd:07:4a:00:a7:b2:2f:7c:2f:05:ca:b2:05: 4e:8b:e0:33:41:af:4d:2f:7c:e1:a1:c7:24:89:9c: 5e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:97:11:CE:4E:EF:07:9E:D0:00:4B:CE:57:14:F8:9D:73:C4:2D:62 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33352e302f32342d3332203d3e20313431393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.212.35.0/24 Signature Algorithm: sha256WithRSAEncryption 97:31:7d:84:a4:bc:8c:c0:71:82:d4:b7:99:d2:5f:2b:88:56: 03:6b:2a:c7:98:3b:67:d6:46:46:01:a4:62:ee:98:b3:7e:4e: 0b:6d:21:29:3e:93:76:80:f0:bf:4a:82:e4:a9:4d:74:24:5d: b7:da:47:f6:ac:89:47:35:fc:ab:4e:91:7c:6e:d2:de:38:34: 8c:37:3e:a7:ce:82:15:85:cb:fd:40:70:e2:7a:b9:01:00:5d: cd:57:85:84:b0:cc:36:52:5c:3e:a6:85:1b:6d:40:af:ac:51: 4b:6e:9c:dc:03:e5:c0:64:45:b3:d7:ee:b9:3d:97:67:0e:11: b0:1e:1f:bc:dc:a4:70:54:46:2d:41:5c:bd:dd:17:a4:06:67: 2d:b7:aa:36:f4:eb:26:5f:72:9e:67:77:cf:f1:99:e1:be:a5: 29:10:29:24:ca:13:3c:58:6b:00:c7:8d:65:15:77:c8:86:05: 38:bd:42:a6:bb:0b:43:93:ad:3e:ff:97:8b:f3:f5:e9:43:c0: 64:22:3e:f2:b1:04:7d:1e:74:b9:fc:0e:ba:ce:1c:e5:2a:05: 7b:87:cb:f0:53:a4:dc:af:c3:15:ac:e3:1e:74:f6:26:b4:0a: 66:f2:40:a8:c3:bf:89:40:9d:9c:f7:11:bf:67:95:1d:28:e1: 71:05:26:fa -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUQsyCssgVjt9sTsly2l/TmWjHXMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDRaFw0yNjExMjAxNTQ5MDRaMDMxMTAvBgNV BAMTKDc3OTcxMUNFNEVFRjA3OUVEMDAwNEJDRTU3MTRGODlENzNDNDJENjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw3V+8jD9E1eRymadE1O3UGfJu Qhvju+e0ChS4WtVPHuxiF2qvUzaZpClQpnEwt1nnTEQT8hlcf78ejuMXK64rl8kt w62tmPdXoNdr0MicAQoon2HSxBY/yWLRxmOT9Fqvnu587eKgBr/BkDAcZKB8jpcg 7oxe5ulITjqvtMxTyOhDXOn/Lghd/bqhOf06M1nGE8lA361RRivl+NeiuuH5AptB HvgiRZ6lyOmOIzASLvj20N4YONtTezkv9maMRpcMApowVHjJaGpumkzTW7ZuMsbD a3wsclAAce7aEypAOd3U/QdKAKeyL3wvBcqyBU6L4DNBr00vfOGhxySJnF7hAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUd5cRzk7vB57QAEvOVxT4nXPELWIwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM3MzgyZTMyMzEz MjJlMzMzNTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzQzMTM5MzkzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALLUIzANBgkqhkiG9w0BAQsFAAOCAQEAlzF9hKS8jMBxgtS3mdJfK4hW A2sqx5g7Z9ZGRgGkYu6Ys35OC20hKT6TdoDwv0qC5KlNdCRdt9pH9qyJRzX8q06R fG7S3jg0jDc+p86CFYXL/UBw4nq5AQBdzVeFhLDMNlJcPqaFG21Ar6xRS26c3APl wGRFs9fuuT2XZw4RsB4fvNykcFRGLUFcvd0XpAZnLbeqNvTrJl9ynmd3z/GZ4b6l KRApJMoTPFhrAMeNZRV3yIYFOL1CprsLQ5OtPv+Xi/P16UPAZCI+8rEEfR50ufwO us4c5SoFe4fL8FOk3K/DFazjHnT2JrQKZvJAqMO/iUCdnPcRv2eVHSjhcQUm+g== -----END CERTIFICATE-----Generated at Sun Dec 7 02:27:33 2025 by rpki-client