This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3135332e3137362e302f32342d3234203d3e20323132323338.roa File: 3138352e3135332e3137362e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: gPe3GPjrbRtq/5w9QalhHArwTiv6yO3+OfwW30rmVsE= Subject key identifier: 9E:26:57:D1:25:A0:EB:B3:98:D8:27:0D:8E:DE:BB:04:0B:F6:AB:07 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3A948A4BF0A6B1026558536DD979CE7141274546 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3135332e3137362e302f32342d3234203d3e20323132323338.roa Signing time: Mon 29 Dec 2025 09:50:33 +0000 ROA not before: Mon 29 Dec 2025 09:45:33 +0000 ROA not after: Mon 28 Dec 2026 09:50:33 +0000 asID: 212238 IP address blocks: 185.153.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:94:8a:4b:f0:a6:b1:02:65:58:53:6d:d9:79:ce:71:41:27:45:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Dec 29 09:45:33 2025 GMT Not After : Dec 28 09:50:33 2026 GMT Subject: CN=9E2657D125A0EBB398D8270D8EDEBB040BF6AB07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8c:a3:a8:53:83:10:7c:8f:ab:03:a4:a1:41: 0f:3a:29:5c:90:75:0d:0d:06:0f:5a:65:ca:33:7c: c8:67:86:ff:42:99:a6:f1:38:ee:b8:93:ae:bf:c1: 2d:17:70:ec:08:d1:da:25:36:a1:7f:61:41:b4:95: 3d:fe:28:16:0e:08:e8:2d:1f:aa:5f:13:ab:e0:1b: 58:cb:d1:58:10:fd:5d:76:7a:c6:1f:97:3a:3d:7d: 78:ed:35:f9:9a:31:d8:fb:b2:96:29:52:00:98:50: b9:d3:17:04:3d:44:1c:45:a4:6d:92:59:7b:38:6c: e3:5b:4a:c7:80:87:ad:ed:89:fa:fd:39:42:5e:9b: 90:e6:f6:2d:82:fe:ee:7a:20:6e:45:e7:78:9e:ad: 91:66:52:5f:71:e7:46:f3:5e:1b:b8:4c:9b:d4:24: 0f:26:3b:54:f5:dd:0f:c0:a4:41:d2:73:02:8c:f1: f3:47:5b:37:c2:d9:45:80:03:37:49:27:44:c7:15: 82:24:03:8d:80:3e:58:c7:d3:ad:c6:d2:46:48:6f: bf:76:d4:00:ef:21:b3:34:41:cd:d3:41:34:14:0d: 2d:72:d7:d5:97:36:43:44:58:5f:9d:ce:57:36:08: b3:14:64:22:0b:9a:87:b4:7a:ee:71:3b:10:1a:d2: d3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:26:57:D1:25:A0:EB:B3:98:D8:27:0D:8E:DE:BB:04:0B:F6:AB:07 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3135332e3137362e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.153.176.0/24 Signature Algorithm: sha256WithRSAEncryption 14:50:9f:c1:f2:f4:4f:79:21:c9:d9:a4:8a:c2:63:a0:a9:64: a3:66:24:0b:6a:1e:2b:03:9e:88:ed:14:c2:81:19:c0:83:b9: f3:e3:d2:ad:14:24:47:20:fc:36:64:4f:1b:d8:a7:5a:00:fe: da:e9:26:df:b4:fb:1b:df:01:16:45:06:0a:6a:50:1a:4d:45: 3d:a4:80:ef:c2:82:89:c9:7f:c1:d2:84:0c:60:20:f0:19:5c: d2:2e:23:fe:65:61:7e:79:8c:2c:45:8e:73:62:1f:ba:3b:08: 5a:fd:89:9a:a9:74:db:c2:a3:49:59:4c:83:17:1b:c1:b0:a4: 77:a5:1e:02:f7:af:b1:a0:cf:f8:f3:b0:ab:d0:86:04:83:98: 80:47:46:22:b0:f4:39:cf:9d:04:98:dc:02:ac:51:d5:a0:13: d9:3e:5e:0e:52:6b:70:a3:a2:f4:02:1d:37:96:2c:ad:12:11: 7a:e9:24:22:a4:65:6e:99:7f:de:ca:65:67:f1:d1:25:cb:fd: a5:83:d3:54:82:87:bd:89:b1:8a:6a:de:d5:40:7c:a5:03:9b: 52:0b:a1:fe:4f:1c:c0:fe:30:ae:5b:d6:ca:65:e4:b0:f1:ce: a7:10:4e:f5:91:2a:9a:85:36:17:e0:d7:4b:4a:17:78:32:85: 69:b9:3c:09 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUOpSKS/CmsQJlWFNt2XnOcUEnRUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTEyMjkwOTQ1MzNaFw0yNjEyMjgwOTUwMzNaMDMxMTAvBgNV BAMTKDlFMjY1N0QxMjVBMEVCQjM5OEQ4MjcwRDhFREVCQjA0MEJGNkFCMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0jKOoU4MQfI+rA6ShQQ86KVyQ dQ0NBg9aZcozfMhnhv9CmabxOO64k66/wS0XcOwI0dolNqF/YUG0lT3+KBYOCOgt H6pfE6vgG1jL0VgQ/V12esYflzo9fXjtNfmaMdj7spYpUgCYULnTFwQ9RBxFpG2S WXs4bONbSseAh63tifr9OUJem5Dm9i2C/u56IG5F53ierZFmUl9x50bzXhu4TJvU JA8mO1T13Q/ApEHScwKM8fNHWzfC2UWAAzdJJ0THFYIkA42APljH063G0kZIb792 1ADvIbM0Qc3TQTQUDS1y19WXNkNEWF+dzlc2CLMUZCILmoe0eu5xOxAa0tO7AgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUniZX0SWg67OY2CcNjt67BAv2qwcwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzUz MzJlMzEzNzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAuZmwMA0GCSqGSIb3DQEBCwUAA4IBAQAUUJ/B8vRPeSHJ2aSKwmOg qWSjZiQLah4rA56I7RTCgRnAg7nz49KtFCRHIPw2ZE8b2KdaAP7a6SbftPsb3wEW RQYKalAaTUU9pIDvwoKJyX/B0oQMYCDwGVzSLiP+ZWF+eYwsRY5zYh+6Owha/Yma qXTbwqNJWUyDFxvBsKR3pR4C96+xoM/487Cr0IYEg5iAR0YisPQ5z50EmNwCrFHV oBPZPl4OUmtwo6L0Ah03liytEhF66SQipGVumX/eymVn8dEly/2lg9NUgoe9ibGK at7VQHylA5tSC6H+TxzA/jCuW9bKZeSw8c6nEE71kSqahTYX4NdLShd4MoVpuTwJ -----END CERTIFICATE-----Generated at Sun Jan 25 12:38:47 2026 by rpki-client