This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3135332e3137372e302f32342d3332203d3e20313336373837.roa File: 3138352e3135332e3137372e302f32342d3332203d3e20313336373837.roa (raw, json) Hash identifier: gqM0m6R1IyYBXSelt19q2e/Y6jiOCHVsA1Y7aRhDDXA= Subject key identifier: 00:AA:9F:57:56:06:6C:F3:74:DC:41:4B:51:B1:DD:C6:5F:94:F0:23 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 75939650A51551794382F86A6F47DFB353229C14 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3135332e3137372e302f32342d3332203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:50:33 +0000 ROA not before: Mon 29 Dec 2025 09:45:33 +0000 ROA not after: Mon 28 Dec 2026 09:50:33 +0000 asID: 136787 IP address blocks: 185.153.177.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:93:96:50:a5:15:51:79:43:82:f8:6a:6f:47:df:b3:53:22:9c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Dec 29 09:45:33 2025 GMT Not After : Dec 28 09:50:33 2026 GMT Subject: CN=00AA9F5756066CF374DC414B51B1DDC65F94F023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7e:47:fc:19:0a:0d:dc:86:02:eb:e0:85:bf: 72:a5:26:e2:d4:44:81:3c:90:e2:09:4f:2d:aa:22: 5a:85:48:01:c4:ee:bb:6f:f1:08:6f:c5:72:d0:21: 2d:16:dd:0c:d4:4f:ab:aa:38:f2:a7:27:b5:03:9c: 38:06:1d:e1:8d:9c:99:bf:25:25:c5:36:51:86:7c: b8:97:fa:c7:6e:5f:4e:82:36:05:22:98:d0:4d:57: 0e:62:fe:3a:bd:6b:28:c3:08:d0:e4:b5:5f:29:8c: 47:87:4f:97:6d:56:4c:40:ee:12:8a:67:ec:cc:ad: a1:8f:3b:e7:55:81:c7:68:a9:53:fe:7d:d5:27:e9: f5:9e:de:56:b7:b6:54:d7:5a:7c:0e:69:af:ce:35: a5:9e:96:ed:a4:32:d3:14:37:b2:3c:d9:0f:c8:9f: 4d:61:ee:7c:85:cc:11:b4:46:ec:22:37:ad:cc:f9: f5:d7:ed:bf:44:da:39:02:d3:32:30:7b:ae:cc:d3: b3:f7:de:d0:a9:63:dd:0b:76:7d:b5:de:a8:b2:ac: 71:12:a8:32:c3:e4:3f:06:30:5d:35:ae:32:30:04: ba:fc:a3:56:c2:3c:07:f6:c0:82:d7:e9:76:54:8e: aa:ce:0d:7d:1c:52:63:28:2a:86:6f:d3:0c:cc:5a: a6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AA:9F:57:56:06:6C:F3:74:DC:41:4B:51:B1:DD:C6:5F:94:F0:23 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3135332e3137372e302f32342d3332203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.153.177.0/24 Signature Algorithm: sha256WithRSAEncryption 09:51:98:dc:14:72:bd:d3:92:4c:10:10:dc:4f:61:63:e1:13: 58:6e:b4:79:c7:15:ca:e4:9c:dc:c6:6d:d4:44:1c:4d:5e:f9: 39:53:f1:37:76:17:1c:5d:21:58:a3:a6:7e:1e:e1:ed:3a:0c: 9f:48:6d:b3:2b:f6:06:86:8f:83:3a:ba:e5:e4:0e:79:83:fc: 80:98:56:f9:62:ef:c6:a4:c2:11:35:f0:2b:91:01:b5:69:b2: 05:92:68:ce:6f:5f:98:7f:0e:f1:70:d0:d8:05:9d:ec:0c:5c: a7:db:fe:5d:b1:a2:f9:6d:fe:28:b7:e8:c7:5b:ef:71:17:45: f8:6c:ae:2b:b0:80:90:68:a7:7a:ec:f8:7b:f7:47:ce:7a:c8: 42:93:6f:fe:de:49:13:32:56:1d:54:66:ca:4c:91:fb:fb:47: f0:79:cf:eb:34:ce:8d:ff:39:9f:5d:ad:fb:43:d7:71:d2:f6: 2b:60:27:db:42:db:26:22:36:c2:7f:67:4d:e0:9f:2f:0a:a8: c0:79:ab:4b:f0:b6:b4:71:e7:42:81:cc:1d:f6:3e:72:78:23: a8:b4:dd:41:77:0b:7e:5e:f1:37:3a:3d:7e:9c:78:f7:d8:8f: 8b:da:79:bf:4a:d9:87:8a:01:d3:c8:c0:6a:6d:8d:5f:c4:a7: 15:03:5d:26 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUdZOWUKUVUXlDgvhqb0ffs1MinBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTEyMjkwOTQ1MzNaFw0yNjEyMjgwOTUwMzNaMDMxMTAvBgNV BAMTKDAwQUE5RjU3NTYwNjZDRjM3NERDNDE0QjUxQjFEREM2NUY5NEYwMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0fkf8GQoN3IYC6+CFv3KlJuLU RIE8kOIJTy2qIlqFSAHE7rtv8QhvxXLQIS0W3QzUT6uqOPKnJ7UDnDgGHeGNnJm/ JSXFNlGGfLiX+sduX06CNgUimNBNVw5i/jq9ayjDCNDktV8pjEeHT5dtVkxA7hKK Z+zMraGPO+dVgcdoqVP+fdUn6fWe3la3tlTXWnwOaa/ONaWelu2kMtMUN7I82Q/I n01h7nyFzBG0RuwiN63M+fXX7b9E2jkC0zIwe67M07P33tCpY90Ldn213qiyrHES qDLD5D8GMF01rjIwBLr8o1bCPAf2wILX6XZUjqrODX0cUmMoKoZv0wzMWqapAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUAKqfV1YGbPN03EFLUbHdxl+U8CMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzUz MzJlMzEzNzM3MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAuZmxMA0GCSqGSIb3DQEBCwUAA4IBAQAJUZjcFHK905JMEBDcT2Fj 4RNYbrR5xxXK5Jzcxm3URBxNXvk5U/E3dhccXSFYo6Z+HuHtOgyfSG2zK/YGho+D Orrl5A55g/yAmFb5Yu/GpMIRNfArkQG1abIFkmjOb1+Yfw7xcNDYBZ3sDFyn2/5d saL5bf4ot+jHW+9xF0X4bK4rsICQaKd67Ph790fOeshCk2/+3kkTMlYdVGbKTJH7 +0fwec/rNM6N/zmfXa37Q9dx0vYrYCfbQtsmIjbCf2dN4J8vCqjAeatL8La0cedC gcwd9j5yeCOotN1Bdwt+XvE3Oj1+nHj32I+L2nm/StmHigHTyMBqbY1fxKcVA10m -----END CERTIFICATE-----Generated at Sun Jan 25 14:47:50 2026 by rpki-client