This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3135332e3137382e302f32342d3234203d3e20313336373837.roa File: 3138352e3135332e3137382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: phppVSmpY3PDynvB1QOpfQ9vsriKJyaltrQtKo1caCo= Subject key identifier: A6:E9:1F:AA:44:98:CF:B1:85:7B:8E:03:3D:19:56:64:4F:22:8B:B9 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 070C811F6F48F0C1386485FD2E1C2006124AB4DC Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3135332e3137382e302f32342d3234203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:50:31 +0000 ROA not before: Mon 29 Dec 2025 09:45:31 +0000 ROA not after: Mon 28 Dec 2026 09:50:31 +0000 asID: 136787 IP address blocks: 185.153.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:0c:81:1f:6f:48:f0:c1:38:64:85:fd:2e:1c:20:06:12:4a:b4:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Dec 29 09:45:31 2025 GMT Not After : Dec 28 09:50:31 2026 GMT Subject: CN=A6E91FAA4498CFB1857B8E033D1956644F228BB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b4:54:d9:a5:0b:0e:96:4f:0f:7d:28:9c:52: 9d:48:b6:4b:61:e1:11:b6:bf:d0:94:91:2d:ce:c5: 7c:19:72:11:95:72:2a:da:83:39:ad:d9:9b:f9:8e: a1:98:a6:6e:c5:42:80:24:41:18:7e:d7:2a:00:a7: 62:b2:da:19:19:59:43:de:7e:4b:59:f1:7b:3e:aa: 1e:f0:b9:a2:55:55:9c:58:f8:0c:44:15:1b:1e:85: 58:f2:13:87:e1:97:67:9b:36:e7:1c:e0:68:c0:5b: ed:74:8f:85:3c:e5:11:bc:d3:ba:9f:85:8e:18:11: 08:9e:81:4c:5b:80:49:54:67:40:01:78:ba:4c:05: 36:50:eb:d5:f6:eb:74:cb:7d:5c:4c:7e:64:cf:3f: 22:1a:6d:0b:a6:19:d1:9d:ba:80:f1:42:f4:e0:b8: 6c:21:79:0e:5f:91:4c:c5:fc:9b:db:10:21:0b:b6: 7a:9e:bf:05:ec:58:e8:11:08:0a:67:d2:c3:ec:dc: c6:de:b8:a7:5c:b1:dd:04:04:d4:68:5f:1a:fa:02: 1f:f4:f7:5a:cd:b1:3b:ab:d3:ef:84:15:ec:74:43: 60:70:0c:07:bb:df:bc:9a:44:13:f2:31:99:49:f0: f5:8e:cc:72:b6:b4:85:94:06:a8:65:18:68:df:e2: c8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E9:1F:AA:44:98:CF:B1:85:7B:8E:03:3D:19:56:64:4F:22:8B:B9 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3135332e3137382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.153.178.0/24 Signature Algorithm: sha256WithRSAEncryption a8:ea:9a:db:4a:0e:c5:07:99:bd:d2:aa:b7:c7:ae:46:cc:aa: d2:73:fb:57:cf:f7:8e:7b:2b:3e:19:65:ba:89:ae:8b:68:64: 59:4a:f6:ee:73:2c:79:d5:6e:67:39:cc:3c:79:4c:9e:79:7e: 36:ed:34:d2:64:d9:9c:8f:78:d7:25:50:6a:5b:a4:9b:db:76: 1d:a7:ef:84:c8:b5:f4:17:ad:df:bb:49:a9:45:b0:53:52:e2: 67:cd:eb:c7:d8:4c:36:4e:06:96:db:fa:88:fc:1d:16:11:7d: a1:e9:01:ac:73:b7:03:ff:14:b1:2f:6a:fd:34:3f:f0:85:67: 05:c9:ab:85:38:41:49:d0:a0:39:bf:12:26:ac:9f:17:67:c9: ab:34:3c:11:24:10:7a:d7:19:13:38:46:9d:d9:94:49:af:15: c6:a8:53:12:44:19:50:05:bd:fd:50:7b:2f:b6:12:f2:18:34: 7c:73:6a:f8:b9:e7:85:f2:83:21:f7:bf:dc:0a:47:06:70:5c: 5e:f7:36:b2:85:df:75:31:af:47:62:75:36:9b:06:04:35:7f: 82:84:f3:7c:4f:85:38:66:3a:ea:f4:78:4b:10:19:ad:49:16: 93:8d:42:df:66:99:d3:63:82:20:87:e5:f0:59:bc:21:8c:6f: a6:aa:d8:54 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUBwyBH29I8ME4ZIX9LhwgBhJKtNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTEyMjkwOTQ1MzFaFw0yNjEyMjgwOTUwMzFaMDMxMTAvBgNV BAMTKEE2RTkxRkFBNDQ5OENGQjE4NTdCOEUwMzNEMTk1NjY0NEYyMjhCQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/tFTZpQsOlk8PfSicUp1Itkth 4RG2v9CUkS3OxXwZchGVciragzmt2Zv5jqGYpm7FQoAkQRh+1yoAp2Ky2hkZWUPe fktZ8Xs+qh7wuaJVVZxY+AxEFRsehVjyE4fhl2ebNucc4GjAW+10j4U85RG807qf hY4YEQiegUxbgElUZ0ABeLpMBTZQ69X263TLfVxMfmTPPyIabQumGdGduoDxQvTg uGwheQ5fkUzF/JvbECELtnqevwXsWOgRCApn0sPs3MbeuKdcsd0EBNRoXxr6Ah/0 91rNsTur0++EFex0Q2BwDAe737yaRBPyMZlJ8PWOzHK2tIWUBqhlGGjf4sgBAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUpukfqkSYz7GFe44DPRlWZE8ii7kwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzUz MzJlMzEzNzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAuZmyMA0GCSqGSIb3DQEBCwUAA4IBAQCo6prbSg7FB5m90qq3x65G zKrSc/tXz/eOeys+GWW6ia6LaGRZSvbucyx51W5nOcw8eUyeeX427TTSZNmcj3jX JVBqW6Sb23Ydp++EyLX0F63fu0mpRbBTUuJnzevH2Ew2TgaW2/qI/B0WEX2h6QGs c7cD/xSxL2r9ND/whWcFyauFOEFJ0KA5vxImrJ8XZ8mrNDwRJBB61xkTOEad2ZRJ rxXGqFMSRBlQBb39UHsvthLyGDR8c2r4ueeF8oMh97/cCkcGcFxe9zayhd91Ma9H YnU2mwYENX+ChPN8T4U4Zjrq9HhLEBmtSRaTjULfZpnTY4Igh+XwWbwhjG+mqthU -----END CERTIFICATE-----Generated at Sun Jan 25 15:58:50 2026 by rpki-client