This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136322e34342e302f32342d3234203d3e20323031333431.roa File: 3138352e3136322e34342e302f32342d3234203d3e20323031333431.roa (raw, json) Hash identifier: XZRn+iUeNqONPzRMtr71U96YE14bqUxu9ku3UyDlTRY= Subject key identifier: B9:DD:B5:0D:3D:93:23:96:50:A7:67:78:09:3A:A8:09:DE:D6:F5:A7 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 76DEACEBA0870130BF780C091C8DA13E994BFEF5 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136322e34342e302f32342d3234203d3e20323031333431.roa Signing time: Mon 29 Dec 2025 09:50:32 +0000 ROA not before: Mon 29 Dec 2025 09:45:32 +0000 ROA not after: Mon 28 Dec 2026 09:50:32 +0000 asID: 201341 IP address blocks: 185.162.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:de:ac:eb:a0:87:01:30:bf:78:0c:09:1c:8d:a1:3e:99:4b:fe:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Dec 29 09:45:32 2025 GMT Not After : Dec 28 09:50:32 2026 GMT Subject: CN=B9DDB50D3D93239650A76778093AA809DED6F5A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d4:98:b9:0a:ea:f7:ee:03:4d:b6:b9:29:31: cd:2e:ff:fb:7f:a6:45:a2:99:44:d0:63:c1:bc:83: 9a:0c:d4:d5:bf:81:93:6e:f8:c6:2d:5c:93:18:36: 24:5b:09:4c:60:2b:ed:b8:d8:5f:4d:62:c8:af:5d: 16:dc:29:1d:e2:8a:36:54:dc:72:60:88:5c:40:b5: 3d:7b:9c:01:38:7c:41:d5:ab:36:33:d0:78:e6:83: 29:7a:ca:f6:fd:9c:18:ec:2f:2a:82:34:18:2b:d2: ab:6e:33:7b:12:f2:9a:91:4f:c0:f5:8b:04:e7:14: 8c:b9:57:a7:b9:e0:0b:d7:d8:c5:81:fd:cf:20:19: 7b:e1:1e:cd:df:d4:7d:fb:ef:9a:b0:89:c5:bd:09: 5f:46:58:d8:cd:3e:1b:1c:e1:f0:bf:fc:70:d5:34: 45:59:75:fa:91:b5:af:ca:8c:98:d7:95:ae:cd:91: 3a:56:a8:f6:0e:e3:44:b6:1c:cc:4c:2d:f0:9e:82: 18:d6:6c:8b:e4:8f:f0:5d:4b:51:0a:05:b1:75:bd: 60:50:83:7c:bb:d5:d0:2a:77:7b:9e:18:38:21:fe: 57:74:ba:1a:66:3b:a8:40:c2:0c:2c:d4:89:b5:93: c8:10:74:55:c0:05:3b:79:95:5c:f6:b6:22:54:fd: 1f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DD:B5:0D:3D:93:23:96:50:A7:67:78:09:3A:A8:09:DE:D6:F5:A7 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136322e34342e302f32342d3234203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.44.0/24 Signature Algorithm: sha256WithRSAEncryption 38:b0:04:56:91:d9:14:c6:cc:d6:c9:36:b4:4c:27:ad:1f:dc: 41:26:2c:37:49:ee:04:d6:d5:0e:0a:de:4b:3e:a3:99:cb:d6: 37:6a:59:ec:91:8e:a7:31:7c:e4:a8:fe:3a:f8:2b:3e:29:af: 1d:17:ca:94:ab:3c:21:5c:c7:ac:93:00:c7:1e:13:78:1f:23: d1:e8:57:c2:b8:c3:e0:53:43:c1:63:57:88:c2:78:dd:56:21: 70:92:9a:b5:f6:a9:1c:81:e1:d3:7c:2d:6e:f3:02:16:8c:a7: 34:16:c4:89:a6:01:6f:4e:fa:4c:ad:e4:4a:ac:c5:97:d9:33: f5:3b:9d:13:91:59:0b:11:e4:4a:6d:9c:36:34:5d:6b:3c:a2: 5f:bf:86:02:9e:0f:a3:10:8e:f5:65:41:cc:53:1a:1a:5a:2d: ae:59:37:1f:e1:1e:ae:9b:cf:f1:3a:19:8a:67:ab:8f:14:83: d1:e5:51:14:bb:75:88:81:24:2a:39:2b:2e:20:aa:56:c0:78: 62:1c:d6:e2:94:bb:62:fa:7e:cf:93:0c:d7:fe:42:db:46:0d: 3f:3a:a4:bf:cf:57:c2:53:e3:ed:6f:57:e7:e5:1d:d0:47:df: fb:9b:ee:0b:c3:df:c8:10:0e:2c:91:1a:bd:46:00:ae:bb:b0: d7:ff:d9:2e -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUdt6s66CHATC/eAwJHI2hPplL/vUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTEyMjkwOTQ1MzJaFw0yNjEyMjgwOTUwMzJaMDMxMTAvBgNV BAMTKEI5RERCNTBEM0Q5MzIzOTY1MEE3Njc3ODA5M0FBODA5REVENkY1QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+1Ji5Cur37gNNtrkpMc0u//t/ pkWimUTQY8G8g5oM1NW/gZNu+MYtXJMYNiRbCUxgK+242F9NYsivXRbcKR3iijZU 3HJgiFxAtT17nAE4fEHVqzYz0Hjmgyl6yvb9nBjsLyqCNBgr0qtuM3sS8pqRT8D1 iwTnFIy5V6e54AvX2MWB/c8gGXvhHs3f1H3775qwicW9CV9GWNjNPhsc4fC//HDV NEVZdfqRta/KjJjXla7NkTpWqPYO40S2HMxMLfCeghjWbIvkj/BdS1EKBbF1vWBQ g3y71dAqd3ueGDgh/ld0uhpmO6hAwgws1Im1k8gQdFXABTt5lVz2tiJU/R87AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUud21DT2TI5ZQp2d4CTqoCd7W9acwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzYz MjJlMzQzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALmiLDANBgkqhkiG9w0BAQsFAAOCAQEAOLAEVpHZFMbM1sk2tEwnrR/c QSYsN0nuBNbVDgreSz6jmcvWN2pZ7JGOpzF85Kj+OvgrPimvHRfKlKs8IVzHrJMA xx4TeB8j0ehXwrjD4FNDwWNXiMJ43VYhcJKatfapHIHh03wtbvMCFoynNBbEiaYB b076TK3kSqzFl9kz9TudE5FZCxHkSm2cNjRdazyiX7+GAp4PoxCO9WVBzFMaGlot rlk3H+EerpvP8ToZimerjxSD0eVRFLt1iIEkKjkrLiCqVsB4YhzW4pS7Yvp+z5MM 1/5C20YNPzqkv89XwlPj7W9X5+Ud0Eff+5vuC8PfyBAOLJEavUYArruw1//ZLg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:21:32 2026 by rpki-client