This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136322e34352e302f32342d3234203d3e20323031333431.roa File: 3138352e3136322e34352e302f32342d3234203d3e20323031333431.roa (raw, json) Hash identifier: 3uQ1MSRFgGosFXGq4Jn00XAU+OFf2d5elcw5+0t/ALo= Subject key identifier: 4B:04:FE:76:8D:E2:C1:3B:02:FD:C4:A7:9B:59:59:65:00:AE:4F:69 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 44B582458E739F5B3008FD845C1059D2BC5E84DE Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136322e34352e302f32342d3234203d3e20323031333431.roa Signing time: Mon 29 Dec 2025 09:50:33 +0000 ROA not before: Mon 29 Dec 2025 09:45:33 +0000 ROA not after: Mon 28 Dec 2026 09:50:33 +0000 asID: 201341 IP address blocks: 185.162.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b5:82:45:8e:73:9f:5b:30:08:fd:84:5c:10:59:d2:bc:5e:84:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Dec 29 09:45:33 2025 GMT Not After : Dec 28 09:50:33 2026 GMT Subject: CN=4B04FE768DE2C13B02FDC4A79B59596500AE4F69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:4c:cd:bb:9d:5d:cf:11:0f:c8:54:10:d7:b1: 51:86:b4:30:d7:fe:07:ce:dd:4f:48:b0:eb:a3:a7: d2:69:e1:a2:fc:c1:d6:e0:35:33:51:8a:a2:4f:26: c6:8b:4a:cd:e1:45:fe:d7:2f:12:0c:f8:17:02:06: 40:bc:d2:e7:78:de:cd:e7:21:ea:e2:41:cd:a0:f4: fe:ff:c6:a9:12:88:56:35:8c:36:42:21:46:34:81: f9:bd:83:dc:65:b2:89:37:7f:19:5a:0a:ec:91:82: 7c:d3:c2:35:37:cd:73:ac:d4:35:9c:fa:8d:01:51: f0:a1:86:d1:33:c5:2e:5c:ae:6e:37:21:44:3d:8f: 84:56:3f:3b:19:66:0b:b7:95:98:2c:2e:b6:81:73: dd:9d:e5:49:cf:b4:ef:b0:d5:67:4b:ea:28:9c:b8: 3e:2f:b8:af:51:9c:86:e0:1a:d7:b2:82:13:ed:b6: 57:14:8c:82:ea:ee:b0:7f:67:3e:86:50:2b:ab:bf: e9:38:0f:50:ee:5a:12:9f:85:a3:fa:cb:8a:32:da: d7:f6:4c:cc:59:25:e2:1c:56:f7:d4:2e:c6:a7:43: b4:5f:e1:5f:49:5d:cb:1a:9b:46:c5:36:20:4c:b6: 76:58:14:ad:c0:9e:eb:82:64:e6:73:4e:e2:a9:72: 3b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:04:FE:76:8D:E2:C1:3B:02:FD:C4:A7:9B:59:59:65:00:AE:4F:69 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136322e34352e302f32342d3234203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.45.0/24 Signature Algorithm: sha256WithRSAEncryption 71:1d:40:e6:5d:e3:8f:d2:44:9c:0c:ed:90:ef:e1:3c:e9:23: b0:c8:fa:d0:78:08:c7:7e:58:8d:c7:14:0d:1c:4c:a6:99:05: 9e:78:47:82:0b:99:bb:a8:38:87:1d:48:00:4c:8c:2e:a9:2c: 29:0e:04:db:20:b4:7b:8c:26:d7:e0:db:59:c3:94:88:1f:b2: cd:c0:7c:54:3b:9d:fe:28:98:78:77:9f:ff:fd:d8:cd:09:d3: b3:51:8e:ad:16:61:95:75:e8:1a:3d:b7:ef:38:f6:6e:ef:b7: 05:c2:08:df:79:74:db:0c:6e:ae:8a:88:5e:5c:bd:04:6a:24: d6:85:44:9c:34:38:01:6f:2a:95:7c:0c:3a:9a:eb:68:38:9d: eb:32:8a:e1:ac:5e:0a:e1:de:ce:98:c8:4c:76:4c:bc:e1:21: f0:a7:8f:0b:4a:bf:94:53:61:04:5a:f9:a2:55:e2:c7:6a:1e: 6a:44:e2:fe:2e:2f:15:52:a4:b7:aa:1e:d9:81:ae:6f:7a:c8: 0f:0c:2a:8e:5a:9e:e6:4d:97:f4:d5:98:7e:3d:21:e2:3b:30: 2d:28:df:a4:51:00:be:59:40:c9:45:a7:50:7f:51:ea:5f:57: 66:fc:9c:91:df:7d:d4:b9:a9:49:b3:c8:79:e5:b2:86:9a:6f: e3:ae:21:73 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIURLWCRY5zn1swCP2EXBBZ0rxehN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTEyMjkwOTQ1MzNaFw0yNjEyMjgwOTUwMzNaMDMxMTAvBgNV BAMTKDRCMDRGRTc2OERFMkMxM0IwMkZEQzRBNzlCNTk1OTY1MDBBRTRGNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5TM27nV3PEQ/IVBDXsVGGtDDX /gfO3U9IsOujp9Jp4aL8wdbgNTNRiqJPJsaLSs3hRf7XLxIM+BcCBkC80ud43s3n IeriQc2g9P7/xqkSiFY1jDZCIUY0gfm9g9xlsok3fxlaCuyRgnzTwjU3zXOs1DWc +o0BUfChhtEzxS5crm43IUQ9j4RWPzsZZgu3lZgsLraBc92d5UnPtO+w1WdL6iic uD4vuK9RnIbgGteyghPttlcUjILq7rB/Zz6GUCurv+k4D1DuWhKfhaP6y4oy2tf2 TMxZJeIcVvfULsanQ7Rf4V9JXcsam0bFNiBMtnZYFK3AnuuCZOZzTuKpcjtzAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUSwT+do3iwTsC/cSnm1lZZQCuT2kwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzYz MjJlMzQzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALmiLTANBgkqhkiG9w0BAQsFAAOCAQEAcR1A5l3jj9JEnAztkO/hPOkj sMj60HgIx35YjccUDRxMppkFnnhHgguZu6g4hx1IAEyMLqksKQ4E2yC0e4wm1+Db WcOUiB+yzcB8VDud/iiYeHef//3YzQnTs1GOrRZhlXXoGj237zj2bu+3BcII33l0 2wxuroqIXly9BGok1oVEnDQ4AW8qlXwMOprraDid6zKK4axeCuHezpjITHZMvOEh 8KePC0q/lFNhBFr5olXix2oeakTi/i4vFVKkt6oe2YGub3rIDwwqjlqe5k2X9NWY fj0h4jswLSjfpFEAvllAyUWnUH9R6l9XZvyckd991LmpSbPIeeWyhppv464hcw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:21:26 2026 by rpki-client