This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136322e34362e302f32342d3234203d3e20323031333431.roa File: 3138352e3136322e34362e302f32342d3234203d3e20323031333431.roa (raw, json) Hash identifier: yM7wBldXE3OaeTKYSeBH9G9q9ekSjzWueNw2uZrFEwE= Subject key identifier: 9E:86:05:79:0F:9E:23:F7:9F:4B:DD:14:D2:8A:D0:26:F3:80:D3:4E Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7C7B47E50BF87F7BA2BC2D1793B90EE5895661FD Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136322e34362e302f32342d3234203d3e20323031333431.roa Signing time: Mon 29 Dec 2025 09:50:33 +0000 ROA not before: Mon 29 Dec 2025 09:45:33 +0000 ROA not after: Mon 28 Dec 2026 09:50:33 +0000 asID: 201341 IP address blocks: 185.162.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:7b:47:e5:0b:f8:7f:7b:a2:bc:2d:17:93:b9:0e:e5:89:56:61:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Dec 29 09:45:33 2025 GMT Not After : Dec 28 09:50:33 2026 GMT Subject: CN=9E8605790F9E23F79F4BDD14D28AD026F380D34E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:b0:dd:1c:db:52:c9:69:51:de:1c:b1:ff: 16:c6:bf:24:74:72:c8:f2:e1:77:f9:6c:3b:07:0c: 66:7c:e9:1e:6e:d8:49:67:ad:d5:33:66:44:64:95: a7:5c:dc:b6:ad:ee:04:0f:02:96:26:34:8b:a0:d0: 7f:cb:78:a9:79:b4:56:e2:46:ca:73:31:2c:f4:0d: 9c:1a:ce:d4:ab:52:7f:57:49:43:ef:7a:c0:59:7c: 87:78:10:94:42:18:75:34:8a:1e:0f:e6:bb:d0:0a: 7d:80:5c:7b:37:63:85:84:9e:02:12:d0:37:47:4c: f8:68:b5:03:a0:8a:56:88:fb:c5:c2:ce:a9:36:ba: 6b:27:d4:a4:91:68:20:5e:67:cb:0d:fb:1b:08:5d: ba:98:9b:1c:af:ef:59:72:28:62:e9:c8:b8:c4:7c: 7c:2d:ed:3e:17:47:51:69:88:0e:26:71:df:4f:61: be:0a:58:0f:b3:8a:f7:ae:39:8f:f7:07:dd:6a:bb: 75:4e:b9:09:86:fe:25:3e:41:1e:01:82:95:8d:2f: 9d:02:93:e6:37:9a:4a:34:6c:8d:45:b9:f2:a1:04: 73:94:72:3e:d3:0e:b3:cd:a3:37:88:de:fc:6b:57: 92:88:53:dc:70:5f:76:cc:c6:2a:ca:e4:d9:bf:e6: 25:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:86:05:79:0F:9E:23:F7:9F:4B:DD:14:D2:8A:D0:26:F3:80:D3:4E X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136322e34362e302f32342d3234203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.46.0/24 Signature Algorithm: sha256WithRSAEncryption dd:09:ae:e8:55:19:35:6b:6e:0d:66:e7:65:93:29:03:1c:33: 6d:a0:91:66:e3:5e:69:09:37:68:20:3d:db:3a:25:b5:b1:7a: 5b:5e:86:27:17:9d:eb:9a:99:96:c9:1a:78:c0:f1:8d:fb:77: af:24:ee:ee:a6:63:86:b8:11:b1:8b:7a:9b:ca:7a:39:a4:97: 47:2c:e3:ff:be:1e:4e:6a:fb:20:6d:91:ca:ee:9f:14:67:34: ed:ef:82:e1:b3:84:e0:66:04:15:36:5d:1b:7e:42:d5:f0:52: 0b:2a:d1:3b:e2:8d:19:d6:7b:50:32:ff:c2:f0:84:e7:79:03: 4c:9c:7f:a9:17:57:f9:7d:8a:67:af:78:cd:a6:c7:45:c4:99: ed:b6:20:b1:1e:ec:b3:98:6c:d3:4f:3c:81:29:db:5c:6a:20: a5:e6:ba:4b:24:2d:f4:1c:b4:62:dd:c1:59:f3:ff:71:da:67: a2:06:0a:ba:9d:f7:e9:9d:24:e5:75:f2:27:b1:7a:d2:25:bf: 46:f6:0c:3f:16:bb:63:af:96:b4:d2:18:2e:ec:c3:74:2d:98: b0:14:76:d5:9e:1a:2c:e7:7d:28:0f:f1:1a:00:aa:84:57:0b: 97:c0:24:f6:3e:93:76:7e:21:55:46:f1:b8:f8:2d:4d:63:fa: 77:c5:58:46 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUfHtH5Qv4f3uivC0Xk7kO5YlWYf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTEyMjkwOTQ1MzNaFw0yNjEyMjgwOTUwMzNaMDMxMTAvBgNV BAMTKDlFODYwNTc5MEY5RTIzRjc5RjRCREQxNEQyOEFEMDI2RjM4MEQzNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA/LDdHNtSyWlR3hyx/xbGvyR0 csjy4Xf5bDsHDGZ86R5u2ElnrdUzZkRkladc3Lat7gQPApYmNIug0H/LeKl5tFbi RspzMSz0DZwaztSrUn9XSUPvesBZfId4EJRCGHU0ih4P5rvQCn2AXHs3Y4WEngIS 0DdHTPhotQOgilaI+8XCzqk2umsn1KSRaCBeZ8sN+xsIXbqYmxyv71lyKGLpyLjE fHwt7T4XR1FpiA4mcd9PYb4KWA+ziveuOY/3B91qu3VOuQmG/iU+QR4BgpWNL50C k+Y3mko0bI1FufKhBHOUcj7TDrPNozeI3vxrV5KIU9xwX3bMxirK5Nm/5iXjAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUnoYFeQ+eI/efS90U0orQJvOA004wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzYz MjJlMzQzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALmiLjANBgkqhkiG9w0BAQsFAAOCAQEA3Qmu6FUZNWtuDWbnZZMpAxwz baCRZuNeaQk3aCA92zoltbF6W16GJxed65qZlskaeMDxjft3ryTu7qZjhrgRsYt6 m8p6OaSXRyzj/74eTmr7IG2Ryu6fFGc07e+C4bOE4GYEFTZdG35C1fBSCyrRO+KN GdZ7UDL/wvCE53kDTJx/qRdX+X2KZ694zabHRcSZ7bYgsR7ss5hs0088gSnbXGog pea6SyQt9By0Yt3BWfP/cdpnogYKup336Z0k5XXyJ7F60iW/RvYMPxa7Y6+WtNIY LuzDdC2YsBR21Z4aLOd9KA/xGgCqhFcLl8Ak9j6Tdn4hVUbxuPgtTWP6d8VYRg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:55:38 2026 by rpki-client