This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136322e34372e302f32342d3234203d3e20323031333431.roa
File: 3138352e3136322e34372e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: 6aTOPdqkcMEaigLlb4NY0YZYavp4HPdqVLyaplyI/7U=
Subject key identifier: F1:FA:91:CD:19:EA:F5:A3:E0:7B:F7:11:AF:EA:5F:18:E5:28:A5:AB
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 06F879059665BAE75AEC70CDD03AC653B399EEE2
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136322e34372e302f32342d3234203d3e20323031333431.roa
Signing time: Mon 29 Dec 2025 09:50:33 +0000
ROA not before: Mon 29 Dec 2025 09:45:33 +0000
ROA not after: Mon 28 Dec 2026 09:50:33 +0000
asID: 201341
IP address blocks: 185.162.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:f8:79:05:96:65:ba:e7:5a:ec:70:cd:d0:3a:c6:53:b3:99:ee:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 29 09:45:33 2025 GMT
Not After : Dec 28 09:50:33 2026 GMT
Subject: CN=F1FA91CD19EAF5A3E07BF711AFEA5F18E528A5AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:47:0e:ab:05:db:59:e0:2c:9a:24:c0:e6:
98:44:b8:07:c2:19:cf:35:a5:6c:58:40:d0:15:89:
17:a3:3d:17:87:ef:4c:97:aa:f8:90:df:1e:b4:65:
97:f9:dd:06:1a:c6:63:c1:21:b6:81:eb:cf:ce:7d:
8d:0b:8c:c9:66:fc:54:5d:02:7a:dc:f2:1a:8c:a1:
f5:8e:58:4d:a2:a4:ee:35:ec:93:79:89:20:19:c2:
b0:0f:81:b2:83:ce:38:d5:ef:6f:88:0e:fd:98:4c:
82:27:14:c8:82:23:e9:fb:ff:0f:f9:37:09:f6:71:
24:18:16:a5:6e:0a:15:30:64:f0:25:35:32:cc:48:
56:54:9f:9e:70:0c:b4:4f:19:20:b7:c9:87:77:7b:
4d:23:96:c8:8e:fb:54:ff:e5:23:e7:aa:f4:ec:81:
fd:f3:0e:b6:ca:9c:77:df:17:29:7e:5f:21:76:82:
13:23:98:88:3d:ec:f3:58:7e:85:7e:7f:dc:ab:51:
3e:34:91:c5:63:cb:f6:8c:89:3b:5f:e3:e6:05:2c:
ee:70:f1:43:2b:2e:46:ed:4c:13:4f:7b:92:da:72:
06:a2:8f:50:89:da:e4:32:75:47:a4:b5:19:f7:a0:
60:7e:8c:96:fa:75:11:82:fb:6c:3e:59:9c:39:5a:
f6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FA:91:CD:19:EA:F5:A3:E0:7B:F7:11:AF:EA:5F:18:E5:28:A5:AB
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136322e34372e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.47.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:47:49:7a:71:61:04:13:d8:3f:df:32:7c:19:b0:d6:e5:33:
5d:18:91:5d:b9:eb:a3:63:89:4d:aa:9a:9f:0d:8f:23:3f:a9:
d0:01:cb:63:97:34:87:e2:11:45:66:22:ac:8b:9f:e0:b0:75:
61:8e:cb:f3:2e:e2:b7:c8:22:88:11:e2:37:63:51:53:3c:1c:
a6:24:be:4b:fe:85:a7:c3:2b:47:13:87:25:8c:3f:3a:7a:7d:
ed:f0:0e:0b:20:7d:f4:c2:36:12:88:9e:bd:42:7a:78:40:b3:
69:5f:48:14:c9:0a:c8:21:88:83:0c:cd:61:dc:27:d2:a3:8e:
da:6e:8f:95:44:4d:b4:ab:9b:56:0f:93:41:de:25:a2:b0:43:
ed:bd:65:c5:e8:87:5b:4c:d7:3d:ee:eb:2e:6c:42:97:a7:d9:
81:ad:6f:6d:33:76:77:44:ed:7c:4e:47:90:21:3c:6a:ba:82:
3d:d6:bd:ee:a2:e7:e7:5b:c2:2d:08:d7:1a:a7:f7:5b:3f:78:
aa:3a:9e:6a:f4:aa:3c:a0:99:ee:f5:37:2c:b2:7d:63:f1:04:
bd:a7:74:59:a9:58:48:91:2e:d8:8e:3a:b1:f9:9f:08:7f:1b:
b0:19:5b:cb:cc:40:a8:e3:1b:19:ea:04:55:ae:f5:24:b3:e2:
33:2c:9c:05
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:25:25 2026 by rpki-client