This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136332e35322e302f32342d3234203d3e20323031333431.roa File: 3138352e3136332e35322e302f32342d3234203d3e20323031333431.roa (raw, json) Hash identifier: mkPCHbkSp14Yvc9LKsEH3GgNJJZYEumTrTgsqeXEid0= Subject key identifier: F4:A4:33:8B:AE:16:42:E2:A9:0D:AC:BE:29:66:4A:19:72:0F:2F:F2 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 21009E105723845DFDE359ADE817197272FC7B00 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136332e35322e302f32342d3234203d3e20323031333431.roa Signing time: Mon 29 Dec 2025 09:50:32 +0000 ROA not before: Mon 29 Dec 2025 09:45:32 +0000 ROA not after: Mon 28 Dec 2026 09:50:32 +0000 asID: 201341 IP address blocks: 185.163.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:00:9e:10:57:23:84:5d:fd:e3:59:ad:e8:17:19:72:72:fc:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Dec 29 09:45:32 2025 GMT Not After : Dec 28 09:50:32 2026 GMT Subject: CN=F4A4338BAE1642E2A90DACBE29664A19720F2FF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a5:b5:3d:52:b4:6e:80:41:b6:12:16:8d:b2: 06:7a:0d:88:1f:cc:05:37:b9:bc:da:aa:40:1d:5a: 2f:50:67:ad:00:05:ea:9c:a4:73:60:94:02:79:b6: e5:de:93:27:14:ad:34:5b:69:b7:7e:79:e3:d4:01: 4b:0d:74:06:55:ce:9a:9f:c2:da:e9:da:83:63:1f: cb:48:14:f4:bb:e5:0d:b8:40:2d:78:5b:58:d6:aa: fc:52:b6:f2:4c:5e:11:bd:97:80:f1:f4:7b:af:e6: 09:03:f9:6f:e5:f5:f2:19:86:b3:13:8d:68:24:23: 13:45:1d:3f:09:74:21:c4:cf:7c:1e:92:63:8b:31: a8:3f:14:4c:96:e6:2c:f0:32:7e:96:41:e8:eb:55: c1:56:d8:43:52:2d:1d:96:c2:ea:82:2f:78:66:42: 96:be:89:4a:27:2e:83:73:58:d9:52:0c:3a:13:e5: ce:ea:e3:66:f4:bc:45:a0:4e:ca:3b:1f:9b:02:3e: 39:2a:b2:2e:eb:db:ff:6e:93:6f:04:9c:65:4b:fa: 5d:8a:a3:32:1e:cf:e7:7c:55:23:d1:4d:f9:9a:a5: 55:11:c8:92:5a:8b:b3:3e:7e:d2:bc:dc:5a:ec:91: 6c:25:e7:34:b0:dd:dc:96:84:6e:8b:13:b4:12:07: 78:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A4:33:8B:AE:16:42:E2:A9:0D:AC:BE:29:66:4A:19:72:0F:2F:F2 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136332e35322e302f32342d3234203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.163.52.0/24 Signature Algorithm: sha256WithRSAEncryption 61:8c:b4:82:cb:eb:1e:e0:83:3b:8b:1b:1f:33:e2:60:22:04: 39:9d:a7:e2:db:c4:cd:92:da:8a:26:4b:20:b2:cb:3a:56:8d: 58:67:9e:14:57:27:db:7b:41:a0:d7:ce:5f:57:7f:3e:d7:17: 06:a8:52:ae:b4:04:5c:02:cd:d2:ea:89:f9:5c:f2:7b:9d:5e: 30:02:d8:30:84:9e:76:d8:32:ec:72:35:30:2b:58:bb:0b:f3: 02:29:db:13:dc:45:59:bd:d6:93:6c:ed:5a:78:91:d9:28:79: 68:b7:fe:6f:fe:11:63:5d:aa:73:43:e7:a4:df:ea:a3:40:f8: bf:e6:b7:98:75:af:e1:76:f5:fb:64:e5:45:8f:25:b6:bd:c6: 00:65:38:8f:1d:2f:d7:c1:fe:60:28:6b:86:5f:67:59:95:a1: f2:a0:1d:bf:a9:5e:b5:5b:47:07:dd:07:a0:3d:41:c6:a6:08: d4:31:3b:fa:a7:ef:e2:01:ab:c4:38:12:5c:2a:7b:b8:e0:97: 10:20:68:d9:c1:5c:98:87:59:bf:ed:b9:23:fe:00:d1:24:92: 19:7d:8f:78:ef:73:2c:9d:c9:ea:6b:63:79:ee:fc:0d:13:3f: 82:b2:15:1d:54:c6:39:63:d8:3e:e5:08:ea:8d:bd:33:dd:ff: e6:20:47:b9 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUIQCeEFcjhF3941mt6BcZcnL8ewAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTEyMjkwOTQ1MzJaFw0yNjEyMjgwOTUwMzJaMDMxMTAvBgNV BAMTKEY0QTQzMzhCQUUxNjQyRTJBOTBEQUNCRTI5NjY0QTE5NzIwRjJGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnpbU9UrRugEG2EhaNsgZ6DYgf zAU3ubzaqkAdWi9QZ60ABeqcpHNglAJ5tuXekycUrTRbabd+eePUAUsNdAZVzpqf wtrp2oNjH8tIFPS75Q24QC14W1jWqvxStvJMXhG9l4Dx9Huv5gkD+W/l9fIZhrMT jWgkIxNFHT8JdCHEz3wekmOLMag/FEyW5izwMn6WQejrVcFW2ENSLR2WwuqCL3hm Qpa+iUonLoNzWNlSDDoT5c7q42b0vEWgTso7H5sCPjkqsi7r2/9uk28EnGVL+l2K ozIez+d8VSPRTfmapVURyJJai7M+ftK83FrskWwl5zSw3dyWhG6LE7QSB3hlAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU9KQzi64WQuKpDay+KWZKGXIPL/IwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzYz MzJlMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALmjNDANBgkqhkiG9w0BAQsFAAOCAQEAYYy0gsvrHuCDO4sbHzPiYCIE OZ2n4tvEzZLaiiZLILLLOlaNWGeeFFcn23tBoNfOX1d/PtcXBqhSrrQEXALN0uqJ +Vzye51eMALYMISedtgy7HI1MCtYuwvzAinbE9xFWb3Wk2ztWniR2Sh5aLf+b/4R Y12qc0PnpN/qo0D4v+a3mHWv4Xb1+2TlRY8ltr3GAGU4jx0v18H+YChrhl9nWZWh 8qAdv6letVtHB90HoD1BxqYI1DE7+qfv4gGrxDgSXCp7uOCXECBo2cFcmIdZv+25 I/4A0SSSGX2PeO9zLJ3J6mtjee78DRM/grIVHVTGOWPYPuUI6o29M93/5iBHuQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:11:16 2026 by rpki-client