This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136332e35352e302f32342d3234203d3e20323031333431.roa File: 3138352e3136332e35352e302f32342d3234203d3e20323031333431.roa (raw, json) Hash identifier: AEKviYCwlUwUAvK782tGK3d6KpLvRJ6Mc4ZohN91lBE= Subject key identifier: C5:D6:63:89:25:71:DF:5D:4D:57:75:5B:1C:34:D9:8B:70:84:53:C3 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 21267F83335609399B85AB0AF8879BA82963883B Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136332e35352e302f32342d3234203d3e20323031333431.roa Signing time: Mon 29 Dec 2025 09:50:32 +0000 ROA not before: Mon 29 Dec 2025 09:45:32 +0000 ROA not after: Mon 28 Dec 2026 09:50:32 +0000 asID: 201341 IP address blocks: 185.163.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:26:7f:83:33:56:09:39:9b:85:ab:0a:f8:87:9b:a8:29:63:88:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Dec 29 09:45:32 2025 GMT Not After : Dec 28 09:50:32 2026 GMT Subject: CN=C5D663892571DF5D4D57755B1C34D98B708453C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9a:bd:9c:39:b0:31:02:78:9b:a4:77:79:8e: 2b:2c:5d:de:5a:c7:ab:ec:ef:46:b4:e5:53:4f:ad: b1:2e:1d:81:6c:9b:5f:a3:fb:a7:44:3c:df:b4:7c: e8:64:5f:03:10:d0:69:f6:05:33:d7:51:2a:6e:3c: 21:ce:f8:28:4c:60:3b:79:8c:ab:36:45:36:78:fb: 60:e4:2e:13:4d:58:6d:84:2d:62:32:76:b6:77:64: 40:cc:ce:a9:3d:d8:d5:1f:72:c0:a8:e9:3c:74:a8: cc:8d:e4:5a:c5:d6:34:cc:a1:4a:0a:2e:fe:ba:b2: af:4a:c4:26:1a:47:11:04:25:f3:86:8e:d6:7e:c6: 00:1c:a7:8c:fd:a2:32:3e:bd:47:55:40:ca:29:f2: 8a:2b:35:ff:ee:6f:25:e2:b5:eb:13:c7:0d:b3:63: 63:87:84:64:0b:30:6f:e8:93:25:cf:f5:b7:82:26: f4:e4:8c:14:60:d7:a2:f1:0a:dc:54:1a:46:0a:f7: 0d:bd:92:32:1c:b6:19:ec:49:d8:2e:94:cc:9f:f2: d8:43:a4:48:6f:b3:ae:61:e2:aa:1e:6f:b7:17:30: 53:73:b8:01:4a:5a:ee:06:58:93:54:85:46:53:1e: 07:9a:0e:bf:bc:31:89:28:4e:31:58:08:39:db:8f: 08:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D6:63:89:25:71:DF:5D:4D:57:75:5B:1C:34:D9:8B:70:84:53:C3 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136332e35352e302f32342d3234203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.163.55.0/24 Signature Algorithm: sha256WithRSAEncryption 15:9e:71:19:a9:ec:c5:62:d4:84:0f:bb:7e:11:5a:18:87:5d: 59:74:17:b1:d6:f0:68:a6:b3:d1:63:62:a9:bd:2e:74:a2:c8: b2:56:f7:13:6e:dc:29:e5:17:11:f7:11:69:cb:b1:07:5a:e5: 18:9f:08:07:9d:62:24:c1:3e:17:1e:24:b6:79:f2:ed:b8:ac: f2:24:a2:c5:75:64:bd:c4:c2:b0:6d:a0:fc:71:51:a5:5c:ba: c8:0f:ea:e6:ca:bf:ef:9f:bd:8b:f7:5a:17:60:77:91:a4:7f: 04:2a:4a:2d:36:a5:24:f7:8d:91:60:6f:3c:da:6b:02:8f:de: 5d:de:cd:7a:31:82:22:6f:60:0e:9f:d5:0c:fd:62:90:a0:51: f6:3d:8a:65:85:04:e3:4d:29:2a:24:13:65:9a:f3:f3:97:8c: 0a:45:8f:cf:5d:33:4c:d2:1b:28:7c:d9:ed:57:62:7b:25:2d: ad:df:07:08:38:06:66:93:d5:2a:d1:cb:04:46:21:b9:ba:5a: c9:0d:fe:e3:b4:20:cc:69:fa:e5:9d:ec:e6:ec:e0:35:c7:55: 87:70:d0:75:76:91:fc:79:cd:dc:93:88:85:cd:29:13:dd:3d: 4c:47:1e:80:c9:ac:df:36:3f:2d:5b:89:5d:e6:78:2e:7c:21: cf:34:10:48 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUISZ/gzNWCTmbhasK+IebqCljiDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTEyMjkwOTQ1MzJaFw0yNjEyMjgwOTUwMzJaMDMxMTAvBgNV BAMTKEM1RDY2Mzg5MjU3MURGNUQ0RDU3NzU1QjFDMzREOThCNzA4NDUzQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4mr2cObAxAnibpHd5jissXd5a x6vs70a05VNPrbEuHYFsm1+j+6dEPN+0fOhkXwMQ0Gn2BTPXUSpuPCHO+ChMYDt5 jKs2RTZ4+2DkLhNNWG2ELWIydrZ3ZEDMzqk92NUfcsCo6Tx0qMyN5FrF1jTMoUoK Lv66sq9KxCYaRxEEJfOGjtZ+xgAcp4z9ojI+vUdVQMop8oorNf/ubyXitesTxw2z Y2OHhGQLMG/okyXP9beCJvTkjBRg16LxCtxUGkYK9w29kjIcthnsSdgulMyf8thD pEhvs65h4qoeb7cXMFNzuAFKWu4GWJNUhUZTHgeaDr+8MYkoTjFYCDnbjwinAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUxdZjiSVx311NV3VbHDTZi3CEU8MwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzYz MzJlMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALmjNzANBgkqhkiG9w0BAQsFAAOCAQEAFZ5xGansxWLUhA+7fhFaGIdd WXQXsdbwaKaz0WNiqb0udKLIslb3E27cKeUXEfcRacuxB1rlGJ8IB51iJME+Fx4k tnny7bis8iSixXVkvcTCsG2g/HFRpVy6yA/q5sq/75+9i/daF2B3kaR/BCpKLTal JPeNkWBvPNprAo/eXd7NejGCIm9gDp/VDP1ikKBR9j2KZYUE400pKiQTZZrz85eM CkWPz10zTNIbKHzZ7VdieyUtrd8HCDgGZpPVKtHLBEYhubpayQ3+47QgzGn65Z3s 5uzgNcdVh3DQdXaR/HnN3JOIhc0pE909TEcegMms3zY/LVuJXeZ4LnwhzzQQSA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:03:34 2026 by rpki-client