This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e302e302f32342d3234203d3e20313431303339.roa File: 3138352e3136392e302e302f32342d3234203d3e20313431303339.roa (raw, json) Hash identifier: V/B6L4FiULHwEgqkWXzljycCwlCrb+KAyPrA4kB+QfM= Subject key identifier: AC:BD:E2:2E:98:57:6C:C4:6E:80:21:2A:62:3D:BF:4A:81:F8:0D:09 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6F1A1FD8A6362BA11492E12B49A1DFB0FD492763 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e302e302f32342d3234203d3e20313431303339.roa Signing time: Mon 29 Dec 2025 09:50:32 +0000 ROA not before: Mon 29 Dec 2025 09:45:32 +0000 ROA not after: Mon 28 Dec 2026 09:50:32 +0000 asID: 141039 IP address blocks: 185.169.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:1a:1f:d8:a6:36:2b:a1:14:92:e1:2b:49:a1:df:b0:fd:49:27:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Dec 29 09:45:32 2025 GMT Not After : Dec 28 09:50:32 2026 GMT Subject: CN=ACBDE22E98576CC46E80212A623DBF4A81F80D09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:39:05:74:cf:a6:76:4c:40:4e:63:4c:92:68: 09:c0:ae:e6:e2:28:0f:44:f2:d0:ca:da:8b:fd:34: e6:49:ea:44:b9:cf:0c:9e:58:0a:58:94:2d:bf:be: 2a:a9:c1:5c:0c:83:db:cb:6f:b1:c8:33:04:cd:fe: 2e:23:c3:6b:d7:ec:b7:73:4d:c3:a2:38:4f:70:67: af:f2:1e:44:5b:61:57:2c:8a:28:e0:06:c8:96:25: 1d:44:1f:d9:cf:3d:38:18:9f:68:ab:9f:2f:bc:ab: 83:3e:a3:27:21:27:cf:7b:54:75:c1:21:37:d8:ed: b3:cd:2f:14:d3:58:a6:06:29:df:ef:82:68:50:a6: b9:2e:3e:9b:87:f4:ed:7c:b8:39:86:93:bf:3a:bd: 60:ee:4f:8e:e4:84:96:07:7f:ff:4d:4e:c8:b8:b0: 08:12:7d:e2:fe:39:13:61:5b:19:6f:a2:68:20:5b: 96:2b:ce:4e:07:18:5e:ef:0a:70:1d:76:df:d2:3a: 91:34:86:34:1f:6e:3d:36:75:cc:3d:ea:31:ad:f0: 03:2e:0f:d0:6d:85:62:c4:5b:8e:b7:2d:fe:b7:db: 99:4b:bc:fc:dd:c2:97:60:09:06:48:8d:1b:c3:d3: e8:ed:9c:75:58:7a:07:0d:18:56:cb:5c:02:f0:1c: c2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BD:E2:2E:98:57:6C:C4:6E:80:21:2A:62:3D:BF:4A:81:F8:0D:09 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e302e302f32342d3234203d3e20313431303339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.0.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:47:a8:3b:17:74:62:e6:db:07:b9:8f:a8:89:d9:06:5a:29: 52:bd:15:ff:8a:a6:b8:6b:7b:74:76:c6:57:d4:f8:ae:da:a3: a2:b8:f3:af:e3:63:bb:17:7e:aa:b2:a1:74:55:d1:60:78:78: 9c:bd:ba:fe:96:79:c0:ae:45:17:b3:4d:94:75:4b:28:17:6b: 86:56:17:d0:28:a0:41:74:ae:e7:18:9a:f2:c1:c3:d2:0f:f0: 63:0c:bd:15:06:58:89:31:e3:49:28:04:95:a6:f9:59:b3:02: f3:4a:d5:da:8a:8d:3f:5f:96:1a:1b:e5:ff:ed:68:ef:c5:31: 6b:e9:56:a5:af:11:06:2b:1f:48:8a:64:65:e1:79:4c:95:67: c6:b2:c1:d6:f3:ae:d0:c0:d2:b8:fc:49:b4:e2:12:86:95:b9: ae:46:31:79:a5:68:c3:f6:aa:83:51:5e:82:1c:9d:60:4c:a5: bd:95:bb:b6:30:65:a3:72:15:e6:21:f1:b1:49:55:94:75:7e: 1c:f8:68:e0:ec:3d:ed:6f:c0:a9:11:8a:cd:d9:84:6a:2e:b0: 86:de:f3:2c:e0:0d:55:e7:40:d5:b3:8c:6e:7a:7d:4a:57:d6: bc:9d:85:26:5a:ee:17:b8:50:f7:b2:80:99:ec:00:b1:1a:fc: 8a:27:db:2c -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUbxof2KY2K6EUkuErSaHfsP1JJ2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTEyMjkwOTQ1MzJaFw0yNjEyMjgwOTUwMzJaMDMxMTAvBgNV BAMTKEFDQkRFMjJFOTg1NzZDQzQ2RTgwMjEyQTYyM0RCRjRBODFGODBEMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEOQV0z6Z2TEBOY0ySaAnArubi KA9E8tDK2ov9NOZJ6kS5zwyeWApYlC2/viqpwVwMg9vLb7HIMwTN/i4jw2vX7Ldz TcOiOE9wZ6/yHkRbYVcsiijgBsiWJR1EH9nPPTgYn2irny+8q4M+oychJ897VHXB ITfY7bPNLxTTWKYGKd/vgmhQprkuPpuH9O18uDmGk786vWDuT47khJYHf/9NTsi4 sAgSfeL+ORNhWxlvomggW5Yrzk4HGF7vCnAddt/SOpE0hjQfbj02dcw96jGt8AMu D9BthWLEW463Lf6325lLvPzdwpdgCQZIjRvD0+jtnHVYegcNGFbLXALwHMJhAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUrL3iLphXbMRugCEqYj2/SoH4DQkwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzYz OTJlMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMDMzMzkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC5qQAwDQYJKoZIhvcNAQELBQADggEBAGpHqDsXdGLm2we5j6iJ2QZaKVK9 Ff+Kprhre3R2xlfU+K7ao6K486/jY7sXfqqyoXRV0WB4eJy9uv6WecCuRRezTZR1 SygXa4ZWF9AooEF0rucYmvLBw9IP8GMMvRUGWIkx40koBJWm+VmzAvNK1dqKjT9f lhob5f/taO/FMWvpVqWvEQYrH0iKZGXheUyVZ8aywdbzrtDA0rj8SbTiEoaVua5G MXmlaMP2qoNRXoIcnWBMpb2Vu7YwZaNyFeYh8bFJVZR1fhz4aODsPe1vwKkRis3Z hGousIbe8yzgDVXnQNWzjG56fUpX1rydhSZa7he4UPeygJnsALEa/Ion2yw= -----END CERTIFICATE-----Generated at Sun Jan 25 11:49:35 2026 by rpki-client