This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e3235322e302f32342d3332203d3e203531313637.roa File: 3138352e3136392e3235322e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: Zwn+M9i7acUGDF5/zT1WWphQBncY2j1Hk4yVh5jJE/Q= Subject key identifier: B1:A9:A0:5C:BC:CC:82:AC:15:46:E6:CD:6C:01:ED:7F:A4:2B:0B:D1 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6C425A426012F0170F04C5FD84B577EE569D757E Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e3235322e302f32342d3332203d3e203531313637.roa Signing time: Mon 29 Dec 2025 09:50:32 +0000 ROA not before: Mon 29 Dec 2025 09:45:32 +0000 ROA not after: Mon 28 Dec 2026 09:50:32 +0000 asID: 51167 IP address blocks: 185.169.252.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:42:5a:42:60:12:f0:17:0f:04:c5:fd:84:b5:77:ee:56:9d:75:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Dec 29 09:45:32 2025 GMT Not After : Dec 28 09:50:32 2026 GMT Subject: CN=B1A9A05CBCCC82AC1546E6CD6C01ED7FA42B0BD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7f:5c:6f:3f:47:7b:6a:6f:72:7c:66:83:97: 50:97:1c:30:7a:9d:b2:e0:4e:1a:d6:26:16:2e:a6: 3d:1b:a2:7e:33:34:e3:a5:16:76:3a:90:8d:2f:4a: 62:ac:0a:cd:ff:8f:8e:f9:f0:fc:ab:8f:e7:51:4b: ee:85:21:9b:8b:58:1b:32:53:8f:11:dd:b9:e0:4c: 56:24:e1:4e:b2:93:56:49:63:fe:65:a2:f7:e6:b3: 27:93:63:92:ef:a2:d6:d0:18:61:b7:89:3b:a2:4c: d2:39:e8:75:74:e9:28:0d:c5:92:48:28:9f:97:c7: 38:5c:b9:da:96:56:81:92:81:da:fb:84:74:e7:69: 27:c0:c7:4c:a8:49:84:42:2f:06:ba:c0:3f:31:b3: 9f:28:82:f0:47:dc:a9:64:ce:cc:c3:3a:67:b6:76: 7e:57:43:e5:65:62:6d:a7:a2:1d:9b:38:13:cc:c9: b4:f8:66:64:08:22:7c:54:fa:15:63:75:2b:22:94: e3:af:25:83:e5:6b:9a:0f:10:f1:55:07:81:86:b5: cd:6d:5a:7b:ea:0e:ad:9a:5d:00:80:a4:12:32:8a: 19:3f:f7:a7:2f:76:d0:73:fb:15:ce:1d:5d:f7:75: c9:03:6e:1d:18:81:bd:a0:e5:3a:f2:03:b0:d8:23: c2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A9:A0:5C:BC:CC:82:AC:15:46:E6:CD:6C:01:ED:7F:A4:2B:0B:D1 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e3235322e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.252.0/24 Signature Algorithm: sha256WithRSAEncryption 55:9c:df:2d:79:4d:22:6a:74:30:01:06:2f:b3:90:1d:30:93: 32:49:67:ea:4d:de:60:55:72:42:66:cf:44:7b:20:98:cc:47: 20:47:36:0b:af:92:8d:3a:10:02:80:31:5c:08:0b:a0:80:75: 67:fb:53:e5:c3:8b:ce:c6:17:72:52:b9:50:07:a2:07:ff:1b: 5e:4d:82:e3:a9:38:db:94:9d:90:e8:68:3a:1b:9a:99:61:da: e3:e2:25:1b:93:39:32:da:ee:00:14:9c:54:7f:aa:8f:55:04: 78:96:28:ac:2e:48:37:5a:8a:43:e5:0e:74:b4:af:4e:ee:bf: a0:5d:7e:b0:b5:a4:82:67:5b:4f:3f:7e:16:95:85:e1:38:4f: 31:a5:0a:74:5c:54:31:3f:1f:3e:b8:d4:3a:ad:b4:13:af:7e: 1d:b0:29:e5:9c:6d:a2:75:df:f2:c2:8e:67:88:93:f7:20:a2: fa:1d:b2:ea:8e:72:af:03:0e:0c:6b:d5:51:bb:05:c9:f5:1c: 5e:8b:39:bd:6f:53:12:03:03:64:dc:93:f3:54:44:13:f4:f8: e6:49:1f:28:a4:0b:7f:23:ce:34:9f:50:cd:4f:c6:7a:66:e0: bb:51:f7:30:00:f3:8e:3f:30:15:04:24:9c:a6:45:13:95:06: 0a:3b:fa:78 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUbEJaQmAS8BcPBMX9hLV37laddX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTEyMjkwOTQ1MzJaFw0yNjEyMjgwOTUwMzJaMDMxMTAvBgNV BAMTKEIxQTlBMDVDQkNDQzgyQUMxNTQ2RTZDRDZDMDFFRDdGQTQyQjBCRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvf1xvP0d7am9yfGaDl1CXHDB6 nbLgThrWJhYupj0bon4zNOOlFnY6kI0vSmKsCs3/j4758Pyrj+dRS+6FIZuLWBsy U48R3bngTFYk4U6yk1ZJY/5lovfmsyeTY5LvotbQGGG3iTuiTNI56HV06SgNxZJI KJ+XxzhcudqWVoGSgdr7hHTnaSfAx0yoSYRCLwa6wD8xs58ogvBH3KlkzszDOme2 dn5XQ+VlYm2noh2bOBPMybT4ZmQIInxU+hVjdSsilOOvJYPla5oPEPFVB4GGtc1t WnvqDq2aXQCApBIyihk/96cvdtBz+xXOHV33dckDbh0Ygb2g5TryA7DYI8JvAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUsamgXLzMgqwVRubNbAHtf6QrC9EwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzYz OTJlMzIzNTMyMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALmp/DANBgkqhkiG9w0BAQsFAAOCAQEAVZzfLXlNImp0MAEGL7OQHTCT Mkln6k3eYFVyQmbPRHsgmMxHIEc2C6+SjToQAoAxXAgLoIB1Z/tT5cOLzsYXclK5 UAeiB/8bXk2C46k425SdkOhoOhuamWHa4+IlG5M5MtruABScVH+qj1UEeJYorC5I N1qKQ+UOdLSvTu6/oF1+sLWkgmdbTz9+FpWF4ThPMaUKdFxUMT8fPrjUOq20E69+ HbAp5ZxtonXf8sKOZ4iT9yCi+h2y6o5yrwMODGvVUbsFyfUcXos5vW9TEgMDZNyT 81REE/T45kkfKKQLfyPONJ9QzU/Gembgu1H3MADzjj8wFQQknKZFE5UGCjv6eA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:15:07 2026 by rpki-client