This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e3235342e302f32342d3332203d3e20313336373837.roa File: 3138352e3136392e3235342e302f32342d3332203d3e20313336373837.roa (raw, json) Hash identifier: a+7fYTa222UHa98k5Sc2L4Ipti7qoRLZFqwE3fhVSqQ= Subject key identifier: 48:35:64:6B:30:EF:7C:3B:BF:27:4A:F2:EC:F1:A1:73:B4:3F:02:7A Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3444BDA3FE8849DDAF130F66124A5F8E1B82297A Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e3235342e302f32342d3332203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:50:32 +0000 ROA not before: Mon 29 Dec 2025 09:45:32 +0000 ROA not after: Mon 28 Dec 2026 09:50:32 +0000 asID: 136787 IP address blocks: 185.169.254.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:44:bd:a3:fe:88:49:dd:af:13:0f:66:12:4a:5f:8e:1b:82:29:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Dec 29 09:45:32 2025 GMT Not After : Dec 28 09:50:32 2026 GMT Subject: CN=4835646B30EF7C3BBF274AF2ECF1A173B43F027A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c7:e1:c5:5d:f7:49:c1:2d:53:71:d1:38:25: 9f:5a:9d:e8:b9:15:ed:cd:f9:dc:a1:dd:c5:93:17: 7f:53:0c:82:68:b7:53:a1:33:d1:c1:08:19:5c:9a: e3:e2:9e:5a:94:ef:63:9a:2a:17:f9:25:c0:3a:53: c7:03:c9:22:f7:18:a3:c9:fd:dc:f1:f1:09:6d:fa: 2f:e5:6a:0c:f6:1f:c4:88:af:55:0f:7e:84:5b:7f: 33:03:91:fe:53:db:ef:1b:3f:af:5d:6d:36:92:ee: 3f:de:c8:c8:f8:66:ea:ed:e7:08:12:0e:89:0d:a1: af:a2:4a:21:9b:22:d1:18:49:41:61:16:a6:50:1a: cc:b6:17:b1:3f:89:5d:c5:05:d1:f3:ea:30:0f:d5: 14:94:bc:2b:b0:1b:a3:21:1d:0d:93:f7:b1:2b:0e: 5e:7a:5a:6e:7b:14:2c:04:c7:8f:19:cc:1b:fa:92: e5:23:33:16:9f:63:43:2b:12:a2:fe:85:2f:54:e6: 2d:29:53:7d:03:06:91:9a:3e:1c:b9:d0:b8:e7:13: 84:83:4d:28:40:ea:83:d4:70:b3:61:5b:77:ed:f4: e2:e7:79:79:8d:06:c7:d5:2e:8c:c0:cd:56:f9:13: ca:0f:9b:d0:6f:e5:d9:a2:29:d8:58:40:f2:a4:6e: 59:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:35:64:6B:30:EF:7C:3B:BF:27:4A:F2:EC:F1:A1:73:B4:3F:02:7A X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e3235342e302f32342d3332203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.254.0/24 Signature Algorithm: sha256WithRSAEncryption 59:88:6a:00:7f:88:88:e1:3c:a7:90:67:da:57:c4:16:b9:b9: c2:21:3f:b9:66:13:26:49:80:84:d6:09:9b:09:cc:b8:88:61: eb:d2:96:90:4c:9d:86:af:f2:31:37:56:ae:74:3c:6a:05:c1: 12:14:56:88:df:27:f2:6a:0a:68:8a:5d:94:59:e8:c2:e1:30: 04:a1:08:2b:0f:9f:61:60:95:44:d2:61:e1:9b:04:a1:4d:df: a6:60:d4:b1:57:dd:53:97:4a:3d:82:11:64:ff:d5:04:76:01: ad:82:5a:9e:fb:fb:f1:c3:da:f5:76:7f:14:c0:ed:fd:5c:8d: d9:e5:6b:6f:74:f1:05:26:ab:fd:be:c2:53:7d:ca:9c:64:43: 04:23:cb:58:60:09:4d:11:76:ed:b7:a1:dc:50:6c:7e:8b:68: 07:b1:9b:51:35:39:9c:7f:ce:cb:85:a0:22:5e:d2:0d:0d:df: 3a:f3:72:e2:ee:ed:7e:0d:b9:9c:a1:f7:a4:78:04:e0:a2:c8: 32:39:b1:44:e9:a1:7b:46:e4:5f:35:b1:81:c2:33:e9:5f:cf: 23:2b:be:2e:4d:f2:2c:55:ac:3a:6c:a9:89:84:30:dd:f2:f6: a8:9b:ed:16:57:68:5e:82:08:7e:03:6a:8a:ca:43:63:89:f5: cd:5e:ee:af -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUNES9o/6ISd2vEw9mEkpfjhuCKXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTEyMjkwOTQ1MzJaFw0yNjEyMjgwOTUwMzJaMDMxMTAvBgNV BAMTKDQ4MzU2NDZCMzBFRjdDM0JCRjI3NEFGMkVDRjFBMTczQjQzRjAyN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjx+HFXfdJwS1TcdE4JZ9anei5 Fe3N+dyh3cWTF39TDIJot1OhM9HBCBlcmuPinlqU72OaKhf5JcA6U8cDySL3GKPJ /dzx8Qlt+i/lagz2H8SIr1UPfoRbfzMDkf5T2+8bP69dbTaS7j/eyMj4Zurt5wgS DokNoa+iSiGbItEYSUFhFqZQGsy2F7E/iV3FBdHz6jAP1RSUvCuwG6MhHQ2T97Er Dl56Wm57FCwEx48ZzBv6kuUjMxafY0MrEqL+hS9U5i0pU30DBpGaPhy50LjnE4SD TShA6oPUcLNhW3ft9OLneXmNBsfVLozAzVb5E8oPm9Bv5dmiKdhYQPKkbllZAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUSDVkazDvfDu/J0ry7PGhc7Q/AnowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzYz OTJlMzIzNTM0MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAuan+MA0GCSqGSIb3DQEBCwUAA4IBAQBZiGoAf4iI4TynkGfaV8QW ubnCIT+5ZhMmSYCE1gmbCcy4iGHr0paQTJ2Gr/IxN1audDxqBcESFFaI3yfyagpo il2UWejC4TAEoQgrD59hYJVE0mHhmwShTd+mYNSxV91Tl0o9ghFk/9UEdgGtglqe +/vxw9r1dn8UwO39XI3Z5WtvdPEFJqv9vsJTfcqcZEMEI8tYYAlNEXbtt6HcUGx+ i2gHsZtRNTmcf87LhaAiXtINDd8683Li7u1+DbmcofekeATgosgyObFE6aF7RuRf NbGBwjPpX88jK74uTfIsVaw6bKmJhDDd8vaom+0WV2heggh+A2qKykNjifXNXu6v -----END CERTIFICATE-----Generated at Sun Jan 25 16:25:11 2026 by rpki-client