This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e3235352e302f32342d3332203d3e203632323430.roa File: 3138352e3136392e3235352e302f32342d3332203d3e203632323430.roa (raw, json) Hash identifier: J4IAaHDxp8Z5bb51eG03IFuJ0bXp5Ukof6x3gy89GWM= Subject key identifier: EE:6E:53:1E:67:4A:6C:72:B9:49:E4:8D:07:56:D1:71:F7:01:28:D6 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 29B3835829C8ADE1F33B2800F5AD48FA9154A975 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e3235352e302f32342d3332203d3e203632323430.roa Signing time: Mon 29 Dec 2025 09:50:31 +0000 ROA not before: Mon 29 Dec 2025 09:45:31 +0000 ROA not after: Mon 28 Dec 2026 09:50:31 +0000 asID: 62240 IP address blocks: 185.169.255.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b3:83:58:29:c8:ad:e1:f3:3b:28:00:f5:ad:48:fa:91:54:a9:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Dec 29 09:45:31 2025 GMT Not After : Dec 28 09:50:31 2026 GMT Subject: CN=EE6E531E674A6C72B949E48D0756D171F70128D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f0:e9:a4:a3:20:22:2f:66:4f:da:2c:e5:7b: 90:49:c1:b3:dd:c9:83:fb:99:13:65:dd:a1:fa:19: e5:79:40:f2:5b:81:e7:c2:fa:5d:82:10:d1:3f:1c: 15:75:f7:7c:61:3a:a5:94:9c:78:5a:ca:78:05:8f: aa:55:d2:c5:0b:66:33:9a:73:0c:e9:d1:40:d6:0a: eb:14:21:69:ad:fc:4f:66:62:c8:c0:bf:11:e6:72: 98:fe:8c:31:f3:71:fe:a3:6a:76:6d:c5:b3:c6:02: de:d9:6c:29:23:fd:9d:5c:03:1b:74:40:a9:82:d6: 65:00:0d:c4:ef:e6:cc:d2:d1:13:0c:57:d0:d0:96: 96:e0:73:6d:ff:61:63:80:95:e9:b9:6d:cd:ca:f4: 4c:3b:00:79:af:87:b1:2e:30:ed:b4:6c:d9:93:a9: 69:c2:17:f2:ac:e0:56:06:a6:41:c9:05:fb:06:a3: 5d:b8:0c:6b:3d:e8:98:f6:08:ef:34:94:10:d5:13: bd:b1:c1:bd:19:0f:22:7b:14:00:79:5b:b4:d6:14: 33:08:e9:b4:5a:18:b9:a5:f8:73:5b:70:ef:1c:51: a1:c9:c7:d7:2e:1c:2e:45:92:71:51:9a:28:a8:86: 30:26:85:7e:f7:7a:07:75:71:14:a8:2a:5d:16:36: 4a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6E:53:1E:67:4A:6C:72:B9:49:E4:8D:07:56:D1:71:F7:01:28:D6 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e3235352e302f32342d3332203d3e203632323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.255.0/24 Signature Algorithm: sha256WithRSAEncryption 07:59:24:94:e6:a0:03:36:cc:5d:a4:96:6b:4d:73:99:2d:34: 1f:39:a0:09:7b:fa:22:2c:b0:73:26:0f:02:31:03:dd:37:68: 29:9a:cb:cd:41:5c:a6:81:69:0d:9d:00:d6:f4:3c:d4:8a:ab: ec:f5:a4:c0:e2:4d:28:a2:fd:42:32:71:b6:6c:44:a0:e2:9d: 75:b4:2c:16:17:9b:c2:93:6a:d9:9c:07:f2:08:d7:f5:34:73: d6:b1:97:2c:b0:08:0b:5d:ab:87:82:e5:e9:d2:4c:5c:c4:8b: 22:35:1c:b7:bd:b6:13:ba:b0:0b:e9:5e:5b:1c:8a:de:d1:73: 89:d2:09:bf:48:2a:40:aa:19:2f:8d:a8:12:95:5a:4c:84:79: db:24:b2:90:1e:bf:59:c4:78:62:d7:92:6a:46:f8:7b:95:61: 83:0f:16:94:90:c6:4d:69:7d:59:f4:d1:be:0b:b0:6a:22:2e: 87:14:11:36:1b:6f:59:2b:16:69:a6:1a:15:f7:b3:c5:7a:e6: f3:64:39:f1:b0:cc:74:8f:1e:c9:e6:67:af:3e:9d:0d:25:e0: aa:8c:1e:50:72:c1:d8:fa:d7:07:e9:0d:e1:8f:3c:fd:f6:67: da:6e:22:18:cc:fd:34:2b:dd:11:7c:0d:a8:7c:54:eb:81:aa: e8:6f:ef:c4 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUKbODWCnIreHzOygA9a1I+pFUqXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTEyMjkwOTQ1MzFaFw0yNjEyMjgwOTUwMzFaMDMxMTAvBgNV BAMTKEVFNkU1MzFFNjc0QTZDNzJCOTQ5RTQ4RDA3NTZEMTcxRjcwMTI4RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX8OmkoyAiL2ZP2izle5BJwbPd yYP7mRNl3aH6GeV5QPJbgefC+l2CENE/HBV193xhOqWUnHhayngFj6pV0sULZjOa cwzp0UDWCusUIWmt/E9mYsjAvxHmcpj+jDHzcf6janZtxbPGAt7ZbCkj/Z1cAxt0 QKmC1mUADcTv5szS0RMMV9DQlpbgc23/YWOAlem5bc3K9Ew7AHmvh7EuMO20bNmT qWnCF/Ks4FYGpkHJBfsGo124DGs96Jj2CO80lBDVE72xwb0ZDyJ7FAB5W7TWFDMI 6bRaGLml+HNbcO8cUaHJx9cuHC5FknFRmiiohjAmhX73egd1cRSoKl0WNkoLAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU7m5THmdKbHK5SeSNB1bRcfcBKNYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzYz OTJlMzIzNTM1MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzYzMjMyMzQzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALmp/zANBgkqhkiG9w0BAQsFAAOCAQEAB1kklOagAzbMXaSWa01zmS00 HzmgCXv6IiywcyYPAjED3TdoKZrLzUFcpoFpDZ0A1vQ81Iqr7PWkwOJNKKL9QjJx tmxEoOKddbQsFhebwpNq2ZwH8gjX9TRz1rGXLLAIC12rh4Ll6dJMXMSLIjUct722 E7qwC+leWxyK3tFzidIJv0gqQKoZL42oEpVaTIR52ySykB6/WcR4YteSakb4e5Vh gw8WlJDGTWl9WfTRvguwaiIuhxQRNhtvWSsWaaYaFfezxXrm82Q58bDMdI8eyeZn rz6dDSXgqoweUHLB2PrXB+kN4Y88/fZn2m4iGMz9NCvdEXwNqHxU64Gq6G/vxA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:40:46 2026 by rpki-client