This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137322e35352e302f32342d3234203d3e20313336373837.roa File: 3138352e3137322e35352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: ocEdbjTYQswT7X3PLDS/ggqcCrFlDOPZK8LSNY3czk8= Subject key identifier: 14:AF:D6:F6:6E:42:25:20:F4:E3:D1:89:FB:C2:C5:F8:AD:1B:DA:11 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7BA3AFCC899E1CEBD40B70D20C2F9011823924BA Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137322e35352e302f32342d3234203d3e20313336373837.roa Signing time: Sat 03 Jan 2026 22:51:13 +0000 ROA not before: Sat 03 Jan 2026 22:46:13 +0000 ROA not after: Sat 02 Jan 2027 22:51:13 +0000 asID: 136787 IP address blocks: 185.172.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a3:af:cc:89:9e:1c:eb:d4:0b:70:d2:0c:2f:90:11:82:39:24:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Jan 3 22:46:13 2026 GMT Not After : Jan 2 22:51:13 2027 GMT Subject: CN=14AFD6F66E422520F4E3D189FBC2C5F8AD1BDA11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:47:74:08:e9:d2:98:08:ad:30:5b:93:31: 95:63:1f:55:9a:01:9a:23:a9:ad:4c:d2:64:0e:53: e8:e9:25:f0:55:1e:74:57:45:7c:71:65:8c:06:13: f7:d0:c9:59:1f:9c:17:5b:b1:c4:58:d9:57:bd:e5: e0:62:6d:4a:15:81:6a:92:39:8e:51:48:4a:c7:db: bf:6f:4e:b6:6c:0f:bd:c0:8b:f5:c2:1d:b4:3f:08: cd:15:cd:02:bf:79:8c:55:00:2e:b9:00:4e:b2:69: 29:d4:11:d1:06:2b:f6:19:c8:1d:89:3b:b1:53:08: ee:6b:15:9a:80:54:c7:46:1c:cf:67:6b:ce:cc:3a: 61:da:da:d3:b4:85:f8:0f:81:53:98:42:2f:50:25: d3:c8:c3:20:21:71:5e:4c:7c:bc:5d:65:ac:8a:ea: 1e:1d:81:6b:34:cd:cd:04:bc:2c:31:a2:7b:97:65: a7:4a:e1:f1:7b:26:9e:f9:33:61:fb:95:bb:be:de: 1c:d6:f7:bc:44:a8:da:ed:03:84:19:65:be:19:0e: c3:b9:e6:a5:64:02:2f:76:13:5f:fc:c4:2f:42:2e: 08:07:7c:36:3c:ee:c9:98:16:f2:05:38:c5:8b:82: 3a:d2:7f:67:3e:8a:04:1f:5d:29:33:c7:00:78:b3: 71:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AF:D6:F6:6E:42:25:20:F4:E3:D1:89:FB:C2:C5:F8:AD:1B:DA:11 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137322e35352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.55.0/24 Signature Algorithm: sha256WithRSAEncryption d4:62:c6:12:6f:d6:e4:f0:cc:4f:c1:23:26:a1:9b:62:02:92: a2:29:be:7f:a7:55:53:6a:f2:4a:29:71:44:a1:68:33:77:b4: a6:05:eb:c0:1c:13:fd:ac:7f:d1:a9:62:ea:da:34:76:fd:4e: ec:3f:0d:35:a3:2f:c1:2f:e4:76:bb:f0:84:ee:b5:dd:ac:0f: c7:71:dc:d8:1a:cc:b7:ea:f7:60:24:08:7e:3c:a8:d9:02:8c: d0:5f:a8:0e:e4:e0:8e:2e:27:e2:41:81:d5:cc:e2:d1:58:f9: bd:b7:10:e4:1c:3c:9e:2a:6c:8c:eb:44:1f:21:fb:bb:ed:6a: 76:0a:d6:8d:1e:0e:a5:75:26:52:d8:83:01:41:39:99:ad:5a: 86:73:9c:f5:8b:93:2a:12:d6:56:f9:69:3f:ca:de:bb:b3:8e: 5d:34:75:62:4d:8a:67:87:4e:38:a8:95:8b:a9:b0:38:c7:06: 1b:40:42:b2:6f:cc:e1:da:c4:71:fa:82:f9:c4:4c:63:b7:b7: 76:32:7a:f5:70:08:85:ac:45:f7:6a:a5:c6:94:04:8c:b3:da: 9c:f5:58:f7:06:1a:34:b3:4d:2b:ca:10:ae:b9:9d:ca:43:95: 18:dc:83:f1:de:35:6e:49:37:1a:e8:70:22:90:0a:bc:33:ec: c6:81:bb:16 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUe6OvzImeHOvUC3DSDC+QEYI5JLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNjAxMDMyMjQ2MTNaFw0yNzAxMDIyMjUxMTNaMDMxMTAvBgNV BAMTKDE0QUZENkY2NkU0MjI1MjBGNEUzRDE4OUZCQzJDNUY4QUQxQkRBMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB9kd0COnSmAitMFuTMZVjH1Wa AZojqa1M0mQOU+jpJfBVHnRXRXxxZYwGE/fQyVkfnBdbscRY2Ve95eBibUoVgWqS OY5RSErH279vTrZsD73Ai/XCHbQ/CM0VzQK/eYxVAC65AE6yaSnUEdEGK/YZyB2J O7FTCO5rFZqAVMdGHM9na87MOmHa2tO0hfgPgVOYQi9QJdPIwyAhcV5MfLxdZayK 6h4dgWs0zc0EvCwxonuXZadK4fF7Jp75M2H7lbu+3hzW97xEqNrtA4QZZb4ZDsO5 5qVkAi92E1/8xC9CLggHfDY87smYFvIFOMWLgjrSf2c+igQfXSkzxwB4s3ERAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUFK/W9m5CJSD049GJ+8LF+K0b2hEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzcz MjJlMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALmsNzANBgkqhkiG9w0BAQsFAAOCAQEA1GLGEm/W5PDMT8EjJqGbYgKS oim+f6dVU2rySilxRKFoM3e0pgXrwBwT/ax/0ali6to0dv1O7D8NNaMvwS/kdrvw hO613awPx3Hc2BrMt+r3YCQIfjyo2QKM0F+oDuTgji4n4kGB1czi0Vj5vbcQ5Bw8 nipsjOtEHyH7u+1qdgrWjR4OpXUmUtiDAUE5ma1ahnOc9YuTKhLWVvlpP8reu7OO XTR1Yk2KZ4dOOKiVi6mwOMcGG0BCsm/M4drEcfqC+cRMY7e3djJ69XAIhaxF92ql xpQEjLPanPVY9wYaNLNNK8oQrrmdykOVGNyD8d41bkk3GuhwIpAKvDPsxoG7Fg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:47 2026 by rpki-client