This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31372e302f32342d3332203d3e203531313637.roa File: 3138352e3139332e31372e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: JJoxuY5HkNGRnDve56Jm+OIk51pr+K/SDskcR+cT51Q= Subject key identifier: 30:8C:2F:92:92:EA:50:09:E7:91:CE:C3:3C:93:F7:BD:4F:8E:A0:36 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 256C9D3FF8889B105946249B071E7F94907F8EE6 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31372e302f32342d3332203d3e203531313637.roa Signing time: Fri 21 Nov 2025 15:49:01 +0000 ROA not before: Fri 21 Nov 2025 15:44:01 +0000 ROA not after: Fri 20 Nov 2026 15:49:01 +0000 asID: 51167 IP address blocks: 185.193.17.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:6c:9d:3f:f8:88:9b:10:59:46:24:9b:07:1e:7f:94:90:7f:8e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:01 2025 GMT Not After : Nov 20 15:49:01 2026 GMT Subject: CN=308C2F9292EA5009E791CEC33C93F7BD4F8EA036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:54:20:5f:a6:39:82:ee:a9:b9:15:ed:6d:bd: 39:4d:fa:48:c3:06:3a:29:52:eb:e5:e7:3d:5e:18: 61:88:7d:26:e3:98:67:5d:d6:79:19:35:d4:d4:39: 4d:7b:04:4e:93:8e:44:09:34:c8:a3:6f:50:a4:43: 9e:d3:7b:3c:b4:d4:7a:3b:53:29:54:7a:79:f1:ae: 4d:09:4f:2e:cd:df:b7:b1:48:13:68:ec:4d:ec:d3: 5f:a9:4e:0d:a5:94:21:f5:c5:74:bd:9c:0c:0f:85: 47:38:b3:db:3d:bf:78:84:26:9c:e9:04:32:fd:d1: f4:77:6e:72:5e:3c:fa:44:2a:5f:20:5d:09:1e:bf: 13:0c:a6:39:e0:4c:1e:ef:32:4b:1a:04:64:e3:e1: 17:de:96:2f:3d:a9:04:97:a9:6a:02:b2:c1:d8:53: a0:46:d4:b9:9e:33:24:c6:09:23:01:2b:f1:18:b3: 5b:ff:31:52:95:24:f6:18:5e:c9:6f:c2:82:4b:4e: c0:e4:e6:fd:b0:71:bb:e6:0e:d9:16:f7:38:b0:d5: 8d:63:4b:ad:09:7a:34:96:80:6d:98:3e:01:fd:19: 93:11:10:e4:da:ca:f7:e3:21:8c:50:af:db:5f:46: ba:aa:96:d3:5f:cd:98:14:9b:bf:11:9c:ae:b6:e8: 5c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8C:2F:92:92:EA:50:09:E7:91:CE:C3:3C:93:F7:BD:4F:8E:A0:36 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31372e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.193.17.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:70:90:46:14:c0:65:5a:9e:19:41:e6:e4:f2:02:c5:a7:94: 95:b2:7c:3c:cc:ec:6e:06:a2:38:e1:95:a9:79:f5:ac:4c:74: b2:28:b5:2c:1c:37:bb:b5:9c:41:14:a3:71:71:d3:39:4a:9a: df:c5:db:6e:3b:67:ee:fc:1c:25:48:aa:b1:df:e1:b7:d0:d4: 68:6c:23:eb:a4:81:0d:1f:07:58:48:7d:63:a3:2e:af:46:55: f6:5b:a6:41:0c:81:fa:7f:db:f3:74:2f:30:5b:f5:4c:2d:26: c0:d6:fd:26:3d:a1:10:50:b7:d1:14:10:1a:a4:d5:23:f4:f8: 00:df:94:5a:0f:5f:58:d1:fe:35:2f:dd:a2:39:8d:93:24:9e: 64:df:d1:60:9e:6b:9f:9a:82:2d:89:fb:5c:a9:c7:33:67:18: 5e:8d:5a:6a:4b:28:49:de:b1:ed:1b:8b:48:61:b0:90:c5:81: ed:55:1b:d0:dc:dc:1e:00:4d:48:4e:37:c3:96:d9:2a:a9:6d: 67:d8:a4:f4:de:e5:84:4d:33:e0:86:89:3f:44:e8:0e:23:e4: 41:5e:71:eb:50:9a:5d:ee:ff:21:ed:ec:c7:8f:1e:9c:87:81: 15:03:d9:96:dc:7c:ca:27:45:51:a9:84:4d:a6:c5:8a:3e:e2: 0c:4e:4b:ba -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUJWydP/iImxBZRiSbBx5/lJB/juYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDFaFw0yNjExMjAxNTQ5MDFaMDMxMTAvBgNV BAMTKDMwOEMyRjkyOTJFQTUwMDlFNzkxQ0VDMzNDOTNGN0JENEY4RUEwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnVCBfpjmC7qm5Fe1tvTlN+kjD BjopUuvl5z1eGGGIfSbjmGdd1nkZNdTUOU17BE6TjkQJNMijb1CkQ57Tezy01Ho7 UylUennxrk0JTy7N37exSBNo7E3s01+pTg2llCH1xXS9nAwPhUc4s9s9v3iEJpzp BDL90fR3bnJePPpEKl8gXQkevxMMpjngTB7vMksaBGTj4Rfeli89qQSXqWoCssHY U6BG1LmeMyTGCSMBK/EYs1v/MVKVJPYYXslvwoJLTsDk5v2wcbvmDtkW9ziw1Y1j S60JejSWgG2YPgH9GZMREOTayvfjIYxQr9tfRrqqltNfzZgUm78RnK626FyDAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUMIwvkpLqUAnnkc7DPJP3vU+OoDYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzkz MzJlMzEzNzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC5wREwDQYJKoZIhvcNAQELBQADggEBAApwkEYUwGVanhlB5uTyAsWnlJWy fDzM7G4Gojjhlal59axMdLIotSwcN7u1nEEUo3Fx0zlKmt/F2247Z+78HCVIqrHf 4bfQ1GhsI+ukgQ0fB1hIfWOjLq9GVfZbpkEMgfp/2/N0LzBb9UwtJsDW/SY9oRBQ t9EUEBqk1SP0+ADflFoPX1jR/jUv3aI5jZMknmTf0WCea5+agi2J+1ypxzNnGF6N WmpLKEnese0bi0hhsJDFge1VG9Dc3B4ATUhON8OW2SqpbWfYpPTe5YRNM+CGiT9E 6A4j5EFecetQml3u/yHt7MePHpyHgRUD2ZbcfMonRVGphE2mxYo+4gxOS7o= -----END CERTIFICATE-----Generated at Sat Dec 6 16:57:04 2025 by rpki-client