This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31382e302f32342d3234203d3e20313336373837.roa File: 3138352e3139332e31382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: +DXBeCnAH+N8GrXsQaRsRJq/AWiTOrtv8ATMZ0FN3o0= Subject key identifier: D2:7E:1F:EE:CC:80:C9:AA:9A:1E:2D:8F:39:27:A8:45:38:17:75:53 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3C3E7E7CC8E583558CA11CE7A6803BBDA9A72D11 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:00 +0000 ROA not before: Fri 21 Nov 2025 15:44:00 +0000 ROA not after: Fri 20 Nov 2026 15:49:00 +0000 asID: 136787 IP address blocks: 185.193.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:3e:7e:7c:c8:e5:83:55:8c:a1:1c:e7:a6:80:3b:bd:a9:a7:2d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:00 2025 GMT Not After : Nov 20 15:49:00 2026 GMT Subject: CN=D27E1FEECC80C9AA9A1E2D8F3927A84538177553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cd:d1:0e:d5:cf:07:02:db:3c:5c:3c:af:f7: ec:51:21:d3:16:fa:dc:07:3b:1f:70:f1:99:d9:47: db:f7:5c:2e:bc:35:6f:19:fb:2b:78:de:2c:c1:0d: 4d:25:b6:ee:99:04:e1:31:eb:3c:e3:fc:d4:75:15: a8:cd:d4:67:92:d5:71:94:c4:08:81:21:e3:a1:4e: 9a:b3:38:38:69:18:22:75:ef:21:c3:d3:5c:c9:76: 00:a1:c2:b3:ef:71:48:36:82:a0:b6:6a:f5:48:67: db:5c:7d:12:62:43:64:7e:68:20:dd:7e:74:68:fe: 4d:60:89:9b:bb:31:fb:48:cb:6b:45:dc:7e:d3:c6: 3b:eb:69:10:bc:b6:0f:cd:10:59:63:39:0c:50:b6: c6:21:20:56:30:18:6f:5a:ac:f8:24:7e:01:fb:94: f9:45:30:ad:8b:d1:ee:69:a9:80:a3:35:fa:76:7f: ff:67:85:3c:49:7f:5d:53:cc:ac:a3:70:46:d8:09: 4f:46:d5:bf:70:c6:c7:30:3c:4e:b1:66:4b:7c:32: b7:35:9e:4e:f4:90:ec:9b:3b:00:a1:8e:ce:4e:12: 53:df:cc:5a:d8:51:e0:a9:9a:a7:a7:32:0c:21:ef: f5:1c:43:6a:93:90:36:1f:16:f3:42:7d:ad:be:b9: d4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7E:1F:EE:CC:80:C9:AA:9A:1E:2D:8F:39:27:A8:45:38:17:75:53 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.193.18.0/24 Signature Algorithm: sha256WithRSAEncryption 13:f2:39:5d:fd:8b:fb:f2:66:c3:6b:87:69:31:7c:52:a3:b0: 41:d8:48:b2:77:e7:4f:e7:17:3f:65:83:56:d9:90:38:43:8f: c4:a0:27:7f:6f:bc:58:38:f5:80:a5:e8:f0:3d:a8:68:f7:18: d0:69:5d:99:fd:8f:d7:b7:4f:09:0a:b2:e2:61:56:65:05:ef: fa:95:b7:f7:52:e8:fa:27:10:0a:91:d1:42:6d:06:92:e7:91: 2c:e7:59:72:52:62:a5:2d:f7:99:98:d7:6c:bf:4d:2f:45:ca: d7:5e:76:2e:16:15:fd:37:cf:67:d6:68:c4:89:67:d3:0d:91: fe:0c:a3:d5:fe:88:38:a9:c9:39:dd:4d:de:56:f5:d9:6c:34: 99:f6:9c:43:69:c9:4e:ff:5a:f8:0b:db:be:05:cd:75:04:c4: 32:42:02:7c:a3:0c:fe:c6:0c:03:22:6c:86:9d:eb:7d:24:32: f7:dc:97:37:7d:9e:70:dd:6e:1d:e2:32:c9:93:a5:dd:4f:ae: 76:d0:a8:f4:1c:fe:fb:35:fd:bd:c9:f5:be:4b:7f:53:6b:1d: 2e:05:68:4c:89:a3:99:a0:40:02:2f:77:d0:f5:65:6b:5d:4c: d7:14:17:6a:93:88:52:97:fb:0f:ff:d1:2a:71:01:9e:38:da: 78:a6:53:d6 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUPD5+fMjlg1WMoRznpoA7vamnLREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDBaFw0yNjExMjAxNTQ5MDBaMDMxMTAvBgNV BAMTKEQyN0UxRkVFQ0M4MEM5QUE5QTFFMkQ4RjM5MjdBODQ1MzgxNzc1NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClzdEO1c8HAts8XDyv9+xRIdMW +twHOx9w8ZnZR9v3XC68NW8Z+yt43izBDU0ltu6ZBOEx6zzj/NR1FajN1GeS1XGU xAiBIeOhTpqzODhpGCJ17yHD01zJdgChwrPvcUg2gqC2avVIZ9tcfRJiQ2R+aCDd fnRo/k1giZu7MftIy2tF3H7TxjvraRC8tg/NEFljOQxQtsYhIFYwGG9arPgkfgH7 lPlFMK2L0e5pqYCjNfp2f/9nhTxJf11TzKyjcEbYCU9G1b9wxscwPE6xZkt8Mrc1 nk70kOybOwChjs5OElPfzFrYUeCpmqenMgwh7/UcQ2qTkDYfFvNCfa2+udSnAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU0n4f7syAyaqaHi2POSeoRTgXdVMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzkz MzJlMzEzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALnBEjANBgkqhkiG9w0BAQsFAAOCAQEAE/I5Xf2L+/Jmw2uHaTF8UqOw QdhIsnfnT+cXP2WDVtmQOEOPxKAnf2+8WDj1gKXo8D2oaPcY0Gldmf2P17dPCQqy 4mFWZQXv+pW391Lo+icQCpHRQm0GkueRLOdZclJipS33mZjXbL9NL0XK1152LhYV /TfPZ9ZoxIln0w2R/gyj1f6IOKnJOd1N3lb12Ww0mfacQ2nJTv9a+AvbvgXNdQTE MkICfKMM/sYMAyJshp3rfSQy99yXN32ecN1uHeIyyZOl3U+udtCo9Bz++zX9vcn1 vkt/U2sdLgVoTImjmaBAAi930PVla11M1xQXapOIUpf7D//RKnEBnjjaeKZT1g== -----END CERTIFICATE-----Generated at Sat Dec 6 17:01:40 2025 by rpki-client