This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139362e312e302f32342d3234203d3e20313336373837.roa File: 3138352e3139362e312e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: /JdUT77VMQMD7+tcvtS8egU0UQMsM8fiRC/xK1Fs9eU= Subject key identifier: 70:CF:C6:0B:3C:DE:36:2D:7F:02:D6:DE:22:8B:69:FC:B0:EF:6C:B5 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1956EBEBAD4F66632352442D79AC68D87072C2A0 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139362e312e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:15 +0000 ROA not before: Fri 28 Nov 2025 11:44:15 +0000 ROA not after: Fri 27 Nov 2026 11:49:15 +0000 asID: 136787 IP address blocks: 185.196.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:56:eb:eb:ad:4f:66:63:23:52:44:2d:79:ac:68:d8:70:72:c2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:15 2025 GMT Not After : Nov 27 11:49:15 2026 GMT Subject: CN=70CFC60B3CDE362D7F02D6DE228B69FCB0EF6CB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:78:33:0c:ae:a0:2c:ee:a4:cc:9b:94:e2:79: 3d:5e:ea:6d:f9:c3:e8:f0:74:9a:13:3b:48:f9:94: ba:73:02:44:37:4a:7d:44:ec:8f:a5:69:ad:a0:74: ba:80:40:ac:ff:e6:b5:a7:20:df:33:ee:ef:21:4e: de:88:87:da:43:ed:31:48:1f:a8:60:90:fd:c0:8b: d7:58:d1:fa:04:34:a6:91:10:d6:25:35:dc:78:22: cf:c1:a1:f7:26:ca:d4:44:9c:f0:92:d5:e8:d9:37: 5e:28:24:ce:87:e9:4c:0f:19:76:54:33:01:1d:da: eb:bd:a2:54:b0:41:c5:9a:8c:e1:5d:17:15:5e:e1: 8c:98:5f:da:cc:3f:02:0c:ea:cb:ac:28:ce:9b:f4: 0b:d9:d0:9c:2e:17:fb:23:82:ca:61:3c:f0:61:72: d0:8f:63:b5:62:8b:1d:9c:7f:ea:82:b5:65:ad:9b: 2f:5d:87:b1:0e:27:b4:9c:7b:76:a4:0b:e4:b2:4d: 62:72:9b:32:72:66:12:e9:8b:93:70:b9:87:a9:db: d3:cf:ca:1f:0f:53:c3:ac:e5:35:00:0d:91:41:54: 4a:6b:31:4a:00:86:b3:64:76:50:0c:57:27:ce:ac: c3:a7:93:40:aa:25:be:74:8c:45:63:c4:3b:22:d2: b2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CF:C6:0B:3C:DE:36:2D:7F:02:D6:DE:22:8B:69:FC:B0:EF:6C:B5 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139362e312e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.1.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:a5:e2:89:3e:2f:01:a1:8b:7d:3c:6c:db:84:32:6d:86:8b: 35:27:db:2b:08:9a:27:4d:e2:17:f9:ce:40:ad:73:d1:e8:43: 42:15:16:63:7c:a3:45:33:cd:45:ae:d8:67:bf:a2:c7:ab:37: 55:a3:14:4d:3b:4b:c2:9f:cb:bf:f2:17:de:22:74:6d:b6:a3: 68:1e:72:0b:f0:ff:8b:51:75:ff:59:47:1d:7b:56:d3:45:46: 6c:ff:3a:20:ae:73:9f:bb:05:32:b1:18:db:c5:fe:05:8a:fe: 69:bd:60:a0:55:b7:7a:ba:4e:8d:7f:ac:66:f1:1f:72:3c:1a: bc:4b:30:59:a4:48:ff:78:28:3c:45:ca:28:59:20:b2:cb:7a: 3d:78:49:d4:70:61:2d:d0:c4:8f:f1:71:87:b0:56:d0:16:cd: 19:0b:c5:66:08:a7:6f:53:ad:bd:b0:67:88:d6:63:05:b7:d2: 07:e2:e3:8d:a2:0e:53:44:1a:cb:ff:93:6e:26:27:46:3a:f9: ab:46:26:37:70:82:da:a4:8c:36:cb:fb:b5:37:37:db:a3:ca: 1d:b2:fb:94:88:60:41:62:c6:e6:7e:f9:e8:21:25:c5:7f:86: 18:a6:54:98:94:bb:57:34:46:ae:b5:0c:f7:a8:52:dd:ac:f3: ae:6d:20:6e -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUGVbr661PZmMjUkQteaxo2HBywqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTVaFw0yNjExMjcxMTQ5MTVaMDMxMTAvBgNV BAMTKDcwQ0ZDNjBCM0NERTM2MkQ3RjAyRDZERTIyOEI2OUZDQjBFRjZDQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCceDMMrqAs7qTMm5TieT1e6m35 w+jwdJoTO0j5lLpzAkQ3Sn1E7I+laa2gdLqAQKz/5rWnIN8z7u8hTt6Ih9pD7TFI H6hgkP3Ai9dY0foENKaRENYlNdx4Is/BofcmytREnPCS1ejZN14oJM6H6UwPGXZU MwEd2uu9olSwQcWajOFdFxVe4YyYX9rMPwIM6susKM6b9AvZ0JwuF/sjgsphPPBh ctCPY7Viix2cf+qCtWWtmy9dh7EOJ7Sce3akC+SyTWJymzJyZhLpi5NwuYep29PP yh8PU8Os5TUADZFBVEprMUoAhrNkdlAMVyfOrMOnk0CqJb50jEVjxDsi0rLDAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUcM/GCzzeNi1/AtbeIotp/LDvbLUwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzkz NjJlMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC5xAEwDQYJKoZIhvcNAQELBQADggEBAF2l4ok+LwGhi308bNuEMm2GizUn 2ysImidN4hf5zkCtc9HoQ0IVFmN8o0UzzUWu2Ge/oserN1WjFE07S8Kfy7/yF94i dG22o2gecgvw/4tRdf9ZRx17VtNFRmz/OiCuc5+7BTKxGNvF/gWK/mm9YKBVt3q6 To1/rGbxH3I8GrxLMFmkSP94KDxFyihZILLLej14SdRwYS3QxI/xcYewVtAWzRkL xWYIp29Trb2wZ4jWYwW30gfi442iDlNEGsv/k24mJ0Y6+atGJjdwgtqkjDbL+7U3 N9ujyh2y+5SIYEFixuZ++eghJcV/hhimVJiUu1c0Rq61DPeoUt2s865tIG4= -----END CERTIFICATE-----Generated at Sat Dec 6 15:52:22 2025 by rpki-client