This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139362e322e302f32342d3234203d3e20313336373837.roa File: 3138352e3139362e322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: w82ZklqMGjInJrGNrKMfctAJ3FuZeijVWCziK1bXlyo= Subject key identifier: 03:02:00:3B:C6:7D:CF:15:8A:46:0F:61:2F:BA:2A:DF:49:F1:2D:E8 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 443871A0C614DFE12C3F90EAAF8AAA05422E44FD Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139362e322e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:33 +0000 ROA not before: Fri 28 Nov 2025 11:44:33 +0000 ROA not after: Fri 27 Nov 2026 11:49:33 +0000 asID: 136787 IP address blocks: 185.196.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:38:71:a0:c6:14:df:e1:2c:3f:90:ea:af:8a:aa:05:42:2e:44:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:33 2025 GMT Not After : Nov 27 11:49:33 2026 GMT Subject: CN=0302003BC67DCF158A460F612FBA2ADF49F12DE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d5:f3:22:c4:56:49:43:06:0e:a0:02:cd:6b: b5:14:51:a1:4f:9c:c8:37:49:26:f6:74:b6:32:5f: ec:5b:ba:ce:00:66:be:07:bb:dd:60:66:88:ee:06: d1:95:b8:86:aa:b4:b9:6f:11:8c:b6:aa:b6:18:ab: f1:b4:10:55:e5:34:d1:ca:9c:ee:8a:82:ec:01:c8: 74:64:e2:7b:01:f9:3d:12:ff:ae:9c:db:3c:34:b9: 6e:e9:e8:66:78:28:a6:0a:ed:e7:b1:b0:a0:96:7f: 2b:03:8f:ec:75:a6:f4:d5:d7:d0:1d:1d:5e:88:70: 56:88:97:0d:a4:d2:f7:f8:1e:c4:e9:3a:ae:7e:95: f7:2a:9a:ab:06:ef:7d:83:8c:31:8d:d4:49:cd:30: 73:46:51:a3:2d:c1:11:a6:5a:0f:20:eb:8e:2d:04: 32:53:2b:55:93:18:40:73:cc:8a:c5:05:5a:b6:1d: 88:41:e8:e5:fd:27:7c:67:da:8e:05:19:ed:70:c4: 78:1a:37:b6:29:27:b6:36:86:ad:19:c3:31:75:39: d2:e2:a7:1a:cc:74:df:0b:e0:a9:07:dd:2b:6e:5a: e1:80:ab:51:e9:6d:79:f8:07:c9:77:0f:39:82:c1: 52:85:be:a4:13:ff:5a:10:b5:94:34:31:47:b0:01: db:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:02:00:3B:C6:7D:CF:15:8A:46:0F:61:2F:BA:2A:DF:49:F1:2D:E8 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139362e322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.2.0/24 Signature Algorithm: sha256WithRSAEncryption bf:03:eb:27:af:65:88:8f:aa:8b:ec:9d:05:80:46:d5:91:a7: 50:50:69:a9:2a:72:b2:76:3a:78:93:a2:f0:5c:48:26:b6:d6: 3c:51:f4:0e:cd:18:f0:57:a0:de:b4:ab:d1:38:0f:78:a7:db: 2a:e2:fc:ef:bc:72:07:3a:7b:3e:9e:c2:9e:48:67:11:63:ce: 84:1b:fb:22:b4:4b:70:44:9d:83:08:f6:81:0b:a1:b9:23:84: 8a:5a:f9:04:ca:4c:de:ec:44:6f:c8:d6:cf:d3:0b:52:e9:87: aa:f7:86:1c:64:f3:b1:32:75:d0:36:8c:22:c3:eb:2c:16:84: e9:db:46:c8:b1:9b:39:75:d9:bc:e7:a9:41:42:ba:59:fe:21: d8:fe:84:87:d6:e2:09:c6:d9:a2:1f:3e:9e:c7:af:d1:a2:c9: 7c:2b:98:ec:2c:f8:b6:0a:a5:50:1b:e1:22:00:1e:56:c5:53: c3:2e:27:5e:4c:a5:0d:63:e2:c6:ea:29:b2:ed:f6:88:3e:cf: 91:52:91:81:93:04:d3:76:69:bb:cb:89:92:e1:70:7a:a0:74: f3:61:2a:08:94:a2:8d:7f:b0:5f:0e:ce:50:09:a7:13:c5:ef: 9c:61:43:1c:cb:79:71:27:fb:01:12:14:39:fe:fa:95:a3:9b: ba:36:54:5b -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIURDhxoMYU3+EsP5Dqr4qqBUIuRP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzNaFw0yNjExMjcxMTQ5MzNaMDMxMTAvBgNV BAMTKDAzMDIwMDNCQzY3RENGMTU4QTQ2MEY2MTJGQkEyQURGNDlGMTJERTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE1fMixFZJQwYOoALNa7UUUaFP nMg3SSb2dLYyX+xbus4AZr4Hu91gZojuBtGVuIaqtLlvEYy2qrYYq/G0EFXlNNHK nO6KguwByHRk4nsB+T0S/66c2zw0uW7p6GZ4KKYK7eexsKCWfysDj+x1pvTV19Ad HV6IcFaIlw2k0vf4HsTpOq5+lfcqmqsG732DjDGN1EnNMHNGUaMtwRGmWg8g644t BDJTK1WTGEBzzIrFBVq2HYhB6OX9J3xn2o4FGe1wxHgaN7YpJ7Y2hq0ZwzF1OdLi pxrMdN8L4KkH3StuWuGAq1HpbXn4B8l3DzmCwVKFvqQT/1oQtZQ0MUewAdt5AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUAwIAO8Z9zxWKRg9hL7oq30nxLegwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzkz NjJlMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC5xAIwDQYJKoZIhvcNAQELBQADggEBAL8D6yevZYiPqovsnQWARtWRp1BQ aakqcrJ2OniTovBcSCa21jxR9A7NGPBXoN60q9E4D3in2yri/O+8cgc6ez6ewp5I ZxFjzoQb+yK0S3BEnYMI9oELobkjhIpa+QTKTN7sRG/I1s/TC1Lph6r3hhxk87Ey ddA2jCLD6ywWhOnbRsixmzl12bznqUFCuln+Idj+hIfW4gnG2aIfPp7Hr9GiyXwr mOws+LYKpVAb4SIAHlbFU8MuJ15MpQ1j4sbqKbLt9og+z5FSkYGTBNN2abvLiZLh cHqgdPNhKgiUoo1/sF8OzlAJpxPF75xhQxzLeXEn+wESFDn++pWjm7o2VFs= -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:25 2025 by rpki-client