This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139362e332e302f32342d3234203d3e20313336373837.roa File: 3138352e3139362e332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: guXpYYvgJ3P9R+1qZTjUhE+97fm7xnRWGSgq+c9Fz0Q= Subject key identifier: 9A:02:E0:08:2F:66:72:DC:17:8B:9A:4B:71:78:B8:F7:3A:65:C8:22 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6469508FE6D62A9552E78BC45179C22352C5F934 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139362e332e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:28 +0000 ROA not before: Fri 28 Nov 2025 11:44:28 +0000 ROA not after: Fri 27 Nov 2026 11:49:28 +0000 asID: 136787 IP address blocks: 185.196.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:69:50:8f:e6:d6:2a:95:52:e7:8b:c4:51:79:c2:23:52:c5:f9:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:28 2025 GMT Not After : Nov 27 11:49:28 2026 GMT Subject: CN=9A02E0082F6672DC178B9A4B7178B8F73A65C822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:13:d4:03:5b:58:61:62:47:9c:9c:c9:d6:da: e0:c4:f8:1d:43:5c:00:20:eb:2c:94:aa:69:0c:0f: cf:5a:ce:cc:d5:a8:cc:c7:b3:e8:27:44:8f:42:b9: 28:31:cd:06:21:63:3f:a1:78:7f:6a:ec:de:b5:0c: 48:53:22:2c:9b:7f:9f:d1:dd:6b:2b:5d:c2:dc:30: bb:48:fa:9a:84:9b:e0:10:e5:7f:db:86:41:33:ae: c1:a0:17:f5:8c:a7:c0:30:19:54:12:cc:2d:cc:e5: 58:1d:7d:81:df:dc:6b:40:a2:28:99:d0:17:41:c0: 6e:a3:a8:09:de:56:2d:7f:78:8e:b4:d9:52:e7:92: 6a:96:a5:c2:a3:33:5f:5d:2f:f4:37:ad:7e:f0:25: 1a:18:aa:b2:1e:cd:bb:ce:04:b7:1a:4a:8e:22:fa: 86:b3:b1:cd:62:c6:26:ba:e7:eb:f7:a4:ec:4a:1f: 66:20:03:cf:cd:ba:0e:f4:07:da:70:f7:d9:42:c5: 49:65:2f:b8:12:9c:db:a1:b8:72:2c:f0:25:a5:31: f9:ec:af:2d:7b:6d:52:4a:2b:7e:11:b2:f5:f0:83: 4a:0d:f1:cd:d6:f8:6d:b5:df:e4:a0:32:c7:bf:8c: 1a:7f:ef:9f:91:91:59:03:53:7d:ed:91:a2:57:a4: 15:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:02:E0:08:2F:66:72:DC:17:8B:9A:4B:71:78:B8:F7:3A:65:C8:22 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139362e332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.3.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:13:21:02:2f:50:7d:8a:7c:25:61:e1:38:7c:db:81:39:60: b2:6f:a9:39:16:07:a0:1d:c3:94:03:46:19:1d:1e:70:77:6c: 22:d0:55:21:38:d7:d5:e7:d2:6e:d5:76:ad:c3:3e:e5:68:e4: d7:8d:ba:8f:a3:4d:d6:64:63:18:ea:16:9f:40:8a:c7:b6:54: 34:c2:88:89:43:12:35:22:0f:bc:39:f8:8e:f6:5a:16:27:91: 73:05:ec:d2:67:ce:e5:3d:2c:5f:83:2a:78:6c:cc:0d:50:2f: 3a:dc:46:14:53:a8:48:36:2a:d5:63:25:e4:fd:69:06:c7:5b: d7:77:a4:99:b9:5a:69:fe:3a:7c:47:15:ad:6e:15:05:1b:70: 43:7c:9c:74:14:5d:08:33:db:01:ff:34:22:8b:6a:b6:9c:5d: 39:71:bf:e6:aa:cd:5e:60:f0:7e:cd:c8:5b:fb:bf:45:fa:89: 3a:13:7c:1e:b9:f6:c2:d9:0f:8b:52:be:58:58:05:c9:c7:2e: 05:dd:a3:dc:04:87:0b:39:00:db:7c:ab:ec:f3:c3:ae:7f:f3: cc:b1:19:fd:55:f5:de:5c:0e:0c:e9:f0:37:9a:dd:be:4d:45: 3b:e8:05:6c:dd:98:1d:fb:da:30:a9:6f:79:6a:3c:7e:5b:a5: ff:ae:e4:94 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUZGlQj+bWKpVS54vEUXnCI1LF+TQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjhaFw0yNjExMjcxMTQ5MjhaMDMxMTAvBgNV BAMTKDlBMDJFMDA4MkY2NjcyREMxNzhCOUE0QjcxNzhCOEY3M0E2NUM4MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2E9QDW1hhYkecnMnW2uDE+B1D XAAg6yyUqmkMD89azszVqMzHs+gnRI9CuSgxzQYhYz+heH9q7N61DEhTIiybf5/R 3WsrXcLcMLtI+pqEm+AQ5X/bhkEzrsGgF/WMp8AwGVQSzC3M5VgdfYHf3GtAoiiZ 0BdBwG6jqAneVi1/eI602VLnkmqWpcKjM19dL/Q3rX7wJRoYqrIezbvOBLcaSo4i +oazsc1ixia65+v3pOxKH2YgA8/Nug70B9pw99lCxUllL7gSnNuhuHIs8CWlMfns ry17bVJKK34RsvXwg0oN8c3W+G213+SgMse/jBp/75+RkVkDU33tkaJXpBULAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUmgLgCC9mctwXi5pLcXi49zplyCIwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzkz NjJlMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC5xAMwDQYJKoZIhvcNAQELBQADggEBAIsTIQIvUH2KfCVh4Th824E5YLJv qTkWB6Adw5QDRhkdHnB3bCLQVSE419Xn0m7Vdq3DPuVo5NeNuo+jTdZkYxjqFp9A ise2VDTCiIlDEjUiD7w5+I72WhYnkXMF7NJnzuU9LF+DKnhszA1QLzrcRhRTqEg2 KtVjJeT9aQbHW9d3pJm5Wmn+OnxHFa1uFQUbcEN8nHQUXQgz2wH/NCKLaracXTlx v+aqzV5g8H7NyFv7v0X6iToTfB659sLZD4tSvlhYBcnHLgXdo9wEhws5ANt8q+zz w65/88yxGf1V9d5cDgzp8Dea3b5NRTvoBWzdmB372jCpb3lqPH5bpf+u5JQ= -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:14 2025 by rpki-client