This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234302e3234342e302f32342d3234203d3e20313336373837.roa File: 3138352e3234302e3234342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: VltfxDil6QFBaHrFe5WKYtcpS7aDwiFO+f1/JVbFb5k= Subject key identifier: B0:BC:71:4C:76:E7:46:5E:11:43:EB:76:0E:79:79:67:96:82:C7:82 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 694B81CE68A976791FC905CFD2507C3B3456596F Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234302e3234342e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:35 +0000 ROA not before: Fri 28 Nov 2025 11:44:35 +0000 ROA not after: Fri 27 Nov 2026 11:49:35 +0000 asID: 136787 IP address blocks: 185.240.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:4b:81:ce:68:a9:76:79:1f:c9:05:cf:d2:50:7c:3b:34:56:59:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:35 2025 GMT Not After : Nov 27 11:49:35 2026 GMT Subject: CN=B0BC714C76E7465E1143EB760E7979679682C782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:09:ec:fe:83:db:ef:88:6b:04:13:b0:4a:70: 9b:8f:31:df:7f:7c:ec:50:36:26:a6:8b:bc:60:17: ce:9e:8c:d1:65:ff:5b:a2:cc:81:d1:29:5f:4a:23: b0:83:31:51:fb:05:a9:25:8d:44:b6:70:09:01:53: 99:62:6b:42:b6:4e:4e:50:17:2a:13:56:fc:c3:15: dc:92:7c:05:a0:05:55:ce:e6:be:ae:4e:62:88:7b: 50:69:81:ab:98:e3:87:69:09:f8:5e:60:e7:c4:58: 08:ef:27:e3:0f:f2:8b:a5:08:e5:e0:ea:40:98:e7: 37:96:41:54:63:00:95:f7:0f:d9:cc:79:6b:b6:e6: 25:c6:2d:81:45:b2:63:b0:e9:14:ed:7a:91:de:94: d5:ed:82:88:60:06:34:77:82:a9:88:98:a7:db:ae: 1b:b3:21:f4:43:c0:5c:15:7c:a8:7b:d7:61:2a:ba: 78:b9:b9:93:c9:64:5f:76:6d:0f:c4:11:2e:73:ce: af:2e:4d:e9:2d:91:31:e1:ce:d4:9b:8c:33:25:99: 8f:75:ad:6c:8b:54:58:3b:c9:af:90:22:f1:0d:38: 12:29:ce:a8:e5:e5:68:f8:5f:01:95:e7:14:f3:23: 5f:2b:93:ef:6a:fd:9e:8a:23:d3:da:dd:2f:a4:30: 0a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BC:71:4C:76:E7:46:5E:11:43:EB:76:0E:79:79:67:96:82:C7:82 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234302e3234342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.244.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:7e:6d:d6:1a:f4:aa:dd:06:a8:52:7a:a9:22:3a:26:bf:81: df:77:3f:6d:89:e1:a0:f3:fe:9e:99:14:f1:a9:39:0b:8c:f5: 9c:d6:55:f3:fc:d8:10:ba:dc:e0:2a:b5:9e:20:8e:fe:b6:24: 46:e6:cc:bc:3c:fc:31:73:57:4f:5c:58:84:15:dd:28:f0:2e: a8:85:b3:9c:43:7c:9f:0f:cd:03:ac:59:74:16:85:83:1f:35: ad:b4:6b:18:bb:f8:8b:9b:c2:6c:de:6e:ea:f5:08:ae:53:95: 51:1b:0e:10:f7:7e:6f:3e:24:6c:7f:0a:1a:2c:dd:2b:bc:66: 07:b8:1b:83:5e:09:3d:d1:d3:6c:3f:9c:a4:3b:97:be:7a:48: 24:86:f0:ea:6e:bd:71:13:5d:98:ce:87:1c:d5:ff:69:26:fe: 39:23:ae:b1:46:af:cc:9e:40:37:b1:58:33:8c:d1:92:4e:73: a7:16:d9:e1:c4:a3:09:93:7f:3d:37:6b:3e:2a:6b:2d:3c:72: 5c:d8:ea:d8:51:a9:24:9c:16:cb:62:a8:a5:3d:ec:4b:d5:7a: 26:38:77:0c:3e:e2:ba:84:85:61:61:da:ef:a9:f0:a5:09:2c: 77:2e:11:5b:e9:96:a7:9a:bc:d7:f8:2e:f6:fb:05:c1:fd:31: 6c:53:c1:d0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUaUuBzmipdnkfyQXP0lB8OzRWWW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzVaFw0yNjExMjcxMTQ5MzVaMDMxMTAvBgNV BAMTKEIwQkM3MTRDNzZFNzQ2NUUxMTQzRUI3NjBFNzk3OTY3OTY4MkM3ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSCez+g9vviGsEE7BKcJuPMd9/ fOxQNiami7xgF86ejNFl/1uizIHRKV9KI7CDMVH7BakljUS2cAkBU5lia0K2Tk5Q FyoTVvzDFdySfAWgBVXO5r6uTmKIe1BpgauY44dpCfheYOfEWAjvJ+MP8oulCOXg 6kCY5zeWQVRjAJX3D9nMeWu25iXGLYFFsmOw6RTtepHelNXtgohgBjR3gqmImKfb rhuzIfRDwFwVfKh712Equni5uZPJZF92bQ/EES5zzq8uTektkTHhztSbjDMlmY91 rWyLVFg7ya+QIvENOBIpzqjl5Wj4XwGV5xTzI18rk+9q/Z6KI9Pa3S+kMAojAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUsLxxTHbnRl4RQ+t2Dnl5Z5aCx4IwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzQz MDJlMzIzNDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAufD0MA0GCSqGSIb3DQEBCwUAA4IBAQA9fm3WGvSq3QaoUnqpIjom v4Hfdz9tieGg8/6emRTxqTkLjPWc1lXz/NgQutzgKrWeII7+tiRG5sy8PPwxc1dP XFiEFd0o8C6ohbOcQ3yfD80DrFl0FoWDHzWttGsYu/iLm8Js3m7q9QiuU5VRGw4Q 935vPiRsfwoaLN0rvGYHuBuDXgk90dNsP5ykO5e+ekgkhvDqbr1xE12Yzocc1f9p Jv45I66xRq/MnkA3sVgzjNGSTnOnFtnhxKMJk389N2s+KmstPHJc2OrYUakknBbL YqilPexL1XomOHcMPuK6hIVhYdrvqfClCSx3LhFb6ZanmrzX+C72+wXB/TFsU8HQ -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:15 2025 by rpki-client