This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234302e3234352e302f32342d3234203d3e20313336373837.roa File: 3138352e3234302e3234352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: fI9tco9rb5frzaAXUtKb9k9U176YFxawv8EsrxKXmAQ= Subject key identifier: B4:00:DD:24:20:AE:12:1E:FB:AD:9D:3E:01:22:7D:A8:B1:C9:AC:6D Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4101DC97A19D74F620812AC36AEFFB88C75D1C3D Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234302e3234352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:44 +0000 ROA not before: Fri 28 Nov 2025 11:44:44 +0000 ROA not after: Fri 27 Nov 2026 11:49:44 +0000 asID: 136787 IP address blocks: 185.240.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:01:dc:97:a1:9d:74:f6:20:81:2a:c3:6a:ef:fb:88:c7:5d:1c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:44 2025 GMT Not After : Nov 27 11:49:44 2026 GMT Subject: CN=B400DD2420AE121EFBAD9D3E01227DA8B1C9AC6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3c:1b:27:43:32:90:96:17:69:e0:a3:54:a0: 95:e6:6c:be:c0:a2:18:87:8e:b0:47:80:45:64:7a: e9:9f:11:22:91:e2:b6:c3:e0:09:29:2e:54:17:90: a5:50:7a:de:ec:d3:9c:10:6e:84:c7:5b:f2:c8:71: 8c:b2:d4:a8:89:9d:dd:7a:3f:91:2e:d2:34:bb:fa: 89:f3:45:89:67:b5:4d:bd:57:08:9d:0d:70:c2:d9: fe:e8:af:fd:22:74:52:66:1b:7e:e7:0c:40:45:56: 05:5f:4f:82:c5:1a:e1:25:47:f5:f6:a2:15:6a:35: 7b:31:c5:14:10:62:cd:66:9e:63:85:c0:52:72:da: dc:52:c1:71:67:61:c6:bc:ef:d3:09:60:4d:f9:9d: 0c:0e:83:6e:3e:7e:3d:d0:3f:1a:64:79:a6:af:19: d1:53:99:1e:8b:3b:ab:36:fd:b2:22:9e:b2:19:ac: 00:93:5b:f4:e5:5b:e9:95:83:30:f2:68:50:ed:6c: 4b:4d:1a:60:72:c5:b2:89:19:8e:b0:7f:ba:fe:da: 9f:39:12:dc:c5:51:a9:88:a2:11:d4:dd:a6:3e:a6: bc:28:b7:9d:d0:d5:12:0a:cd:7c:52:13:c5:c0:1a: 13:fc:f7:75:29:6c:b1:0d:0c:9e:71:56:bc:24:ce: 26:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:00:DD:24:20:AE:12:1E:FB:AD:9D:3E:01:22:7D:A8:B1:C9:AC:6D X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234302e3234352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.245.0/24 Signature Algorithm: sha256WithRSAEncryption 49:c0:fd:a3:06:fd:9f:90:50:82:72:a5:fa:a4:90:ad:6b:1e: 90:f8:85:31:51:54:e2:3c:30:37:fc:7b:e0:fa:1d:5b:e9:20: 00:38:f2:14:c3:d5:18:3a:e9:63:e9:2c:a5:16:b2:d4:cd:2f: a3:70:ed:7c:b0:e2:fa:a7:dd:c9:58:cb:d5:41:74:88:18:7c: 9b:ef:ac:e4:a7:09:d9:60:52:96:67:de:c9:47:24:75:ad:a6: 92:cf:76:69:ce:da:0a:66:fe:bf:ac:45:53:e8:b4:be:75:67: 26:a9:b0:3e:70:74:22:ef:14:74:09:37:e0:db:81:51:be:bd: 18:e2:01:d8:11:60:56:ed:b1:1a:c1:97:59:d2:10:de:35:2f: d7:29:1e:70:9c:08:4b:c0:c2:71:0e:6b:89:18:4e:b5:b5:8a: 40:67:73:e3:07:48:48:3b:33:04:ae:11:f4:b4:e9:0d:69:a9: 52:30:ed:ed:5d:86:c9:79:59:64:79:74:0a:fd:8d:35:29:65: 00:c0:b4:84:7f:11:c1:f2:b1:4e:b5:60:09:30:d7:a7:3c:31: 3e:31:61:2f:0b:b4:3a:11:77:dd:d8:0d:e2:ba:5b:9c:11:ca: be:e9:f6:f3:09:94:8b:b9:0d:c4:2d:73:bd:51:49:69:e8:4a: b7:3e:90:ec -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUQQHcl6GddPYggSrDau/7iMddHD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDRaFw0yNjExMjcxMTQ5NDRaMDMxMTAvBgNV BAMTKEI0MDBERDI0MjBBRTEyMUVGQkFEOUQzRTAxMjI3REE4QjFDOUFDNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4PBsnQzKQlhdp4KNUoJXmbL7A ohiHjrBHgEVkeumfESKR4rbD4AkpLlQXkKVQet7s05wQboTHW/LIcYyy1KiJnd16 P5Eu0jS7+onzRYlntU29VwidDXDC2f7or/0idFJmG37nDEBFVgVfT4LFGuElR/X2 ohVqNXsxxRQQYs1mnmOFwFJy2txSwXFnYca879MJYE35nQwOg24+fj3QPxpkeaav GdFTmR6LO6s2/bIinrIZrACTW/TlW+mVgzDyaFDtbEtNGmByxbKJGY6wf7r+2p85 EtzFUamIohHU3aY+prwot53Q1RIKzXxSE8XAGhP893UpbLENDJ5xVrwkzibLAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUtADdJCCuEh77rZ0+ASJ9qLHJrG0wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzQz MDJlMzIzNDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAufD1MA0GCSqGSIb3DQEBCwUAA4IBAQBJwP2jBv2fkFCCcqX6pJCt ax6Q+IUxUVTiPDA3/Hvg+h1b6SAAOPIUw9UYOulj6SylFrLUzS+jcO18sOL6p93J WMvVQXSIGHyb76zkpwnZYFKWZ97JRyR1raaSz3ZpztoKZv6/rEVT6LS+dWcmqbA+ cHQi7xR0CTfg24FRvr0Y4gHYEWBW7bEawZdZ0hDeNS/XKR5wnAhLwMJxDmuJGE61 tYpAZ3PjB0hIOzMErhH0tOkNaalSMO3tXYbJeVlkeXQK/Y01KWUAwLSEfxHB8rFO tWAJMNenPDE+MWEvC7Q6EXfd2A3iulucEcq+6fbzCZSLuQ3ELXO9UUlp6Eq3PpDs -----END CERTIFICATE-----Generated at Sat Dec 6 21:44:49 2025 by rpki-client