This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234302e3234362e302f32342d3234203d3e20313336373837.roa File: 3138352e3234302e3234362e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: z0q5PnNoFUEahPCIvV7FToMWsbLV+mpNla58k0ocEn8= Subject key identifier: 9D:80:07:45:BC:8A:17:33:E2:A4:02:AD:E0:60:7B:F9:07:FD:87:A0 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6916A4A0941A48B936E8D7B6A93176AA2BD48E8A Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234302e3234362e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:25 +0000 ROA not before: Fri 28 Nov 2025 11:44:25 +0000 ROA not after: Fri 27 Nov 2026 11:49:25 +0000 asID: 136787 IP address blocks: 185.240.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:16:a4:a0:94:1a:48:b9:36:e8:d7:b6:a9:31:76:aa:2b:d4:8e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:25 2025 GMT Not After : Nov 27 11:49:25 2026 GMT Subject: CN=9D800745BC8A1733E2A402ADE0607BF907FD87A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8c:2f:23:5a:e4:07:72:5a:73:86:12:74:79: 0e:15:39:04:f9:d1:0e:0f:da:00:92:12:90:38:90: d1:01:31:b5:b0:03:7d:39:7c:5c:56:86:45:c5:a2: 68:71:5e:40:cf:b9:ba:16:a8:57:71:4c:00:b6:0f: 7f:27:df:9b:2e:3d:d1:44:5b:9d:16:c5:71:09:01: ed:01:27:2e:d4:4a:f4:73:3d:0a:96:29:db:8a:10: 44:d4:50:bb:ae:0c:16:ad:13:c9:f0:ed:45:b4:99: e4:2e:24:d2:d5:f6:93:72:ee:46:da:c3:13:08:1b: 2f:38:c1:dc:75:be:8e:a5:a0:5e:87:99:fa:9b:bb: 3c:6f:3e:e9:e7:05:2b:35:bd:8f:6e:0d:85:cc:b5: 1c:fb:2a:e0:eb:fb:81:65:09:90:88:8f:7c:f1:00: ed:78:a1:ac:21:8c:c6:b5:60:a8:f8:58:9e:e5:f3: f7:68:98:4c:d4:60:7b:f5:da:12:a0:70:53:22:97: c0:60:66:76:42:88:d0:18:6c:cf:51:75:ad:e8:dc: 1f:a9:fd:3b:1f:e5:14:ce:77:29:94:fc:2d:b6:51: 79:1a:f3:93:b7:78:55:ea:5f:d8:78:4b:6d:0b:8a: 48:93:ad:18:8b:ae:18:e6:4d:d2:58:68:15:3c:eb: 87:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:80:07:45:BC:8A:17:33:E2:A4:02:AD:E0:60:7B:F9:07:FD:87:A0 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234302e3234362e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.246.0/24 Signature Algorithm: sha256WithRSAEncryption 76:e7:04:7e:a0:a1:7e:c0:29:45:74:3d:1a:b9:4a:66:a9:b7: 48:0a:53:05:2c:05:fd:45:28:cc:88:c4:6f:3d:5f:d0:a9:47: 82:16:f2:54:a8:a2:2d:99:c8:f6:4d:1f:05:71:b0:32:c5:bc: 40:ee:0f:bc:89:30:74:88:b8:6b:52:25:c1:52:b3:6c:ca:81: 51:64:6a:cf:cd:90:7e:02:6f:67:63:a3:65:3c:2b:b5:69:f2: 1c:62:8e:42:c5:1b:aa:77:1b:a6:5a:73:4d:2f:1f:2c:8c:b8: f3:78:fe:4e:31:1e:a7:1e:fd:19:15:d1:f9:b0:81:6f:60:14: 0f:04:d6:3c:ba:d6:7c:74:18:99:2c:f6:5a:93:65:38:42:d7: a5:db:11:20:76:6f:15:7d:1d:ef:48:0a:79:56:42:d1:fa:2a: 2a:b0:d2:53:cc:77:ec:1b:6b:3b:74:6b:8b:fc:1b:ab:3f:ed: fd:fd:3c:f8:f7:07:1b:d4:55:aa:3a:7b:2c:45:d3:44:b5:92: dd:19:dd:60:da:d2:47:1a:77:52:ca:14:bd:94:4f:d2:ae:9d: 4d:f4:aa:8d:8a:84:46:70:f8:62:34:b4:df:d9:ed:29:eb:21: 6a:b7:e5:75:df:c1:05:cc:66:ad:b8:18:28:1f:f7:2e:2b:46: 23:ce:07:0e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUaRakoJQaSLk26Ne2qTF2qivUjoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjVaFw0yNjExMjcxMTQ5MjVaMDMxMTAvBgNV BAMTKDlEODAwNzQ1QkM4QTE3MzNFMkE0MDJBREUwNjA3QkY5MDdGRDg3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgjC8jWuQHclpzhhJ0eQ4VOQT5 0Q4P2gCSEpA4kNEBMbWwA305fFxWhkXFomhxXkDPuboWqFdxTAC2D38n35suPdFE W50WxXEJAe0BJy7USvRzPQqWKduKEETUULuuDBatE8nw7UW0meQuJNLV9pNy7kba wxMIGy84wdx1vo6loF6HmfqbuzxvPunnBSs1vY9uDYXMtRz7KuDr+4FlCZCIj3zx AO14oawhjMa1YKj4WJ7l8/domEzUYHv12hKgcFMil8BgZnZCiNAYbM9Rda3o3B+p /Tsf5RTOdymU/C22UXka85O3eFXqX9h4S20LikiTrRiLrhjmTdJYaBU864d1AgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUnYAHRbyKFzPipAKt4GB7+Qf9h6AwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzQz MDJlMzIzNDM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAufD2MA0GCSqGSIb3DQEBCwUAA4IBAQB25wR+oKF+wClFdD0auUpm qbdIClMFLAX9RSjMiMRvPV/QqUeCFvJUqKItmcj2TR8FcbAyxbxA7g+8iTB0iLhr UiXBUrNsyoFRZGrPzZB+Am9nY6NlPCu1afIcYo5CxRuqdxumWnNNLx8sjLjzeP5O MR6nHv0ZFdH5sIFvYBQPBNY8utZ8dBiZLPZak2U4Qtel2xEgdm8VfR3vSAp5VkLR +ioqsNJTzHfsG2s7dGuL/BurP+39/Tz49wcb1FWqOnssRdNEtZLdGd1g2tJHGndS yhS9lE/Srp1N9KqNioRGcPhiNLTf2e0p6yFqt+V138EFzGatuBgoH/cuK0YjzgcO -----END CERTIFICATE-----Generated at Sat Dec 6 20:45:02 2025 by rpki-client