This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234302e3234372e302f32342d3234203d3e20313336373837.roa File: 3138352e3234302e3234372e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: ORtqJrp95E7UGKAUwGsTlkMLamfPYO+7okKDP5eIf3U= Subject key identifier: 07:B5:4D:D7:B2:76:F3:66:51:1E:E5:15:D6:19:C2:F1:1D:11:D3:9E Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4703981759BB32771094480686477AB58ACD6C2C Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234302e3234372e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:52 +0000 ROA not before: Fri 28 Nov 2025 11:44:52 +0000 ROA not after: Fri 27 Nov 2026 11:49:52 +0000 asID: 136787 IP address blocks: 185.240.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:03:98:17:59:bb:32:77:10:94:48:06:86:47:7a:b5:8a:cd:6c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:52 2025 GMT Not After : Nov 27 11:49:52 2026 GMT Subject: CN=07B54DD7B276F366511EE515D619C2F11D11D39E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:97:6d:2e:8f:af:d4:fd:74:ff:c3:d8:0c:62: 4f:34:c3:5c:a5:3b:85:25:ba:40:a8:4d:a9:e6:36: bc:20:a6:ef:c4:4b:57:67:0a:35:9a:de:b7:ce:d0: da:73:d7:1e:38:69:ad:e1:6e:c2:54:1b:cf:c1:cd: 06:2c:66:f8:de:b0:7d:05:0f:e5:57:b4:9a:9f:82: e6:f7:e7:eb:c3:d9:05:f7:90:a7:6d:49:a6:26:c2: 9a:9e:34:00:16:2f:f6:86:6a:c7:d7:78:f9:2e:2e: 5e:e8:77:1a:5b:99:a9:ce:1a:bf:77:32:b8:68:25: 86:a8:11:8f:3b:6c:5b:3a:10:b2:89:bb:a5:62:84: e4:05:f8:b5:ff:a2:a9:51:ba:ae:a5:65:c5:ea:4e: 78:ea:a0:b8:7f:f5:aa:e5:a9:02:6a:ef:25:37:d5: 20:c9:1e:a7:d8:50:6b:85:dd:12:cc:ae:2e:a0:55: 34:fd:70:8e:33:1d:a2:d9:fd:12:78:39:57:5c:dc: 02:20:3d:8e:81:91:3f:81:aa:95:a3:bd:27:62:34: 10:59:f6:a9:fd:06:51:b2:b3:5a:11:55:9f:e8:de: 68:fb:db:50:32:97:a4:1c:c3:d7:22:b7:79:a5:5a: eb:c0:72:c0:36:45:eb:5b:2c:6f:cf:e1:2b:70:2e: e9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B5:4D:D7:B2:76:F3:66:51:1E:E5:15:D6:19:C2:F1:1D:11:D3:9E X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234302e3234372e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.247.0/24 Signature Algorithm: sha256WithRSAEncryption a5:b2:86:20:bc:05:f9:2a:a1:c4:48:f6:49:45:7c:ec:66:c1: 58:eb:53:a5:73:a3:eb:fb:78:f6:d2:c7:ea:28:1e:03:f3:5e: 5e:2e:77:e9:5c:45:9d:3e:06:7c:96:a6:28:d6:ce:5b:b4:af: 0e:ae:2e:92:32:33:fd:5c:50:9d:c5:89:43:28:3e:dc:e7:97: 91:27:d4:d7:2a:6f:71:ba:e7:a7:78:9d:26:86:64:c0:1a:4f: d0:fa:f6:ae:83:a5:6f:18:00:36:52:96:e6:cc:8e:af:0e:6a: be:96:44:b2:58:9c:18:65:47:20:70:80:0b:f4:52:7e:79:07: f8:1f:2e:60:8e:7b:05:4c:7d:00:61:f6:d7:9c:3d:55:a7:fe: 9f:fc:d1:bb:e8:58:bb:b6:c8:a0:57:fa:83:02:08:f7:6e:b9: 9b:a1:2e:3c:06:70:d6:23:27:98:c8:b7:67:f6:e9:79:c8:d7: 8b:82:e7:91:5f:0f:0e:dd:57:62:82:bc:76:f9:8f:24:5f:48: 5a:09:33:63:2b:c4:af:37:02:30:56:bc:94:06:3c:85:73:35: 8f:0c:c5:52:a5:15:ec:5f:bd:aa:7c:5f:76:fc:43:37:7d:84: 25:80:d0:ae:3b:64:fd:6b:07:55:b3:42:ab:8c:f8:5d:16:6b: 43:74:71:3c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIURwOYF1m7MncQlEgGhkd6tYrNbCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTJaFw0yNjExMjcxMTQ5NTJaMDMxMTAvBgNV BAMTKDA3QjU0REQ3QjI3NkYzNjY1MTFFRTUxNUQ2MTlDMkYxMUQxMUQzOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGl20uj6/U/XT/w9gMYk80w1yl O4UlukCoTanmNrwgpu/ES1dnCjWa3rfO0Npz1x44aa3hbsJUG8/BzQYsZvjesH0F D+VXtJqfgub35+vD2QX3kKdtSaYmwpqeNAAWL/aGasfXePkuLl7odxpbmanOGr93 MrhoJYaoEY87bFs6ELKJu6VihOQF+LX/oqlRuq6lZcXqTnjqoLh/9arlqQJq7yU3 1SDJHqfYUGuF3RLMri6gVTT9cI4zHaLZ/RJ4OVdc3AIgPY6BkT+BqpWjvSdiNBBZ 9qn9BlGys1oRVZ/o3mj721Ayl6Qcw9cit3mlWuvAcsA2RetbLG/P4StwLulHAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUB7VN17J282ZRHuUV1hnC8R0R054wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzQz MDJlMzIzNDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAufD3MA0GCSqGSIb3DQEBCwUAA4IBAQClsoYgvAX5KqHESPZJRXzs ZsFY61Olc6Pr+3j20sfqKB4D815eLnfpXEWdPgZ8lqYo1s5btK8Ori6SMjP9XFCd xYlDKD7c55eRJ9TXKm9xuueneJ0mhmTAGk/Q+vaug6VvGAA2UpbmzI6vDmq+lkSy WJwYZUcgcIAL9FJ+eQf4Hy5gjnsFTH0AYfbXnD1Vp/6f/NG76Fi7tsigV/qDAgj3 brmboS48BnDWIyeYyLdn9ul5yNeLgueRXw8O3Vdigrx2+Y8kX0haCTNjK8SvNwIw VryUBjyFczWPDMVSpRXsX72qfF92/EM3fYQlgNCuO2T9awdVs0KrjPhdFmtDdHE8 -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:44 2025 by rpki-client