This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234332e31322e302f32342d3234203d3e20323036323833.roa File: 3138352e3234332e31322e302f32342d3234203d3e20323036323833.roa (raw, json) Hash identifier: trzvUlycU/NiqIJVt+y3rKOmgCMTZnZhMg7GFZ3tu2o= Subject key identifier: 8F:BF:39:6F:C5:08:D2:D4:8B:EC:C0:81:71:3F:08:58:23:82:27:96 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4213176688933978C058F4738ADC86429A871D21 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234332e31322e302f32342d3234203d3e20323036323833.roa Signing time: Fri 28 Nov 2025 11:49:37 +0000 ROA not before: Fri 28 Nov 2025 11:44:37 +0000 ROA not after: Fri 27 Nov 2026 11:49:37 +0000 asID: 206283 IP address blocks: 185.243.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:13:17:66:88:93:39:78:c0:58:f4:73:8a:dc:86:42:9a:87:1d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:37 2025 GMT Not After : Nov 27 11:49:37 2026 GMT Subject: CN=8FBF396FC508D2D48BECC081713F085823822796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:57:26:1d:2e:3c:e4:72:48:b6:99:af:6a:b6: f2:fb:7c:4a:f1:2f:78:94:39:9f:c0:29:6b:2b:09: 8f:b2:50:62:2e:23:31:32:8c:9d:f8:26:62:1c:af: 7e:53:10:21:ea:ee:33:b5:96:37:8a:f3:40:b9:e9: 76:21:d1:5c:2e:b3:7c:8f:ae:a5:7f:ee:fb:96:2b: 70:f9:60:a6:3f:95:72:b4:0f:41:76:79:fd:e0:0e: be:f1:55:76:56:7b:e5:fe:7e:82:f2:1e:e5:4a:ec: b8:a8:4e:3e:7f:ee:45:22:42:11:9d:a3:ae:96:34: 1e:a8:d8:75:66:7b:b6:16:ea:9a:8e:74:f4:1e:6d: 9b:ab:40:4e:32:16:ff:d5:d1:72:a2:39:3a:5b:73: bd:b6:5b:89:9b:62:0e:74:7a:ab:2e:c2:3f:40:73: 19:f1:a7:5a:b4:9c:5a:0c:0b:e3:6a:4f:1b:a5:5f: 53:e3:ab:4b:c8:54:5d:e2:fa:38:1b:b4:58:f9:4d: 3b:d1:45:ec:df:83:b1:7f:f6:f4:16:29:b4:cb:be: d8:ac:07:e5:bf:1d:19:75:70:fa:84:40:54:3f:25: 53:4c:89:02:79:78:47:b3:b6:f8:92:13:3c:4f:23: 3c:f3:ff:35:20:9b:b2:d0:4c:d3:eb:4a:29:78:af: f3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BF:39:6F:C5:08:D2:D4:8B:EC:C0:81:71:3F:08:58:23:82:27:96 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234332e31322e302f32342d3234203d3e20323036323833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.12.0/24 Signature Algorithm: sha256WithRSAEncryption 94:c4:3b:a5:af:30:90:78:f7:1b:d3:6d:6c:78:62:cf:6e:75: 3f:35:73:d0:bd:34:2f:7f:2e:52:d4:87:31:e9:b7:6b:97:16: c5:e0:16:17:13:17:1a:8b:9a:e4:27:a9:49:5f:d9:f8:8c:ba: 66:c1:7d:5f:37:cc:08:8b:7f:9f:46:31:70:04:7e:e5:d1:72: b0:ab:60:94:d1:c7:3f:60:c5:7e:17:bd:ed:de:44:5f:2c:49: c7:85:98:0b:00:ea:bb:72:6e:6a:00:54:6f:e5:30:cb:6b:6a: 65:b5:77:30:5a:95:70:81:85:84:5a:dd:2c:e8:55:a2:ca:8b: c5:bf:e0:5a:4b:b5:c4:bf:bd:0d:a9:6b:25:e3:6d:46:60:4c: 4d:97:a0:d2:4f:26:c7:42:50:52:ce:7d:12:4f:5e:ef:1d:69: 6a:bc:26:77:f0:3a:65:3e:63:24:c6:59:c1:3d:a6:37:5f:a9: a1:a3:75:38:72:e6:04:f2:3e:cb:cd:8c:15:f3:1a:09:2e:0a: 86:9c:05:b4:a0:37:8c:9c:95:14:5e:af:4c:f9:8f:e0:c4:fd: 36:c0:b9:74:cb:24:3c:50:aa:fd:c2:18:78:79:d9:57:e9:f9: a6:13:93:dc:fa:22:1e:a7:ec:24:9b:e6:6e:b2:af:7e:90:07: 4d:ba:ce:27 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUQhMXZoiTOXjAWPRzityGQpqHHSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzdaFw0yNjExMjcxMTQ5MzdaMDMxMTAvBgNV BAMTKDhGQkYzOTZGQzUwOEQyRDQ4QkVDQzA4MTcxM0YwODU4MjM4MjI3OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVyYdLjzkcki2ma9qtvL7fErx L3iUOZ/AKWsrCY+yUGIuIzEyjJ34JmIcr35TECHq7jO1ljeK80C56XYh0Vwus3yP rqV/7vuWK3D5YKY/lXK0D0F2ef3gDr7xVXZWe+X+foLyHuVK7LioTj5/7kUiQhGd o66WNB6o2HVme7YW6pqOdPQebZurQE4yFv/V0XKiOTpbc722W4mbYg50eqsuwj9A cxnxp1q0nFoMC+NqTxulX1Pjq0vIVF3i+jgbtFj5TTvRRezfg7F/9vQWKbTLvtis B+W/HRl1cPqEQFQ/JVNMiQJ5eEeztviSEzxPIzzz/zUgm7LQTNPrSil4r/NlAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUj785b8UI0tSL7MCBcT8IWCOCJ5YwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzQz MzJlMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNjMyMzgzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALnzDDANBgkqhkiG9w0BAQsFAAOCAQEAlMQ7pa8wkHj3G9NtbHhiz251 PzVz0L00L38uUtSHMem3a5cWxeAWFxMXGoua5CepSV/Z+Iy6ZsF9XzfMCIt/n0Yx cAR+5dFysKtglNHHP2DFfhe97d5EXyxJx4WYCwDqu3JuagBUb+Uwy2tqZbV3MFqV cIGFhFrdLOhVosqLxb/gWku1xL+9DalrJeNtRmBMTZeg0k8mx0JQUs59Ek9e7x1p arwmd/A6ZT5jJMZZwT2mN1+poaN1OHLmBPI+y82MFfMaCS4KhpwFtKA3jJyVFF6v TPmP4MT9NsC5dMskPFCq/cIYeHnZV+n5phOT3PoiHqfsJJvmbrKvfpAHTbrOJw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:45:57 2025 by rpki-client