This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234332e31332e302f32342d3234203d3e20313938323437.roa File: 3138352e3234332e31332e302f32342d3234203d3e20313938323437.roa (raw, json) Hash identifier: ixtAQhj/g+F0GELuNCKdALG/vXoaX9Y9UUKnbg6aKOI= Subject key identifier: 8E:08:43:8C:70:30:4B:BD:1A:A9:48:4B:02:E3:97:55:64:DE:F2:08 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 5D05E659DE851A9B6AF346AB8A459EBCAF313D7C Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234332e31332e302f32342d3234203d3e20313938323437.roa Signing time: Fri 28 Nov 2025 11:49:28 +0000 ROA not before: Fri 28 Nov 2025 11:44:28 +0000 ROA not after: Fri 27 Nov 2026 11:49:28 +0000 asID: 198247 IP address blocks: 185.243.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:05:e6:59:de:85:1a:9b:6a:f3:46:ab:8a:45:9e:bc:af:31:3d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:28 2025 GMT Not After : Nov 27 11:49:28 2026 GMT Subject: CN=8E08438C70304BBD1AA9484B02E3975564DEF208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:73:e4:44:ac:36:1a:ed:e2:0d:7e:01:31:86: e3:c4:1f:7e:b4:37:36:e1:26:d3:eb:18:21:65:82: 20:ee:e9:22:68:6e:7d:b9:21:a9:21:73:b2:11:84: e9:fa:a2:9c:01:17:21:0c:05:4c:36:f0:31:28:b8: 17:bd:8d:c5:41:b4:39:1c:15:2f:bd:62:01:5c:59: e9:88:30:a4:5c:37:94:95:72:1d:e5:95:90:eb:a2: d0:9d:c8:a8:f0:ec:51:26:56:93:b0:b9:4a:b0:d2: cf:1d:39:d0:ed:bb:3e:df:4b:97:2c:b0:b6:70:59: af:0e:de:73:e8:5e:b6:9c:9e:58:e4:0c:7e:58:b5: 2b:93:cb:52:87:b1:05:b3:34:61:1b:be:66:7c:eb: a6:09:16:50:10:b3:ba:31:a6:fd:c8:32:29:ac:cd: cd:9f:e9:8c:bf:65:67:e9:7c:f2:14:aa:dd:8a:1c: 3e:87:56:f8:b7:b2:db:0f:1d:79:3c:f1:e8:70:33: a3:b1:b7:67:51:d5:2d:29:20:4c:f7:c7:0b:dc:a2: 07:dc:28:34:7e:f4:1c:b7:49:b7:2a:d6:97:d2:53: 73:4f:94:42:7c:f1:42:d8:ea:5f:74:bd:fd:43:cd: f9:64:55:ba:f4:af:fd:8d:77:15:19:82:75:7d:d1: ce:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:08:43:8C:70:30:4B:BD:1A:A9:48:4B:02:E3:97:55:64:DE:F2:08 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234332e31332e302f32342d3234203d3e20313938323437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.13.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:04:a5:2d:10:b4:3c:3d:22:da:90:18:4a:dc:b5:39:9a:db: b5:75:09:d0:06:60:b8:a0:55:d1:a0:b6:11:7d:11:13:93:ab: 84:0a:72:3b:25:10:84:76:e4:fa:d6:7a:b3:0f:94:d9:df:f3: 17:11:cc:ba:7b:49:9b:a9:f0:0b:ca:46:75:ba:53:12:3d:49: 54:4d:7f:de:f4:34:57:7a:fa:36:54:83:85:49:51:4a:0e:4b: 6f:c5:fd:03:12:d9:7c:fd:cc:8e:13:b2:e8:ff:07:01:be:c4: bc:18:5e:5f:24:3b:29:95:22:a7:35:5d:38:ba:6a:96:52:2f: 8d:c9:dd:f8:32:15:82:33:40:f2:77:81:d8:d0:46:55:e3:00: 48:47:25:4d:bc:60:d0:11:68:6e:20:27:08:1a:0e:ca:31:91: 23:f3:52:31:07:b7:0d:c2:3b:3d:9a:af:9c:26:1b:22:13:69: a3:02:67:91:7a:28:67:e6:8f:5c:1d:43:9f:85:c3:f8:d3:1c: af:f9:a3:2f:cc:b1:20:09:2a:93:30:f3:48:76:04:3c:d1:25: 4f:0e:f1:e5:56:24:01:ea:97:b0:82:c0:55:b5:e2:03:7a:01: 7f:81:91:4a:bf:6f:f9:69:fe:36:e8:2e:51:9f:40:39:ea:1d: 27:14:37:59 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUXQXmWd6FGptq80arikWevK8xPXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjhaFw0yNjExMjcxMTQ5MjhaMDMxMTAvBgNV BAMTKDhFMDg0MzhDNzAzMDRCQkQxQUE5NDg0QjAyRTM5NzU1NjRERUYyMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDc+RErDYa7eINfgExhuPEH360 NzbhJtPrGCFlgiDu6SJobn25Iakhc7IRhOn6opwBFyEMBUw28DEouBe9jcVBtDkc FS+9YgFcWemIMKRcN5SVch3llZDrotCdyKjw7FEmVpOwuUqw0s8dOdDtuz7fS5cs sLZwWa8O3nPoXracnljkDH5YtSuTy1KHsQWzNGEbvmZ866YJFlAQs7oxpv3IMims zc2f6Yy/ZWfpfPIUqt2KHD6HVvi3stsPHXk88ehwM6Oxt2dR1S0pIEz3xwvcogfc KDR+9By3Sbcq1pfSU3NPlEJ88ULY6l90vf1DzflkVbr0r/2NdxUZgnV90c6zAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUjghDjHAwS70aqUhLAuOXVWTe8ggwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzQz MzJlMzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzODMyMzQzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALnzDTANBgkqhkiG9w0BAQsFAAOCAQEADwSlLRC0PD0i2pAYSty1OZrb tXUJ0AZguKBV0aC2EX0RE5OrhApyOyUQhHbk+tZ6sw+U2d/zFxHMuntJm6nwC8pG dbpTEj1JVE1/3vQ0V3r6NlSDhUlRSg5Lb8X9AxLZfP3MjhOy6P8HAb7EvBheXyQ7 KZUipzVdOLpqllIvjcnd+DIVgjNA8neB2NBGVeMASEclTbxg0BFobiAnCBoOyjGR I/NSMQe3DcI7PZqvnCYbIhNpowJnkXooZ+aPXB1Dn4XD+NMcr/mjL8yxIAkqkzDz SHYEPNElTw7x5VYkAeqXsILAVbXiA3oBf4GRSr9v+Wn+NuguUZ9AOeodJxQ3WQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:13:42 2025 by rpki-client