This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234332e31342e302f32342d3234203d3e20323036323833.roa File: 3138352e3234332e31342e302f32342d3234203d3e20323036323833.roa (raw, json) Hash identifier: Oc3bHaHadCjeF0LEo3FcPGmwkbn0UU1wTszgDfSIQyk= Subject key identifier: B2:CD:AC:56:0B:C8:7A:DB:6C:98:0F:10:B9:13:87:9C:D3:30:7F:D2 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1D69954B8FC4403D9FB2838EEC1D5298B1FF987C Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234332e31342e302f32342d3234203d3e20323036323833.roa Signing time: Fri 28 Nov 2025 11:49:34 +0000 ROA not before: Fri 28 Nov 2025 11:44:34 +0000 ROA not after: Fri 27 Nov 2026 11:49:34 +0000 asID: 206283 IP address blocks: 185.243.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:69:95:4b:8f:c4:40:3d:9f:b2:83:8e:ec:1d:52:98:b1:ff:98:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:34 2025 GMT Not After : Nov 27 11:49:34 2026 GMT Subject: CN=B2CDAC560BC87ADB6C980F10B913879CD3307FD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:55:ec:b6:00:09:35:87:fd:2b:68:a7:eb:8a: d1:b6:47:d4:17:9a:eb:90:29:b4:b2:69:66:dd:6d: 45:d9:1a:92:f6:74:70:71:4b:de:2d:17:df:81:54: 56:1f:10:e5:79:0b:ee:a4:b8:d8:f1:81:cb:4e:fe: 56:06:c7:58:cb:b5:d6:55:7d:fb:ae:5f:25:ca:6d: 93:35:c1:12:72:e6:7d:36:92:69:2b:b2:a8:2f:7c: 98:88:fa:db:13:fe:d0:47:76:c8:c4:5d:85:e8:fc: 15:8b:5a:c8:9e:fd:70:3b:c9:a1:c7:26:24:dc:07: ac:ad:71:81:9e:49:38:84:3c:d4:e8:e6:83:05:5a: 62:dd:0e:5b:47:66:f7:77:81:e5:c7:4f:88:10:27: 24:50:e8:7b:3b:8b:7a:12:9d:d2:1c:ea:dd:c4:b3: 82:cf:97:04:ca:d7:79:26:de:9c:4f:a8:c3:c9:22: c1:c2:97:1f:fe:44:82:43:38:6c:3a:af:66:b3:bd: 54:b0:40:09:94:b2:97:37:04:96:94:93:bf:56:04: d1:04:62:a0:21:29:45:fb:42:5e:7d:70:28:de:7d: 19:de:14:14:fa:c8:50:da:9e:98:40:ea:68:60:86: f1:b4:e1:2c:ca:ca:1c:60:66:ac:19:5a:02:a6:51: 1f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CD:AC:56:0B:C8:7A:DB:6C:98:0F:10:B9:13:87:9C:D3:30:7F:D2 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234332e31342e302f32342d3234203d3e20323036323833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.14.0/24 Signature Algorithm: sha256WithRSAEncryption 03:39:81:b7:8b:c4:77:2f:d9:89:12:bd:f1:44:aa:14:1f:ba: a4:35:5f:5b:79:f0:69:77:4c:3e:60:25:b5:27:89:f6:40:dc: e2:c6:09:dc:7a:b2:3c:4c:02:c2:5d:a7:b5:61:60:85:34:63: c5:31:3c:2b:64:a5:09:aa:3b:95:4b:77:67:b3:8f:bf:62:15: 71:4f:a1:b1:4c:94:d4:bd:8d:7e:0c:d3:b7:00:11:52:2b:af: 1c:31:32:50:5f:6c:a2:40:16:c6:26:63:0c:dd:17:bf:0e:b9: df:d4:9a:c1:7d:6e:b1:d5:17:40:d8:e5:47:5e:dd:b3:2b:51: af:ae:6a:bd:f8:5e:c7:4f:c0:45:91:22:e4:03:31:6d:86:5b: 64:24:5b:f6:0f:8c:c4:e4:64:82:3b:f3:00:58:02:0f:45:1e: 66:ba:e1:22:a6:c2:10:73:49:46:bb:23:76:2d:a9:46:2e:8c: 6a:df:ef:c5:0e:43:c7:4e:a3:78:be:b4:56:bf:ca:e4:d6:ec: b4:57:72:2d:36:5a:13:f9:dc:48:17:2b:a5:23:fe:45:06:85: 00:b9:70:d3:ec:73:49:39:c2:67:79:b9:6d:17:c4:47:3b:90: 7a:04:14:62:33:98:38:63:00:b9:6f:81:da:ea:4e:02:84:9b: b8:6b:d6:84 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUHWmVS4/EQD2fsoOO7B1SmLH/mHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzRaFw0yNjExMjcxMTQ5MzRaMDMxMTAvBgNV BAMTKEIyQ0RBQzU2MEJDODdBREI2Qzk4MEYxMEI5MTM4NzlDRDMzMDdGRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Vey2AAk1h/0raKfritG2R9QX muuQKbSyaWbdbUXZGpL2dHBxS94tF9+BVFYfEOV5C+6kuNjxgctO/lYGx1jLtdZV ffuuXyXKbZM1wRJy5n02kmkrsqgvfJiI+tsT/tBHdsjEXYXo/BWLWsie/XA7yaHH JiTcB6ytcYGeSTiEPNTo5oMFWmLdDltHZvd3geXHT4gQJyRQ6Hs7i3oSndIc6t3E s4LPlwTK13km3pxPqMPJIsHClx/+RIJDOGw6r2azvVSwQAmUspc3BJaUk79WBNEE YqAhKUX7Ql59cCjefRneFBT6yFDanphA6mhghvG04SzKyhxgZqwZWgKmUR8rAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUss2sVgvIettsmA8QuROHnNMwf9IwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzQz MzJlMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNjMyMzgzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALnzDjANBgkqhkiG9w0BAQsFAAOCAQEAAzmBt4vEdy/ZiRK98USqFB+6 pDVfW3nwaXdMPmAltSeJ9kDc4sYJ3HqyPEwCwl2ntWFghTRjxTE8K2SlCao7lUt3 Z7OPv2IVcU+hsUyU1L2NfgzTtwARUiuvHDEyUF9sokAWxiZjDN0Xvw6539SawX1u sdUXQNjlR17dsytRr65qvfhex0/ARZEi5AMxbYZbZCRb9g+MxORkgjvzAFgCD0Ue ZrrhIqbCEHNJRrsjdi2pRi6Mat/vxQ5Dx06jeL60Vr/K5NbstFdyLTZaE/ncSBcr pSP+RQaFALlw0+xzSTnCZ3m5bRfERzuQegQUYjOYOGMAuW+B2upOAoSbuGvWhA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:01 2025 by rpki-client