This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234332e31352e302f32342d3234203d3e20323036323833.roa File: 3138352e3234332e31352e302f32342d3234203d3e20323036323833.roa (raw, json) Hash identifier: kXvvUuYrwKrJMWjswq/VJQMYRU7FXQqvfWcjgtcroyc= Subject key identifier: 23:CF:AE:6C:D7:A7:39:9C:6B:EF:A5:5A:AC:FA:60:31:74:9D:EB:C2 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 42790E3A42043F8904EADD5243B7139B1C3E6B5E Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234332e31352e302f32342d3234203d3e20323036323833.roa Signing time: Fri 28 Nov 2025 11:49:23 +0000 ROA not before: Fri 28 Nov 2025 11:44:23 +0000 ROA not after: Fri 27 Nov 2026 11:49:23 +0000 asID: 206283 IP address blocks: 185.243.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:79:0e:3a:42:04:3f:89:04:ea:dd:52:43:b7:13:9b:1c:3e:6b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:23 2025 GMT Not After : Nov 27 11:49:23 2026 GMT Subject: CN=23CFAE6CD7A7399C6BEFA55AACFA6031749DEBC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:dc:f5:7c:69:87:1b:da:b8:e0:50:91:89: 66:a9:28:3e:96:a2:af:fa:5d:3e:8e:52:55:b4:5c: f7:f8:97:40:5e:52:e4:21:38:fc:36:eb:5b:c8:88: 63:31:75:05:36:b3:a8:0b:6a:53:4b:ce:5f:70:38: a6:70:1b:3b:f0:db:01:09:bc:90:35:61:81:6c:7b: c0:38:44:6e:23:69:63:3e:ba:45:2b:43:f8:6e:ed: 5a:ee:b2:c3:01:e5:53:26:db:5d:e4:14:ee:a0:4e: 3e:62:bf:43:4b:61:37:ef:c3:e8:74:89:5b:cf:82: a7:a0:5b:4a:0b:8f:bd:b1:d5:c9:72:a0:65:73:ec: 67:47:b4:9a:da:f5:5d:e2:c8:0f:bd:00:f0:fe:e3: 1a:f0:5f:00:1a:e2:a2:22:6d:41:55:f8:7d:64:bd: 98:09:42:6b:a9:91:0d:c4:d7:63:dd:c1:53:24:3a: 60:39:0b:c3:74:a5:82:26:2c:03:aa:60:7b:63:95: cb:28:0b:a1:2c:04:8a:ad:cc:96:71:60:dd:5f:a1: 14:9d:93:60:15:1e:1b:c8:ba:39:08:69:73:53:9e: dd:f2:0e:f6:1a:ad:1b:bf:c5:e6:bd:c5:b4:9e:71: 04:db:d3:b0:cb:91:dc:ac:33:70:f5:a7:81:0c:3a: a1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CF:AE:6C:D7:A7:39:9C:6B:EF:A5:5A:AC:FA:60:31:74:9D:EB:C2 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234332e31352e302f32342d3234203d3e20323036323833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.15.0/24 Signature Algorithm: sha256WithRSAEncryption b7:7e:59:19:31:fe:a0:1f:04:f3:fe:68:6e:30:ab:22:c1:95: 13:fa:ee:af:94:5b:5f:33:85:2d:57:18:e3:da:76:99:17:d2: 95:57:a6:45:03:65:52:e1:5e:f4:84:98:e6:7a:3f:d1:19:ac: 5b:a1:56:2b:a4:e5:80:9f:cf:aa:c9:49:df:0a:d5:53:23:d8: b4:b1:dc:d0:6d:15:9f:07:f4:e5:38:01:b3:b7:b6:37:5b:05: 66:a1:44:f5:e8:0d:e3:63:0b:8e:95:b7:0a:22:20:a6:e9:33: a2:90:b1:26:50:46:de:d7:03:90:0d:39:be:bf:b5:c5:35:ae: f2:d3:59:13:9c:07:00:89:2d:cf:29:b1:98:7a:44:58:3b:be: 99:66:b6:c4:ee:38:7c:d1:18:37:0f:17:2c:33:f6:d3:4d:9e: 82:36:ca:01:23:97:42:8d:03:4a:5e:c3:98:af:43:97:d7:05: c9:13:05:75:ad:9a:46:22:b0:77:82:28:b7:b2:77:3d:3a:da: c1:1b:fb:c8:61:6a:ee:8a:14:fe:44:0a:45:f6:14:20:83:ee: ee:75:01:c2:a2:98:6d:42:6d:ab:38:3e:7b:d0:dc:a3:1b:2a: 18:17:cb:65:c2:b7:4f:d3:53:36:ec:d6:de:27:fa:4e:10:a1: 8d:c3:a9:d9 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUQnkOOkIEP4kE6t1SQ7cTmxw+a14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjNaFw0yNjExMjcxMTQ5MjNaMDMxMTAvBgNV BAMTKDIzQ0ZBRTZDRDdBNzM5OUM2QkVGQTU1QUFDRkE2MDMxNzQ5REVCQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Ytz1fGmHG9q44FCRiWapKD6W oq/6XT6OUlW0XPf4l0BeUuQhOPw261vIiGMxdQU2s6gLalNLzl9wOKZwGzvw2wEJ vJA1YYFse8A4RG4jaWM+ukUrQ/hu7VrussMB5VMm213kFO6gTj5iv0NLYTfvw+h0 iVvPgqegW0oLj72x1clyoGVz7GdHtJra9V3iyA+9APD+4xrwXwAa4qIibUFV+H1k vZgJQmupkQ3E12PdwVMkOmA5C8N0pYImLAOqYHtjlcsoC6EsBIqtzJZxYN1foRSd k2AVHhvIujkIaXNTnt3yDvYarRu/xea9xbSecQTb07DLkdysM3D1p4EMOqFDAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUI8+ubNenOZxr76VarPpgMXSd68IwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzQz MzJlMzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNjMyMzgzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALnzDzANBgkqhkiG9w0BAQsFAAOCAQEAt35ZGTH+oB8E8/5objCrIsGV E/rur5RbXzOFLVcY49p2mRfSlVemRQNlUuFe9ISY5no/0RmsW6FWK6TlgJ/PqslJ 3wrVUyPYtLHc0G0Vnwf05TgBs7e2N1sFZqFE9egN42MLjpW3CiIgpukzopCxJlBG 3tcDkA05vr+1xTWu8tNZE5wHAIktzymxmHpEWDu+mWa2xO44fNEYNw8XLDP2002e gjbKASOXQo0DSl7DmK9Dl9cFyRMFda2aRiKwd4Iot7J3PTrawRv7yGFq7ooU/kQK RfYUIIPu7nUBwqKYbUJtqzg+e9DcoxsqGBfLZcK3T9NTNuzW3if6ThChjcOp2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:07 2025 by rpki-client