This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234352e3135342e302f32342d3234203d3e20323036323833.roa File: 3138352e3234352e3135342e302f32342d3234203d3e20323036323833.roa (raw, json) Hash identifier: so2qPHRwPiw+J7pKv0W1HFuffkS93rr5cwh1eEoaXOo= Subject key identifier: 9D:43:5E:B4:5A:07:42:3E:D9:16:CD:A4:62:FA:C3:25:36:A0:BC:5A Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 055BD96B7DE376FD87C338089E8808F58A3CE72A Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234352e3135342e302f32342d3234203d3e20323036323833.roa Signing time: Fri 28 Nov 2025 11:49:30 +0000 ROA not before: Fri 28 Nov 2025 11:44:30 +0000 ROA not after: Fri 27 Nov 2026 11:49:30 +0000 asID: 206283 IP address blocks: 185.245.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:5b:d9:6b:7d:e3:76:fd:87:c3:38:08:9e:88:08:f5:8a:3c:e7:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:30 2025 GMT Not After : Nov 27 11:49:30 2026 GMT Subject: CN=9D435EB45A07423ED916CDA462FAC32536A0BC5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:14:69:7d:12:2a:a0:a6:02:22:6f:42:1f:2c: 83:ed:ac:d6:ca:ab:56:2b:ab:99:b7:47:4a:ff:60: cc:7c:93:34:11:e6:c5:66:16:94:7f:a1:e1:db:6c: 9a:37:ac:ca:ac:16:6c:c0:9e:fb:03:7b:79:77:e5: 57:c0:a0:ea:3c:7f:90:82:a2:b9:fe:3d:5f:e1:5c: ac:14:01:fa:4a:ec:f5:53:7f:eb:9c:f3:a4:1d:00: d8:9b:d0:a0:be:05:46:a3:83:2e:ea:d4:98:c0:e5: 32:69:32:6b:78:83:c6:68:cf:1e:6a:01:94:f9:ca: 9f:52:a9:8a:03:f3:47:72:66:4d:8e:b6:dc:e2:a5: 88:48:28:77:2d:fc:01:79:e6:41:54:57:b1:45:a0: 12:2c:3b:f8:18:a1:0b:56:7a:a5:0e:22:a6:f3:de: 3c:ef:a3:52:a4:5d:e3:d9:2f:de:92:07:5c:44:49: ab:ad:d8:a2:bd:d3:d4:44:f6:cf:5d:4d:24:1b:67: a8:20:ff:31:21:c6:e7:87:b5:7d:c9:50:ff:ff:0f: 24:14:2d:98:ee:39:d7:64:15:cd:58:fa:6e:65:e3: d7:19:08:b0:3a:1f:c4:3c:19:c5:21:61:f0:52:89: 2e:09:23:78:1e:e6:23:9c:b1:fd:6d:e8:98:da:fe: f9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:43:5E:B4:5A:07:42:3E:D9:16:CD:A4:62:FA:C3:25:36:A0:BC:5A X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234352e3135342e302f32342d3234203d3e20323036323833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.154.0/24 Signature Algorithm: sha256WithRSAEncryption 67:83:ac:5b:6a:20:80:92:78:40:57:cf:aa:6e:2e:1a:aa:e4: 5e:62:62:ae:3d:74:d0:51:0f:46:09:5f:66:e5:46:7b:4f:20: 46:f7:89:c9:c8:bd:cf:ef:94:89:2f:06:9b:ab:ae:a4:78:96: ee:ec:49:03:15:31:4a:3b:1f:4d:a7:62:e6:e1:ff:0e:13:4d: 37:ac:3f:82:ac:58:34:31:81:49:10:22:e9:70:3e:0f:fa:de: 53:f7:f0:4f:cb:ec:b1:72:3a:97:12:ec:a1:0f:d6:50:c6:c0: 7a:e7:55:c6:6b:2a:61:be:8d:c6:c7:ff:ca:f5:70:b2:5f:57: b6:1b:f2:f2:7b:14:27:f9:d6:46:55:0f:1f:fe:b6:1c:da:52: 4a:2c:8a:dc:f9:3e:6a:0f:6e:87:f9:a8:e2:14:0e:7c:6f:f6: 51:8f:4d:ca:c1:0d:63:70:9c:a6:c5:8f:53:cb:56:1e:28:b5: d1:92:6c:60:8f:3f:ec:7a:c5:78:9f:24:9b:9f:42:78:a6:72: f1:75:d4:92:d7:14:0d:8d:b8:37:7b:56:fc:eb:49:eb:2f:eb: 0d:f9:e4:7a:d1:3c:50:9b:96:d8:75:3a:72:df:5f:a8:10:ba: 4d:2d:68:d5:1d:8a:41:05:a9:58:c3:d3:16:43:0c:ce:a5:16: 5d:28:db:47 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUBVvZa33jdv2HwzgInogI9Yo85yowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzBaFw0yNjExMjcxMTQ5MzBaMDMxMTAvBgNV BAMTKDlENDM1RUI0NUEwNzQyM0VEOTE2Q0RBNDYyRkFDMzI1MzZBMEJDNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTFGl9EiqgpgIib0IfLIPtrNbK q1Yrq5m3R0r/YMx8kzQR5sVmFpR/oeHbbJo3rMqsFmzAnvsDe3l35VfAoOo8f5CC orn+PV/hXKwUAfpK7PVTf+uc86QdANib0KC+BUajgy7q1JjA5TJpMmt4g8Zozx5q AZT5yp9SqYoD80dyZk2OttzipYhIKHct/AF55kFUV7FFoBIsO/gYoQtWeqUOIqbz 3jzvo1KkXePZL96SB1xESaut2KK909RE9s9dTSQbZ6gg/zEhxueHtX3JUP//DyQU LZjuOddkFc1Y+m5l49cZCLA6H8Q8GcUhYfBSiS4JI3ge5iOcsf1t6Jja/vl/AgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUnUNetFoHQj7ZFs2kYvrDJTagvFowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzQz NTJlMzEzNTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM2MzIzODMzLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAufWaMA0GCSqGSIb3DQEBCwUAA4IBAQBng6xbaiCAknhAV8+qbi4a quReYmKuPXTQUQ9GCV9m5UZ7TyBG94nJyL3P75SJLwabq66keJbu7EkDFTFKOx9N p2Lm4f8OE003rD+CrFg0MYFJECLpcD4P+t5T9/BPy+yxcjqXEuyhD9ZQxsB651XG ayphvo3Gx//K9XCyX1e2G/LyexQn+dZGVQ8f/rYc2lJKLIrc+T5qD26H+ajiFA58 b/ZRj03KwQ1jcJymxY9Ty1YeKLXRkmxgjz/sesV4nySbn0J4pnLxddSS1xQNjbg3 e1b860nrL+sN+eR60TxQm5bYdTpy31+oELpNLWjVHYpBBalYw9MWQwzOpRZdKNtH -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:39 2025 by rpki-client