This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234352e3135352e302f32342d3234203d3e20323036323833.roa File: 3138352e3234352e3135352e302f32342d3234203d3e20323036323833.roa (raw, json) Hash identifier: SToAglwhmbkkwJr1vFj1egJF7aJz2aXlqK07nAPfPms= Subject key identifier: 56:2F:DD:FB:01:9B:74:B1:2E:13:B4:CD:3C:40:B4:40:9E:83:7E:F0 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3C041D035AA7FAFCFD53473B88DF717DD87BBFE1 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234352e3135352e302f32342d3234203d3e20323036323833.roa Signing time: Fri 28 Nov 2025 11:49:50 +0000 ROA not before: Fri 28 Nov 2025 11:44:50 +0000 ROA not after: Fri 27 Nov 2026 11:49:50 +0000 asID: 206283 IP address blocks: 185.245.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:04:1d:03:5a:a7:fa:fc:fd:53:47:3b:88:df:71:7d:d8:7b:bf:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:50 2025 GMT Not After : Nov 27 11:49:50 2026 GMT Subject: CN=562FDDFB019B74B12E13B4CD3C40B4409E837EF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:60:4b:7c:23:4e:f3:ff:a7:b9:a7:03:3d: 14:17:74:54:f8:6c:b6:27:8a:68:e3:34:f2:cf:6e: 36:ff:13:db:6b:3f:3f:4e:30:b5:cd:97:ff:c3:95: e2:7d:98:1a:59:e2:f6:06:b5:fb:7f:1e:5d:4a:49: 17:13:e3:05:0e:bc:9f:c4:c8:9b:38:ad:7e:2a:cd: 9d:7b:ff:41:a7:5d:86:9f:70:78:8d:b8:07:a9:d3: dc:a6:9d:7f:c8:24:00:32:f2:f9:6e:fc:4d:93:fc: d1:5f:ee:ea:07:6d:96:ee:31:ac:83:c9:52:92:40: 08:93:f7:87:f4:79:fd:b8:89:07:37:1d:79:d9:5a: 8b:9e:97:32:c2:dc:d0:a9:de:45:66:69:fa:05:7c: cb:5e:93:47:e7:1b:f0:b4:c7:1e:58:db:96:a0:27: 63:af:86:70:ae:d2:51:53:aa:e7:7d:50:35:5d:c1: 3a:05:f2:ee:29:eb:ef:37:e2:17:2d:2a:71:dd:0b: 2b:53:d4:98:95:5e:13:ce:c9:17:f0:bd:c5:81:53: ef:5d:b7:38:a3:28:f1:88:3b:e4:f3:02:2e:ec:bb: cf:c6:8e:f3:49:59:85:fe:e5:1e:ce:52:7a:76:2b: 8c:42:50:c8:bb:ee:a8:b5:80:93:03:9a:3a:03:2e: af:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2F:DD:FB:01:9B:74:B1:2E:13:B4:CD:3C:40:B4:40:9E:83:7E:F0 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234352e3135352e302f32342d3234203d3e20323036323833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.155.0/24 Signature Algorithm: sha256WithRSAEncryption d4:f0:24:b2:1c:6b:77:d7:fc:8a:44:d7:7e:6a:94:e7:f8:39: d3:71:2f:26:b4:7b:12:20:3d:e4:30:9e:69:b2:52:37:9c:ec: d0:79:9c:f8:76:37:6b:6e:96:2f:ea:48:81:92:3e:5e:ee:20: 69:88:6f:7d:70:be:5a:a5:56:31:8c:14:90:30:06:93:57:4e: 7f:4e:b8:23:bc:ff:cb:ad:dd:9d:d7:60:ef:8e:7b:fd:c1:8f: 42:5c:c3:01:bc:3f:4e:a2:12:c7:d8:52:c0:70:5c:80:1c:ef: 9d:df:b1:ad:d4:1f:a2:b2:9b:b0:bc:d6:df:9a:8d:dc:ba:d5: 4e:7d:aa:cd:e4:1c:27:12:b1:1c:25:f7:17:1c:e2:92:82:77: ff:01:fe:ff:4e:d6:39:61:ad:10:cc:da:03:a8:98:5a:fd:d4: 5e:31:58:b8:f6:1b:20:d0:13:7d:42:11:dd:18:b1:be:3a:b9: 14:81:35:0c:9b:f0:6b:84:5c:53:ca:71:f1:44:32:37:23:be: d2:6e:16:c0:16:79:cf:f2:f7:ea:c6:6b:78:d6:f3:56:d3:3c: 1d:75:77:df:d4:22:e5:92:2b:a5:6e:ec:50:29:e5:7e:9c:88: ec:b4:2c:8e:d3:f7:d5:6f:ef:cb:79:61:98:a7:09:a1:b2:be: 5d:f2:91:61 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUPAQdA1qn+vz9U0c7iN9xfdh7v+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTBaFw0yNjExMjcxMTQ5NTBaMDMxMTAvBgNV BAMTKDU2MkZEREZCMDE5Qjc0QjEyRTEzQjRDRDNDNDBCNDQwOUU4MzdFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8emBLfCNO8/+nuacDPRQXdFT4 bLYnimjjNPLPbjb/E9trPz9OMLXNl//DleJ9mBpZ4vYGtft/Hl1KSRcT4wUOvJ/E yJs4rX4qzZ17/0GnXYafcHiNuAep09ymnX/IJAAy8vlu/E2T/NFf7uoHbZbuMayD yVKSQAiT94f0ef24iQc3HXnZWouelzLC3NCp3kVmafoFfMtek0fnG/C0xx5Y25ag J2OvhnCu0lFTqud9UDVdwToF8u4p6+834hctKnHdCytT1JiVXhPOyRfwvcWBU+9d tzijKPGIO+TzAi7su8/GjvNJWYX+5R7OUnp2K4xCUMi77qi1gJMDmjoDLq9HAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUVi/d+wGbdLEuE7TNPEC0QJ6DfvAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzQz NTJlMzEzNTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM2MzIzODMzLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAufWbMA0GCSqGSIb3DQEBCwUAA4IBAQDU8CSyHGt31/yKRNd+apTn +DnTcS8mtHsSID3kMJ5pslI3nOzQeZz4djdrbpYv6kiBkj5e7iBpiG99cL5apVYx jBSQMAaTV05/TrgjvP/Lrd2d12Dvjnv9wY9CXMMBvD9OohLH2FLAcFyAHO+d37Gt 1B+ispuwvNbfmo3cutVOfarN5BwnErEcJfcXHOKSgnf/Af7/TtY5Ya0QzNoDqJha /dReMVi49hsg0BN9QhHdGLG+OrkUgTUMm/BrhFxTynHxRDI3I77SbhbAFnnP8vfq xmt41vNW0zwddXff1CLlkiulbuxQKeV+nIjstCyO0/fVb+/LeWGYpwmhsr5d8pFh -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:34 2025 by rpki-client