This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234392e3232352e302f32342d3332203d3e203531313637.roa File: 3138352e3234392e3232352e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: PIDIjoeu5s56W6mVacQ+Z3bb1AdBm99uctAcd6wXh1U= Subject key identifier: 95:4B:D3:16:9D:1C:A8:D2:FB:A5:45:04:1B:37:94:4C:CB:12:A0:58 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 12A1C3036B42B4861FA6E988B38C8E7853BDEACA Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234392e3232352e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:43 +0000 ROA not before: Fri 28 Nov 2025 11:44:43 +0000 ROA not after: Fri 27 Nov 2026 11:49:43 +0000 asID: 51167 IP address blocks: 185.249.225.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a1:c3:03:6b:42:b4:86:1f:a6:e9:88:b3:8c:8e:78:53:bd:ea:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:43 2025 GMT Not After : Nov 27 11:49:43 2026 GMT Subject: CN=954BD3169D1CA8D2FBA545041B37944CCB12A058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:db:8d:66:bd:48:e0:c6:6e:8c:1d:e1:1f:f9: d6:70:fc:34:40:6f:7b:f7:80:7f:f9:db:73:78:a4: f1:c2:c7:db:34:79:cc:a0:c6:76:4b:19:ae:fa:ab: fd:8b:59:d8:f3:ca:77:49:a4:13:f3:d4:f1:4f:e0: 98:c6:b1:78:df:b2:55:9e:cc:ca:84:8b:81:c8:f2: 15:1e:31:73:b4:e6:24:24:84:e5:5a:a0:39:7d:31: a0:f6:a4:12:48:de:d9:9b:3f:bf:a0:40:f6:0f:e8: 41:0a:f4:5d:b5:ed:6e:bd:47:2e:66:fb:59:ad:e1: 63:95:49:e7:ca:23:d3:af:b8:43:af:b4:18:e5:17: bc:02:8c:3c:88:6e:81:44:ac:36:7d:44:60:35:43: 79:77:4c:7a:9c:96:26:61:ec:74:58:53:d8:6e:37: 8b:29:3b:d1:dc:55:26:be:8a:2d:ba:83:c1:a7:87: c9:2a:c4:62:51:82:ba:b5:40:81:48:bf:02:bb:b1: 5a:7a:9b:a4:fa:a1:c5:67:4b:9e:ea:5e:80:f7:2d: da:7f:6f:0c:fb:27:18:ef:d0:28:eb:90:de:d4:45: e7:7e:1f:1c:5f:7f:54:e2:de:f9:77:5b:0c:98:4a: c0:ba:d4:40:57:42:17:e2:1d:c4:59:c2:09:31:d0: eb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4B:D3:16:9D:1C:A8:D2:FB:A5:45:04:1B:37:94:4C:CB:12:A0:58 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234392e3232352e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.225.0/24 Signature Algorithm: sha256WithRSAEncryption 13:9e:56:fa:09:00:67:3f:fe:f7:53:b6:f5:ba:ee:bb:d0:7f: 2a:3d:0e:49:b7:05:fb:a4:d5:28:69:bc:a2:4e:d2:5e:ce:26: 1c:bd:c7:84:84:54:ca:63:01:5c:3e:d1:1b:f5:87:3a:5f:62: 23:6e:1d:88:89:6e:17:3e:0a:1f:bc:47:3a:f2:b7:c9:aa:3c: 32:04:5f:82:eb:fe:55:a2:61:7c:4f:62:a8:c3:37:7a:50:0c: 2b:f8:1d:39:26:3c:6f:b7:e5:8c:53:cb:22:94:2b:24:1f:ab: fa:9e:5a:3e:2c:3e:fc:38:8f:49:0b:64:fb:26:48:7f:d1:ee: 1d:6c:6c:92:db:8a:74:f4:f4:e6:8b:8b:44:0a:59:4a:50:ea: 8d:ef:1c:cc:62:3c:c4:11:6f:6c:c1:42:57:92:af:c7:b6:55: 99:44:ff:3d:6d:50:61:0c:8d:5f:a8:15:d1:18:86:c5:d9:e1: 38:5f:57:d6:db:56:07:72:2d:a6:8d:82:cd:87:31:58:e8:f8: d8:8f:79:dd:9c:15:bb:5f:62:d1:92:bb:08:ed:b8:25:d7:6b: dd:c6:31:b7:49:bf:d6:c8:3b:51:43:9b:2a:19:9d:c2:ee:94: af:03:46:eb:2c:4b:06:72:e2:bf:99:54:43:f1:42:86:6b:b8: 60:9f:a5:b6 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUEqHDA2tCtIYfpumIs4yOeFO96sowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDNaFw0yNjExMjcxMTQ5NDNaMDMxMTAvBgNV BAMTKDk1NEJEMzE2OUQxQ0E4RDJGQkE1NDUwNDFCMzc5NDRDQ0IxMkEwNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ241mvUjgxm6MHeEf+dZw/DRA b3v3gH/523N4pPHCx9s0ecygxnZLGa76q/2LWdjzyndJpBPz1PFP4JjGsXjfslWe zMqEi4HI8hUeMXO05iQkhOVaoDl9MaD2pBJI3tmbP7+gQPYP6EEK9F217W69Ry5m +1mt4WOVSefKI9OvuEOvtBjlF7wCjDyIboFErDZ9RGA1Q3l3THqcliZh7HRYU9hu N4spO9HcVSa+ii26g8Gnh8kqxGJRgrq1QIFIvwK7sVp6m6T6ocVnS57qXoD3Ldp/ bwz7Jxjv0CjrkN7URed+Hxxff1Ti3vl3WwyYSsC61EBXQhfiHcRZwgkx0OtvAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUlUvTFp0cqNL7pUUEGzeUTMsSoFgwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzQz OTJlMzIzMjM1MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALn54TANBgkqhkiG9w0BAQsFAAOCAQEAE55W+gkAZz/+91O29bruu9B/ Kj0OSbcF+6TVKGm8ok7SXs4mHL3HhIRUymMBXD7RG/WHOl9iI24diIluFz4KH7xH OvK3yao8MgRfguv+VaJhfE9iqMM3elAMK/gdOSY8b7fljFPLIpQrJB+r+p5aPiw+ /DiPSQtk+yZIf9HuHWxsktuKdPT05ouLRApZSlDqje8czGI8xBFvbMFCV5Kvx7ZV mUT/PW1QYQyNX6gV0RiGxdnhOF9X1ttWB3Itpo2CzYcxWOj42I953ZwVu19i0ZK7 CO24Jddr3cYxt0m/1sg7UUObKhmdwu6UrwNG6yxLBnLiv5lUQ/FChmu4YJ+ltg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:05:51 2025 by rpki-client