This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234392e3232362e302f32342d3332203d3e203536383736.roa File: 3138352e3234392e3232362e302f32342d3332203d3e203536383736.roa (raw, json) Hash identifier: vthCtys+NnpCl4p/qtUX802zCYNGQp7iYGyqKoiEGdI= Subject key identifier: 32:4C:59:C1:79:C9:6C:0F:0C:AE:EE:28:B6:B3:5A:35:A3:3E:5C:DF Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 5139D7F8F6A9D29B35DF9A08B420669E4AFC500F Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234392e3232362e302f32342d3332203d3e203536383736.roa Signing time: Fri 28 Nov 2025 11:49:49 +0000 ROA not before: Fri 28 Nov 2025 11:44:49 +0000 ROA not after: Fri 27 Nov 2026 11:49:49 +0000 asID: 56876 IP address blocks: 185.249.226.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:39:d7:f8:f6:a9:d2:9b:35:df:9a:08:b4:20:66:9e:4a:fc:50:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:49 2025 GMT Not After : Nov 27 11:49:49 2026 GMT Subject: CN=324C59C179C96C0F0CAEEE28B6B35A35A33E5CDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8a:2e:ef:f2:8c:a9:d5:37:42:ac:3b:a3:c6: e3:c3:15:17:c8:8e:dd:c1:56:20:a3:d6:a7:8c:26: 9a:83:7d:af:d3:de:01:87:89:83:f8:0a:d0:af:f3: f2:54:9e:8e:ce:84:54:01:8e:e3:a0:d8:bf:8e:39: f1:f7:ca:99:de:29:fb:99:97:10:21:d3:67:00:2f: 02:2a:32:c0:44:b8:a8:10:08:8e:8f:7a:41:43:3c: 62:cd:ce:0e:1c:da:ef:3b:65:5c:b9:11:f8:fc:f8: ab:d6:0e:08:a9:3e:a0:ad:15:e8:af:64:1a:a9:ff: 0c:9e:2f:73:da:11:bd:7e:3c:9c:3a:28:75:ad:dc: 39:48:3a:0e:f8:59:c1:4c:b8:dc:96:c9:56:48:94: a3:70:2b:64:99:64:e0:65:11:16:a4:b0:2a:dd:a7: b9:6b:dc:30:7c:33:b9:38:54:ed:ef:c4:88:6a:8f: a1:02:ea:79:60:63:f6:f1:a0:e3:3c:12:fd:e3:6f: 7e:93:67:0a:82:34:4d:81:f1:18:0f:57:1a:4d:c5: 38:c1:ff:4f:78:d9:97:7a:6f:5f:6d:20:7c:2d:05: c5:b9:b6:a7:98:b2:36:db:e3:f7:64:b5:43:70:e5: a4:9b:07:fb:b7:dc:df:8e:38:e1:33:3c:67:40:c0: b3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4C:59:C1:79:C9:6C:0F:0C:AE:EE:28:B6:B3:5A:35:A3:3E:5C:DF X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234392e3232362e302f32342d3332203d3e203536383736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.226.0/24 Signature Algorithm: sha256WithRSAEncryption 77:24:84:4d:42:f2:20:04:a9:0a:4a:b5:c4:f6:f5:f4:76:86: 17:5d:07:fa:29:80:7c:7e:c2:2b:71:17:84:d2:81:c6:00:47: 79:79:f6:02:f2:99:99:a1:e0:c5:f6:c7:3c:8f:78:dd:b7:7d: f8:25:55:98:86:75:55:37:6d:91:ea:d2:83:62:0a:73:18:a6: bd:7a:dc:76:95:49:09:49:46:5f:7b:89:d0:04:c3:12:0a:1b: ed:c9:cc:60:0e:26:81:21:a5:e9:b3:17:6b:d1:e5:78:85:9c: 06:7a:3b:b2:95:b2:bc:29:dd:e4:52:54:31:2a:a3:11:15:aa: a0:68:f7:e3:96:68:b8:56:bb:0f:39:08:0b:f4:4b:ce:a0:ea: 06:d4:df:68:bc:c5:22:53:46:52:ee:c7:e4:d8:c1:71:47:cc: f4:69:ff:e2:6e:01:00:7d:bb:40:5d:9b:f7:54:35:47:d2:f0: 77:8c:b2:1e:cf:21:5d:04:01:fb:f5:6f:f1:10:ad:77:49:b8: 22:b1:6d:ea:de:04:3d:b2:9a:c1:7d:65:5a:c9:a3:59:c2:8f: 6c:8d:01:67:9b:be:5a:ee:11:6c:62:b1:9b:29:e3:94:10:8f: 11:57:1d:1a:ad:68:5f:aa:cd:d6:68:99:a5:e9:2d:42:0f:d1: ca:5c:e1:d3 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUUTnX+Pap0ps135oItCBmnkr8UA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDlaFw0yNjExMjcxMTQ5NDlaMDMxMTAvBgNV BAMTKDMyNEM1OUMxNzlDOTZDMEYwQ0FFRUUyOEI2QjM1QTM1QTMzRTVDREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkii7v8oyp1TdCrDujxuPDFRfI jt3BViCj1qeMJpqDfa/T3gGHiYP4CtCv8/JUno7OhFQBjuOg2L+OOfH3ypneKfuZ lxAh02cALwIqMsBEuKgQCI6PekFDPGLNzg4c2u87ZVy5Efj8+KvWDgipPqCtFeiv ZBqp/wyeL3PaEb1+PJw6KHWt3DlIOg74WcFMuNyWyVZIlKNwK2SZZOBlERaksCrd p7lr3DB8M7k4VO3vxIhqj6EC6nlgY/bxoOM8Ev3jb36TZwqCNE2B8RgPVxpNxTjB /0942Zd6b19tIHwtBcW5tqeYsjbb4/dktUNw5aSbB/u33N+OOOEzPGdAwLP/AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUMkxZwXnJbA8Mru4otrNaNaM+XN8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzQz OTJlMzIzMjM2MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzNjM4MzczNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALn54jANBgkqhkiG9w0BAQsFAAOCAQEAdySETULyIASpCkq1xPb19HaG F10H+imAfH7CK3EXhNKBxgBHeXn2AvKZmaHgxfbHPI943bd9+CVVmIZ1VTdtkerS g2IKcximvXrcdpVJCUlGX3uJ0ATDEgob7cnMYA4mgSGl6bMXa9HleIWcBno7spWy vCnd5FJUMSqjERWqoGj345ZouFa7DzkIC/RLzqDqBtTfaLzFIlNGUu7H5NjBcUfM 9Gn/4m4BAH27QF2b91Q1R9Lwd4yyHs8hXQQB+/Vv8RCtd0m4IrFt6t4EPbKawX1l WsmjWcKPbI0BZ5u+Wu4RbGKxmynjlBCPEVcdGq1oX6rN1miZpektQg/Rylzh0w== -----END CERTIFICATE-----Generated at Sun Dec 7 07:28:18 2025 by rpki-client