This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234392e3232372e302f32342d3332203d3e203531313637.roa File: 3138352e3234392e3232372e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: 0mCCL7pzx5jTrmUiThT/I4e/Xr5QFqMWhvfBLxLQCnk= Subject key identifier: 6B:55:E4:B9:DC:81:80:FB:B8:26:E3:1D:D3:C3:64:AD:78:C9:35:DB Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 5AA0AB3BB2D593C417F5F5126CA4F5748A997AA5 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234392e3232372e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:19 +0000 ROA not before: Fri 28 Nov 2025 11:44:19 +0000 ROA not after: Fri 27 Nov 2026 11:49:19 +0000 asID: 51167 IP address blocks: 185.249.227.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a0:ab:3b:b2:d5:93:c4:17:f5:f5:12:6c:a4:f5:74:8a:99:7a:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:19 2025 GMT Not After : Nov 27 11:49:19 2026 GMT Subject: CN=6B55E4B9DC8180FBB826E31DD3C364AD78C935DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:52:91:c7:32:49:5a:af:14:ec:85:b8:5a:e6: 83:0b:90:71:15:61:21:f3:22:d5:cb:22:c8:41:44: 3a:3b:ec:e5:fa:7d:df:ad:da:5a:6c:fa:e7:22:96: 30:7b:c3:40:78:a3:07:8e:9e:6a:58:01:7b:82:ad: df:f8:bc:3a:bb:c8:17:40:be:64:c7:ef:b9:a1:3a: d3:cf:30:2c:aa:c3:a9:f9:08:f8:53:17:d2:8f:63: 3c:b7:1b:5f:36:ca:55:62:96:d9:86:33:37:4b:b8: df:39:ac:c1:79:de:67:b9:dc:e3:df:6b:56:93:dd: 46:0e:34:fb:c2:af:b6:97:68:91:30:86:38:bb:5c: 45:9e:74:28:07:f0:30:e9:91:39:70:8d:6d:7e:79: 9e:55:90:68:b3:73:c6:a5:af:e0:70:7b:64:de:d7: ff:0e:0f:bc:27:31:72:94:cc:58:cb:ac:a4:6d:f8: 50:40:61:df:2b:04:45:9f:34:18:34:e0:62:a0:f6: 5f:00:21:90:fc:f8:57:65:10:e4:1f:86:fb:f2:48: 73:5a:98:c5:65:04:7c:b1:6e:0d:44:7b:58:78:c0: 95:82:8c:ae:af:46:36:dd:52:82:6a:61:b0:0c:c8: 6a:a9:4f:8b:d9:f9:6d:4e:79:eb:54:83:df:3b:1b: 2f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:55:E4:B9:DC:81:80:FB:B8:26:E3:1D:D3:C3:64:AD:78:C9:35:DB X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234392e3232372e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.227.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:f2:68:ce:2d:5c:1f:0d:a2:f3:9c:db:9c:d3:8d:86:39:48: 2c:a2:53:da:16:1a:73:3b:01:3f:12:e5:51:e2:04:52:d4:03: 88:8f:2d:2c:73:68:30:39:b9:85:3d:53:c9:e9:51:80:5f:f1: 2f:7e:cb:fb:5c:5d:46:93:1c:5e:42:ba:18:51:8e:c3:8f:c2: 38:ba:78:6a:3b:8c:a8:57:6b:eb:2e:dd:c5:6c:37:46:e7:a1: 8e:64:a2:7b:83:66:54:4f:df:c8:33:b9:b7:6f:da:ad:e4:3d: ed:71:68:30:0e:6f:a5:d6:25:ca:a9:f7:96:d4:d7:1d:27:3c: 00:bb:c0:ca:ab:c6:cb:49:c3:7c:b8:0b:70:3a:32:ea:5b:4f: b2:b3:6c:3e:66:3c:5c:99:47:31:ae:8a:2f:3a:c2:04:ed:f1: 72:91:50:2c:9b:9a:b2:40:ec:3d:65:5f:55:df:b3:12:e1:01: 79:c6:42:14:4a:fd:2b:90:2a:ef:77:29:24:ba:49:f3:b6:36: 93:89:ff:d5:fb:09:be:74:44:42:3b:7d:95:99:56:22:6f:d8: 87:80:24:a1:3a:f1:9e:24:49:0c:b5:38:ff:f2:6d:1a:1b:d8: ad:3b:0b:0b:f7:0d:cb:82:d3:ab:0c:d6:f4:74:e1:a6:dc:e8: 86:53:d3:fb -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUWqCrO7LVk8QX9fUSbKT1dIqZeqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTlaFw0yNjExMjcxMTQ5MTlaMDMxMTAvBgNV BAMTKDZCNTVFNEI5REM4MTgwRkJCODI2RTMxREQzQzM2NEFENzhDOTM1REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmUpHHMklarxTshbha5oMLkHEV YSHzItXLIshBRDo77OX6fd+t2lps+uciljB7w0B4oweOnmpYAXuCrd/4vDq7yBdA vmTH77mhOtPPMCyqw6n5CPhTF9KPYzy3G182ylViltmGMzdLuN85rMF53me53OPf a1aT3UYONPvCr7aXaJEwhji7XEWedCgH8DDpkTlwjW1+eZ5VkGizc8alr+Bwe2Te 1/8OD7wnMXKUzFjLrKRt+FBAYd8rBEWfNBg04GKg9l8AIZD8+FdlEOQfhvvySHNa mMVlBHyxbg1Ee1h4wJWCjK6vRjbdUoJqYbAMyGqpT4vZ+W1OeetUg987Gy9hAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUa1XkudyBgPu4JuMd08NkrXjJNdswHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzQz OTJlMzIzMjM3MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALn54zANBgkqhkiG9w0BAQsFAAOCAQEAbfJozi1cHw2i85zbnNONhjlI LKJT2hYaczsBPxLlUeIEUtQDiI8tLHNoMDm5hT1TyelRgF/xL37L+1xdRpMcXkK6 GFGOw4/COLp4ajuMqFdr6y7dxWw3RuehjmSie4NmVE/fyDO5t2/areQ97XFoMA5v pdYlyqn3ltTXHSc8ALvAyqvGy0nDfLgLcDoy6ltPsrNsPmY8XJlHMa6KLzrCBO3x cpFQLJuaskDsPWVfVd+zEuEBecZCFEr9K5Aq73cpJLpJ87Y2k4n/1fsJvnREQjt9 lZlWIm/Yh4AkoTrxniRJDLU4//JtGhvYrTsLC/cNy4LTqwzW9HThptzohlPT+w== -----END CERTIFICATE-----Generated at Tue Dec 16 14:00:52 2025 by rpki-client