This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235302e3231322e302f32342d3234203d3e20313336373837.roa File: 3138352e3235302e3231322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: Q8noHp9958Oc8v3w02esjJ4oZg9asc2yxd4e58hqW2Y= Subject key identifier: 3A:CD:D5:78:F8:24:5B:63:B0:46:5B:7E:5F:E6:F8:5E:2D:42:53:C0 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1D48F985A07EE12A2CF48534BE6F703CCC7F312E Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235302e3231322e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:55 +0000 ROA not before: Fri 28 Nov 2025 11:44:55 +0000 ROA not after: Fri 27 Nov 2026 11:49:55 +0000 asID: 136787 IP address blocks: 185.250.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:48:f9:85:a0:7e:e1:2a:2c:f4:85:34:be:6f:70:3c:cc:7f:31:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:55 2025 GMT Not After : Nov 27 11:49:55 2026 GMT Subject: CN=3ACDD578F8245B63B0465B7E5FE6F85E2D4253C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:50:4a:4f:10:48:1f:ba:05:d9:f2:91:a7:5d: c9:36:28:5e:73:34:8f:ad:cb:aa:36:ab:46:3f:b8: e9:66:91:f7:ea:0c:2e:cd:ea:5a:15:48:cc:86:cd: b1:a7:e9:8e:d7:3a:8f:31:e9:e2:2b:b1:fe:b6:ce: 2e:bb:7e:bc:d2:8e:ee:d0:4c:6a:40:16:17:f9:e4: 05:22:5b:2c:b2:b3:54:f9:1b:ba:7d:c9:8a:8e:40: ae:16:ab:c3:8b:c8:87:eb:a7:e7:cd:b3:15:a2:a8: 0c:9d:fd:b9:5c:be:1a:50:ed:42:1f:ed:c2:13:2e: db:08:85:28:9e:4f:0f:3c:e6:53:5b:58:12:2e:b2: 18:90:a3:bc:01:d1:36:8f:88:28:d8:78:25:39:0b: 32:45:28:ef:e9:07:47:ce:8b:35:c8:8c:ad:2d:4b: c5:9b:24:b2:e8:01:79:3b:d3:ff:40:2c:32:5f:43: 00:f6:94:23:95:71:0c:07:45:a8:a3:3e:67:0a:da: 21:8d:87:1a:6c:47:53:e2:f2:18:d9:c2:ae:33:56: 49:a8:d1:a0:3f:0e:66:a4:ad:78:82:1e:aa:9c:cf: 4f:08:92:4f:c3:2f:bd:8b:e1:7e:05:66:2d:53:c9: 37:5a:09:7a:70:13:85:6b:fd:da:aa:6b:46:31:dc: 45:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CD:D5:78:F8:24:5B:63:B0:46:5B:7E:5F:E6:F8:5E:2D:42:53:C0 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235302e3231322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.212.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:2c:0e:0b:2b:a6:c2:7d:c4:97:72:2e:f8:25:76:14:47:cf: d9:e8:c8:af:10:6d:a1:73:b3:c2:56:71:3d:e6:92:5f:52:a0: 40:48:c3:e0:9d:2e:96:da:18:6e:95:63:89:ba:68:b6:37:ff: ce:40:28:b6:2f:dd:3f:3f:f3:16:74:71:a2:41:bb:e9:79:a3: 1b:a2:95:13:a4:02:19:dd:55:9f:14:77:4c:78:95:e9:be:1c: 50:5a:1e:5f:47:d2:91:40:11:db:fc:07:2e:c2:c9:88:7b:50: 71:69:61:fc:86:71:a6:03:76:c0:5e:b8:4b:d8:4d:97:44:16: 02:90:f6:83:d8:d8:7c:82:79:6d:5e:3a:cc:28:b6:ac:d9:95: 88:82:96:da:99:43:a1:bb:42:53:6b:07:20:df:3c:8a:32:e4: 54:46:ca:6c:ae:1d:a6:6b:72:10:a4:cf:fc:15:62:56:d2:8e: 47:b7:16:29:3d:3e:74:40:b9:5b:98:0c:4c:43:a0:3d:53:55: 60:68:ac:9a:89:16:ca:9b:b3:84:ba:d4:23:56:c4:fa:04:92: d3:f5:42:26:79:4b:cc:f0:50:7c:6c:02:67:9a:2b:9a:dd:8c: ff:5e:ba:7e:4b:f4:16:d5:3d:02:df:fa:dc:5b:8a:ea:b4:c9: 5b:6c:e8:81 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUHUj5haB+4Sos9IU0vm9wPMx/MS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTVaFw0yNjExMjcxMTQ5NTVaMDMxMTAvBgNV BAMTKDNBQ0RENTc4RjgyNDVCNjNCMDQ2NUI3RTVGRTZGODVFMkQ0MjUzQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKUEpPEEgfugXZ8pGnXck2KF5z NI+ty6o2q0Y/uOlmkffqDC7N6loVSMyGzbGn6Y7XOo8x6eIrsf62zi67frzSju7Q TGpAFhf55AUiWyyys1T5G7p9yYqOQK4Wq8OLyIfrp+fNsxWiqAyd/blcvhpQ7UIf 7cITLtsIhSieTw885lNbWBIushiQo7wB0TaPiCjYeCU5CzJFKO/pB0fOizXIjK0t S8WbJLLoAXk70/9ALDJfQwD2lCOVcQwHRaijPmcK2iGNhxpsR1Pi8hjZwq4zVkmo 0aA/DmakrXiCHqqcz08Ikk/DL72L4X4FZi1TyTdaCXpwE4Vr/dqqa0Yx3EWFAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUOs3VePgkW2OwRlt+X+b4Xi1CU8AwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzUz MDJlMzIzMTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAufrUMA0GCSqGSIb3DQEBCwUAA4IBAQANLA4LK6bCfcSXci74JXYU R8/Z6MivEG2hc7PCVnE95pJfUqBASMPgnS6W2hhulWOJumi2N//OQCi2L90/P/MW dHGiQbvpeaMbopUTpAIZ3VWfFHdMeJXpvhxQWh5fR9KRQBHb/AcuwsmIe1BxaWH8 hnGmA3bAXrhL2E2XRBYCkPaD2Nh8gnltXjrMKLas2ZWIgpbamUOhu0JTawcg3zyK MuRURspsrh2ma3IQpM/8FWJW0o5HtxYpPT50QLlbmAxMQ6A9U1VgaKyaiRbKm7OE utQjVsT6BJLT9UImeUvM8FB8bAJnmiua3Yz/Xrp+S/QW1T0C3/rcW4rqtMlbbOiB -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:18 2025 by rpki-client