This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235302e3231332e302f32342d3234203d3e20313336373837.roa File: 3138352e3235302e3231332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 3qau9LgZLhcdzP7hxvH97r6lg9tNQFRlEVLfiWdA48E= Subject key identifier: C2:52:83:C9:FC:10:61:7E:94:2B:1A:C9:2C:04:1E:C8:A5:CB:AC:EF Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4D861828B14FA6DC23831B22D3137CA69C0E33BC Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235302e3231332e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:25 +0000 ROA not before: Fri 28 Nov 2025 11:44:25 +0000 ROA not after: Fri 27 Nov 2026 11:49:25 +0000 asID: 136787 IP address blocks: 185.250.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:86:18:28:b1:4f:a6:dc:23:83:1b:22:d3:13:7c:a6:9c:0e:33:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:25 2025 GMT Not After : Nov 27 11:49:25 2026 GMT Subject: CN=C25283C9FC10617E942B1AC92C041EC8A5CBACEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e7:89:fe:81:b6:21:19:dc:33:5c:07:c1:7c: 5e:01:73:f8:57:b1:cd:53:8a:15:26:b1:3e:90:13: d3:86:63:9f:9a:8a:e7:81:0f:27:bf:1b:1f:77:0a: c2:d4:89:4f:7d:b4:c8:83:1e:ad:db:eb:ab:ec:82: 23:a0:3f:33:19:e0:df:4b:e2:7c:35:f5:27:2e:f8: 7e:15:ef:ea:2f:ba:c8:9f:2b:8d:7e:42:18:2f:6d: fe:fb:08:5d:cc:21:bc:41:bc:a0:a0:6c:d0:c1:8c: b9:f9:93:f4:d1:45:30:5f:28:0e:23:e3:dd:c9:df: c2:0d:0e:c6:52:59:1a:90:4b:c3:4e:12:59:92:e2: c4:fe:73:d9:a8:87:c1:a8:32:4e:01:6f:06:99:d4: 60:74:62:8e:19:ff:02:f7:a2:ee:45:ea:4d:c2:1a: 12:07:44:8a:bd:d6:db:f0:80:e9:2d:2c:0e:5e:6b: e1:41:9f:db:0f:bd:1a:56:84:e3:f7:b5:c2:97:8a: 86:d6:20:e1:6c:a7:cb:1b:05:76:e2:76:4b:38:62: 21:10:2b:87:db:e2:94:e7:cd:bd:ac:38:4c:d2:47: a7:ec:c6:11:f5:38:79:1a:31:3b:27:1d:5f:49:76: 0e:44:64:dc:f7:ed:e0:ec:99:9f:f6:18:0e:8e:bd: 81:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:52:83:C9:FC:10:61:7E:94:2B:1A:C9:2C:04:1E:C8:A5:CB:AC:EF X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235302e3231332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.213.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:c8:06:2f:aa:fc:9a:97:0d:f6:45:23:2f:07:eb:06:83:bb: c9:41:60:cb:9e:08:3e:11:d3:e0:33:ec:62:69:0e:6c:4c:0e: 9a:e2:ef:31:f8:24:68:09:b0:9e:67:ea:7e:de:72:c5:dd:af: 64:03:1e:1d:b0:49:cd:be:3c:5b:19:bc:1a:8f:48:18:bf:bc: 36:89:13:da:85:7c:a7:18:ea:fa:23:3e:bb:e6:9f:5b:69:c5: 7e:d5:e5:76:c1:7f:c9:80:29:08:eb:16:15:79:87:ea:4e:ff: 27:c6:99:bf:47:82:ec:eb:1a:23:55:dc:72:db:4c:e9:e1:92: 56:b0:31:64:fe:a8:7b:bb:e7:67:04:b4:98:12:3a:29:fd:b3: df:9f:99:be:ef:95:50:22:f9:19:40:40:52:c8:87:8f:9d:0f: a0:4f:d4:4d:a6:f6:32:0c:20:ed:27:98:d9:b7:7a:76:71:ce: 94:74:be:3a:cb:9f:ed:b9:04:a8:6c:79:55:aa:29:0b:3d:84: 62:83:a4:41:6d:e7:c2:91:fe:ba:13:6d:17:e2:46:49:bc:f5: 01:25:5a:67:77:59:21:ed:17:4b:f1:03:e7:c6:b6:ff:02:9f: bb:20:85:db:57:11:1d:ed:18:80:1b:24:3a:57:c4:9e:8c:30: 22:49:4d:4b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUTYYYKLFPptwjgxsi0xN8ppwOM7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjVaFw0yNjExMjcxMTQ5MjVaMDMxMTAvBgNV BAMTKEMyNTI4M0M5RkMxMDYxN0U5NDJCMUFDOTJDMDQxRUM4QTVDQkFDRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH54n+gbYhGdwzXAfBfF4Bc/hX sc1TihUmsT6QE9OGY5+aiueBDye/Gx93CsLUiU99tMiDHq3b66vsgiOgPzMZ4N9L 4nw19Scu+H4V7+ovusifK41+Qhgvbf77CF3MIbxBvKCgbNDBjLn5k/TRRTBfKA4j 493J38INDsZSWRqQS8NOElmS4sT+c9moh8GoMk4BbwaZ1GB0Yo4Z/wL3ou5F6k3C GhIHRIq91tvwgOktLA5ea+FBn9sPvRpWhOP3tcKXiobWIOFsp8sbBXbidks4YiEQ K4fb4pTnzb2sOEzSR6fsxhH1OHkaMTsnHV9Jdg5EZNz37eDsmZ/2GA6OvYFPAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUwlKDyfwQYX6UKxrJLAQeyKXLrO8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzUz MDJlMzIzMTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAufrVMA0GCSqGSIb3DQEBCwUAA4IBAQA+yAYvqvyalw32RSMvB+sG g7vJQWDLngg+EdPgM+xiaQ5sTA6a4u8x+CRoCbCeZ+p+3nLF3a9kAx4dsEnNvjxb Gbwaj0gYv7w2iRPahXynGOr6Iz675p9bacV+1eV2wX/JgCkI6xYVeYfqTv8nxpm/ R4Ls6xojVdxy20zp4ZJWsDFk/qh7u+dnBLSYEjop/bPfn5m+75VQIvkZQEBSyIeP nQ+gT9RNpvYyDCDtJ5jZt3p2cc6UdL46y5/tuQSobHlVqikLPYRig6RBbefCkf66 E20X4kZJvPUBJVpnd1kh7RdL8QPnxrb/Ap+7IIXbVxEd7RiAGyQ6V8SejDAiSU1L -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:43 2025 by rpki-client