This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235302e3231342e302f32342d3234203d3e20313336373837.roa File: 3138352e3235302e3231342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 5I4jwj6V0q3+7G2ZWENMaeJKgU5ZavK7qJcdSQxvNkQ= Subject key identifier: 6B:BD:93:3D:92:EF:8E:4E:8F:D4:BC:11:FC:73:53:0E:79:C4:4F:D2 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0FAD7DBEF3CB840871E06A905BBFB27DE2AAC2D5 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235302e3231342e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:33 +0000 ROA not before: Fri 28 Nov 2025 11:44:33 +0000 ROA not after: Fri 27 Nov 2026 11:49:33 +0000 asID: 136787 IP address blocks: 185.250.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ad:7d:be:f3:cb:84:08:71:e0:6a:90:5b:bf:b2:7d:e2:aa:c2:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:33 2025 GMT Not After : Nov 27 11:49:33 2026 GMT Subject: CN=6BBD933D92EF8E4E8FD4BC11FC73530E79C44FD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e8:f7:d6:d3:45:1d:31:0a:f7:0a:87:a5:92: fa:5d:2d:cd:f3:26:4e:71:4f:ae:26:4f:60:d5:f5: 8b:33:1c:b1:1a:e6:c6:e3:c1:50:29:de:40:29:9d: 2d:2c:04:df:69:90:5a:a3:3e:0f:da:31:25:fc:96: 29:bb:4e:8a:a9:92:57:93:d4:60:a5:d6:7f:03:c8: 7d:5c:3a:27:0b:e0:71:98:30:15:ac:7f:41:8e:dc: e6:92:25:f1:35:08:f7:48:3a:ee:2a:30:0b:ef:d8: ef:42:b3:ee:bf:fa:74:4a:11:ca:db:2c:2b:37:54: 98:c7:e3:7e:23:da:8d:e5:c4:f0:12:78:0b:21:29: bb:a2:af:08:c1:8a:59:9b:2a:0f:00:90:d2:18:22: 30:b1:c2:58:2f:84:26:9f:62:ef:c1:26:2c:17:6c: f4:2a:f4:b3:f6:85:a2:3d:f6:7a:58:79:a2:d2:e1: 3d:b2:f3:03:07:8f:a4:46:65:5a:f1:d7:34:8c:95: 4d:82:61:07:39:87:60:4e:2a:fa:d8:89:20:ec:1d: d1:e6:35:81:3a:8c:a5:ae:3e:62:c3:9c:a0:60:8c: 81:38:14:38:42:74:6f:f1:45:e0:2f:90:0f:f8:75: 1e:2b:62:97:31:26:89:9e:98:50:1d:35:99:12:6f: 95:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BD:93:3D:92:EF:8E:4E:8F:D4:BC:11:FC:73:53:0E:79:C4:4F:D2 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235302e3231342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.214.0/24 Signature Algorithm: sha256WithRSAEncryption d6:dd:26:ae:b8:1a:b2:42:f4:8c:26:b7:7d:0b:9c:a3:78:bf: fe:35:b6:06:c6:26:1b:43:c1:f3:dd:7d:ab:93:73:76:71:82: 1c:a7:47:3c:b1:de:eb:67:cb:00:47:ba:d2:05:06:3b:ca:00: ba:ff:58:20:c2:38:b2:c4:ce:7d:73:15:f4:ca:00:7e:56:53: ed:47:e7:b2:38:70:90:42:5d:1a:75:de:63:3a:e2:ad:d7:6e: 76:af:67:22:b3:d5:c9:83:d8:f6:41:3b:27:58:d5:70:55:7a: f2:aa:4e:2d:cd:25:7f:07:2b:ac:05:37:b0:c4:97:ad:aa:fe: 04:b6:6f:ff:c0:de:2d:86:eb:68:e6:f5:f9:89:02:26:43:3f: 92:c3:96:8a:38:ed:27:fb:8c:d8:e0:d6:ea:e0:b2:6c:06:ad: 93:d5:ea:b4:de:06:0a:f7:2e:6c:78:6a:ec:23:0a:30:56:5c: fa:41:d9:2f:c9:e2:39:cc:88:d1:8f:c5:0f:e2:36:dd:ae:66: 5e:4f:59:42:e6:1a:c3:a1:5f:03:7f:2c:91:6f:85:b4:14:0c: 2c:c4:1b:69:6d:88:b8:9e:27:13:06:7a:f7:2d:62:de:01:5a: 45:32:54:5d:0d:c9:85:f3:93:8e:6a:df:27:87:4b:5e:bd:86: 5f:33:4a:01 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUD619vvPLhAhx4GqQW7+yfeKqwtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzNaFw0yNjExMjcxMTQ5MzNaMDMxMTAvBgNV BAMTKDZCQkQ5MzNEOTJFRjhFNEU4RkQ0QkMxMUZDNzM1MzBFNzlDNDRGRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW6PfW00UdMQr3CoelkvpdLc3z Jk5xT64mT2DV9YszHLEa5sbjwVAp3kApnS0sBN9pkFqjPg/aMSX8lim7ToqpkleT 1GCl1n8DyH1cOicL4HGYMBWsf0GO3OaSJfE1CPdIOu4qMAvv2O9Cs+6/+nRKEcrb LCs3VJjH434j2o3lxPASeAshKbuirwjBilmbKg8AkNIYIjCxwlgvhCafYu/BJiwX bPQq9LP2haI99npYeaLS4T2y8wMHj6RGZVrx1zSMlU2CYQc5h2BOKvrYiSDsHdHm NYE6jKWuPmLDnKBgjIE4FDhCdG/xReAvkA/4dR4rYpcxJomemFAdNZkSb5XpAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUa72TPZLvjk6P1LwR/HNTDnnET9IwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzUz MDJlMzIzMTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAufrWMA0GCSqGSIb3DQEBCwUAA4IBAQDW3SauuBqyQvSMJrd9C5yj eL/+NbYGxiYbQ8Hz3X2rk3N2cYIcp0c8sd7rZ8sAR7rSBQY7ygC6/1ggwjiyxM59 cxX0ygB+VlPtR+eyOHCQQl0add5jOuKt1252r2cis9XJg9j2QTsnWNVwVXryqk4t zSV/ByusBTewxJetqv4Etm//wN4thuto5vX5iQImQz+Sw5aKOO0n+4zY4Nbq4LJs Bq2T1eq03gYK9y5seGrsIwowVlz6QdkvyeI5zIjRj8UP4jbdrmZeT1lC5hrDoV8D fyyRb4W0FAwsxBtpbYi4nicTBnr3LWLeAVpFMlRdDcmF85OOat8nh0tevYZfM0oB -----END CERTIFICATE-----Generated at Sat Dec 6 16:48:56 2025 by rpki-client