This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235302e3231352e302f32342d3234203d3e20313336373837.roa File: 3138352e3235302e3231352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 8Yus9m4Dp3vit8VjkVao10bNsJuuHhkoL7l0GmHehqk= Subject key identifier: BA:6A:6C:4D:A6:52:11:0C:AF:90:A8:4F:07:E1:E6:59:C1:67:F6:ED Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2541E115992379E776F9578FB7C36621D9D1EF28 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235302e3231352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:44 +0000 ROA not before: Fri 28 Nov 2025 11:44:44 +0000 ROA not after: Fri 27 Nov 2026 11:49:44 +0000 asID: 136787 IP address blocks: 185.250.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:41:e1:15:99:23:79:e7:76:f9:57:8f:b7:c3:66:21:d9:d1:ef:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:44 2025 GMT Not After : Nov 27 11:49:44 2026 GMT Subject: CN=BA6A6C4DA652110CAF90A84F07E1E659C167F6ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:62:2d:38:fa:69:61:c6:a0:27:f4:d6:af:62: c6:2b:f1:52:39:35:8d:d7:f8:71:df:c1:6d:66:75: 81:49:18:0f:4c:ae:30:d6:fe:3b:ff:19:27:a9:ea: 25:40:0b:93:23:f8:d8:eb:fc:81:41:89:91:7f:92: aa:3d:ee:f3:50:b0:4a:53:2b:77:f7:60:57:cf:ad: bd:72:2b:7d:22:84:10:71:b9:83:b3:4d:d3:e4:17: a2:37:05:f5:5b:97:96:db:40:7c:4d:fa:e2:70:2c: 62:3b:2f:a7:b1:24:99:3b:54:a6:25:a8:d5:37:23: 16:89:e8:46:6d:33:f7:4d:a3:57:f8:28:1e:1e:4f: 00:a3:1a:14:5a:50:71:08:d9:b6:3d:6d:f7:c2:26: 07:ec:a7:5e:29:2c:a3:a2:d4:9e:1f:12:c2:fa:16: a2:5b:46:36:72:9d:bc:14:eb:53:75:51:2c:0a:48: 43:3e:16:52:1a:96:95:fb:90:c2:36:1c:d5:d0:df: 45:06:97:64:07:40:10:8c:c8:3e:c7:33:9c:31:ed: 00:47:5d:d9:06:24:85:6c:99:57:2c:9d:fc:9d:48: 88:c7:49:4f:be:d0:aa:cf:c8:c5:60:84:fd:bd:e1: de:82:62:00:49:62:d9:f6:b7:4a:8a:10:96:a4:bf: c6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6A:6C:4D:A6:52:11:0C:AF:90:A8:4F:07:E1:E6:59:C1:67:F6:ED X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235302e3231352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.215.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:ba:fd:78:13:11:d4:9a:42:40:2d:80:93:c4:e7:df:8c:f6: 1d:cb:44:f8:41:b4:57:2a:9a:b2:9f:fd:f9:68:10:6a:22:80: 7b:37:5a:5f:e8:7e:aa:84:80:af:e9:52:b7:89:7f:dc:f2:07: 49:33:c9:3b:5b:46:ac:d4:24:06:d4:6c:e8:f0:85:d5:b1:f9: b3:e4:82:07:dd:a7:7f:09:f6:ff:b2:3e:00:cc:c0:cf:68:50: c5:a1:7d:c6:bf:33:39:fa:c4:c9:22:a3:de:84:75:42:74:85: 61:0d:aa:92:44:66:e9:de:2c:1a:62:6a:5f:3c:aa:6a:4a:3b: 2d:e6:39:8c:a8:4c:d2:4e:78:17:fc:88:fc:3b:30:84:c8:e0: 93:f2:2b:dd:50:73:cf:ff:f9:ca:cc:79:64:53:1a:52:7b:d6: 44:aa:cc:1d:7f:c5:e7:61:41:6d:5b:0b:69:78:57:07:72:19: 07:aa:65:29:0a:cd:34:c2:c5:72:e2:b5:e8:01:1c:f0:c3:4b: dd:1e:09:01:3d:e6:78:9a:15:de:36:c6:01:37:15:4d:88:f3: b8:ed:b2:7a:98:f0:4c:96:a1:d2:70:44:f2:96:f7:75:97:61: 3a:a1:80:58:e8:18:2f:ae:f8:1b:4b:9e:ff:6a:9f:0d:97:d8: 82:9c:77:24 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUJUHhFZkjeed2+VePt8NmIdnR7ygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDRaFw0yNjExMjcxMTQ5NDRaMDMxMTAvBgNV BAMTKEJBNkE2QzREQTY1MjExMENBRjkwQTg0RjA3RTFFNjU5QzE2N0Y2RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2Yi04+mlhxqAn9NavYsYr8VI5 NY3X+HHfwW1mdYFJGA9MrjDW/jv/GSep6iVAC5Mj+Njr/IFBiZF/kqo97vNQsEpT K3f3YFfPrb1yK30ihBBxuYOzTdPkF6I3BfVbl5bbQHxN+uJwLGI7L6exJJk7VKYl qNU3IxaJ6EZtM/dNo1f4KB4eTwCjGhRaUHEI2bY9bffCJgfsp14pLKOi1J4fEsL6 FqJbRjZynbwU61N1USwKSEM+FlIalpX7kMI2HNXQ30UGl2QHQBCMyD7HM5wx7QBH XdkGJIVsmVcsnfydSIjHSU++0KrPyMVghP294d6CYgBJYtn2t0qKEJakv8YtAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUumpsTaZSEQyvkKhPB+HmWcFn9u0wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzUz MDJlMzIzMTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAufrXMA0GCSqGSIb3DQEBCwUAA4IBAQAKuv14ExHUmkJALYCTxOff jPYdy0T4QbRXKpqyn/35aBBqIoB7N1pf6H6qhICv6VK3iX/c8gdJM8k7W0as1CQG 1Gzo8IXVsfmz5IIH3ad/Cfb/sj4AzMDPaFDFoX3GvzM5+sTJIqPehHVCdIVhDaqS RGbp3iwaYmpfPKpqSjst5jmMqEzSTngX/Ij8OzCEyOCT8ivdUHPP//nKzHlkUxpS e9ZEqswdf8XnYUFtWwtpeFcHchkHqmUpCs00wsVy4rXoARzww0vdHgkBPeZ4mhXe NsYBNxVNiPO47bJ6mPBMlqHScETylvd1l2E6oYBY6BgvrvgbS57/ap8Nl9iCnHck -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:14 2025 by rpki-client