This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235322e3233322e302f32342d3332203d3e203531313637.roa File: 3138352e3235322e3233322e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: cMqWf74F+FdPgvxZrzEOBfI9IHq58uB4yFWU80Fen3s= Subject key identifier: 05:74:23:21:4C:68:13:0C:0C:AA:05:26:AC:73:59:1F:23:EC:3C:FE Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3EEB5729158BB18B3E288ABCB395E5E950FBD94B Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235322e3233322e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:42 +0000 ROA not before: Fri 28 Nov 2025 11:44:42 +0000 ROA not after: Fri 27 Nov 2026 11:49:42 +0000 asID: 51167 IP address blocks: 185.252.232.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:eb:57:29:15:8b:b1:8b:3e:28:8a:bc:b3:95:e5:e9:50:fb:d9:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:42 2025 GMT Not After : Nov 27 11:49:42 2026 GMT Subject: CN=057423214C68130C0CAA0526AC73591F23EC3CFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ba:e3:f7:8e:3f:dc:26:ad:ed:a8:9b:49:72: ae:b2:74:8b:bd:25:f0:91:bc:bd:23:c5:f0:23:a1: cf:e1:6c:a8:99:9a:35:11:e7:b2:6e:25:58:01:54: 73:aa:98:ec:6c:7b:94:51:37:6b:b7:9f:16:dd:9a: c9:e3:ce:91:ce:30:2a:2f:df:9d:80:13:11:46:cc: d6:a9:34:0f:db:cd:dd:7c:b5:75:b1:ae:b8:aa:59: 0b:87:42:bf:1a:05:b6:83:86:7e:e6:db:4a:33:da: 0a:e9:d5:5e:0f:80:a2:e6:d7:a4:07:2c:aa:c1:78: 12:8f:73:e2:af:14:d3:b7:1c:0b:a8:61:6e:c5:0f: dc:8c:c2:7b:5f:9d:d9:a9:f8:00:a4:6b:03:da:4b: 96:8d:30:f4:8c:10:09:36:2c:c7:11:94:8f:b1:55: 63:3c:90:af:4e:5a:70:52:35:c7:36:c0:29:d9:76: 7f:a0:04:20:64:40:7c:28:1c:1e:e3:52:bb:dd:a8: a1:5f:d5:9f:ef:63:b7:7f:de:82:4f:14:b2:87:7d: c1:d7:bd:ef:b5:7f:dc:4e:c6:e6:bc:d7:5c:98:4c: 5e:0f:ce:ae:ff:31:b8:18:be:d5:af:d6:51:e2:37: cb:0d:42:a3:61:d5:b8:7a:95:b5:32:6b:e1:52:29: 9c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:74:23:21:4C:68:13:0C:0C:AA:05:26:AC:73:59:1F:23:EC:3C:FE X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235322e3233322e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.232.0/24 Signature Algorithm: sha256WithRSAEncryption 27:39:f1:b8:38:5a:bb:7b:5f:c9:d3:f5:3f:46:64:ac:66:a8: b0:85:bd:41:a6:6c:36:70:14:b7:7e:e9:4f:8b:c6:f9:58:7c: 18:a7:35:e1:6c:ad:7d:01:4d:e6:78:9d:02:3e:31:ba:59:11: ea:93:cd:c1:dc:a1:1e:a9:55:18:11:77:a0:33:22:f6:22:a0: 63:5c:30:5e:32:8d:ed:0c:21:96:ac:5c:dd:e1:7a:bd:d6:0f: 3b:06:f3:99:7d:33:df:02:ab:bc:2e:32:aa:65:ec:8a:04:30: d0:07:3f:d3:de:b6:34:67:1c:be:59:d1:62:63:af:b3:23:d3: cc:51:db:b1:31:df:52:c2:a2:8e:7f:21:9a:d7:07:ac:3f:fb: 23:5a:51:d9:b4:b7:6a:55:09:31:b7:8a:a8:5c:55:f6:88:57: 94:bd:a4:d2:da:02:ce:d4:53:db:83:b9:09:54:c6:f8:14:1a: 11:40:f7:dd:46:51:8f:8e:82:12:ea:bb:cf:77:1d:d2:6a:c7: de:31:59:f2:f4:2e:77:4a:33:dd:3b:b7:9c:a7:aa:4b:e1:13: 09:86:66:0d:fa:a1:7e:8c:14:ff:f0:d1:25:a1:e8:92:17:dc: 5a:e2:7c:a9:b8:1e:0a:ee:8b:72:50:2d:39:11:87:d5:25:83: a8:e4:66:f1 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUPutXKRWLsYs+KIq8s5Xl6VD72UswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDJaFw0yNjExMjcxMTQ5NDJaMDMxMTAvBgNV BAMTKDA1NzQyMzIxNEM2ODEzMEMwQ0FBMDUyNkFDNzM1OTFGMjNFQzNDRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCuuP3jj/cJq3tqJtJcq6ydIu9 JfCRvL0jxfAjoc/hbKiZmjUR57JuJVgBVHOqmOxse5RRN2u3nxbdmsnjzpHOMCov 352AExFGzNapNA/bzd18tXWxrriqWQuHQr8aBbaDhn7m20oz2grp1V4PgKLm16QH LKrBeBKPc+KvFNO3HAuoYW7FD9yMwntfndmp+ACkawPaS5aNMPSMEAk2LMcRlI+x VWM8kK9OWnBSNcc2wCnZdn+gBCBkQHwoHB7jUrvdqKFf1Z/vY7d/3oJPFLKHfcHX ve+1f9xOxua811yYTF4Pzq7/MbgYvtWv1lHiN8sNQqNh1bh6lbUya+FSKZxBAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUBXQjIUxoEwwMqgUmrHNZHyPsPP4wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzUz MjJlMzIzMzMyMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALn86DANBgkqhkiG9w0BAQsFAAOCAQEAJznxuDhau3tfydP1P0ZkrGao sIW9QaZsNnAUt37pT4vG+Vh8GKc14WytfQFN5nidAj4xulkR6pPNwdyhHqlVGBF3 oDMi9iKgY1wwXjKN7Qwhlqxc3eF6vdYPOwbzmX0z3wKrvC4yqmXsigQw0Ac/0962 NGccvlnRYmOvsyPTzFHbsTHfUsKijn8hmtcHrD/7I1pR2bS3alUJMbeKqFxV9ohX lL2k0toCztRT24O5CVTG+BQaEUD33UZRj46CEuq7z3cd0mrH3jFZ8vQud0oz3Tu3 nKeqS+ETCYZmDfqhfowU//DRJaHokhfcWuJ8qbgeCu6LclAtORGH1SWDqORm8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:59:23 2025 by rpki-client