This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235322e3233332e302f32342d3332203d3e203531313637.roa File: 3138352e3235322e3233332e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: XAOgyETBAV8mgtE5mCJ7+rLbiHvaw+VvwDRczi48QU8= Subject key identifier: B6:0D:1A:23:1C:5C:A9:A9:8D:AB:E4:2D:F0:FD:D9:22:98:C7:47:70 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 02BC8169E7F441D8F3F9858E935D673885B1BEA9 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235322e3233332e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:18 +0000 ROA not before: Fri 28 Nov 2025 11:44:18 +0000 ROA not after: Fri 27 Nov 2026 11:49:18 +0000 asID: 51167 IP address blocks: 185.252.233.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:bc:81:69:e7:f4:41:d8:f3:f9:85:8e:93:5d:67:38:85:b1:be:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:18 2025 GMT Not After : Nov 27 11:49:18 2026 GMT Subject: CN=B60D1A231C5CA9A98DABE42DF0FDD92298C74770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:63:b9:a2:8e:ab:de:1c:a0:f4:3b:43:fc:48: 3f:99:4f:d3:4e:55:7a:37:73:8e:ef:5e:17:af:8e: 22:94:0e:c2:a7:e4:b6:80:e5:a3:a2:87:db:fe:11: 3d:a5:6f:ab:12:7d:a8:f7:c3:a4:f7:35:bc:15:a9: 5c:63:78:a5:13:b3:01:66:e1:c1:d3:4d:0c:1f:7e: eb:30:d7:26:92:8b:1a:41:21:1a:aa:2d:b9:8f:bc: c8:fc:8a:f7:93:fe:5c:1e:9e:f9:b1:18:a7:2a:25: c7:71:d3:81:63:a7:ef:6c:ab:82:13:02:72:62:ab: 9e:a0:6b:f3:d2:99:b3:7c:17:0f:38:56:47:3f:a9: 08:28:df:b4:48:44:4d:1a:d2:84:7a:12:00:27:8c: 42:6e:32:1e:1f:3c:7a:ed:0b:c3:f9:1a:43:44:99: ef:23:a0:17:e0:3c:b6:ae:1d:41:ea:b3:df:8f:cb: ad:3b:ed:a4:f4:72:9e:86:b3:04:70:34:4f:33:2c: 16:ec:20:25:8f:b3:8c:06:30:5f:09:d1:64:03:8f: 19:35:4a:83:0c:3f:c6:b6:50:00:3e:ad:29:5c:45: 6b:e3:31:04:f4:74:79:62:3b:b4:ea:2c:1e:66:e0: 88:4a:17:c4:e2:79:33:18:9a:9d:7f:8a:c8:ad:b3: f7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0D:1A:23:1C:5C:A9:A9:8D:AB:E4:2D:F0:FD:D9:22:98:C7:47:70 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235322e3233332e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.233.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:7e:7b:60:ca:c6:10:cf:50:63:c9:59:95:f0:d4:55:82:d6: a9:91:1f:bf:50:e5:15:29:ce:9f:a9:f9:cf:b6:d8:7c:8b:f6: 5f:f2:1e:e1:18:48:fe:a8:ad:69:7f:87:fb:2a:16:b1:20:41: d9:c4:2c:ae:21:10:6e:3b:8d:48:04:3e:16:af:c9:97:e0:13: 43:ad:80:d1:82:db:e7:a4:e6:42:a3:0d:74:32:ac:95:e0:28: a1:cc:07:76:29:b4:5d:c4:ac:53:2e:d6:31:1f:1a:9e:c1:4b: cc:a3:7b:43:85:2a:f0:9d:92:d1:70:18:14:fa:6d:ba:2c:33: 83:ba:11:a4:3a:89:a9:8a:8f:9d:b2:66:49:18:e1:41:12:f8: 26:e8:e7:d4:be:14:84:ec:c4:c1:65:29:cf:75:06:dc:4e:96: ce:90:26:85:12:44:7c:72:29:b4:36:1e:82:ad:59:d9:40:14: 12:73:b2:9a:cb:34:9d:d4:03:88:5b:67:eb:d4:4b:26:ab:7e: 0d:7e:4f:1d:9c:70:f5:e9:f9:90:d1:fe:39:dd:59:b2:04:f4: 18:f6:2f:2c:a9:cb:fb:bc:08:b2:aa:c3:1a:81:6c:06:f1:56: 54:3b:a1:1e:ed:2b:28:7b:f8:1a:0c:fe:2f:4c:aa:27:ae:ac: fb:ef:7a:b6 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUAryBaef0Qdjz+YWOk11nOIWxvqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MThaFw0yNjExMjcxMTQ5MThaMDMxMTAvBgNV BAMTKEI2MEQxQTIzMUM1Q0E5QTk4REFCRTQyREYwRkREOTIyOThDNzQ3NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhY7mijqveHKD0O0P8SD+ZT9NO VXo3c47vXhevjiKUDsKn5LaA5aOih9v+ET2lb6sSfaj3w6T3NbwVqVxjeKUTswFm 4cHTTQwffusw1yaSixpBIRqqLbmPvMj8iveT/lwenvmxGKcqJcdx04Fjp+9sq4IT AnJiq56ga/PSmbN8Fw84Vkc/qQgo37RIRE0a0oR6EgAnjEJuMh4fPHrtC8P5GkNE me8joBfgPLauHUHqs9+Py6077aT0cp6GswRwNE8zLBbsICWPs4wGMF8J0WQDjxk1 SoMMP8a2UAA+rSlcRWvjMQT0dHliO7TqLB5m4IhKF8TieTMYmp1/isits/dJAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUtg0aIxxcqamNq+Qt8P3ZIpjHR3AwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzUz MjJlMzIzMzMzMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALn86TANBgkqhkiG9w0BAQsFAAOCAQEAe357YMrGEM9QY8lZlfDUVYLW qZEfv1DlFSnOn6n5z7bYfIv2X/Ie4RhI/qitaX+H+yoWsSBB2cQsriEQbjuNSAQ+ Fq/Jl+ATQ62A0YLb56TmQqMNdDKsleAoocwHdim0XcSsUy7WMR8ansFLzKN7Q4Uq 8J2S0XAYFPptuiwzg7oRpDqJqYqPnbJmSRjhQRL4Jujn1L4UhOzEwWUpz3UG3E6W zpAmhRJEfHIptDYegq1Z2UAUEnOymss0ndQDiFtn69RLJqt+DX5PHZxw9en5kNH+ Od1ZsgT0GPYvLKnL+7wIsqrDGoFsBvFWVDuhHu0rKHv4Ggz+L0yqJ66s++96tg== -----END CERTIFICATE-----Generated at Tue Dec 16 14:01:13 2025 by rpki-client