This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235322e3233342e302f32332d3332203d3e203531313637.roa File: 3138352e3235322e3233342e302f32332d3332203d3e203531313637.roa (raw, json) Hash identifier: cZBzn/i0BIA/aRE1Ggshgf6BmMdPRuPE1/Xu7RgXJac= Subject key identifier: 77:AD:2B:D9:61:B9:6B:D8:69:9E:C0:54:09:31:05:00:4C:62:8D:6D Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7B41D3FDC8E90F2CF31E6F06EC7D2C39E0878A50 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235322e3233342e302f32332d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:28 +0000 ROA not before: Fri 28 Nov 2025 11:44:28 +0000 ROA not after: Fri 27 Nov 2026 11:49:28 +0000 asID: 51167 IP address blocks: 185.252.234.0/23 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:41:d3:fd:c8:e9:0f:2c:f3:1e:6f:06:ec:7d:2c:39:e0:87:8a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:28 2025 GMT Not After : Nov 27 11:49:28 2026 GMT Subject: CN=77AD2BD961B96BD8699EC054093105004C628D6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0c:be:7d:ab:88:27:2b:e6:99:fe:17:25:9b: de:e2:63:1d:2f:cf:05:5e:ef:04:9d:bf:10:db:95: bf:45:76:8a:94:8e:5d:76:12:b0:a4:84:12:58:fd: e8:e3:14:b9:86:85:2d:3e:e9:bd:46:a7:6e:3d:d3: f4:c4:f3:63:f5:5b:c5:0f:2d:47:cc:52:54:a0:0d: 2e:f3:af:cd:f5:c2:fc:26:e0:80:7e:a0:c0:e8:23: 13:21:74:3a:fc:4d:09:f6:4f:f3:a9:fa:fb:a5:d0: 77:0a:ea:ef:24:9b:32:7d:f4:0a:8b:ed:30:c2:84: 24:ab:fe:12:44:a1:2b:b3:ef:6c:46:5c:b5:fc:bc: f5:1d:75:1b:c0:a9:f9:e5:d9:59:62:ac:c2:2e:31: 0a:40:e5:b1:b6:ea:ea:67:9e:41:47:12:45:59:1a: c9:9f:bb:e7:67:0a:d9:08:85:5f:da:26:db:3a:78: 08:92:4d:88:cf:be:02:21:6f:db:5a:4a:d5:7a:22: 86:4a:e4:c3:ba:f8:7b:8b:08:41:ec:ae:b5:1e:42: ea:56:78:ec:13:d8:db:96:97:ec:24:2e:5b:66:b5: 86:b6:0b:fb:3d:b8:87:66:78:c4:77:a2:a5:5c:f5: ed:79:b4:60:44:17:0e:cc:bb:69:91:33:8f:9d:af: b4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AD:2B:D9:61:B9:6B:D8:69:9E:C0:54:09:31:05:00:4C:62:8D:6D X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235322e3233342e302f32332d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.234.0/23 Signature Algorithm: sha256WithRSAEncryption db:e9:09:37:3f:74:38:f8:70:7b:58:e8:5e:52:0e:06:e1:cb: b1:f4:83:99:28:cf:7f:e6:c8:6c:79:63:fa:82:11:dc:19:36: 34:8d:07:c5:49:e5:43:8e:ef:59:39:b3:fc:1b:e6:62:c2:8b: 59:ad:37:28:10:11:32:8b:86:91:02:de:8c:66:6e:0e:59:69: 6a:83:ed:d1:1f:e7:dc:84:11:00:29:e9:8a:03:5f:6e:da:d9: 7b:5e:34:f4:1a:a5:f8:20:9d:f1:9e:f1:92:f0:7e:8b:d9:e1: 2d:d9:02:f3:8f:32:cd:ce:52:4f:0b:82:d9:ad:40:5b:b6:c0: 34:59:5b:5e:53:ac:c8:90:ca:9b:4c:b9:5d:3c:3e:49:ce:81: f5:1e:3b:bb:5c:14:53:68:c7:31:7c:98:48:50:e8:9f:60:59: 5c:20:d4:f2:49:5d:68:0f:91:40:72:f3:75:cf:07:7a:9b:e0: d6:2e:33:4f:0d:b5:b6:90:71:10:85:4a:66:f0:d6:b1:e3:15: d5:4c:ed:2a:f3:55:37:84:45:f3:09:50:9a:cb:94:d3:92:66: 43:a2:92:34:3c:b9:ce:37:bd:eb:98:fe:0b:e7:91:dd:94:83: 6c:29:94:8f:ab:3d:80:5c:e9:d0:6b:4d:e0:37:3e:85:d4:db: 8a:b4:77:c7 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUe0HT/cjpDyzzHm8G7H0sOeCHilAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjhaFw0yNjExMjcxMTQ5MjhaMDMxMTAvBgNV BAMTKDc3QUQyQkQ5NjFCOTZCRDg2OTlFQzA1NDA5MzEwNTAwNEM2MjhENkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWDL59q4gnK+aZ/hclm97iYx0v zwVe7wSdvxDblb9FdoqUjl12ErCkhBJY/ejjFLmGhS0+6b1Gp2490/TE82P1W8UP LUfMUlSgDS7zr831wvwm4IB+oMDoIxMhdDr8TQn2T/Op+vul0HcK6u8kmzJ99AqL 7TDChCSr/hJEoSuz72xGXLX8vPUddRvAqfnl2VlirMIuMQpA5bG26upnnkFHEkVZ Gsmfu+dnCtkIhV/aJts6eAiSTYjPvgIhb9taStV6IoZK5MO6+HuLCEHsrrUeQupW eOwT2NuWl+wkLltmtYa2C/s9uIdmeMR3oqVc9e15tGBEFw7Mu2mRM4+dr7SLAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUd60r2WG5a9hpnsBUCTEFAExijW0wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzUz MjJlMzIzMzM0MmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAbn86jANBgkqhkiG9w0BAQsFAAOCAQEA2+kJNz90OPhwe1joXlIOBuHL sfSDmSjPf+bIbHlj+oIR3Bk2NI0HxUnlQ47vWTmz/BvmYsKLWa03KBARMouGkQLe jGZuDllpaoPt0R/n3IQRACnpigNfbtrZe1409Bql+CCd8Z7xkvB+i9nhLdkC848y zc5STwuC2a1AW7bANFlbXlOsyJDKm0y5XTw+Sc6B9R47u1wUU2jHMXyYSFDon2BZ XCDU8kldaA+RQHLzdc8Hepvg1i4zTw21tpBxEIVKZvDWseMV1UztKvNVN4RF8wlQ msuU05JmQ6KSNDy5zje965j+C+eR3ZSDbCmUj6s9gFzp0GtN4Dc+hdTbirR3xw== -----END CERTIFICATE-----Generated at Tue Dec 16 14:01:10 2025 by rpki-client