This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235352e3132382e302f32342d3234203d3e20313336373837.roa File: 3138352e3235352e3132382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: Qdz80PbL9EyoPpdcKDymxUAfi6/jnfX5qsSQ9gYldRA= Subject key identifier: 60:6D:CE:B6:B9:05:E7:54:32:8B:B1:5F:41:54:A8:9A:D5:39:F2:74 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4DFCF9AFFE44B16981F7F4D24C267CD4E1F9BAEF Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235352e3132382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:31 +0000 ROA not before: Fri 28 Nov 2025 11:44:31 +0000 ROA not after: Fri 27 Nov 2026 11:49:31 +0000 asID: 136787 IP address blocks: 185.255.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:fc:f9:af:fe:44:b1:69:81:f7:f4:d2:4c:26:7c:d4:e1:f9:ba:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:31 2025 GMT Not After : Nov 27 11:49:31 2026 GMT Subject: CN=606DCEB6B905E754328BB15F4154A89AD539F274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:78:58:04:09:a7:21:29:ec:bb:63:06:22:f2: ac:ba:fa:f1:01:f1:8f:e0:b7:fd:f7:1a:94:81:17: 39:49:c5:9f:e8:c6:8b:10:4d:01:73:34:71:07:cc: 09:7d:3a:d7:57:bd:5f:60:3e:04:76:4a:7d:93:00: 40:f4:db:63:0c:ec:24:73:3b:5f:0a:a9:9e:8e:ac: 43:2e:88:53:57:27:02:83:41:44:4b:74:94:0f:b5: 3d:44:2c:17:8f:88:0c:01:1f:b6:8e:29:e8:2f:f8: 80:fc:5c:0c:68:9b:70:d1:4a:d1:3c:85:f0:07:6c: 88:f5:29:c2:14:a0:b3:99:c5:92:fe:bb:04:8e:03: 5c:b3:ea:8c:73:46:50:e5:9c:8c:fe:b5:02:6f:ab: cc:92:9e:20:39:5f:f6:87:b4:e1:8a:e4:59:74:f0: 3e:f1:e6:81:ad:6f:70:e7:37:92:39:86:20:9b:2e: 57:86:b9:6a:8e:f1:43:f2:8b:0f:7e:bc:6f:b5:fe: d3:ce:38:34:b1:9e:62:4f:55:1d:dd:9a:e4:b8:40: cd:85:46:02:cd:aa:6f:d2:c2:a2:f2:49:89:40:c7: d9:a0:1d:95:3d:0d:57:b5:2d:20:5e:96:86:c4:81: 92:4b:10:07:19:fe:00:6e:21:b5:c6:77:d9:70:c5: 4b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6D:CE:B6:B9:05:E7:54:32:8B:B1:5F:41:54:A8:9A:D5:39:F2:74 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235352e3132382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.128.0/24 Signature Algorithm: sha256WithRSAEncryption 91:e8:52:43:18:30:4b:47:9b:4b:8e:61:91:db:d4:4a:79:c1: a4:7c:70:cd:38:2b:af:70:0d:21:3d:84:93:9a:3e:2f:88:7e: fc:05:70:7b:7e:2e:7a:b4:67:6d:d4:d3:79:cf:53:64:f7:0d: 5b:ea:66:5e:7d:51:29:f6:05:ea:be:b0:e1:1d:34:10:b5:a5: 44:9f:6e:e8:cb:55:24:a0:63:41:b2:1c:b9:c4:b2:29:34:c0: 68:34:75:f3:93:eb:d5:ba:78:f6:04:f8:7e:c7:05:cf:ec:a7: 0c:de:aa:84:9a:f4:cb:46:a7:b6:bf:41:df:09:88:a9:94:f8: 15:71:db:ed:91:13:e4:93:12:c4:36:13:53:cf:e5:fd:33:d5: e9:4f:fd:ad:b3:1e:f3:16:4c:ec:e2:1f:1f:60:84:a6:c4:97: bd:a6:f6:be:0f:95:42:a3:f8:ae:40:87:35:d5:3a:a8:0c:78: fa:64:d5:84:dd:1f:1a:48:15:bb:60:23:f7:c7:94:64:e1:7a: db:91:83:ab:34:cc:f1:59:8e:69:82:97:95:46:30:f7:16:a4: 37:4e:f5:02:df:73:46:03:4c:ff:0b:fc:b4:90:a9:94:e9:83: af:69:a0:e4:cb:f4:e3:67:06:a0:ce:f1:9e:a5:96:66:9f:f3: ad:e2:ad:eb -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUTfz5r/5EsWmB9/TSTCZ81OH5uu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzFaFw0yNjExMjcxMTQ5MzFaMDMxMTAvBgNV BAMTKDYwNkRDRUI2QjkwNUU3NTQzMjhCQjE1RjQxNTRBODlBRDUzOUYyNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWeFgECachKey7YwYi8qy6+vEB 8Y/gt/33GpSBFzlJxZ/oxosQTQFzNHEHzAl9OtdXvV9gPgR2Sn2TAED022MM7CRz O18KqZ6OrEMuiFNXJwKDQURLdJQPtT1ELBePiAwBH7aOKegv+ID8XAxom3DRStE8 hfAHbIj1KcIUoLOZxZL+uwSOA1yz6oxzRlDlnIz+tQJvq8ySniA5X/aHtOGK5Fl0 8D7x5oGtb3DnN5I5hiCbLleGuWqO8UPyiw9+vG+1/tPOODSxnmJPVR3dmuS4QM2F RgLNqm/SwqLySYlAx9mgHZU9DVe1LSBelobEgZJLEAcZ/gBuIbXGd9lwxUtXAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUYG3OtrkF51Qyi7FfQVSomtU58nQwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzUz NTJlMzEzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAuf+AMA0GCSqGSIb3DQEBCwUAA4IBAQCR6FJDGDBLR5tLjmGR29RK ecGkfHDNOCuvcA0hPYSTmj4viH78BXB7fi56tGdt1NN5z1Nk9w1b6mZefVEp9gXq vrDhHTQQtaVEn27oy1UkoGNBshy5xLIpNMBoNHXzk+vVunj2BPh+xwXP7KcM3qqE mvTLRqe2v0HfCYiplPgVcdvtkRPkkxLENhNTz+X9M9XpT/2tsx7zFkzs4h8fYISm xJe9pva+D5VCo/iuQIc11TqoDHj6ZNWE3R8aSBW7YCP3x5Rk4XrbkYOrNMzxWY5p gpeVRjD3FqQ3TvUC33NGA0z/C/y0kKmU6YOvaaDky/TjZwagzvGepZZmn/Ot4q3r -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:33 2025 by rpki-client