This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235352e3133312e302f32342d3332203d3e203531313637.roa File: 3138352e3235352e3133312e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: 7vOZdT7lxkZ3JPyDDlJa0iaBEK9CiBxAJ1/nN1Vfag0= Subject key identifier: E4:85:F5:71:E1:C7:1E:67:7C:53:7C:2B:DF:C0:3D:61:4D:07:87:75 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 596737C5F4A06084A477A03416893EA1EDA312DA Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235352e3133312e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:24 +0000 ROA not before: Fri 28 Nov 2025 11:44:24 +0000 ROA not after: Fri 27 Nov 2026 11:49:24 +0000 asID: 51167 IP address blocks: 185.255.131.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:67:37:c5:f4:a0:60:84:a4:77:a0:34:16:89:3e:a1:ed:a3:12:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:24 2025 GMT Not After : Nov 27 11:49:24 2026 GMT Subject: CN=E485F571E1C71E677C537C2BDFC03D614D078775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:78:88:f4:b8:16:e4:14:c1:27:71:5a:f0:bc: b0:73:cd:0f:dc:fe:c1:6d:1d:f8:d2:6f:46:8e:4b: 33:d3:42:9e:a4:9b:37:79:f9:39:ee:38:4f:5d:f1: 62:a0:48:31:28:17:82:a7:45:9c:d1:a9:c3:cf:13: 4f:a7:3a:ff:f4:50:62:af:2d:67:67:ca:f3:ed:37: fe:e9:ac:5f:7c:fb:a7:11:33:74:04:97:f9:c9:ba: f0:ea:02:88:d2:20:86:27:bd:bf:1b:f3:0d:e4:3a: 52:00:16:1e:02:0b:63:32:03:08:d6:80:33:fd:a8: 1d:94:2e:c2:2b:db:c5:ea:e7:e4:5b:69:f0:11:32: 4f:8c:e7:13:5d:3d:c2:89:65:8f:ee:fa:b5:c2:cc: 54:22:6a:f2:a0:f8:ef:1a:9a:22:8c:47:3d:40:e9: a2:4a:09:3e:32:ed:c0:73:7b:a3:44:cf:cd:d5:96: 7e:16:e5:8c:17:e4:ba:f8:f9:b8:bf:8d:58:17:bb: 2f:17:32:e6:83:8a:e2:d9:37:f1:9d:a9:cc:39:aa: 63:7c:27:5f:b9:28:9a:1f:0a:8b:f7:1a:89:6e:73: ae:c0:84:15:07:f0:07:61:96:9f:fa:f5:ec:7b:5b: 2e:40:38:04:58:e9:f4:73:f6:53:d1:df:04:c3:f5: 45:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:85:F5:71:E1:C7:1E:67:7C:53:7C:2B:DF:C0:3D:61:4D:07:87:75 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235352e3133312e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.131.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:a6:4f:5b:b4:f6:e8:72:36:e8:0e:c9:04:d7:b6:81:16:a4: c5:76:d3:fe:69:0f:5a:8a:d0:a0:fa:43:5d:a9:54:43:16:d4: 1e:89:ee:e4:93:53:6e:b4:ef:82:58:47:d2:13:b7:1a:e2:21: eb:f2:a3:49:84:00:25:a9:ef:59:95:26:16:5b:8d:20:fd:aa: 0d:5b:31:78:59:41:fd:77:90:64:ac:38:f8:0a:07:20:c6:dc: 53:7d:c3:69:d2:8a:4d:37:a2:47:9e:51:82:d1:d4:89:89:36: 08:e9:14:d8:28:cd:a7:29:8e:b4:fa:98:e8:53:29:ac:e4:2b: 00:2c:53:4a:1c:2d:9e:88:19:3a:2a:cd:14:72:8c:58:bd:8c: 6b:bc:ee:c2:5e:e3:fb:e2:ea:e9:f3:1c:fa:18:f8:9e:04:c7: 84:8a:c8:85:dc:88:00:f1:24:02:13:b4:a4:88:8a:f3:e1:d0: ac:fd:8a:fa:77:38:38:13:d2:d9:e1:28:4b:1d:4f:a4:76:ee: aa:8c:cc:98:52:14:8b:dd:60:a9:f8:11:07:05:a0:c0:33:a9: b2:d5:0e:d0:f5:66:e0:2a:67:4f:8d:2e:10:f0:a3:be:90:44: 59:0e:e7:b4:b7:b3:e9:cd:96:8e:67:ab:ef:92:33:c7:a6:14: 5e:c8:46:40 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUWWc3xfSgYISkd6A0Fok+oe2jEtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjRaFw0yNjExMjcxMTQ5MjRaMDMxMTAvBgNV BAMTKEU0ODVGNTcxRTFDNzFFNjc3QzUzN0MyQkRGQzAzRDYxNEQwNzg3NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEeIj0uBbkFMEncVrwvLBzzQ/c /sFtHfjSb0aOSzPTQp6kmzd5+TnuOE9d8WKgSDEoF4KnRZzRqcPPE0+nOv/0UGKv LWdnyvPtN/7prF98+6cRM3QEl/nJuvDqAojSIIYnvb8b8w3kOlIAFh4CC2MyAwjW gDP9qB2ULsIr28Xq5+RbafARMk+M5xNdPcKJZY/u+rXCzFQiavKg+O8amiKMRz1A 6aJKCT4y7cBze6NEz83Vln4W5YwX5Lr4+bi/jVgXuy8XMuaDiuLZN/Gdqcw5qmN8 J1+5KJofCov3Goluc67AhBUH8Adhlp/69ex7Wy5AOARY6fRz9lPR3wTD9UXVAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU5IX1ceHHHmd8U3wr38A9YU0Hh3UwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzUz NTJlMzEzMzMxMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALn/gzANBgkqhkiG9w0BAQsFAAOCAQEAGqZPW7T26HI26A7JBNe2gRak xXbT/mkPWorQoPpDXalUQxbUHonu5JNTbrTvglhH0hO3GuIh6/KjSYQAJanvWZUm FluNIP2qDVsxeFlB/XeQZKw4+AoHIMbcU33DadKKTTeiR55RgtHUiYk2COkU2CjN pymOtPqY6FMprOQrACxTShwtnogZOirNFHKMWL2Ma7zuwl7j++Lq6fMc+hj4ngTH hIrIhdyIAPEkAhO0pIiK8+HQrP2K+nc4OBPS2eEoSx1PpHbuqozMmFIUi91gqfgR BwWgwDOpstUO0PVm4CpnT40uEPCjvpBEWQ7ntLez6c2Wjmer75Izx6YUXshGQA== -----END CERTIFICATE-----Generated at Tue Dec 16 14:00:36 2025 by rpki-client