This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231322e3130332e36302e302f32342d3234203d3e20313336373837.roa File: 3231322e3130332e36302e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: fVvyDdRlm8erwYpr7nfhW91gLW5XUwLi0PtoUUkRykM= Subject key identifier: 75:66:8A:16:D3:DE:0C:D4:5E:53:C0:70:57:1E:00:C4:DE:AB:71:A3 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 13CDFD18AA26E502341054F95948B2FD3FF064D4 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231322e3130332e36302e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:54 +0000 ROA not before: Fri 28 Nov 2025 11:44:54 +0000 ROA not after: Fri 27 Nov 2026 11:49:54 +0000 asID: 136787 IP address blocks: 212.103.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:cd:fd:18:aa:26:e5:02:34:10:54:f9:59:48:b2:fd:3f:f0:64:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:54 2025 GMT Not After : Nov 27 11:49:54 2026 GMT Subject: CN=75668A16D3DE0CD45E53C070571E00C4DEAB71A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:34:05:66:75:d1:a2:f8:99:7f:4e:03:1d:1f: 86:eb:a4:5c:33:f8:56:97:b4:d5:6a:21:60:7b:1f: fa:29:42:8e:f1:4e:46:46:8e:8c:c4:f5:6c:64:46: ba:0e:21:f5:da:23:35:80:e0:ef:61:d6:f4:af:aa: f5:12:51:9a:49:19:94:3b:db:f0:b5:7c:c7:34:7e: 25:7a:68:c4:30:01:20:7d:f1:49:94:ab:f6:47:a3: 9c:96:93:f2:3e:df:99:90:0e:7e:fd:bb:f0:00:2f: 3b:9c:75:e4:91:4e:69:1b:5b:67:7f:fd:db:f4:9d: ba:f2:66:16:86:9c:67:58:7e:c7:65:54:81:3d:3b: df:1b:65:f3:ec:8d:29:b4:17:31:0e:d5:c7:a6:b8: 11:bb:0b:e4:77:2f:14:5d:b9:a5:58:28:47:f5:8a: c0:64:57:bd:fb:a0:02:4a:01:80:b2:7d:70:86:81: 11:dd:59:b6:ab:bd:b0:31:ad:93:a0:b3:be:bc:e1: 4e:d3:45:19:5f:1c:6f:f3:db:73:06:c1:be:10:1e: 4b:71:a1:ae:0f:15:a1:0a:62:1f:03:bc:ee:c1:9c: de:1f:22:b9:17:99:36:71:53:a4:f6:2f:5b:74:d6: ce:eb:b2:9d:b9:3a:02:09:0d:25:05:bb:f9:60:62: 5e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:66:8A:16:D3:DE:0C:D4:5E:53:C0:70:57:1E:00:C4:DE:AB:71:A3 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231322e3130332e36302e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.103.60.0/24 Signature Algorithm: sha256WithRSAEncryption 36:ca:4e:c3:43:24:87:ba:40:4f:50:5c:d4:0c:a2:bf:99:a0: d4:87:3e:85:89:1b:ba:4a:24:15:e3:bd:78:c1:f6:a6:0b:63: 6a:72:e6:4d:bb:85:b8:a8:39:5d:79:76:63:88:90:a3:8b:08: bd:1b:1e:14:ae:cb:b8:f3:a3:4f:bd:0d:f7:06:1b:0f:94:03: b6:2c:a3:9c:aa:a7:d0:cf:b8:7a:fe:43:bc:09:6c:52:a0:00: 16:fd:21:c8:c6:8d:86:7d:7f:6b:0c:11:63:5c:ae:57:a2:47: a0:a9:42:eb:72:4e:bf:ca:ac:46:6c:72:dd:ba:53:1d:db:85: d2:66:89:48:36:9f:13:bd:bc:04:a6:0b:cf:01:a6:4f:e7:5a: e8:5a:86:e9:59:17:ac:16:c6:c8:34:76:c8:b6:c3:bc:68:68: 74:f2:bb:b6:04:aa:9d:2c:1a:18:35:7c:42:2a:a8:be:0f:73: 50:6f:16:7d:24:e1:16:52:31:47:94:06:97:00:96:04:ad:3f: 8b:4e:e9:de:aa:4e:4e:dc:a9:e3:da:6a:16:42:4f:73:a8:d4: fa:81:19:a1:2e:ea:32:22:87:d9:02:8d:6f:e4:ae:29:bf:99: a0:8b:0e:0c:5e:ed:78:47:79:6d:5e:5c:ee:73:b0:77:a0:58: 97:e4:c4:33 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUE839GKom5QI0EFT5WUiy/T/wZNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTRaFw0yNjExMjcxMTQ5NTRaMDMxMTAvBgNV BAMTKDc1NjY4QTE2RDNERTBDRDQ1RTUzQzA3MDU3MUUwMEM0REVBQjcxQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcNAVmddGi+Jl/TgMdH4brpFwz +FaXtNVqIWB7H/opQo7xTkZGjozE9WxkRroOIfXaIzWA4O9h1vSvqvUSUZpJGZQ7 2/C1fMc0fiV6aMQwASB98UmUq/ZHo5yWk/I+35mQDn79u/AALzucdeSRTmkbW2d/ /dv0nbryZhaGnGdYfsdlVIE9O98bZfPsjSm0FzEO1cemuBG7C+R3LxRduaVYKEf1 isBkV737oAJKAYCyfXCGgRHdWbarvbAxrZOgs7684U7TRRlfHG/z23MGwb4QHktx oa4PFaEKYh8DvO7BnN4fIrkXmTZxU6T2L1t01s7rsp25OgIJDSUFu/lgYl41AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUdWaKFtPeDNReU8BwVx4AxN6rcaMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjMxMzIyZTMxMzAz MzJlMzYzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANRnPDANBgkqhkiG9w0BAQsFAAOCAQEANspOw0Mkh7pAT1Bc1Ayiv5mg 1Ic+hYkbukokFeO9eMH2pgtjanLmTbuFuKg5XXl2Y4iQo4sIvRseFK7LuPOjT70N 9wYbD5QDtiyjnKqn0M+4ev5DvAlsUqAAFv0hyMaNhn1/awwRY1yuV6JHoKlC63JO v8qsRmxy3bpTHduF0maJSDafE728BKYLzwGmT+da6FqG6VkXrBbGyDR2yLbDvGho dPK7tgSqnSwaGDV8Qiqovg9zUG8WfSThFlIxR5QGlwCWBK0/i07p3qpOTtyp49pq FkJPc6jU+oEZoS7qMiKH2QKNb+SuKb+ZoIsODF7teEd5bV5c7nOwd6BYl+TEMw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:28 2025 by rpki-client