This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231322e3130332e36312e302f32342d3234203d3e20313336373837.roa File: 3231322e3130332e36312e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: tEZV287OoD1eAZ7ttn/F+LUpO7C8GrOGSqHYqwLtjgo= Subject key identifier: 0F:8A:F5:44:D2:17:C5:FB:E4:C3:75:08:59:2F:BB:92:30:BC:C7:53 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 67CE75A562E9CEC3F70F754ED1BCA2447AB1D484 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231322e3130332e36312e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:55 +0000 ROA not before: Fri 28 Nov 2025 11:44:55 +0000 ROA not after: Fri 27 Nov 2026 11:49:55 +0000 asID: 136787 IP address blocks: 212.103.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ce:75:a5:62:e9:ce:c3:f7:0f:75:4e:d1:bc:a2:44:7a:b1:d4:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:55 2025 GMT Not After : Nov 27 11:49:55 2026 GMT Subject: CN=0F8AF544D217C5FBE4C37508592FBB9230BCC753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7d:fb:a4:f5:c1:3d:f7:37:3c:6c:58:f6:e8: 77:0e:9e:83:27:1b:69:7e:14:e6:92:c2:96:7f:b1: 0b:a0:25:be:29:8d:08:ec:e2:55:51:98:9b:95:ac: bb:6a:b5:bb:ca:22:26:e2:0d:c9:e2:5d:6d:d7:95: ca:98:a9:50:9e:52:64:ce:76:24:0c:e8:41:5e:b5: 72:80:90:8a:84:03:c7:f8:32:c3:93:ac:34:57:e6: 17:ae:c1:ba:f1:e2:63:c1:32:8a:17:73:02:d7:bb: f5:61:99:c6:0c:b6:35:58:0e:ac:95:a6:3a:e5:ec: 70:13:f7:c1:6b:af:8f:4b:fd:3a:96:8a:d2:a4:5f: 08:9f:b0:da:e3:b3:eb:58:fe:9f:62:e6:0b:a0:07: a7:22:ce:2e:2a:81:98:f0:2b:e9:e3:0e:1c:f8:2e: 7a:74:eb:94:e9:9a:01:c6:6c:dd:a3:69:ff:6f:ae: d6:be:c3:4e:2a:85:3d:b2:31:df:10:63:01:11:eb: fe:9b:0c:ba:e8:4a:c8:0e:5b:87:d5:92:a2:6e:4b: 50:0b:ac:86:95:a8:21:d4:85:66:86:7d:4f:ee:cb: fe:47:25:24:6a:d8:b0:78:72:dc:5d:5a:64:0b:71: 49:bb:2d:39:35:32:3d:67:b6:9c:3e:03:79:af:99: 09:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8A:F5:44:D2:17:C5:FB:E4:C3:75:08:59:2F:BB:92:30:BC:C7:53 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231322e3130332e36312e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.103.61.0/24 Signature Algorithm: sha256WithRSAEncryption df:0d:5a:4c:bf:87:88:d7:2f:72:60:72:d5:10:29:bd:79:8f: ef:6b:be:a0:19:91:32:b0:64:87:da:1f:20:00:4c:c8:94:9f: 31:47:f2:c4:bf:f8:25:ae:80:97:5e:72:1b:a6:23:e0:10:41: eb:e8:8b:f1:2d:03:58:b1:5c:0a:29:f8:ab:02:36:1f:4b:20: 0d:a0:84:39:c8:5c:82:05:e6:d4:44:f3:57:5a:68:6a:ed:b2: 67:61:30:8d:c9:18:7b:7b:52:0a:07:6d:d0:95:f9:71:66:22: 8b:bd:57:f1:d5:46:76:83:4c:3c:10:a4:ad:cb:76:db:00:08: 6b:5a:da:70:a0:91:90:5a:85:ff:58:e4:52:ad:f5:b8:de:51: 3f:58:c0:04:66:15:b4:e7:e7:9a:97:09:b4:e9:b7:9b:2e:0d: 61:21:12:58:77:f4:ba:8d:f0:98:79:d4:62:86:3f:bd:3d:72: c3:4d:c1:92:72:1f:ae:33:02:c5:c7:1c:2c:73:78:0c:79:03: b3:77:7a:43:3d:0c:5e:78:ee:b9:59:c2:2d:68:7b:49:bf:e3: 13:7f:e1:0c:cc:be:85:60:31:bc:91:8b:fb:38:64:94:8b:9b: 5d:73:13:22:85:d8:8c:5d:40:07:d6:e7:ab:33:f7:3e:8a:49: e5:32:25:70 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUZ851pWLpzsP3D3VO0byiRHqx1IQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTVaFw0yNjExMjcxMTQ5NTVaMDMxMTAvBgNV BAMTKDBGOEFGNTQ0RDIxN0M1RkJFNEMzNzUwODU5MkZCQjkyMzBCQ0M3NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ffuk9cE99zc8bFj26HcOnoMn G2l+FOaSwpZ/sQugJb4pjQjs4lVRmJuVrLtqtbvKIibiDcniXW3XlcqYqVCeUmTO diQM6EFetXKAkIqEA8f4MsOTrDRX5heuwbrx4mPBMooXcwLXu/VhmcYMtjVYDqyV pjrl7HAT98Frr49L/TqWitKkXwifsNrjs+tY/p9i5gugB6cizi4qgZjwK+njDhz4 Lnp065TpmgHGbN2jaf9vrta+w04qhT2yMd8QYwER6/6bDLroSsgOW4fVkqJuS1AL rIaVqCHUhWaGfU/uy/5HJSRq2LB4ctxdWmQLcUm7LTk1Mj1ntpw+A3mvmQlTAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUD4r1RNIXxfvkw3UIWS+7kjC8x1MwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjMxMzIyZTMxMzAz MzJlMzYzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANRnPTANBgkqhkiG9w0BAQsFAAOCAQEA3w1aTL+HiNcvcmBy1RApvXmP 72u+oBmRMrBkh9ofIABMyJSfMUfyxL/4Ja6Al15yG6Yj4BBB6+iL8S0DWLFcCin4 qwI2H0sgDaCEOchcggXm1ETzV1poau2yZ2EwjckYe3tSCgdt0JX5cWYii71X8dVG doNMPBCkrct22wAIa1racKCRkFqF/1jkUq31uN5RP1jABGYVtOfnmpcJtOm3my4N YSESWHf0uo3wmHnUYoY/vT1yw03BknIfrjMCxcccLHN4DHkDs3d6Qz0MXnjuuVnC LWh7Sb/jE3/hDMy+hWAxvJGL+zhklIubXXMTIoXYjF1AB9bnqzP3PopJ5TIlcA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:39 2025 by rpki-client