This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3130392e3230302e302f32342d3234203d3e203632323430.roa File: 3231332e3130392e3230302e302f32342d3234203d3e203632323430.roa (raw, json) Hash identifier: 8/23XgF+aQVt/p1NxkqZdd+dXE9Gau/nU43cUUdiVn8= Subject key identifier: 67:4B:4D:4E:74:7F:B4:5D:56:C5:A0:35:39:6A:91:7B:2B:B8:C4:95 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 467DE46BC7C39B906D9C2D1E83BE3A3602927117 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3130392e3230302e302f32342d3234203d3e203632323430.roa Signing time: Fri 28 Nov 2025 11:49:22 +0000 ROA not before: Fri 28 Nov 2025 11:44:22 +0000 ROA not after: Fri 27 Nov 2026 11:49:22 +0000 asID: 62240 IP address blocks: 213.109.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:7d:e4:6b:c7:c3:9b:90:6d:9c:2d:1e:83:be:3a:36:02:92:71:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:22 2025 GMT Not After : Nov 27 11:49:22 2026 GMT Subject: CN=674B4D4E747FB45D56C5A035396A917B2BB8C495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9b:6e:dd:cd:f3:45:95:c1:b5:f7:39:e4:66: a9:3a:01:ce:97:dd:4d:32:5c:83:6c:c8:0d:67:0d: d0:2b:7d:b9:e5:11:87:90:cd:36:8d:a3:b8:2b:29: 8e:3b:9b:b9:e6:8e:dc:d4:86:b1:8a:25:ea:59:db: 67:bd:9d:9d:86:3c:6d:6e:bf:93:86:63:0c:ef:79: 89:b1:1b:ac:b4:5e:1c:a6:3d:eb:fb:b2:f6:c5:ac: 9f:b0:27:cf:8e:ae:7c:e4:f1:f7:75:cd:52:18:12: 39:2d:e8:ce:54:4a:a1:d6:bf:da:99:73:1b:91:d0: 31:54:9d:fc:5c:4c:5c:92:1e:c1:9a:7b:b5:31:dc: 64:b2:8e:2e:3b:6e:e6:ba:24:30:06:57:76:57:21: e4:7b:f1:70:47:b6:c9:77:4e:b4:62:50:e5:80:ba: cc:39:ba:49:40:1a:96:82:3a:dc:9d:77:18:9d:b7: 62:d4:07:4d:42:2f:1a:a7:22:1d:8c:21:3c:c1:ab: e5:20:e6:5c:15:f8:3f:eb:67:64:5e:32:84:88:77: d7:36:ae:84:62:9b:c2:fe:b0:48:77:b9:03:3b:35: 87:4f:76:12:3d:e1:06:c4:0b:2a:ab:34:0d:1a:69: 61:7a:9c:ab:07:a6:8e:43:f7:bf:e3:c4:92:8a:8c: 8d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4B:4D:4E:74:7F:B4:5D:56:C5:A0:35:39:6A:91:7B:2B:B8:C4:95 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3130392e3230302e302f32342d3234203d3e203632323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.109.200.0/24 Signature Algorithm: sha256WithRSAEncryption 49:09:21:28:4b:f5:9d:fd:d2:d0:eb:b7:f6:a5:27:e3:65:23: 90:2a:c2:b6:19:38:0b:98:84:0d:2e:bb:7c:26:07:04:0a:ef: 76:81:16:06:f8:93:6d:5e:9d:56:d3:f6:73:90:78:4e:3f:0d: e4:94:9b:67:4d:7b:58:d1:6c:37:81:da:b1:5b:56:d6:73:2d: b1:6a:f8:33:09:77:94:ae:47:17:19:2e:29:6e:11:9e:25:f6: df:d7:73:fc:68:88:5f:54:53:de:84:88:2e:8b:cb:db:5c:77: 0f:ac:f6:23:c8:3c:b9:a9:97:da:c5:29:a9:c1:c6:a4:71:f5: 02:4d:c7:f2:47:b5:ad:56:9a:30:b8:d4:a2:b6:00:7e:85:3a: f6:48:f8:09:74:9a:70:a9:13:b8:6a:0e:28:e4:cf:b4:5c:84: 88:da:ee:50:a4:66:18:6c:4f:bd:ec:2b:3b:b8:f2:15:bc:61: f2:34:c7:ec:b6:9c:89:02:00:ee:84:df:55:4d:dd:e8:bf:d2: 0a:cc:41:80:2f:1a:7c:52:64:ba:f7:4b:00:3f:ed:92:e4:d9: 1b:0d:18:f8:f3:ed:ad:db:66:9c:3b:72:c4:af:13:4f:57:36: c9:ca:b1:bc:c4:05:71:f4:a7:b3:40:87:06:bd:b4:e1:eb:09: d6:55:39:94 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIURn3ka8fDm5BtnC0eg746NgKScRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjJaFw0yNjExMjcxMTQ5MjJaMDMxMTAvBgNV BAMTKDY3NEI0RDRFNzQ3RkI0NUQ1NkM1QTAzNTM5NkE5MTdCMkJCOEM0OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrm27dzfNFlcG19znkZqk6Ac6X 3U0yXINsyA1nDdArfbnlEYeQzTaNo7grKY47m7nmjtzUhrGKJepZ22e9nZ2GPG1u v5OGYwzveYmxG6y0XhymPev7svbFrJ+wJ8+Ornzk8fd1zVIYEjkt6M5USqHWv9qZ cxuR0DFUnfxcTFySHsGae7Ux3GSyji47bua6JDAGV3ZXIeR78XBHtsl3TrRiUOWA usw5uklAGpaCOtyddxidt2LUB01CLxqnIh2MITzBq+Ug5lwV+D/rZ2ReMoSId9c2 roRim8L+sEh3uQM7NYdPdhI94QbECyqrNA0aaWF6nKsHpo5D97/jxJKKjI3dAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUZ0tNTnR/tF1WxaA1OWqReyu4xJUwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjMxMzMyZTMxMzAz OTJlMzIzMDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMjMyMzQzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANVtyDANBgkqhkiG9w0BAQsFAAOCAQEASQkhKEv1nf3S0Ou39qUn42Uj kCrCthk4C5iEDS67fCYHBArvdoEWBviTbV6dVtP2c5B4Tj8N5JSbZ017WNFsN4Ha sVtW1nMtsWr4Mwl3lK5HFxkuKW4RniX239dz/GiIX1RT3oSILovL21x3D6z2I8g8 uamX2sUpqcHGpHH1Ak3H8ke1rVaaMLjUorYAfoU69kj4CXSacKkTuGoOKOTPtFyE iNruUKRmGGxPvewrO7jyFbxh8jTH7LaciQIA7oTfVU3d6L/SCsxBgC8afFJkuvdL AD/tkuTZGw0Y+PPtrdtmnDtyxK8TT1c2ycqxvMQFcfSns0CHBr204esJ1lU5lA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:22:14 2025 by rpki-client