This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3233322e38342e302f32342d3332203d3e2039303039.roa File: 3231332e3233322e38342e302f32342d3332203d3e2039303039.roa (raw, json) Hash identifier: lSGzRoJrteMQU69FaoU4Ck6HCa9SGrhqPdaQX2fkWqM= Subject key identifier: 95:19:64:CF:B1:57:78:2B:45:C4:71:D7:5E:6A:2F:37:ED:F2:F0:02 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 667282BB2DA8302E0FE01F9B55871FE192A6595F Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3233322e38342e302f32342d3332203d3e2039303039.roa Signing time: Fri 28 Nov 2025 11:49:49 +0000 ROA not before: Fri 28 Nov 2025 11:44:49 +0000 ROA not after: Fri 27 Nov 2026 11:49:49 +0000 asID: 9009 IP address blocks: 213.232.84.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:72:82:bb:2d:a8:30:2e:0f:e0:1f:9b:55:87:1f:e1:92:a6:59:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:49 2025 GMT Not After : Nov 27 11:49:49 2026 GMT Subject: CN=951964CFB157782B45C471D75E6A2F37EDF2F002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:27:e8:86:02:8d:26:89:3b:96:88:4a:94:bf: 4f:f6:52:6c:5c:9f:26:dd:fb:b3:ec:f7:72:72:3a: db:d5:db:25:98:18:81:f0:78:3d:5f:88:dd:f2:73: 1f:ad:30:ba:cb:8f:ae:a5:80:7d:dd:de:e3:53:af: 14:c7:97:cd:b2:2e:73:4c:72:5b:c2:6f:e9:9b:66: 39:75:b2:41:c4:7a:12:f4:9a:a0:d0:d5:aa:20:eb: 66:55:99:52:a3:cc:b3:28:ad:93:63:72:c1:1b:f9: f8:1f:4f:8c:1d:b9:d3:ce:0a:31:c2:82:7c:c9:56: 68:d5:ec:28:5c:69:2f:3e:1b:54:b1:af:cd:18:1b: 4b:e8:4f:30:f2:5b:52:fe:43:63:1b:c1:88:d9:69: dd:fe:e6:f7:67:e2:d5:2f:96:48:fa:15:46:ea:db: e8:08:9c:1b:83:0e:ef:92:19:29:07:9e:28:12:13: 73:50:ae:df:a4:f8:b1:55:dc:75:74:66:ba:86:46: 78:ed:e5:e4:4a:73:79:78:10:de:2c:57:bb:95:bb: 2d:41:9c:7c:e0:9a:dd:41:2c:f7:8b:4f:f0:95:cc: a0:4e:1b:58:65:5a:0d:16:c2:9c:5e:cc:e5:91:13: 06:cb:80:e2:33:20:bf:10:42:ba:d1:1c:42:27:fc: 5f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:19:64:CF:B1:57:78:2B:45:C4:71:D7:5E:6A:2F:37:ED:F2:F0:02 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3233322e38342e302f32342d3332203d3e2039303039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.232.84.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:b1:59:4d:91:5d:32:25:a6:a3:d7:21:b4:fe:fb:89:ce:f2: b9:ac:d8:0c:c3:a5:8a:64:75:e4:c4:13:33:a3:dc:de:74:32: c5:2c:ca:58:20:9f:f3:a6:1c:d9:b8:4e:db:37:65:81:42:fe: a9:b0:53:29:f7:3e:4d:3b:2f:cc:93:a5:e1:75:23:8d:6e:ae: 65:36:2e:9a:dd:04:91:48:df:35:fe:6e:e2:a1:29:36:31:44: 99:2d:b2:6a:1c:48:4e:44:b6:2b:14:df:1c:f9:44:91:38:09: 19:11:b6:89:6b:6a:e2:4c:a6:90:a5:1e:29:64:62:35:e5:47: 4c:b5:73:1b:e4:55:17:bc:3b:9e:58:01:6f:e2:6a:01:fe:16: 3a:9b:7d:f0:5c:53:92:08:09:c6:6e:07:97:93:fb:4e:e2:c0: 1c:68:92:7d:c7:95:19:3b:64:86:56:5e:08:03:65:ff:0a:ff: 6a:db:75:c2:dc:c6:7b:d9:be:80:3c:72:cb:04:c5:b4:a6:93: 6a:85:dd:94:96:06:d2:e7:6b:b8:be:55:69:f9:da:8e:77:e8: 5f:e7:27:9b:11:7a:41:0e:cc:10:55:9f:df:be:58:20:da:71: 76:7a:9e:32:12:80:1a:03:61:3e:3a:40:58:ca:76:21:83:90: 65:14:be:d0 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUZnKCuy2oMC4P4B+bVYcf4ZKmWV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDlaFw0yNjExMjcxMTQ5NDlaMDMxMTAvBgNV BAMTKDk1MTk2NENGQjE1Nzc4MkI0NUM0NzFENzVFNkEyRjM3RURGMkYwMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJ+iGAo0miTuWiEqUv0/2Umxc nybd+7Ps93JyOtvV2yWYGIHweD1fiN3ycx+tMLrLj66lgH3d3uNTrxTHl82yLnNM clvCb+mbZjl1skHEehL0mqDQ1aog62ZVmVKjzLMorZNjcsEb+fgfT4wdudPOCjHC gnzJVmjV7ChcaS8+G1Sxr80YG0voTzDyW1L+Q2MbwYjZad3+5vdn4tUvlkj6FUbq 2+gInBuDDu+SGSkHnigSE3NQrt+k+LFV3HV0ZrqGRnjt5eRKc3l4EN4sV7uVuy1B nHzgmt1BLPeLT/CVzKBOG1hlWg0WwpxezOWREwbLgOIzIL8QQrrRHEIn/F/7AgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUlRlkz7FXeCtFxHHXXmovN+3y8AIwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjMxMzMyZTMyMzMz MjJlMzgzNDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM5MzAzMDM5LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQA1ehUMA0GCSqGSIb3DQEBCwUAA4IBAQALsVlNkV0yJaaj1yG0/vuJzvK5rNgM w6WKZHXkxBMzo9zedDLFLMpYIJ/zphzZuE7bN2WBQv6psFMp9z5NOy/Mk6XhdSON bq5lNi6a3QSRSN81/m7ioSk2MUSZLbJqHEhORLYrFN8c+USROAkZEbaJa2riTKaQ pR4pZGI15UdMtXMb5FUXvDueWAFv4moB/hY6m33wXFOSCAnGbgeXk/tO4sAcaJJ9 x5UZO2SGVl4IA2X/Cv9q23XC3MZ72b6APHLLBMW0ppNqhd2UlgbS52u4vlVp+dqO d+hf5yebEXpBDswQVZ/fvlgg2nF2ep4yEoAaA2E+OkBYynYhg5BlFL7Q -----END CERTIFICATE-----Generated at Sat Dec 6 18:43:36 2025 by rpki-client