This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3233322e38352e302f32342d3332203d3e20313336373837.roa File: 3231332e3233322e38352e302f32342d3332203d3e20313336373837.roa (raw, json) Hash identifier: 5kPTyf9NNO2xEppnCNPLCXbENl51FEEHFx8GJnwxtdY= Subject key identifier: BD:01:1B:4D:2C:00:C6:18:A9:BC:1E:E7:B6:1D:C0:13:65:59:8F:31 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 577B6797FF4D205A3F0FDFDD3A086F8660E32070 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3233322e38352e302f32342d3332203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:42 +0000 ROA not before: Fri 28 Nov 2025 11:44:42 +0000 ROA not after: Fri 27 Nov 2026 11:49:42 +0000 asID: 136787 IP address blocks: 213.232.85.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:7b:67:97:ff:4d:20:5a:3f:0f:df:dd:3a:08:6f:86:60:e3:20:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:42 2025 GMT Not After : Nov 27 11:49:42 2026 GMT Subject: CN=BD011B4D2C00C618A9BC1EE7B61DC01365598F31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:23:13:c2:86:e8:3f:e3:74:80:a7:48:9e: 35:03:a2:41:c3:1a:9c:32:4d:c5:32:ff:7e:af:e1: 5f:ab:79:ea:a6:d1:45:0e:2c:ed:02:e9:09:8c:7b: a0:5f:e2:9b:b5:ac:f7:22:b2:dd:f0:b0:8a:9b:67: d1:21:0c:12:42:ad:5e:75:d6:08:89:1b:96:f8:56: bb:2a:60:8a:e4:46:0e:55:4c:86:10:ed:27:14:d0: 7f:a3:30:b7:ae:30:6d:34:a4:73:e0:05:fc:90:ed: 19:e3:13:8a:14:6e:b0:68:9c:f8:14:f5:b1:af:e2: 1c:2d:51:fe:21:2c:97:9c:54:5f:2d:2f:e8:e3:04: ae:6b:d3:6b:00:89:78:f7:96:04:e2:65:a5:cc:01: 88:a1:69:75:6d:e8:49:54:1f:7e:5d:32:19:7c:e5: 94:3b:69:fb:a8:80:87:9f:e0:cc:e1:0a:e6:6d:15: f5:ef:50:4f:dc:53:f1:7f:1e:67:73:df:ec:ae:9f: b6:96:66:e1:cf:b1:e9:69:32:cd:90:00:f8:39:09: 9e:8c:89:28:7e:bd:2b:49:7b:63:5f:1c:f3:1d:c4: 99:02:dc:21:23:ec:db:1a:3e:27:68:1f:fe:4b:f0: d9:ed:0a:09:66:12:b9:34:e4:b0:57:4a:06:bf:84: 4f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:01:1B:4D:2C:00:C6:18:A9:BC:1E:E7:B6:1D:C0:13:65:59:8F:31 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3233322e38352e302f32342d3332203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.232.85.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:0d:9b:93:81:b7:f9:c3:a1:64:ad:2a:b3:cd:af:1d:41:82: fd:ef:99:74:22:b0:1d:fc:5d:6f:64:8d:f2:94:ea:d2:3d:5b: 30:17:d3:8a:97:e4:68:55:6b:24:16:b8:58:13:88:ae:62:0f: 55:ba:e9:39:14:9f:6f:78:35:8a:b1:d8:ea:5d:45:98:4f:61: 45:20:cb:13:d3:31:02:c8:07:46:fd:2e:1b:de:83:a8:98:b7: d1:f1:0c:fb:e3:9c:0b:60:3e:ba:ad:48:73:00:62:94:0f:ef: c0:c4:b3:44:85:85:6e:4d:61:ca:ee:7e:dd:40:9f:97:64:ff: 60:d3:08:45:ce:47:77:cb:5d:8f:bd:56:b5:8f:48:49:e1:0e: fc:31:b4:f9:58:7a:42:05:88:8f:a0:08:2a:9e:c0:0a:2f:32: 8b:1f:08:d9:30:94:bd:8e:68:df:5d:bb:61:2b:64:aa:83:5d: 32:b4:58:92:26:95:0e:9b:67:ba:f9:60:a3:eb:e9:c6:83:69: 59:58:11:11:9a:03:82:34:9d:a0:29:eb:a2:11:52:c9:b3:73: ef:8e:ae:50:9d:91:ab:d3:28:3e:aa:48:17:76:ce:5f:ae:b9: 65:72:e1:df:c8:c9:c9:05:34:d0:84:f3:67:59:39:1f:8d:e4: 82:77:04:cb -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUV3tnl/9NIFo/D9/dOghvhmDjIHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDJaFw0yNjExMjcxMTQ5NDJaMDMxMTAvBgNV BAMTKEJEMDExQjREMkMwMEM2MThBOUJDMUVFN0I2MURDMDEzNjU1OThGMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBmSMTwoboP+N0gKdInjUDokHD GpwyTcUy/36v4V+reeqm0UUOLO0C6QmMe6Bf4pu1rPcist3wsIqbZ9EhDBJCrV51 1giJG5b4VrsqYIrkRg5VTIYQ7ScU0H+jMLeuMG00pHPgBfyQ7RnjE4oUbrBonPgU 9bGv4hwtUf4hLJecVF8tL+jjBK5r02sAiXj3lgTiZaXMAYihaXVt6ElUH35dMhl8 5ZQ7afuogIef4MzhCuZtFfXvUE/cU/F/Hmdz3+yun7aWZuHPselpMs2QAPg5CZ6M iSh+vStJe2NfHPMdxJkC3CEj7NsaPidoH/5L8NntCglmErk05LBXSga/hE8BAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUvQEbTSwAxhipvB7nth3AE2VZjzEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjMxMzMyZTMyMzMz MjJlMzgzNTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANXoVTANBgkqhkiG9w0BAQsFAAOCAQEAfg2bk4G3+cOhZK0qs82vHUGC /e+ZdCKwHfxdb2SN8pTq0j1bMBfTipfkaFVrJBa4WBOIrmIPVbrpORSfb3g1irHY 6l1FmE9hRSDLE9MxAsgHRv0uG96DqJi30fEM++OcC2A+uq1IcwBilA/vwMSzRIWF bk1hyu5+3UCfl2T/YNMIRc5Hd8tdj71WtY9ISeEO/DG0+Vh6QgWIj6AIKp7ACi8y ix8I2TCUvY5o3127YStkqoNdMrRYkiaVDptnuvlgo+vpxoNpWVgREZoDgjSdoCnr ohFSybNz746uUJ2Rq9MoPqpIF3bOX665ZXLh38jJyQU00ITzZ1k5H43kgncEyw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:42:23 2025 by rpki-client