This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3233322e38362e302f32342d3332203d3e20313336373837.roa File: 3231332e3233322e38362e302f32342d3332203d3e20313336373837.roa (raw, json) Hash identifier: 0eOj/xtwM4Rl3pXR33OAAxYmUMo2XxgmHWHG9v/AeNc= Subject key identifier: FA:97:82:75:77:77:E9:B9:3F:02:DB:D4:15:5A:FF:CA:A3:80:7B:85 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 5CDCF85661DD7084AC0BE10F36E6C055C852E243 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3233322e38362e302f32342d3332203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:53 +0000 ROA not before: Fri 28 Nov 2025 11:44:53 +0000 ROA not after: Fri 27 Nov 2026 11:49:53 +0000 asID: 136787 IP address blocks: 213.232.86.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:dc:f8:56:61:dd:70:84:ac:0b:e1:0f:36:e6:c0:55:c8:52:e2:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:53 2025 GMT Not After : Nov 27 11:49:53 2026 GMT Subject: CN=FA9782757777E9B93F02DBD4155AFFCAA3807B85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:8a:db:d2:97:fe:16:d1:14:f9:b3:36:ae: cd:4e:bb:00:80:2c:72:fd:3f:3d:b7:77:5f:b9:66: 2b:ff:df:85:1e:15:d8:7f:52:97:75:1f:e8:55:d5: d5:ba:7a:3f:62:40:1f:2f:02:f5:17:e1:f1:18:a5: 8b:c8:ab:3e:f9:24:0b:ec:4b:81:a3:38:68:2c:62: 92:ea:80:5a:b6:26:96:84:ed:09:a9:30:30:2a:de: a9:d5:c9:54:7b:9c:0b:4e:02:b8:bd:8e:a0:6e:74: 2d:8d:62:52:c0:de:ba:3b:63:f1:ca:f2:9a:12:18: a2:ec:1e:bd:18:1a:f3:d8:33:05:c4:34:2b:ff:71: ba:62:47:f8:12:09:dc:41:04:2d:4a:e7:ed:43:58: 5d:bf:74:53:23:cd:2b:8b:2f:5d:1f:d8:58:d1:8f: 6e:28:4d:dd:46:31:2d:2f:ae:50:0f:90:0d:e8:9e: 65:af:08:a2:ea:d4:d2:ff:66:cd:b8:74:c1:91:0b: df:43:0f:94:2d:c7:13:4d:9c:28:74:da:a0:d7:18: 82:7e:33:08:fb:a6:4d:a1:42:bb:ca:a0:b6:2b:c1: 83:a7:23:2b:99:71:6f:66:3e:16:ed:74:51:58:f5: 6c:39:94:7d:1c:1c:51:ac:f8:a4:bc:b3:7a:ec:0e: 84:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:97:82:75:77:77:E9:B9:3F:02:DB:D4:15:5A:FF:CA:A3:80:7B:85 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3233322e38362e302f32342d3332203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.232.86.0/24 Signature Algorithm: sha256WithRSAEncryption d1:24:d1:13:b8:d1:79:49:2d:34:ce:d5:d6:8f:90:c6:5c:d7: 81:c8:e2:09:f7:08:51:a4:57:94:75:f3:e6:ec:01:11:f1:ba: 4c:c6:5c:1a:b6:c1:08:69:f7:50:78:ce:f4:aa:66:c9:25:c7: eb:d6:f9:b7:57:2d:27:73:a4:b8:e3:80:3b:87:4e:33:80:38: 82:de:a6:3d:ed:dc:90:49:56:e9:bd:ed:02:0b:b7:0f:2a:b0: 1b:a6:27:2f:c2:66:e9:1c:ad:c4:de:0e:2f:63:09:44:df:0f: 8f:7f:ba:5c:8c:a7:04:1c:63:fc:18:ed:74:41:b0:26:3d:6e: fe:36:e4:d2:1c:d2:9c:01:35:fe:02:76:76:8e:83:60:90:5a: 33:e2:b7:11:e7:f4:e5:3d:53:4c:d7:7f:c6:7c:81:c2:2c:1d: 63:e0:fe:a2:8f:8a:5a:39:46:a0:c9:57:c3:9b:7a:2e:57:a2: 3b:2a:cf:9a:e8:20:a4:f7:aa:43:82:a4:3e:03:f3:56:b6:80: d6:a2:24:58:88:60:aa:5d:92:6b:9d:b8:29:c0:d9:4a:d7:4c: dd:4d:a7:c5:9f:74:1b:e1:39:86:28:2e:44:b4:b3:fa:c0:8b: 6d:61:8c:9d:72:af:e1:30:d3:bd:29:09:54:26:3f:24:10:b1: 8d:1c:0d:1d -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUXNz4VmHdcISsC+EPNubAVchS4kMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTNaFw0yNjExMjcxMTQ5NTNaMDMxMTAvBgNV BAMTKEZBOTc4Mjc1Nzc3N0U5QjkzRjAyREJENDE1NUFGRkNBQTM4MDdCODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5jYrb0pf+FtEU+bM2rs1OuwCA LHL9Pz23d1+5Ziv/34UeFdh/Upd1H+hV1dW6ej9iQB8vAvUX4fEYpYvIqz75JAvs S4GjOGgsYpLqgFq2JpaE7QmpMDAq3qnVyVR7nAtOAri9jqBudC2NYlLA3ro7Y/HK 8poSGKLsHr0YGvPYMwXENCv/cbpiR/gSCdxBBC1K5+1DWF2/dFMjzSuLL10f2FjR j24oTd1GMS0vrlAPkA3onmWvCKLq1NL/Zs24dMGRC99DD5QtxxNNnCh02qDXGIJ+ Mwj7pk2hQrvKoLYrwYOnIyuZcW9mPhbtdFFY9Ww5lH0cHFGs+KS8s3rsDoTHAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU+peCdXd36bk/AtvUFVr/yqOAe4UwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjMxMzMyZTMyMzMz MjJlMzgzNjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANXoVjANBgkqhkiG9w0BAQsFAAOCAQEA0STRE7jReUktNM7V1o+QxlzX gcjiCfcIUaRXlHXz5uwBEfG6TMZcGrbBCGn3UHjO9KpmySXH69b5t1ctJ3OkuOOA O4dOM4A4gt6mPe3ckElW6b3tAgu3DyqwG6YnL8Jm6RytxN4OL2MJRN8Pj3+6XIyn BBxj/BjtdEGwJj1u/jbk0hzSnAE1/gJ2do6DYJBaM+K3Eef05T1TTNd/xnyBwiwd Y+D+oo+KWjlGoMlXw5t6LleiOyrPmuggpPeqQ4KkPgPzVraA1qIkWIhgql2Sa524 KcDZStdM3U2nxZ90G+E5higuRLSz+sCLbWGMnXKv4TDTvSkJVCY/JBCxjRwNHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:16 2025 by rpki-client