This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3233322e38372e302f32342d3234203d3e20313336373837.roa File: 3231332e3233322e38372e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: UG3nckXcKlqsm+X5hdcIslsM0OM8BuLPsXap+DeNDIY= Subject key identifier: 79:92:7E:53:29:D3:E4:C2:72:00:8E:F3:A2:8E:4B:FA:0C:1E:39:07 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 697E9AF4DB452D64725FAFE23B1B05587B4C8943 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3233322e38372e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:41 +0000 ROA not before: Fri 28 Nov 2025 11:44:41 +0000 ROA not after: Fri 27 Nov 2026 11:49:41 +0000 asID: 136787 IP address blocks: 213.232.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:7e:9a:f4:db:45:2d:64:72:5f:af:e2:3b:1b:05:58:7b:4c:89:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:41 2025 GMT Not After : Nov 27 11:49:41 2026 GMT Subject: CN=79927E5329D3E4C272008EF3A28E4BFA0C1E3907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:89:a4:bf:a0:7d:95:04:9a:84:48:b3:a9:eb: ea:44:98:52:bf:a6:8c:51:b7:73:1f:83:59:7f:53: 2c:c0:b6:55:c8:d4:d5:b6:7b:6d:1b:c9:f5:ed:1a: a5:8d:4c:30:0c:d8:4a:dc:a3:02:4c:f3:2a:91:54: f5:94:98:ac:20:cd:f3:5b:59:c9:5b:b9:60:74:04: 7f:26:b8:9a:34:40:f5:33:25:ad:bc:cb:a7:7e:2f: 5e:3d:17:9d:6f:20:c4:38:e8:99:55:49:23:f4:7c: 98:8b:53:91:19:54:1f:c9:8b:c0:98:61:03:b5:ff: e7:75:bf:04:4f:9a:c5:d1:50:f0:78:f7:31:17:10: 31:70:72:d5:f9:fc:c7:cd:8b:36:21:95:4f:bc:42: 8b:60:2f:43:05:87:2f:72:2d:95:d4:6e:ab:3a:8c: ac:73:99:0f:a0:d4:9b:60:11:63:92:d9:02:0c:40: 06:18:3d:ca:90:e4:9d:92:e2:f4:02:88:58:66:c0: 48:c9:92:e4:7e:d0:3d:58:ce:8b:2e:65:f0:01:f5: 3f:4e:05:71:c3:4d:ed:83:06:8a:1d:64:24:bf:c5: 92:c9:95:11:a4:0f:3a:22:df:e3:83:49:37:39:7b: af:33:ba:e3:f3:7f:e0:58:95:9d:58:89:bc:76:fb: e0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:92:7E:53:29:D3:E4:C2:72:00:8E:F3:A2:8E:4B:FA:0C:1E:39:07 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3233322e38372e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.232.87.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:2e:71:d5:1d:4b:f9:e8:b1:b1:84:13:53:31:4a:4a:e1:25: 31:86:0e:81:c4:41:63:ca:04:b6:4e:ee:20:99:50:b0:0f:20: e8:6a:5d:b1:2c:12:49:c2:60:d9:f0:5b:b2:23:4f:dd:1c:b1: 7b:4d:8f:fe:7b:10:15:3a:b5:8f:8c:50:3f:7f:46:d4:83:0f: d6:fe:e5:16:53:1a:2c:14:30:cf:50:dc:5e:5c:20:67:95:13: ba:f5:8b:7c:0a:27:86:01:0f:61:f3:fd:29:fd:52:02:65:7f: 1d:20:67:c9:13:02:94:c8:84:60:a6:58:54:e3:da:5f:c6:f5: d5:7b:13:06:78:6a:59:9b:a2:e6:3f:a0:1a:ab:e4:13:f4:2d: af:1e:0b:5c:a4:f0:ae:53:bd:e0:24:3f:12:e1:9f:1d:82:ea: 21:8e:0f:0e:4c:d8:60:a3:f7:1a:63:66:8c:72:d2:33:6c:be: 82:65:49:fd:88:95:6a:55:32:7c:4a:2f:85:00:33:de:ec:ed: be:e7:f2:bd:f1:12:04:13:3c:6d:93:ae:25:5e:38:76:5c:50: 3d:63:e1:b6:5f:ec:de:16:b3:71:6e:2c:ad:c9:25:f9:5b:93: a2:04:2a:9e:b4:e7:22:4d:ed:a8:87:bc:fc:42:53:dd:c3:4f: 49:6d:9c:88 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUaX6a9NtFLWRyX6/iOxsFWHtMiUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDFaFw0yNjExMjcxMTQ5NDFaMDMxMTAvBgNV BAMTKDc5OTI3RTUzMjlEM0U0QzI3MjAwOEVGM0EyOEU0QkZBMEMxRTM5MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkiaS/oH2VBJqESLOp6+pEmFK/ poxRt3Mfg1l/UyzAtlXI1NW2e20byfXtGqWNTDAM2ErcowJM8yqRVPWUmKwgzfNb WclbuWB0BH8muJo0QPUzJa28y6d+L149F51vIMQ46JlVSSP0fJiLU5EZVB/Ji8CY YQO1/+d1vwRPmsXRUPB49zEXEDFwctX5/MfNizYhlU+8QotgL0MFhy9yLZXUbqs6 jKxzmQ+g1JtgEWOS2QIMQAYYPcqQ5J2S4vQCiFhmwEjJkuR+0D1YzosuZfAB9T9O BXHDTe2DBoodZCS/xZLJlRGkDzoi3+ODSTc5e68zuuPzf+BYlZ1Yibx2++ArAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUeZJ+UynT5MJyAI7zoo5L+gweOQcwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjMxMzMyZTMyMzMz MjJlMzgzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANXoVzANBgkqhkiG9w0BAQsFAAOCAQEAji5x1R1L+eixsYQTUzFKSuEl MYYOgcRBY8oEtk7uIJlQsA8g6GpdsSwSScJg2fBbsiNP3Ryxe02P/nsQFTq1j4xQ P39G1IMP1v7lFlMaLBQwz1DcXlwgZ5UTuvWLfAonhgEPYfP9Kf1SAmV/HSBnyRMC lMiEYKZYVOPaX8b11XsTBnhqWZui5j+gGqvkE/Qtrx4LXKTwrlO94CQ/EuGfHYLq IY4PDkzYYKP3GmNmjHLSM2y+gmVJ/YiValUyfEovhQAz3uztvufyvfESBBM8bZOu JV44dlxQPWPhtl/s3hazcW4srckl+VuTogQqnrTnIk3tqIe8/EJT3cNPSW2ciA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:01:20 2025 by rpki-client