This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3232322e3233312e302f32342d3234203d3e20313336373837.roa File: 33312e3232322e3233312e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 2FNTs2cOsO9EPWBks4NWs9Xr6jlsk0jSugN62oc1LgY= Subject key identifier: F4:64:FE:AF:A2:59:CA:26:26:11:C6:B2:65:CD:03:3B:D4:2B:81:BC Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2EE89D854BAB098F794DA32571C2792B901371D2 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3232322e3233312e302f32342d3234203d3e20313336373837.roa Signing time: Thu 22 Jan 2026 10:23:10 +0000 ROA not before: Thu 22 Jan 2026 10:18:10 +0000 ROA not after: Thu 21 Jan 2027 10:23:10 +0000 asID: 136787 IP address blocks: 31.222.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e8:9d:85:4b:ab:09:8f:79:4d:a3:25:71:c2:79:2b:90:13:71:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Jan 22 10:18:10 2026 GMT Not After : Jan 21 10:23:10 2027 GMT Subject: CN=F464FEAFA259CA262611C6B265CD033BD42B81BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d3:af:b6:11:d2:ad:4c:08:c1:14:f0:48:52: f3:1d:3f:19:d0:bc:4f:5f:72:97:55:c9:d0:a5:e8: 47:d1:3d:1f:3d:b2:b4:96:c0:8f:69:80:9e:d6:60: e2:85:1a:6b:40:21:35:c1:bf:48:57:06:1b:07:b8: c4:c9:ac:25:98:29:74:8b:46:42:f9:95:38:da:c4: fd:04:46:cc:ec:a7:71:11:1e:23:40:d5:88:bd:98: 20:1e:e4:8a:1f:a5:9b:89:22:54:a8:be:99:ef:2a: 17:23:dc:4a:78:0c:8a:6e:2e:d7:2f:72:0f:86:2e: ad:fd:65:fd:d8:fa:bc:24:5b:f7:a4:37:92:d3:3c: 65:4d:14:a3:6d:5e:9c:95:03:35:e1:fd:30:27:97: 19:86:dd:d1:13:af:07:77:90:b1:fe:ec:54:10:58: 84:db:97:e8:71:94:8a:9a:8f:9d:d3:3b:b0:e8:e1: df:61:35:54:f0:ce:81:ca:a7:6e:50:29:7c:50:b6: 04:e9:d6:e3:a4:2e:ed:61:a7:d3:10:a8:6d:cc:ee: 82:db:58:7b:69:c7:79:25:37:0c:67:9a:a9:74:22: 54:9c:54:c0:05:14:d3:ce:d5:3b:f6:1a:23:10:a0: 6a:a1:74:56:aa:ca:c1:ff:9f:d6:83:2b:c3:73:6e: 81:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:64:FE:AF:A2:59:CA:26:26:11:C6:B2:65:CD:03:3B:D4:2B:81:BC X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3232322e3233312e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.231.0/24 Signature Algorithm: sha256WithRSAEncryption 37:f1:cb:8c:2e:44:2b:03:6d:b9:ca:98:4f:bd:e7:01:9b:7b: 1b:cf:b9:a2:75:47:34:78:26:98:48:69:0a:db:50:52:f8:af: a4:eb:a4:92:40:c0:6e:11:7e:bd:f5:13:2b:19:58:d8:6f:6f: e8:17:e9:3d:2b:35:79:eb:a8:ca:a2:89:e5:83:e1:d2:fa:eb: ee:93:28:5f:5b:31:9b:24:f5:6b:84:60:cc:44:7f:4a:c7:1f: 34:21:55:33:50:ce:52:77:0a:62:4d:a7:1d:d7:62:47:28:30: ef:2e:68:30:b4:39:aa:ce:5b:5d:58:cc:49:db:6b:45:01:3f: 7a:7e:c7:c0:d7:65:0c:6f:43:c8:a0:7a:45:d7:4c:74:b0:25: 32:44:40:d6:58:67:28:06:46:a2:8e:17:08:e9:a8:62:b1:69: f7:07:f6:fc:e6:af:63:79:f9:8a:92:60:1d:13:fe:33:c8:c3: d2:c3:3d:42:5a:22:9f:0e:99:bc:7f:dd:23:7f:2f:d1:2e:07: 5b:e7:c7:dd:05:2d:4b:0c:d6:5d:74:ae:55:2d:20:f0:90:c3: 5d:49:2a:b9:73:7c:ed:20:4d:e7:e7:1a:f7:1c:67:88:fc:a8: a8:51:98:c0:24:c2:fb:80:01:33:39:e0:99:6f:ba:5f:68:96: e1:85:a6:68 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIULuidhUurCY95TaMlccJ5K5ATcdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNjAxMjIxMDE4MTBaFw0yNzAxMjExMDIzMTBaMDMxMTAvBgNV BAMTKEY0NjRGRUFGQTI1OUNBMjYyNjExQzZCMjY1Q0QwMzNCRDQyQjgxQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC606+2EdKtTAjBFPBIUvMdPxnQ vE9fcpdVydCl6EfRPR89srSWwI9pgJ7WYOKFGmtAITXBv0hXBhsHuMTJrCWYKXSL RkL5lTjaxP0ERszsp3ERHiNA1Yi9mCAe5IofpZuJIlSovpnvKhcj3Ep4DIpuLtcv cg+GLq39Zf3Y+rwkW/ekN5LTPGVNFKNtXpyVAzXh/TAnlxmG3dETrwd3kLH+7FQQ WITbl+hxlIqaj53TO7Do4d9hNVTwzoHKp25QKXxQtgTp1uOkLu1hp9MQqG3M7oLb WHtpx3klNwxnmql0IlScVMAFFNPO1Tv2GiMQoGqhdFaqysH/n9aDK8NzboF3AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU9GT+r6JZyiYmEcayZc0DO9QrgbwwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMzMxMmUzMjMyMzIy ZTMyMzMzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAB/e5zANBgkqhkiG9w0BAQsFAAOCAQEAN/HLjC5EKwNtucqYT73nAZt7 G8+5onVHNHgmmEhpCttQUvivpOukkkDAbhF+vfUTKxlY2G9v6BfpPSs1eeuoyqKJ 5YPh0vrr7pMoX1sxmyT1a4RgzER/SscfNCFVM1DOUncKYk2nHddiRygw7y5oMLQ5 qs5bXVjMSdtrRQE/en7HwNdlDG9DyKB6RddMdLAlMkRA1lhnKAZGoo4XCOmoYrFp 9wf2/OavY3n5ipJgHRP+M8jD0sM9Qloinw6ZvH/dI38v0S4HW+fH3QUtSwzWXXSu VS0g8JDDXUkquXN87SBN5+ca9xxniPyoqFGYwCTC+4ABMzngmW+6X2iW4YWmaA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:49:12 2026 by rpki-client