This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e32342e38352e302f32342d3234203d3e20323035363539.roa File: 33312e32342e38352e302f32342d3234203d3e20323035363539.roa (raw, json) Hash identifier: oBpoygxwvaxMyz7vrV7mui8IBdv9Pv8V0SsCfU3W4pU= Subject key identifier: 31:B4:AC:A9:A1:33:4B:8C:95:CD:08:97:4F:80:38:2A:07:40:D2:E0 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 33CB6CCE2863B7FC722E039CBF3AE3B6A08C56AA Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e32342e38352e302f32342d3234203d3e20323035363539.roa Signing time: Fri 21 Nov 2025 13:48:57 +0000 ROA not before: Fri 21 Nov 2025 13:43:57 +0000 ROA not after: Fri 20 Nov 2026 13:48:57 +0000 asID: 205659 IP address blocks: 31.24.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:cb:6c:ce:28:63:b7:fc:72:2e:03:9c:bf:3a:e3:b6:a0:8c:56:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 13:43:57 2025 GMT Not After : Nov 20 13:48:57 2026 GMT Subject: CN=31B4ACA9A1334B8C95CD08974F80382A0740D2E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:0f:45:6a:27:f7:80:6a:25:02:e4:18:dd: 5f:4c:7d:d4:5b:e2:5a:4c:6a:41:b2:a3:8a:48:64: 1a:e8:b2:a0:c2:3c:d7:1f:e6:a5:7d:90:2d:b4:fd: a0:4b:2f:96:4e:b7:4b:4b:d3:52:87:cd:f3:36:5e: f7:f1:78:dc:d0:fe:38:37:3e:8f:b9:c0:f1:8e:79: 02:a1:13:94:c2:91:61:88:06:85:a4:14:f9:6a:fb: 3b:a9:de:96:f6:2e:f8:62:d1:b7:26:0a:6f:45:e6: 35:53:72:ca:df:ae:98:5e:52:fa:42:b4:43:9e:e0: c5:e0:54:2c:5e:45:78:04:d4:a5:bd:d5:7c:73:f0: 87:34:69:7a:ce:34:3c:db:09:72:43:60:26:8f:bf: 28:4f:b8:f8:31:e1:19:23:e3:bc:2b:f7:ea:72:1f: 2d:45:67:1d:1d:d2:7d:18:71:3c:56:c0:2e:ae:c1: af:8f:48:af:02:ab:73:74:a4:5e:30:28:58:d0:84: fe:19:78:ec:61:7b:1c:10:af:86:28:71:3b:d0:d8: e7:f7:ca:27:0d:10:d4:f5:fa:54:f0:f2:36:7b:00: a1:86:32:6e:52:4a:ee:69:26:17:2b:18:96:db:8c: c1:f3:45:2f:0a:bb:ef:45:07:44:5f:05:3f:a8:31: a4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B4:AC:A9:A1:33:4B:8C:95:CD:08:97:4F:80:38:2A:07:40:D2:E0 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e32342e38352e302f32342d3234203d3e20323035363539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.85.0/24 Signature Algorithm: sha256WithRSAEncryption a8:88:f1:e9:0d:ff:53:49:36:69:c3:6f:17:05:28:35:aa:64: cf:91:74:16:49:ec:d6:ff:f5:d0:8f:8d:9c:82:9b:f9:55:4f: 12:34:37:b5:0c:ca:e5:f5:a8:12:e3:dd:3d:c6:14:6c:2e:f0: fe:d6:f0:70:06:33:29:dd:c1:fe:76:c8:74:27:78:9e:ab:d4: a1:b1:b5:ee:b4:74:3e:b8:1b:b2:25:2b:c4:10:36:ca:69:55: 9d:b7:b0:a7:0a:02:fd:0f:d9:a5:df:fd:06:a3:60:eb:93:0f: fb:53:8a:ce:43:ad:90:7a:1c:6d:bd:39:e4:52:85:66:7e:12: 71:3c:3e:47:b6:07:59:5c:95:0a:f4:76:b0:ae:19:62:2c:66: 59:37:ab:96:81:01:30:0e:0e:8d:4e:dc:e0:19:ca:c5:a7:84: 4d:12:af:4c:35:c5:16:f8:dc:a0:f3:cf:e7:73:3d:b9:46:47: 08:45:a5:c3:a1:09:dd:b6:49:e2:7e:75:59:16:34:30:da:30: 03:a7:de:30:4a:69:7e:6d:e3:65:4c:a8:b0:e8:ad:ea:9e:1a: 53:cc:9a:70:21:0c:17:be:dc:d6:df:d4:27:60:14:c2:94:d5: 37:ca:d8:9d:28:59:7e:c8:c4:18:5f:d8:e4:75:75:e1:1a:4a: 2e:75:31:a1 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUM8tszihjt/xyLgOcvzrjtqCMVqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExMzQzNTdaFw0yNjExMjAxMzQ4NTdaMDMxMTAvBgNV BAMTKDMxQjRBQ0E5QTEzMzRCOEM5NUNEMDg5NzRGODAzODJBMDc0MEQyRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxzA9Faif3gGolAuQY3V9MfdRb 4lpMakGyo4pIZBrosqDCPNcf5qV9kC20/aBLL5ZOt0tL01KHzfM2XvfxeNzQ/jg3 Po+5wPGOeQKhE5TCkWGIBoWkFPlq+zup3pb2Lvhi0bcmCm9F5jVTcsrfrpheUvpC tEOe4MXgVCxeRXgE1KW91Xxz8Ic0aXrONDzbCXJDYCaPvyhPuPgx4Rkj47wr9+py Hy1FZx0d0n0YcTxWwC6uwa+PSK8Cq3N0pF4wKFjQhP4ZeOxhexwQr4YocTvQ2Of3 yicNENT1+lTw8jZ7AKGGMm5SSu5pJhcrGJbbjMHzRS8Ku+9FB0RfBT+oMaRVAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUMbSsqaEzS4yVzQiXT4A4KgdA0uAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMzMxMmUzMjM0MmUz ODM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM1MzYzNTM5LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAHxhVMA0GCSqGSIb3DQEBCwUAA4IBAQCoiPHpDf9TSTZpw28XBSg1qmTPkXQW SezW//XQj42cgpv5VU8SNDe1DMrl9agS4909xhRsLvD+1vBwBjMp3cH+dsh0J3ie q9ShsbXutHQ+uBuyJSvEEDbKaVWdt7CnCgL9D9ml3/0Go2Drkw/7U4rOQ62Qehxt vTnkUoVmfhJxPD5HtgdZXJUK9HawrhliLGZZN6uWgQEwDg6NTtzgGcrFp4RNEq9M NcUW+Nyg88/ncz25RkcIRaXDoQndtknifnVZFjQw2jADp94wSml+beNlTKiw6K3q nhpTzJpwIQwXvtzW39QnYBTClNU3ytidKFl+yMQYX9jkdXXhGkoudTGh -----END CERTIFICATE-----Generated at Sat Dec 6 23:15:27 2025 by rpki-client