This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e34302e3231322e302f32342d3234203d3e20313336323538.roa File: 33312e34302e3231322e302f32342d3234203d3e20313336323538.roa (raw, json) Hash identifier: X7nfJ1Z9bUswGQk2eC+sUnrU9l+5SrHcHn91Ytg+03Y= Subject key identifier: BC:A7:48:98:9D:72:46:BE:95:E2:86:F2:1B:6C:3A:A4:75:A9:71:2D Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 41845FBD92191617956026EAAA87A44166C3EFF0 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e34302e3231322e302f32342d3234203d3e20313336323538.roa Signing time: Fri 28 Nov 2025 11:49:36 +0000 ROA not before: Fri 28 Nov 2025 11:44:36 +0000 ROA not after: Fri 27 Nov 2026 11:49:36 +0000 asID: 136258 IP address blocks: 31.40.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:84:5f:bd:92:19:16:17:95:60:26:ea:aa:87:a4:41:66:c3:ef:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:36 2025 GMT Not After : Nov 27 11:49:36 2026 GMT Subject: CN=BCA748989D7246BE95E286F21B6C3AA475A9712D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:63:52:89:8e:da:8b:b2:c7:2d:5f:81:59:28: c8:2a:8c:6d:22:7d:6a:b3:87:2f:cd:ac:43:b3:86: d2:3b:e5:b7:5b:73:6e:65:9b:d2:24:d8:d8:26:f2: 85:88:91:58:c3:1d:f5:dc:f3:82:b4:26:67:86:52: 5d:79:24:70:79:16:ad:39:a9:26:5b:a3:8f:f5:48: bd:2b:34:20:05:83:f5:90:40:15:b1:37:f7:7c:97: 13:f2:6b:1e:85:63:b2:c9:ad:bd:6c:3f:a9:29:7e: 70:92:e9:ea:cb:64:8f:58:28:24:98:81:d4:77:2c: a3:59:cc:09:25:b3:ef:21:5d:6a:ee:e8:29:2c:73: 5c:3d:11:69:41:04:62:bd:a0:f4:70:c8:20:0c:41: 9d:b7:93:c6:d4:d5:ea:98:f6:ba:b4:c2:15:27:db: 6e:f7:3b:b6:ea:a2:de:76:4e:dd:fc:6e:f8:eb:0f: af:dc:6b:4f:fb:c4:c1:78:f5:5f:1f:0a:28:a8:a8: 45:8a:5f:5c:d7:24:30:da:ff:25:85:38:32:f9:81: ed:05:f6:5d:e6:63:78:0e:20:9d:2d:f6:05:49:6c: 5e:d2:31:94:96:61:d3:3c:02:80:56:db:b5:01:c2: 02:57:24:93:d3:79:f2:7d:9d:c4:97:18:64:45:91: 11:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A7:48:98:9D:72:46:BE:95:E2:86:F2:1B:6C:3A:A4:75:A9:71:2D X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e34302e3231322e302f32342d3234203d3e20313336323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.212.0/24 Signature Algorithm: sha256WithRSAEncryption d1:7d:9d:dd:7e:75:11:cf:38:0c:dc:0a:04:8f:b5:66:e4:61: 5f:b6:8e:da:33:a7:b3:4e:13:80:e2:f0:da:30:ef:b1:00:a0: 71:a4:fe:a5:8a:3f:e7:98:35:da:26:df:46:bf:aa:2f:eb:29: f3:64:1c:cb:4a:7d:4e:e2:5f:86:df:16:c9:6b:cf:85:43:bf: 63:56:1f:fd:7b:4e:2f:df:74:84:b1:7e:8a:cf:ba:db:02:ae: a4:19:63:ce:3e:53:a1:8e:03:48:66:31:83:5c:c0:2e:9b:f9: cb:b9:2a:a2:54:da:64:91:a5:17:9a:5b:c7:d3:0b:39:53:33: 65:49:ae:18:51:ca:a7:9a:bd:1e:b5:49:85:33:52:23:94:21: 68:9b:65:5e:dd:67:3f:92:cb:ea:bc:df:75:21:94:e4:56:ea: 29:5d:98:d8:32:8b:93:4c:3c:67:70:e0:ee:f1:a5:0e:0c:00: 50:88:73:b7:71:67:28:b1:7c:31:cf:1c:25:7b:05:0c:6d:0a: 40:d1:38:f0:e4:c8:8d:76:07:06:3c:c8:cf:1c:89:2b:6f:4e: 91:22:92:b3:98:12:c0:a7:90:63:b3:b4:9a:c7:ad:a2:ee:33: 97:8a:a6:99:64:82:d5:21:f7:7d:1a:13:5c:81:60:49:30:06: 48:27:1e:60 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUQYRfvZIZFheVYCbqqoekQWbD7/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzZaFw0yNjExMjcxMTQ5MzZaMDMxMTAvBgNV BAMTKEJDQTc0ODk4OUQ3MjQ2QkU5NUUyODZGMjFCNkMzQUE0NzVBOTcxMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDY1KJjtqLssctX4FZKMgqjG0i fWqzhy/NrEOzhtI75bdbc25lm9Ik2Ngm8oWIkVjDHfXc84K0JmeGUl15JHB5Fq05 qSZbo4/1SL0rNCAFg/WQQBWxN/d8lxPyax6FY7LJrb1sP6kpfnCS6erLZI9YKCSY gdR3LKNZzAkls+8hXWru6Cksc1w9EWlBBGK9oPRwyCAMQZ23k8bU1eqY9rq0whUn 2273O7bqot52Tt38bvjrD6/ca0/7xMF49V8fCiioqEWKX1zXJDDa/yWFODL5ge0F 9l3mY3gOIJ0t9gVJbF7SMZSWYdM8AoBW27UBwgJXJJPTefJ9ncSXGGRFkRGNAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUvKdImJ1yRr6V4obyG2w6pHWpcS0wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMzMxMmUzNDMwMmUz MjMxMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzMjM1Mzgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAfKNQwDQYJKoZIhvcNAQELBQADggEBANF9nd1+dRHPOAzcCgSPtWbkYV+2 jtozp7NOE4Di8Now77EAoHGk/qWKP+eYNdom30a/qi/rKfNkHMtKfU7iX4bfFslr z4VDv2NWH/17Ti/fdISxforPutsCrqQZY84+U6GOA0hmMYNcwC6b+cu5KqJU2mSR pReaW8fTCzlTM2VJrhhRyqeavR61SYUzUiOUIWibZV7dZz+Sy+q833UhlORW6ild mNgyi5NMPGdw4O7xpQ4MAFCIc7dxZyixfDHPHCV7BQxtCkDROPDkyI12BwY8yM8c iStvTpEikrOYEsCnkGOztJrHraLuM5eKpplkgtUh930aE1yBYEkwBkgnHmA= -----END CERTIFICATE-----Generated at Sat Dec 6 19:48:09 2025 by rpki-client