This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e34302e3231322e302f32342d3234203d3e20323031383832.roa File: 33312e34302e3231322e302f32342d3234203d3e20323031383832.roa (raw, json) Hash identifier: tPgwr1WCRBr5XckD0s1z9+ra64P15LpaZIqn7zxhdQ0= Subject key identifier: 94:62:42:9D:58:CE:13:0B:A3:88:B9:BD:67:C0:4E:B2:CE:6A:8E:F9 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3A098B1CE184E9E9D7AE61A9C1AABF1C14B3D0C7 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e34302e3231322e302f32342d3234203d3e20323031383832.roa Signing time: Fri 28 Nov 2025 11:49:19 +0000 ROA not before: Fri 28 Nov 2025 11:44:19 +0000 ROA not after: Fri 27 Nov 2026 11:49:19 +0000 asID: 201882 IP address blocks: 31.40.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 19:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:09:8b:1c:e1:84:e9:e9:d7:ae:61:a9:c1:aa:bf:1c:14:b3:d0:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:19 2025 GMT Not After : Nov 27 11:49:19 2026 GMT Subject: CN=9462429D58CE130BA388B9BD67C04EB2CE6A8EF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:35:c7:78:b1:aa:9d:64:c6:41:66:de:52:34: fd:0c:95:45:b7:9d:88:03:18:11:1c:de:17:9f:c1: ff:ee:e4:2d:43:b9:fb:a6:36:18:07:5b:fc:48:82: 71:7d:34:ec:d8:ad:f0:59:1c:0b:79:33:8a:49:8e: a7:9c:17:a4:4f:b9:b0:bb:ce:c5:d9:0b:df:86:ed: 6c:09:89:cb:7a:a2:c6:22:ba:6b:44:53:b4:60:11: b0:e7:6f:38:c1:b6:9c:9b:28:25:ed:98:b4:49:f1: 31:9c:2d:bb:fb:fe:6b:56:ce:60:e5:38:24:39:da: 0c:25:48:67:9c:57:bc:9c:66:9a:e1:ca:9d:cd:cb: 5d:51:dc:d4:18:ce:18:9e:27:75:b8:86:9e:47:97: ec:55:aa:37:e7:81:5c:b9:d6:02:92:12:01:fc:ea: c5:33:ce:93:8b:1c:5f:a9:2a:1c:11:2a:31:91:a2: e4:04:96:62:0a:e1:06:55:ca:01:f5:c9:e2:47:d0: 8a:9b:fd:d3:09:e2:ba:f1:65:10:71:ea:f6:78:64: c2:15:0c:39:9d:1b:d8:b4:64:b4:47:20:6e:19:8f: 91:c1:b9:b6:85:91:92:00:50:02:b1:2a:09:a4:3b: e3:9d:ad:2e:28:0b:2e:ec:6d:13:cf:54:6a:a1:d0: 48:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:62:42:9D:58:CE:13:0B:A3:88:B9:BD:67:C0:4E:B2:CE:6A:8E:F9 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e34302e3231322e302f32342d3234203d3e20323031383832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.212.0/24 Signature Algorithm: sha256WithRSAEncryption 55:d4:2e:23:1b:2e:c8:8e:c4:42:8f:04:b0:f7:04:23:d4:e1: 6e:9a:2f:a6:8e:43:64:0f:f6:64:8d:8d:cc:48:19:62:13:12: d8:db:8d:42:49:a8:dd:ce:9d:99:66:52:77:e3:2e:44:4c:23: c7:2e:d1:c9:a8:2a:39:d6:d9:68:0e:ab:d4:8f:e4:02:ef:48: 65:df:e1:3c:c2:5d:72:80:61:66:84:bf:31:40:2b:26:e4:5f: 2b:67:8a:50:97:b3:74:53:58:be:00:43:4b:62:b3:2e:39:6c: 6a:53:24:c2:68:87:43:06:a7:39:7c:2c:f0:37:c5:e9:bf:fa: 91:e9:8c:7b:a5:07:de:5f:e5:c9:9a:ba:5a:1c:71:7e:60:57: 30:25:40:30:89:a3:a6:ab:04:9e:3e:cc:8d:f2:57:0b:76:9c: bf:19:65:cd:88:26:23:46:8c:fd:76:e3:5d:e1:c1:ea:15:64: ce:81:a9:0a:e4:49:63:16:e9:81:3a:99:3b:d8:9b:fc:d4:f1: be:33:db:24:ed:fe:ee:fd:1d:42:27:57:1c:c9:96:4a:18:88: eb:6e:ff:c2:de:34:bc:24:35:05:e6:9e:1d:62:e6:68:78:6b: 0e:c8:c3:c1:76:f0:4d:33:82:1b:3d:16:b9:9f:5b:c6:dd:74: 9f:b4:e8:b1 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUOgmLHOGE6enXrmGpwaq/HBSz0McwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTlaFw0yNjExMjcxMTQ5MTlaMDMxMTAvBgNV BAMTKDk0NjI0MjlENThDRTEzMEJBMzg4QjlCRDY3QzA0RUIyQ0U2QThFRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPNcd4saqdZMZBZt5SNP0MlUW3 nYgDGBEc3hefwf/u5C1DufumNhgHW/xIgnF9NOzYrfBZHAt5M4pJjqecF6RPubC7 zsXZC9+G7WwJict6osYiumtEU7RgEbDnbzjBtpybKCXtmLRJ8TGcLbv7/mtWzmDl OCQ52gwlSGecV7ycZprhyp3Ny11R3NQYzhieJ3W4hp5Hl+xVqjfngVy51gKSEgH8 6sUzzpOLHF+pKhwRKjGRouQElmIK4QZVygH1yeJH0Iqb/dMJ4rrxZRBx6vZ4ZMIV DDmdG9i0ZLRHIG4Zj5HBubaFkZIAUAKxKgmkO+OdrS4oCy7sbRPPVGqh0EixAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUlGJCnVjOEwujiLm9Z8BOss5qjvkwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMzMxMmUzNDMwMmUz MjMxMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzEzODM4MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAfKNQwDQYJKoZIhvcNAQELBQADggEBAFXULiMbLsiOxEKPBLD3BCPU4W6a L6aOQ2QP9mSNjcxIGWITEtjbjUJJqN3OnZlmUnfjLkRMI8cu0cmoKjnW2WgOq9SP 5ALvSGXf4TzCXXKAYWaEvzFAKybkXytnilCXs3RTWL4AQ0tisy45bGpTJMJoh0MG pzl8LPA3xem/+pHpjHulB95f5cmauloccX5gVzAlQDCJo6arBJ4+zI3yVwt2nL8Z Zc2IJiNGjP12413hweoVZM6BqQrkSWMW6YE6mTvYm/zU8b4z2yTt/u79HUInVxzJ lkoYiOtu/8LeNLwkNQXmnh1i5mh4aw7Iw8F28E0zghs9FrmfW8bddJ+06LE= -----END CERTIFICATE-----Generated at Mon Dec 8 09:27:59 2025 by rpki-client