This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e34302e3231352e302f32342d3234203d3e20313336373837.roa File: 33312e34302e3231352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: NjqLT719Vqtc1SX1d8aRVvwzQHDz/qcV9Ao3W+7UZdw= Subject key identifier: 68:10:72:84:E8:FA:BB:36:17:87:B7:7B:7A:0A:D2:E6:15:52:AE:19 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1A32409C9BB07AB93E05ACE3DDAF364E2FCA6F39 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e34302e3231352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:16 +0000 ROA not before: Fri 28 Nov 2025 11:44:16 +0000 ROA not after: Fri 27 Nov 2026 11:49:16 +0000 asID: 136787 IP address blocks: 31.40.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:32:40:9c:9b:b0:7a:b9:3e:05:ac:e3:dd:af:36:4e:2f:ca:6f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:16 2025 GMT Not After : Nov 27 11:49:16 2026 GMT Subject: CN=68107284E8FABB361787B77B7A0AD2E61552AE19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:df:39:d3:16:26:d6:fc:a6:cf:43:05:8a:6d: 67:0f:d8:c0:3f:fd:46:28:e6:dd:1b:42:6e:45:0e: 62:6e:fe:6a:e3:b4:a1:0e:63:38:74:aa:86:c9:a3: c4:a8:bf:d7:7f:70:01:49:32:d2:39:ae:21:84:8f: 02:64:81:1f:2a:e8:ab:f4:cd:0d:b3:31:5f:ad:91: 95:55:5c:e9:68:1a:1d:97:56:e5:f5:6c:72:d8:9a: 50:f6:e0:93:12:b2:e9:66:c8:39:7f:e4:1c:50:14: 1f:b3:93:c6:31:e6:37:e7:c5:55:10:32:7d:7f:2e: b4:cb:ac:f8:76:fa:8d:c7:58:49:7b:0c:b4:ac:32: 8a:a1:cf:0c:de:77:bf:88:cc:e6:54:a7:62:48:b7: e5:48:be:09:1a:97:72:d0:86:48:61:d5:a7:91:99: f5:1d:51:34:45:58:a2:8c:85:2e:d9:64:c0:ae:ae: 8a:8d:a3:6d:77:5f:d9:fe:84:9e:a6:12:63:56:a9: a6:cb:78:52:9e:a6:64:c3:43:b6:5d:05:0e:e2:f7: 01:f5:52:45:da:7a:4d:70:7c:87:3a:e8:4b:03:b2: 3c:c2:fa:f1:8d:0e:8f:c1:a3:b9:74:90:c2:14:5a: 60:7b:6f:15:0e:bd:1a:b3:02:bf:53:20:9b:d8:32: d0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:10:72:84:E8:FA:BB:36:17:87:B7:7B:7A:0A:D2:E6:15:52:AE:19 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e34302e3231352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.215.0/24 Signature Algorithm: sha256WithRSAEncryption 95:5e:0f:45:ed:59:ff:f5:43:57:b1:e3:ce:9e:b2:f3:df:a1: 68:27:aa:d7:4d:56:a8:0a:a3:ef:51:1d:9f:dc:c2:ac:eb:b6: 41:77:1b:7a:0d:10:24:e8:9e:0e:6d:0e:2a:20:fc:17:fe:22: 8c:43:83:28:b1:a3:91:b4:08:ab:ac:64:65:83:36:7f:b3:20: 9e:15:45:3e:e3:32:ab:d6:18:11:c7:29:cd:5a:f3:c0:33:d2: 24:74:f6:55:ee:86:08:19:6a:ce:67:0c:88:14:ce:d1:c9:69: 99:4d:6a:9e:82:26:7b:ab:6e:5a:bf:22:7e:9b:8a:46:53:4a: a5:b9:34:fa:75:6b:a8:57:44:61:85:d1:3b:ac:05:da:7e:da: 82:3a:4a:f7:7c:0f:c4:26:c0:0f:e7:99:1d:1d:4f:d1:16:f7: a5:a1:97:f5:78:99:37:27:9b:90:c7:2e:53:63:4f:9a:79:46: a5:29:09:f6:7d:a3:e6:5c:99:c7:1d:71:9a:b6:5a:b1:8c:3f: 45:ef:ab:81:c7:6c:64:24:f6:46:c7:68:a0:f0:50:7c:82:ab: a9:eb:13:49:ae:14:f3:ef:88:87:1b:dc:f9:d6:9d:f1:94:c7: 8e:6e:3d:1d:43:f8:bd:c2:bf:ed:39:d9:7d:56:65:19:36:c1: 9f:6b:3e:e1 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUGjJAnJuwerk+Bazj3a82Ti/KbzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTZaFw0yNjExMjcxMTQ5MTZaMDMxMTAvBgNV BAMTKDY4MTA3Mjg0RThGQUJCMzYxNzg3Qjc3QjdBMEFEMkU2MTU1MkFFMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF3znTFibW/KbPQwWKbWcP2MA/ /UYo5t0bQm5FDmJu/mrjtKEOYzh0qobJo8Sov9d/cAFJMtI5riGEjwJkgR8q6Kv0 zQ2zMV+tkZVVXOloGh2XVuX1bHLYmlD24JMSsulmyDl/5BxQFB+zk8Yx5jfnxVUQ Mn1/LrTLrPh2+o3HWEl7DLSsMoqhzwzed7+IzOZUp2JIt+VIvgkal3LQhkhh1aeR mfUdUTRFWKKMhS7ZZMCuroqNo213X9n+hJ6mEmNWqabLeFKepmTDQ7ZdBQ7i9wH1 UkXaek1wfIc66EsDsjzC+vGNDo/Bo7l0kMIUWmB7bxUOvRqzAr9TIJvYMtC7AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUaBByhOj6uzYXh7d7egrS5hVSrhkwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMzMxMmUzNDMwMmUz MjMxMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAfKNcwDQYJKoZIhvcNAQELBQADggEBAJVeD0XtWf/1Q1ex486esvPfoWgn qtdNVqgKo+9RHZ/cwqzrtkF3G3oNECTong5tDiog/Bf+IoxDgyixo5G0CKusZGWD Nn+zIJ4VRT7jMqvWGBHHKc1a88Az0iR09lXuhggZas5nDIgUztHJaZlNap6CJnur blq/In6bikZTSqW5NPp1a6hXRGGF0TusBdp+2oI6Svd8D8QmwA/nmR0dT9EW96Wh l/V4mTcnm5DHLlNjT5p5RqUpCfZ9o+ZcmccdcZq2WrGMP0Xvq4HHbGQk9kbHaKDw UHyCq6nrE0muFPPviIcb3PnWnfGUx45uPR1D+L3Cv+052X1WZRk2wZ9rPuE= -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:54 2025 by rpki-client