This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e3234352e3130382e302f32322d3234203d3e20323031333431.roa File: 38302e3234352e3130382e302f32322d3234203d3e20323031333431.roa (raw, json) Hash identifier: sUiNMpothu4mD51Lkbzw9E69nfYkFknxA71uDgXMkMc= Subject key identifier: 85:E3:C2:5E:A7:F4:90:0B:70:1C:37:EC:97:71:51:84:0E:9C:DB:28 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7CDD8B3771EDDF881EAEAA1D7569B28F77E4AD24 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e3234352e3130382e302f32322d3234203d3e20323031333431.roa Signing time: Fri 28 Nov 2025 11:49:28 +0000 ROA not before: Fri 28 Nov 2025 11:44:28 +0000 ROA not after: Fri 27 Nov 2026 11:49:28 +0000 asID: 201341 IP address blocks: 80.245.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:dd:8b:37:71:ed:df:88:1e:ae:aa:1d:75:69:b2:8f:77:e4:ad:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:28 2025 GMT Not After : Nov 27 11:49:28 2026 GMT Subject: CN=85E3C25EA7F4900B701C37EC977151840E9CDB28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:da:38:70:f8:cb:ab:85:a0:9b:61:d9:7a:07: a3:93:24:1d:38:b1:fe:a2:43:0c:b6:41:7e:f3:7d: 42:a5:25:f9:50:ea:78:e2:2f:c4:79:0a:88:2f:b7: a8:e1:85:f9:62:54:85:1b:d4:c7:48:5f:93:14:b2: b9:26:27:35:46:24:cf:d9:40:a4:88:83:4c:3f:ec: 55:b4:de:76:f0:4f:47:cd:2a:01:49:3b:94:2e:cb: 80:47:84:c3:9b:9d:e1:e2:2e:e1:2c:7f:ac:60:6f: 6a:c3:d6:2d:52:44:cc:64:5f:92:f0:2f:66:b8:4b: 6d:ab:9b:1e:44:e8:aa:ec:07:cb:a0:28:36:f3:ea: 7d:50:ea:1b:40:0c:f9:fa:5e:29:52:0a:3b:26:a7: 8f:b9:45:f3:e0:99:0b:15:73:48:45:43:ee:be:be: e7:97:3d:62:77:0d:2f:cf:81:b6:ed:79:8f:83:06: f2:bf:fc:b2:0f:61:31:9c:9c:a1:77:2c:45:86:16: 5b:0c:5b:72:85:6b:4d:cc:12:98:5a:41:f2:c9:47: be:4c:81:34:4b:67:6d:92:6b:8a:a1:be:8f:c9:42: ca:94:55:5e:a3:08:e6:a4:34:6b:53:71:c8:a0:d2: b4:b1:1e:8e:37:3a:67:4b:42:c2:6b:98:2d:bc:65: 43:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E3:C2:5E:A7:F4:90:0B:70:1C:37:EC:97:71:51:84:0E:9C:DB:28 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e3234352e3130382e302f32322d3234203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.245.108.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:fe:85:89:4a:26:74:44:12:b5:8b:61:97:1e:cf:14:d1:db: 77:ab:9c:80:91:9a:89:b6:fb:b0:2d:1f:f1:d5:11:dd:e4:c2: aa:18:3a:04:30:aa:a1:71:8c:05:29:35:6a:94:3f:d4:c0:f8: 51:1e:0d:a7:e5:80:30:e2:1d:cd:34:7f:99:4c:24:1e:e2:b8: a0:3f:e0:b3:dc:0e:b9:f8:e3:cc:88:f6:8b:0b:9f:7f:9f:a0: b7:9f:1a:b5:c7:38:1b:4d:5c:bd:6d:7e:98:8d:f3:1e:87:af: 95:42:a4:4e:b3:66:45:6c:37:f7:df:c1:7d:1f:49:d9:f4:89: dd:b5:d5:2c:88:11:cf:22:9e:42:60:56:ea:c7:a0:44:9f:f8: d3:fb:b3:d4:4c:56:9e:d6:55:48:8d:4e:38:90:02:8f:40:4a: 9e:fc:22:a0:30:7f:04:2a:07:af:f1:4d:5b:d6:3c:48:48:98: 74:0f:d4:9a:49:b0:93:36:ca:22:4e:a7:67:b6:ca:a5:e7:a1: 4f:94:01:83:be:f2:d5:87:60:48:9c:72:5d:8c:eb:42:d3:00: 9e:d8:16:cd:b5:2a:38:8d:94:51:8f:3a:b4:f6:e8:26:ce:2b: 5c:73:08:8e:5b:39:19:19:90:b4:41:66:48:1c:8b:69:34:35: d7:24:5b:cc -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUfN2LN3Ht34gerqoddWmyj3fkrSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjhaFw0yNjExMjcxMTQ5MjhaMDMxMTAvBgNV BAMTKDg1RTNDMjVFQTdGNDkwMEI3MDFDMzdFQzk3NzE1MTg0MEU5Q0RCMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/2jhw+MurhaCbYdl6B6OTJB04 sf6iQwy2QX7zfUKlJflQ6njiL8R5Cogvt6jhhfliVIUb1MdIX5MUsrkmJzVGJM/Z QKSIg0w/7FW03nbwT0fNKgFJO5Quy4BHhMObneHiLuEsf6xgb2rD1i1SRMxkX5Lw L2a4S22rmx5E6KrsB8ugKDbz6n1Q6htADPn6XilSCjsmp4+5RfPgmQsVc0hFQ+6+ vueXPWJ3DS/PgbbteY+DBvK//LIPYTGcnKF3LEWGFlsMW3KFa03MEphaQfLJR75M gTRLZ22Sa4qhvo/JQsqUVV6jCOakNGtTccig0rSxHo43OmdLQsJrmC28ZUPzAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUhePCXqf0kAtwHDfsl3FRhA6c2ygwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMwMmUzMjM0MzUy ZTMxMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAlD1bDANBgkqhkiG9w0BAQsFAAOCAQEALf6FiUomdEQStYthlx7PFNHb d6ucgJGaibb7sC0f8dUR3eTCqhg6BDCqoXGMBSk1apQ/1MD4UR4Np+WAMOIdzTR/ mUwkHuK4oD/gs9wOufjjzIj2iwuff5+gt58atcc4G01cvW1+mI3zHoevlUKkTrNm RWw399/BfR9J2fSJ3bXVLIgRzyKeQmBW6segRJ/40/uz1ExWntZVSI1OOJACj0BK nvwioDB/BCoHr/FNW9Y8SEiYdA/UmkmwkzbKIk6nZ7bKpeehT5QBg77y1YdgSJxy XYzrQtMAntgWzbUqOI2UUY86tPboJs4rXHMIjls5GRmQtEFmSByLaTQ11yRbzA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:09 2025 by rpki-client