This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3230382e302f32342d3332203d3e20313431393935.roa File: 38302e36352e3230382e302f32342d3332203d3e20313431393935.roa (raw, json) Hash identifier: Y+zgzjOwIp4uNY4qPv9+jJlE+oXPSQGAo6Yvx9GDsas= Subject key identifier: A5:F1:C9:E3:11:BA:3B:1D:8C:49:C8:D8:DA:41:FC:91:EA:76:0F:E6 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 62B3349B592C3BAD412239B54373E692290088D1 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3230382e302f32342d3332203d3e20313431393935.roa Signing time: Fri 21 Nov 2025 15:48:58 +0000 ROA not before: Fri 21 Nov 2025 15:43:58 +0000 ROA not after: Fri 20 Nov 2026 15:48:58 +0000 asID: 141995 IP address blocks: 80.65.208.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b3:34:9b:59:2c:3b:ad:41:22:39:b5:43:73:e6:92:29:00:88:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:43:58 2025 GMT Not After : Nov 20 15:48:58 2026 GMT Subject: CN=A5F1C9E311BA3B1D8C49C8D8DA41FC91EA760FE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7f:a2:75:7e:9b:42:da:eb:0e:b3:80:34:63: 4b:97:f9:7d:42:cd:ad:55:16:9b:c9:82:3e:2d:14: 17:1a:3c:60:20:17:d5:be:51:49:3d:b3:1c:11:9f: 3c:f4:c9:e6:ff:07:81:6d:de:f2:b1:c6:a1:07:1d: e3:92:06:84:f2:1f:9a:ae:44:3c:e0:98:50:63:a9: 47:b0:45:be:1f:53:2e:33:a7:56:68:62:83:4c:49: c0:cd:25:f3:dc:5b:d0:e6:2a:37:75:0b:13:1c:9c: 2d:2c:67:2e:9d:db:31:ae:ef:38:1b:9f:d0:2c:07: 35:95:2b:96:e1:6e:01:8a:7e:6d:55:74:18:ee:7d: 55:ba:66:8c:ea:5d:77:f7:1b:e1:4e:f0:7f:6f:27: dd:48:0e:97:07:c2:61:ca:f9:be:2c:d5:e0:86:ab: 0e:6e:27:63:09:83:8b:f9:50:68:47:e0:2f:19:19: b2:0c:fb:d0:7a:2e:f7:29:42:3c:71:f2:ce:dc:42: 26:00:ac:dd:9d:cc:50:c9:31:13:95:6c:ee:10:ae: 44:cc:23:ab:38:75:a9:9a:62:62:c0:e3:00:ce:01: d1:1b:56:ac:02:8e:b0:1e:d7:94:54:16:0f:18:84: 57:63:da:dd:00:5b:f1:78:e6:3a:d1:43:9b:55:c3: f2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F1:C9:E3:11:BA:3B:1D:8C:49:C8:D8:DA:41:FC:91:EA:76:0F:E6 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3230382e302f32342d3332203d3e20313431393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.65.208.0/24 Signature Algorithm: sha256WithRSAEncryption 25:5b:f6:e2:65:b2:ed:06:3b:4d:d6:88:a2:b1:84:e1:7f:94: 7b:68:54:22:30:d1:a9:99:7a:a3:18:bd:59:8a:c3:30:95:a1: 3a:5e:56:86:c6:0b:1b:04:8f:9f:2e:c4:ee:1f:71:c8:89:d8: af:1b:55:51:6c:20:2d:ad:dd:70:db:4e:c2:17:11:0d:1d:5a: 57:57:fa:f2:6a:60:f0:37:df:18:3c:04:a6:6f:55:c3:1f:72: 4e:de:1d:f4:86:e0:4a:66:b6:25:6d:27:e4:e6:bf:a8:b2:be: 43:54:3a:82:6d:fe:01:2b:7d:c7:5b:ab:b1:5f:71:d7:05:33: 62:70:f0:db:94:51:b2:e7:e6:10:ab:bc:9d:00:c1:e7:f7:e0: 75:32:d7:c2:2c:a3:3b:58:8c:e7:9d:e5:10:a6:99:16:3f:06: f1:1e:fe:2e:54:d3:34:a2:9b:cd:25:48:78:6e:88:c4:02:20: f4:d3:f3:61:af:59:8b:e5:f8:70:b7:2a:dd:57:5b:e2:1b:c9: a6:8a:a8:92:05:88:b5:f2:98:33:cb:fe:c8:bd:76:28:56:b9: f4:88:05:3a:06:62:2b:e3:fc:a7:e2:9a:a2:b8:f5:df:b5:92: d8:85:43:de:43:f2:88:2e:57:47:6f:e0:e7:85:8a:3a:57:68: 20:82:42:3f -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUYrM0m1ksO61BIjm1Q3PmkikAiNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQzNThaFw0yNjExMjAxNTQ4NThaMDMxMTAvBgNV BAMTKEE1RjFDOUUzMTFCQTNCMUQ4QzQ5QzhEOERBNDFGQzkxRUE3NjBGRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2f6J1fptC2usOs4A0Y0uX+X1C za1VFpvJgj4tFBcaPGAgF9W+UUk9sxwRnzz0yeb/B4Ft3vKxxqEHHeOSBoTyH5qu RDzgmFBjqUewRb4fUy4zp1ZoYoNMScDNJfPcW9DmKjd1CxMcnC0sZy6d2zGu7zgb n9AsBzWVK5bhbgGKfm1VdBjufVW6ZozqXXf3G+FO8H9vJ91IDpcHwmHK+b4s1eCG qw5uJ2MJg4v5UGhH4C8ZGbIM+9B6LvcpQjxx8s7cQiYArN2dzFDJMROVbO4QrkTM I6s4damaYmLA4wDOAdEbVqwCjrAe15RUFg8YhFdj2t0AW/F45jrRQ5tVw/J7AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUpfHJ4xG6Ox2MScjY2kH8kep2D+YwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMwMmUzNjM1MmUz MjMwMzgyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMTM0MzEzOTM5MzUucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABQQdAwDQYJKoZIhvcNAQELBQADggEBACVb9uJlsu0GO03WiKKxhOF/lHto VCIw0amZeqMYvVmKwzCVoTpeVobGCxsEj58uxO4fcciJ2K8bVVFsIC2t3XDbTsIX EQ0dWldX+vJqYPA33xg8BKZvVcMfck7eHfSG4EpmtiVtJ+Tmv6iyvkNUOoJt/gEr fcdbq7FfcdcFM2Jw8NuUUbLn5hCrvJ0Awef34HUy18IsoztYjOed5RCmmRY/BvEe /i5U0zSim80lSHhuiMQCIPTT82GvWYvl+HC3Kt1XW+IbyaaKqJIFiLXymDPL/si9 dihWufSIBToGYivj/KfimqK49d+1ktiFQ95D8oguV0dv4OeFijpXaCCCQj8= -----END CERTIFICATE-----Generated at Sun Dec 7 04:14:11 2025 by rpki-client