This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3230392e302f32342d3234203d3e20323034313730.roa File: 38302e36352e3230392e302f32342d3234203d3e20323034313730.roa (raw, json) Hash identifier: DhGQUzA72dGTIcH7qX37ZCfF7jMkleyKW1pnRAOcWqM= Subject key identifier: 7C:B6:A1:48:93:74:A3:87:8A:C8:22:DA:F5:A4:5F:9F:38:88:C6:8E Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 25AD124DB8D52F6CB044C5446B3056631BAA1973 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3230392e302f32342d3234203d3e20323034313730.roa Signing time: Fri 21 Nov 2025 15:49:09 +0000 ROA not before: Fri 21 Nov 2025 15:44:09 +0000 ROA not after: Fri 20 Nov 2026 15:49:09 +0000 asID: 204170 IP address blocks: 80.65.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ad:12:4d:b8:d5:2f:6c:b0:44:c5:44:6b:30:56:63:1b:aa:19:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:09 2025 GMT Not After : Nov 20 15:49:09 2026 GMT Subject: CN=7CB6A1489374A3878AC822DAF5A45F9F3888C68E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:61:36:b1:96:cf:63:de:83:96:30:20:d2:c1: 06:c6:0a:9d:aa:f4:f1:95:e9:6f:7a:8c:ad:ad:69: 34:19:ea:7b:7a:e8:56:91:c3:0d:81:f1:c9:7d:d5: a0:85:ff:1e:60:74:be:0e:bd:9d:fa:19:2d:99:1e: 71:a1:1e:34:f8:6c:23:d6:b4:91:ab:be:a8:c6:9c: cf:fc:54:4f:fe:31:e0:5a:ea:9e:21:e9:95:65:c2: 9f:19:45:75:a8:de:5e:52:16:2d:c4:91:ae:40:1b: 0e:a8:b2:cb:57:23:a6:76:6d:bc:3e:08:bb:6c:a2: ef:32:15:3a:e6:08:ae:7f:89:a7:2f:b4:bf:02:b8: d9:8b:d5:e7:51:fa:47:2b:94:60:34:c2:58:10:9a: d4:cb:91:01:f9:db:23:24:2b:53:4c:82:5f:e8:4c: bb:2d:39:62:40:2c:5e:4c:62:cb:5d:a0:c1:10:bd: cf:05:f1:36:9e:09:28:bf:f3:01:78:f3:77:e0:2f: fa:b1:07:c4:8e:13:e0:00:db:12:9c:62:75:d0:53: d1:78:7d:da:6f:0a:bb:b6:f4:f0:a0:e8:78:8c:f3: 79:e6:34:19:3b:3b:92:bb:f9:22:3c:b0:03:51:9d: 3e:46:a9:38:7c:46:c9:cd:98:ff:a9:08:a9:f3:5b: d9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B6:A1:48:93:74:A3:87:8A:C8:22:DA:F5:A4:5F:9F:38:88:C6:8E X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3230392e302f32342d3234203d3e20323034313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.65.209.0/24 Signature Algorithm: sha256WithRSAEncryption 16:6f:ce:b4:14:46:9c:c0:e4:ea:d8:72:db:aa:9c:cf:50:58: 35:7e:87:d7:c0:f8:6c:01:09:c2:3e:0e:45:48:51:a7:21:89: 23:e2:98:88:51:4a:ed:81:a4:8d:35:18:78:4a:97:65:4c:f7: 58:08:bb:b6:c4:d1:ab:51:43:1d:39:9a:93:e7:78:a5:18:22: e8:cf:47:c8:76:29:1f:1f:d4:77:2e:47:d4:3a:5a:de:2c:f6: dc:6a:5b:9e:d5:2b:62:d5:f4:85:35:a6:3d:81:6d:e8:3f:eb: 24:e5:4a:7c:55:22:ce:e9:52:d6:26:b6:6b:a6:2d:d2:9d:2f: 5b:29:27:90:ce:f0:c2:d6:fc:47:cb:c0:df:fe:eb:87:d7:2a: 28:74:ae:43:01:f6:cf:86:72:91:af:bc:77:f3:d2:8e:38:86: ac:4b:0f:cd:85:ca:08:31:2d:9a:4a:d3:43:8a:8b:24:2a:ea: 00:04:62:48:e2:e5:ea:03:98:ef:34:e3:57:c3:0c:fe:d6:f2: fd:5e:4a:f0:5d:b6:0f:ab:17:a5:7d:57:f0:f4:ca:99:cf:b2: 2e:8f:e2:08:8d:bf:e5:f2:b4:14:06:09:fe:2b:5f:d1:b8:72: 34:33:8e:a1:9b:78:f0:74:59:38:2c:5a:7b:64:2d:81:a8:5c: 97:31:64:fe -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUJa0STbjVL2ywRMVEazBWYxuqGXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDlaFw0yNjExMjAxNTQ5MDlaMDMxMTAvBgNV BAMTKDdDQjZBMTQ4OTM3NEEzODc4QUM4MjJEQUY1QTQ1RjlGMzg4OEM2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvYTaxls9j3oOWMCDSwQbGCp2q 9PGV6W96jK2taTQZ6nt66FaRww2B8cl91aCF/x5gdL4OvZ36GS2ZHnGhHjT4bCPW tJGrvqjGnM/8VE/+MeBa6p4h6ZVlwp8ZRXWo3l5SFi3Eka5AGw6osstXI6Z2bbw+ CLtsou8yFTrmCK5/iacvtL8CuNmL1edR+kcrlGA0wlgQmtTLkQH52yMkK1NMgl/o TLstOWJALF5MYstdoMEQvc8F8TaeCSi/8wF483fgL/qxB8SOE+AA2xKcYnXQU9F4 fdpvCru29PCg6HiM83nmNBk7O5K7+SI8sANRnT5GqTh8RsnNmP+pCKnzW9l7AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUfLahSJN0o4eKyCLa9aRfnziIxo4wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMwMmUzNjM1MmUz MjMwMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzMTM3MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABQQdEwDQYJKoZIhvcNAQELBQADggEBABZvzrQURpzA5OrYctuqnM9QWDV+ h9fA+GwBCcI+DkVIUachiSPimIhRSu2BpI01GHhKl2VM91gIu7bE0atRQx05mpPn eKUYIujPR8h2KR8f1HcuR9Q6Wt4s9txqW57VK2LV9IU1pj2Bbeg/6yTlSnxVIs7p UtYmtmumLdKdL1spJ5DO8MLW/EfLwN/+64fXKih0rkMB9s+GcpGvvHfz0o44hqxL D82FyggxLZpK00OKiyQq6gAEYkji5eoDmO8041fDDP7W8v1eSvBdtg+rF6V9V/D0 ypnPsi6P4giNv+XytBQGCf4rX9G4cjQzjqGbePB0WTgsWntkLYGoXJcxZP4= -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:26 2025 by rpki-client