This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3231312e302f32342d3332203d3e203531313637.roa File: 38302e36352e3231312e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: F56NYw8vKNbyujFVKbCUKyfIiVSA8aTtglSQcxK9UrM= Subject key identifier: CB:EE:A9:56:C6:68:B1:0C:74:5C:9A:36:30:DC:9B:0C:B5:15:F2:86 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 567BF42B5FABD53E9EDD3EAD84F9C8AA4A27F83D Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3231312e302f32342d3332203d3e203531313637.roa Signing time: Fri 21 Nov 2025 15:49:09 +0000 ROA not before: Fri 21 Nov 2025 15:44:09 +0000 ROA not after: Fri 20 Nov 2026 15:49:09 +0000 asID: 51167 IP address blocks: 80.65.211.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:7b:f4:2b:5f:ab:d5:3e:9e:dd:3e:ad:84:f9:c8:aa:4a:27:f8:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:09 2025 GMT Not After : Nov 20 15:49:09 2026 GMT Subject: CN=CBEEA956C668B10C745C9A3630DC9B0CB515F286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e2:74:eb:e7:38:f1:ab:22:f4:f2:55:20:aa: 1c:3b:15:93:3b:d2:ce:b2:1f:15:1f:69:2a:eb:c7: f5:75:e7:5f:86:d0:a4:5b:46:5a:df:18:cb:78:24: b3:17:c8:e9:59:9e:53:9b:1f:a0:ed:ed:cb:b3:1f: 78:6f:22:2c:45:00:68:c7:ca:f9:79:29:c9:f3:6a: 92:73:2d:1f:14:11:3b:1a:79:bd:c9:c6:78:82:8e: 69:ab:2a:1f:21:7f:7a:1b:ab:b8:9e:ca:47:f2:77: cf:c8:18:1d:6c:7b:cf:7d:37:a4:cf:1f:23:4b:ea: a6:03:c5:a0:1f:2e:77:15:93:c3:1f:63:b4:b7:be: 15:82:87:f5:c0:eb:41:37:13:30:b3:99:97:9a:f8: a9:1e:fe:31:e8:5a:6c:40:12:83:ba:b6:6c:6e:89: 69:6e:43:d8:d4:51:4e:87:af:0d:90:1c:9f:f1:13: 07:9e:01:7a:cc:b0:da:1a:f3:b0:9d:04:1a:20:f5: 29:3b:79:ff:ad:32:26:0c:ed:05:b2:aa:ed:e3:4c: 95:de:47:3f:98:86:02:38:c8:68:04:0c:a9:89:5c: d0:b7:e7:b1:9c:0a:24:ed:9c:f9:0e:f0:7e:58:22: 3b:0f:29:c7:52:6a:38:2f:0c:19:a3:c6:6c:8f:c1: 7f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EE:A9:56:C6:68:B1:0C:74:5C:9A:36:30:DC:9B:0C:B5:15:F2:86 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3231312e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.65.211.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:27:91:63:6a:12:df:13:76:6e:4a:a8:60:e7:fc:50:e0:89: 9c:87:30:45:31:e7:63:37:e1:6a:97:15:70:a3:b7:d6:96:f1: 3f:56:14:fb:79:cc:d3:3a:fa:12:1c:e2:cd:2d:fd:78:73:ca: f3:bb:01:7e:39:98:4e:1f:c3:97:89:1a:5e:5e:4f:79:e8:b9: a7:b7:a0:85:59:a2:97:8c:f0:8a:88:ac:8b:26:3c:72:7e:48: e4:89:e6:6d:a9:a2:8e:c4:a4:ea:53:9b:f3:03:25:d6:63:cc: ca:ca:18:43:c4:99:af:58:13:0c:8f:f0:69:b1:12:cf:7a:56: bc:7c:07:68:1c:5d:1b:d4:37:51:d9:ae:07:08:3b:e2:e3:fa: 0b:c6:fe:5c:ce:26:26:38:28:c6:6e:ca:e0:0b:64:87:a7:99: a8:87:29:8e:d0:5b:d6:dd:4f:de:59:ad:02:19:fe:59:66:68: 34:66:a2:f3:b6:7d:03:93:8a:6c:6d:81:05:e8:6d:28:6a:c4: 20:6a:e1:00:d5:07:a1:a7:7b:06:83:e6:39:34:4a:b1:b9:f3: 7d:5c:63:8f:8c:04:7a:b0:56:19:d4:a3:98:c4:6e:79:37:49: 33:4d:74:5a:85:e1:fb:db:ca:91:4b:f0:1c:5d:58:7c:6a:76: ce:89:c7:d5 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUVnv0K1+r1T6e3T6thPnIqkon+D0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDlaFw0yNjExMjAxNTQ5MDlaMDMxMTAvBgNV BAMTKENCRUVBOTU2QzY2OEIxMEM3NDVDOUEzNjMwREM5QjBDQjUxNUYyODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM4nTr5zjxqyL08lUgqhw7FZM7 0s6yHxUfaSrrx/V151+G0KRbRlrfGMt4JLMXyOlZnlObH6Dt7cuzH3hvIixFAGjH yvl5KcnzapJzLR8UETsaeb3JxniCjmmrKh8hf3obq7ieykfyd8/IGB1se899N6TP HyNL6qYDxaAfLncVk8MfY7S3vhWCh/XA60E3EzCzmZea+Kke/jHoWmxAEoO6tmxu iWluQ9jUUU6Hrw2QHJ/xEweeAXrMsNoa87CdBBog9Sk7ef+tMiYM7QWyqu3jTJXe Rz+YhgI4yGgEDKmJXNC357GcCiTtnPkO8H5YIjsPKcdSajgvDBmjxmyPwX+nAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUy+6pVsZosQx0XJo2MNybDLUV8oYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMwMmUzNjM1MmUz MjMxMzEyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAUEHTMA0GCSqGSIb3DQEBCwUAA4IBAQCaJ5FjahLfE3ZuSqhg5/xQ4ImchzBF MedjN+FqlxVwo7fWlvE/VhT7eczTOvoSHOLNLf14c8rzuwF+OZhOH8OXiRpeXk95 6Lmnt6CFWaKXjPCKiKyLJjxyfkjkieZtqaKOxKTqU5vzAyXWY8zKyhhDxJmvWBMM j/BpsRLPela8fAdoHF0b1DdR2a4HCDvi4/oLxv5cziYmOCjGbsrgC2SHp5mohymO 0FvW3U/eWa0CGf5ZZmg0ZqLztn0Dk4psbYEF6G0oasQgauEA1Qehp3sGg+Y5NEqx ufN9XGOPjAR6sFYZ1KOYxG55N0kzTXRaheH728qRS/AcXVh8anbOicfV -----END CERTIFICATE-----Generated at Sat Dec 6 12:51:28 2025 by rpki-client