This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33362e302f32342d3234203d3e20323134303235.roa File: 38312e32322e33362e302f32342d3234203d3e20323134303235.roa (raw, json) Hash identifier: 07yWcH/lGYjsWlCvuYAZnbrRZ0sEiWhvLaGk6AU2PBk= Subject key identifier: C2:61:97:0A:56:F1:FC:25:0A:A5:01:3F:F3:1C:E7:63:C8:7A:B0:70 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 026050ABB7ED585AE47F46E4333474C028087FA0 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33362e302f32342d3234203d3e20323134303235.roa Signing time: Fri 23 Jan 2026 12:40:49 +0000 ROA not before: Fri 23 Jan 2026 12:35:49 +0000 ROA not after: Fri 22 Jan 2027 12:40:49 +0000 asID: 214025 IP address blocks: 81.22.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:60:50:ab:b7:ed:58:5a:e4:7f:46:e4:33:34:74:c0:28:08:7f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Jan 23 12:35:49 2026 GMT Not After : Jan 22 12:40:49 2027 GMT Subject: CN=C261970A56F1FC250AA5013FF31CE763C87AB070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ed:b4:77:d9:67:cc:33:9f:18:ef:5a:b6:56: 66:d3:ad:66:3b:11:32:d8:b4:75:91:0f:c6:af:e7: ba:c3:62:f7:41:13:70:01:16:58:44:54:52:6e:a9: 7b:33:1e:81:d1:6a:9c:62:5d:a9:cf:74:8a:53:dd: f0:32:24:98:19:bc:f2:72:74:30:0b:f5:cf:69:7b: f2:89:fd:41:24:de:80:ac:05:e8:e0:0e:f2:61:0a: 5b:b6:53:b7:30:7e:e5:2a:ea:57:b1:90:76:d5:d8: c5:e1:a7:b7:7e:49:95:75:ad:3e:38:b2:1e:3a:3d: a1:26:8a:44:4e:bf:bb:0f:b9:2e:c7:78:de:19:0b: ee:e8:8b:4d:f5:d7:45:b1:84:ee:de:4f:7a:77:72: 97:80:1d:22:1d:77:29:37:cf:9a:b5:10:a3:17:21: 91:9e:89:e7:70:3c:0f:36:ca:df:8c:8d:a8:d4:24: 48:b8:1b:e3:6a:cb:33:b4:8c:33:78:db:7f:b2:8e: d2:04:23:a8:2f:a5:a5:95:be:b5:57:cb:71:6c:2f: d5:96:9d:5a:9c:d2:3e:df:36:8e:a4:44:18:d5:e9: 21:88:23:7b:f0:52:56:6d:53:8e:e5:fd:dc:e4:5f: b8:c6:df:e9:ef:8b:a8:34:a6:fc:a2:05:2e:24:6f: d6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:61:97:0A:56:F1:FC:25:0A:A5:01:3F:F3:1C:E7:63:C8:7A:B0:70 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33362e302f32342d3234203d3e20323134303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.36.0/24 Signature Algorithm: sha256WithRSAEncryption db:c0:72:5c:90:29:ae:51:a6:42:60:d1:0e:98:25:fd:01:7e: f6:41:a9:8d:f1:f5:53:00:e2:51:03:8d:f2:28:b6:b6:82:27: ab:60:34:1d:c4:8b:c5:3c:0e:92:3e:04:8e:d8:d4:7b:7e:03: 87:f1:c1:38:76:a0:d2:af:64:9b:50:52:d6:53:77:3c:5a:fb: 84:c2:d5:f5:12:7f:0b:3a:a8:37:56:c4:98:98:4b:f4:3c:02: d8:bf:6f:18:45:4c:30:62:ac:4d:40:98:17:18:7d:9e:ad:d1: 6c:46:f0:c6:78:95:56:bb:f7:97:ce:40:41:f2:73:d9:e9:e7: d8:f1:66:80:1e:b7:60:c7:03:0f:82:1b:39:d5:39:cc:6c:18: bc:fe:08:b8:0e:8d:74:19:20:af:05:5f:6d:ea:d8:4f:fb:d8: 93:bc:89:a9:e9:b1:d0:58:2b:7f:aa:b9:ef:32:00:cc:f9:e5: 1a:e6:ef:84:cf:5d:96:e4:fc:fa:a1:56:40:8c:10:53:26:4a: 56:be:27:0b:ba:a9:0b:1f:82:15:0e:1d:b1:fe:fb:db:e3:c2: 38:06:9e:05:e8:f2:2a:70:eb:19:27:4c:35:d3:2d:5e:95:42: 2a:fc:62:b8:c1:0b:0c:40:c7:c0:e8:7c:6d:b4:32:bd:a2:fa: 7b:16:14:9e -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUAmBQq7ftWFrkf0bkMzR0wCgIf6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNjAxMjMxMjM1NDlaFw0yNzAxMjIxMjQwNDlaMDMxMTAvBgNV BAMTKEMyNjE5NzBBNTZGMUZDMjUwQUE1MDEzRkYzMUNFNzYzQzg3QUIwNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7bR32WfMM58Y71q2VmbTrWY7 ETLYtHWRD8av57rDYvdBE3ABFlhEVFJuqXszHoHRapxiXanPdIpT3fAyJJgZvPJy dDAL9c9pe/KJ/UEk3oCsBejgDvJhClu2U7cwfuUq6lexkHbV2MXhp7d+SZV1rT44 sh46PaEmikROv7sPuS7HeN4ZC+7oi03110WxhO7eT3p3cpeAHSIddyk3z5q1EKMX IZGeiedwPA82yt+MjajUJEi4G+NqyzO0jDN423+yjtIEI6gvpaWVvrVXy3FsL9WW nVqc0j7fNo6kRBjV6SGII3vwUlZtU47l/dzkX7jG3+nvi6g0pvyiBS4kb9a9AgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUwmGXClbx/CUKpQE/8xznY8h6sHAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMxMmUzMjMyMmUz MzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM0MzAzMjM1LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAURYkMA0GCSqGSIb3DQEBCwUAA4IBAQDbwHJckCmuUaZCYNEOmCX9AX72QamN 8fVTAOJRA43yKLa2gierYDQdxIvFPA6SPgSO2NR7fgOH8cE4dqDSr2SbUFLWU3c8 WvuEwtX1En8LOqg3VsSYmEv0PALYv28YRUwwYqxNQJgXGH2erdFsRvDGeJVWu/eX zkBB8nPZ6efY8WaAHrdgxwMPghs51TnMbBi8/gi4Do10GSCvBV9t6thP+9iTvImp 6bHQWCt/qrnvMgDM+eUa5u+Ez12W5Pz6oVZAjBBTJkpWvicLuqkLH4IVDh2x/vvb 48I4Bp4F6PIqcOsZJ0w10y1elUIq/GK4wQsMQMfA6HxttDK9ovp7FhSe -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:13 2026 by rpki-client