This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33372e302f32342d3234203d3e20313336373837.roa File: 38312e32322e33372e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: hO84Ca0luDAL6nrKXMOJ2NqXXxqMmffCDCcqC+BXIy8= Subject key identifier: CF:24:E4:49:85:07:E0:C3:A7:24:1D:BC:1C:C8:71:27:D5:8F:5E:F6 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 459E09131C2CB254815E152D76B39BE7FC56C0FE Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33372e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:48:57 +0000 ROA not before: Fri 21 Nov 2025 15:43:57 +0000 ROA not after: Fri 20 Nov 2026 15:48:57 +0000 asID: 136787 IP address blocks: 81.22.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:9e:09:13:1c:2c:b2:54:81:5e:15:2d:76:b3:9b:e7:fc:56:c0:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:43:57 2025 GMT Not After : Nov 20 15:48:57 2026 GMT Subject: CN=CF24E4498507E0C3A7241DBC1CC87127D58F5EF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e3:69:68:fe:c4:83:7d:11:20:54:28:97:35: 55:31:0f:62:bf:85:84:39:e8:4d:39:c6:77:8f:27: 36:9d:bb:70:2c:61:29:a0:58:f3:17:47:7e:a4:f3: 74:41:66:5f:a2:c1:75:52:09:66:98:e1:ad:46:eb: 4b:65:12:c4:90:db:e0:ce:8a:73:38:58:4e:86:30: a6:ed:de:42:c9:7c:9e:83:eb:83:95:74:15:8a:a3: 60:7a:00:b6:66:b1:a3:3a:07:92:a5:cd:b9:b9:53: 74:fc:79:e1:3d:82:ce:4a:4b:fa:d6:e9:42:0c:13: 2a:72:6a:a6:e9:ef:85:b0:77:e8:39:b4:f7:23:cd: 97:24:56:69:cf:76:61:4c:6e:b1:86:01:06:71:7b: 9a:87:9b:83:1b:02:43:2f:32:40:2c:f6:a7:5a:57: d1:06:28:ef:86:cd:f9:a2:61:e1:7c:23:b2:85:25: e3:9b:9a:af:9e:0c:81:bb:9a:5b:f0:d0:7c:2e:1d: db:ed:c8:75:5b:fe:b5:ed:b9:cf:8c:bb:1a:d0:98: 45:20:f9:63:f3:e9:98:29:34:3a:c8:67:8b:98:51: af:e2:b7:19:55:9b:c3:d4:77:a2:94:f4:0f:1d:72: a4:29:b9:b0:e5:87:56:63:fb:a7:c0:74:3e:10:a8: e6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:24:E4:49:85:07:E0:C3:A7:24:1D:BC:1C:C8:71:27:D5:8F:5E:F6 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33372e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.37.0/24 Signature Algorithm: sha256WithRSAEncryption 64:92:b7:d5:39:f4:39:d2:07:ce:4a:89:35:12:1d:5e:5d:64: 88:f0:88:d8:95:36:46:34:a8:dd:6a:80:66:f8:c6:00:c4:eb: 80:d3:0d:64:07:88:0f:e5:f7:ff:60:e8:f1:da:53:c8:06:8c: c4:d1:d5:ab:4d:ff:f0:68:1b:03:c3:72:35:30:30:0a:a4:bb: 6f:87:83:33:08:f3:37:b0:ed:ad:e7:c3:cc:92:fb:ac:cf:16: be:5e:15:6d:b6:3d:9c:2e:93:75:85:cb:24:d5:f8:8f:21:ef: 6e:6b:16:ec:85:36:4b:05:0a:ee:71:e1:90:9b:90:27:86:97: b3:fd:75:ed:5f:34:97:7e:9e:52:3a:6c:f7:94:4d:20:41:06: 37:9a:1b:01:ac:a4:fc:63:16:e6:c5:40:0a:cf:34:4a:73:1d: e9:77:0b:c2:8f:a9:55:23:d5:d0:1f:9c:a3:5c:8c:a5:3f:20: a2:79:ca:8c:92:96:bc:3e:a7:d1:db:d9:44:0a:86:53:db:a5: 53:ee:c4:49:2f:3e:2f:cd:cd:67:ec:e3:9e:5c:a4:1b:bb:66: ff:2b:90:61:97:06:f7:b2:9f:f7:fb:03:85:76:93:d8:d8:d1: 02:c9:37:01:30:db:69:c6:c4:84:bf:ee:19:11:e2:1f:97:6b: 9c:8e:3f:ab -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIURZ4JExwsslSBXhUtdrOb5/xWwP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQzNTdaFw0yNjExMjAxNTQ4NTdaMDMxMTAvBgNV BAMTKENGMjRFNDQ5ODUwN0UwQzNBNzI0MURCQzFDQzg3MTI3RDU4RjVFRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC442lo/sSDfREgVCiXNVUxD2K/ hYQ56E05xnePJzadu3AsYSmgWPMXR36k83RBZl+iwXVSCWaY4a1G60tlEsSQ2+DO inM4WE6GMKbt3kLJfJ6D64OVdBWKo2B6ALZmsaM6B5Klzbm5U3T8eeE9gs5KS/rW 6UIMEypyaqbp74Wwd+g5tPcjzZckVmnPdmFMbrGGAQZxe5qHm4MbAkMvMkAs9qda V9EGKO+GzfmiYeF8I7KFJeObmq+eDIG7mlvw0HwuHdvtyHVb/rXtuc+MuxrQmEUg +WPz6ZgpNDrIZ4uYUa/itxlVm8PUd6KU9A8dcqQpubDlh1Zj+6fAdD4QqOafAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUzyTkSYUH4MOnJB28HMhxJ9WPXvYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMxMmUzMjMyMmUz MzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAURYlMA0GCSqGSIb3DQEBCwUAA4IBAQBkkrfVOfQ50gfOSok1Eh1eXWSI8IjY lTZGNKjdaoBm+MYAxOuA0w1kB4gP5ff/YOjx2lPIBozE0dWrTf/waBsDw3I1MDAK pLtvh4MzCPM3sO2t58PMkvuszxa+XhVttj2cLpN1hcsk1fiPIe9uaxbshTZLBQru ceGQm5Anhpez/XXtXzSXfp5SOmz3lE0gQQY3mhsBrKT8YxbmxUAKzzRKcx3pdwvC j6lVI9XQH5yjXIylPyCiecqMkpa8PqfR29lECoZT26VT7sRJLz4vzc1n7OOeXKQb u2b/K5Bhlwb3sp/3+wOFdpPY2NECyTcBMNtpxsSEv+4ZEeIfl2ucjj+r -----END CERTIFICATE-----Generated at Sat Dec 6 15:49:20 2025 by rpki-client