This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3230302e302f32342d3234203d3e20323033303631.roa File: 38332e3137312e3230302e302f32342d3234203d3e20323033303631.roa (raw, json) Hash identifier: bbSM0/4oPuIcsDXbM71cN57D46L5XjUsjG5CG9ooxMU= Subject key identifier: 4E:18:FC:86:5F:07:BC:6B:6D:4E:F8:EF:29:3F:D0:54:E5:21:56:50 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 5EC4899E4FFD06A1ED8238F4FDD6DF6B0A2CF165 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3230302e302f32342d3234203d3e20323033303631.roa Signing time: Fri 28 Nov 2025 11:49:51 +0000 ROA not before: Fri 28 Nov 2025 11:44:51 +0000 ROA not after: Fri 27 Nov 2026 11:49:51 +0000 asID: 203061 IP address blocks: 83.171.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c4:89:9e:4f:fd:06:a1:ed:82:38:f4:fd:d6:df:6b:0a:2c:f1:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:51 2025 GMT Not After : Nov 27 11:49:51 2026 GMT Subject: CN=4E18FC865F07BC6B6D4EF8EF293FD054E5215650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:e1:11:aa:e1:b8:31:ab:56:fe:9b:0a:f2: c6:32:cc:8f:7a:05:54:48:11:99:94:43:12:a9:85: f7:4a:11:98:6c:c1:13:fe:75:51:44:79:6d:7b:af: 8d:dd:e9:18:98:05:ad:2b:96:8a:9c:6a:3e:16:b6: dd:de:4e:9c:4a:5e:e1:cf:ae:a1:73:43:e3:44:cb: 62:88:1e:02:4e:e2:17:bf:2d:10:4c:2b:90:23:e1: 4a:28:6f:18:40:df:ab:6f:f5:8d:6d:4c:7a:7e:e6: 4f:a5:ed:05:db:bb:b9:33:5c:f6:72:1d:34:8a:e5: 04:c0:17:89:fa:a5:85:d8:93:90:48:0f:eb:de:06: 11:83:ca:0a:f4:66:a0:f4:c2:32:28:12:3b:14:6d: ff:12:09:68:fa:1e:9b:3a:a6:30:79:c1:8f:91:89: 9f:48:c2:1a:c8:f4:1b:26:9d:ff:96:d8:30:2a:55: 46:b6:e6:bc:75:b0:33:e5:26:bd:d1:cd:0d:ef:5c: 7a:a3:c2:61:cf:e9:1a:66:f6:53:77:1a:ea:71:76: d6:ed:10:e8:b0:60:3c:88:93:5d:89:e2:d0:06:f2: 9b:c4:78:93:ed:a1:56:78:1a:50:50:3f:5c:31:d4: 4f:08:44:96:94:1e:b7:72:4f:41:93:ab:bd:ac:7f: a0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:18:FC:86:5F:07:BC:6B:6D:4E:F8:EF:29:3F:D0:54:E5:21:56:50 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3230302e302f32342d3234203d3e20323033303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.171.200.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:03:7d:26:b2:73:34:e0:ba:fe:18:e9:ee:62:64:1d:69:ef: e9:30:70:e2:33:af:fc:90:2f:98:8e:a3:21:e7:e6:4b:0e:71: 09:ef:5f:d6:12:41:f2:95:fd:0f:f7:7b:74:26:51:33:2d:2e: 14:b4:73:c9:60:2c:c1:8b:b7:ac:cd:f6:e3:58:ce:c2:55:7e: 9a:df:bc:b1:d3:e2:8c:be:6f:55:91:da:30:e4:f0:55:30:6b: 80:c6:50:da:ba:5d:b2:f5:a1:8f:12:69:1f:5d:68:12:a1:7c: d5:5c:42:01:63:2c:01:40:fd:e2:10:cd:be:53:bf:0e:18:84: bb:63:21:4b:94:65:25:37:17:ad:e7:d2:68:e9:b4:3a:fc:cd: 81:39:8f:5e:17:5e:c7:a2:2b:38:d2:1c:79:18:bd:8a:1a:a8: 6a:e7:68:6c:04:f0:55:d0:f0:d8:1f:7c:01:87:24:d9:e3:0b: 9c:4d:ae:1f:d5:a8:ba:7c:03:59:a3:02:5f:39:3c:e3:47:ee: 33:55:04:3f:1a:7a:6a:3b:a0:c8:d5:9c:75:7b:b3:09:46:9b: 7d:c3:31:78:2b:22:1b:b6:9a:34:22:4e:5b:ec:1f:0a:e6:e8: 6b:b5:68:7a:12:b8:aa:c6:a5:5b:13:fa:b8:bd:8b:5d:30:eb: cd:19:64:70 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUXsSJnk/9BqHtgjj0/dbfawos8WUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTFaFw0yNjExMjcxMTQ5NTFaMDMxMTAvBgNV BAMTKDRFMThGQzg2NUYwN0JDNkI2RDRFRjhFRjI5M0ZEMDU0RTUyMTU2NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+kuERquG4MatW/psK8sYyzI96 BVRIEZmUQxKphfdKEZhswRP+dVFEeW17r43d6RiYBa0rloqcaj4Wtt3eTpxKXuHP rqFzQ+NEy2KIHgJO4he/LRBMK5Aj4UoobxhA36tv9Y1tTHp+5k+l7QXbu7kzXPZy HTSK5QTAF4n6pYXYk5BID+veBhGDygr0ZqD0wjIoEjsUbf8SCWj6Hps6pjB5wY+R iZ9IwhrI9Bsmnf+W2DAqVUa25rx1sDPlJr3RzQ3vXHqjwmHP6Rpm9lN3Gupxdtbt EOiwYDyIk12J4tAG8pvEeJPtoVZ4GlBQP1wx1E8IRJaUHrdyT0GTq72sf6BdAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUThj8hl8HvGttTvjvKT/QVOUhVlAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMzMmUzMTM3MzEy ZTMyMzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMzMwMzYzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAFOryDANBgkqhkiG9w0BAQsFAAOCAQEAigN9JrJzNOC6/hjp7mJkHWnv 6TBw4jOv/JAvmI6jIefmSw5xCe9f1hJB8pX9D/d7dCZRMy0uFLRzyWAswYu3rM32 41jOwlV+mt+8sdPijL5vVZHaMOTwVTBrgMZQ2rpdsvWhjxJpH11oEqF81VxCAWMs AUD94hDNvlO/DhiEu2MhS5RlJTcXrefSaOm0OvzNgTmPXhdex6IrONIceRi9ihqo audobATwVdDw2B98AYck2eMLnE2uH9WounwDWaMCXzk840fuM1UEPxp6ajugyNWc dXuzCUabfcMxeCsiG7aaNCJOW+wfCuboa7VoehK4qsalWxP6uL2LXTDrzRlkcA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:55:54 2025 by rpki-client