This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3235302e302f32332d3234203d3e20313336373837.roa File: 38332e3137312e3235302e302f32332d3234203d3e20313336373837.roa (raw, json) Hash identifier: gVYnn2IXJpzUrdIRxR97cTRW7shp06kU1FhXKo9FRY8= Subject key identifier: 2C:65:A9:05:0B:73:C1:D7:99:E6:94:83:E2:2D:E6:E1:15:CE:9E:74 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1A8FF358E7700B1FE1F4C96FFD59F0548A5ED4BC Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3235302e302f32332d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:04 +0000 ROA not before: Fri 21 Nov 2025 15:44:04 +0000 ROA not after: Fri 20 Nov 2026 15:49:04 +0000 asID: 136787 IP address blocks: 83.171.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:8f:f3:58:e7:70:0b:1f:e1:f4:c9:6f:fd:59:f0:54:8a:5e:d4:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:04 2025 GMT Not After : Nov 20 15:49:04 2026 GMT Subject: CN=2C65A9050B73C1D799E69483E22DE6E115CE9E74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:72:83:e8:ab:ba:6b:9c:c1:d2:fc:e1:49:1c: 10:f2:13:5d:e5:7b:78:6e:ef:33:79:02:f0:44:11: d4:8c:fb:2e:91:04:92:19:8f:0d:2f:ab:00:cb:41: fc:c6:de:f2:98:b4:2f:6f:1f:4f:19:71:a8:20:0c: 39:60:f6:b1:08:a5:5d:83:47:3e:9e:2b:57:9c:c8: b8:7e:a0:1b:a5:96:68:c7:dd:13:21:2b:10:e4:c5: 01:4f:34:18:99:83:bb:a4:d0:31:39:b5:7f:cf:b4: f4:8d:ee:4e:c0:10:34:b5:bd:f7:75:96:bb:b3:55: d0:7f:8d:0e:02:8b:f5:02:7e:1e:08:c4:db:fd:7e: 8c:52:3d:73:8b:d8:0f:7a:70:31:53:fc:7b:b6:a8: f5:d6:58:70:c0:6e:7b:a7:5e:59:83:00:85:7d:d2: 6f:b9:f8:62:a7:eb:6c:f4:ef:3e:39:ef:3f:a4:68: d2:f7:00:e2:77:e7:f1:0f:a1:b0:2f:64:a2:ce:a1: df:7e:2f:29:62:43:87:78:10:32:ea:9f:36:9c:4e: b3:00:b6:d2:48:6e:73:43:26:cb:17:72:9d:bb:9c: 6b:a1:87:e3:01:cf:80:f6:19:51:37:96:5a:66:85: 57:00:82:91:1d:54:2d:56:b9:cc:49:db:15:73:10: cc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:65:A9:05:0B:73:C1:D7:99:E6:94:83:E2:2D:E6:E1:15:CE:9E:74 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3235302e302f32332d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.171.250.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:51:e2:ca:13:01:4d:d1:c6:47:ed:e4:fa:b7:de:54:3e:92: ce:1f:b6:39:28:eb:60:be:9b:ed:e2:34:7e:cb:b9:3b:f3:4c: 79:7b:92:21:27:c4:0f:22:10:e4:3b:9b:6c:3f:2e:e3:45:2e: 22:71:d2:7b:28:41:e8:f5:f5:28:f0:38:29:05:77:a6:25:89: d8:42:fb:18:1d:76:46:01:01:33:a1:26:5c:ef:b7:65:e5:d8: c1:c6:d2:19:e9:c1:1c:8e:48:69:25:08:2f:ce:23:d9:12:78: 17:f6:dd:7c:28:ae:9e:b1:ae:85:42:c1:e1:1a:63:16:ab:52: 22:49:45:f0:5b:b3:a3:03:03:b0:ce:ef:fd:62:e1:ab:ff:fd: 42:38:e0:17:53:74:e8:c1:49:75:bf:25:33:6b:f2:59:b1:16: f5:0a:5d:ea:8a:5d:71:8b:a7:47:75:e9:7b:95:b3:70:ea:5e: be:d4:f2:fb:73:6f:77:97:e2:71:f1:6c:c3:8c:18:04:b1:1e: 73:71:2e:4e:bc:30:02:dc:29:dd:9d:73:59:f4:26:7b:ea:ad: 4a:6c:68:d4:2c:0b:7b:4d:e5:fe:fb:b2:44:ae:46:c2:c0:a0: dd:11:6c:4c:5e:56:b8:3d:3e:d7:6c:a9:62:b7:63:53:e2:19: e8:a4:21:ff -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUGo/zWOdwCx/h9Mlv/VnwVIpe1LwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDRaFw0yNjExMjAxNTQ5MDRaMDMxMTAvBgNV BAMTKDJDNjVBOTA1MEI3M0MxRDc5OUU2OTQ4M0UyMkRFNkUxMTVDRTlFNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmcoPoq7prnMHS/OFJHBDyE13l e3hu7zN5AvBEEdSM+y6RBJIZjw0vqwDLQfzG3vKYtC9vH08ZcaggDDlg9rEIpV2D Rz6eK1ecyLh+oBullmjH3RMhKxDkxQFPNBiZg7uk0DE5tX/PtPSN7k7AEDS1vfd1 lruzVdB/jQ4Ci/UCfh4IxNv9foxSPXOL2A96cDFT/Hu2qPXWWHDAbnunXlmDAIV9 0m+5+GKn62z07z457z+kaNL3AOJ35/EPobAvZKLOod9+LyliQ4d4EDLqnzacTrMA ttJIbnNDJssXcp27nGuhh+MBz4D2GVE3llpmhVcAgpEdVC1WucxJ2xVzEMyjAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQULGWpBQtzwdeZ5pSD4i3m4RXOnnQwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMzMmUzMTM3MzEy ZTMyMzUzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAVOr+jANBgkqhkiG9w0BAQsFAAOCAQEAH1HiyhMBTdHGR+3k+rfeVD6S zh+2OSjrYL6b7eI0fsu5O/NMeXuSISfEDyIQ5DubbD8u40UuInHSeyhB6PX1KPA4 KQV3piWJ2EL7GB12RgEBM6EmXO+3ZeXYwcbSGenBHI5IaSUIL84j2RJ4F/bdfCiu nrGuhULB4RpjFqtSIklF8FuzowMDsM7v/WLhq//9QjjgF1N06MFJdb8lM2vyWbEW 9Qpd6opdcYunR3Xpe5WzcOpevtTy+3Nvd5ficfFsw4wYBLEec3EuTrwwAtwp3Z1z WfQme+qtSmxo1CwLe03l/vuyRK5GwsCg3RFsTF5WuD0+12ypYrdjU+IZ6KQh/w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:17 2025 by rpki-client