This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3137302e302f32342d3234203d3e20313336373837.roa File: 38342e32312e3137302e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: +Xn49FAx9iGKdnNyj6QQUJmtxDmiNCJvfIdu7t3oVXw= Subject key identifier: 52:7D:C5:40:D3:14:55:3D:A2:06:D3:03:C9:ED:BB:E3:5B:16:FE:B1 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 07A631A196820C37C87A4E7E3F244234B41C4B58 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3137302e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:04 +0000 ROA not before: Fri 21 Nov 2025 15:44:04 +0000 ROA not after: Fri 20 Nov 2026 15:49:04 +0000 asID: 136787 IP address blocks: 84.21.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a6:31:a1:96:82:0c:37:c8:7a:4e:7e:3f:24:42:34:b4:1c:4b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:04 2025 GMT Not After : Nov 20 15:49:04 2026 GMT Subject: CN=527DC540D314553DA206D303C9EDBBE35B16FEB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d8:29:b5:45:5a:dd:f2:89:58:29:16:74:e3: c4:a6:73:1a:50:6a:c2:d2:39:2a:25:29:5a:a5:ae: 48:e6:18:36:cc:99:c0:72:af:9c:67:5f:3d:35:08: 5a:9b:82:97:be:9a:9e:f0:03:98:21:d7:eb:0b:12: a0:a3:ae:0a:7d:a2:ea:ba:5c:53:72:cc:13:7b:a0: 20:ee:71:ce:5d:eb:cc:bd:04:78:2c:89:c4:dd:b7: 43:61:be:01:ee:a5:24:93:94:ee:ec:e2:08:ad:b7: c3:48:4d:11:46:23:51:f0:77:82:89:08:ce:87:84: 54:80:57:5d:bf:96:93:09:9f:ff:46:44:41:17:e0: ea:b2:60:7b:a9:53:1b:92:a6:14:e5:5f:5e:38:90: bd:e0:a4:bb:3b:18:28:e7:f3:00:1f:ca:0b:7d:8f: b3:0d:20:e8:37:7e:97:2e:c5:58:07:49:19:d9:8b: 4a:3d:29:1e:29:d7:0f:45:7d:df:91:f8:6d:f9:ef: 63:46:36:28:1a:9c:e8:e1:de:94:83:fc:aa:ac:6b: ab:f7:28:8b:71:0a:43:4a:0d:c0:20:2a:e6:2d:20: 43:8c:4b:14:60:d0:b7:f5:26:e7:51:23:7a:a7:b4: 60:f0:09:d9:c4:b8:65:3a:b6:7d:3d:89:11:94:18: 8c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7D:C5:40:D3:14:55:3D:A2:06:D3:03:C9:ED:BB:E3:5B:16:FE:B1 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3137302e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.21.170.0/24 Signature Algorithm: sha256WithRSAEncryption 95:55:9a:ab:97:76:c8:60:22:69:86:3a:0c:f7:ca:8a:0e:2a: b3:b0:99:c4:16:a4:fa:6e:95:2c:b8:3c:20:94:7b:55:03:28: fd:eb:80:35:58:b6:64:81:fb:60:93:b9:9e:dc:b7:79:f1:48: 1c:1d:c3:5e:bd:66:1d:37:00:c8:2a:fd:1f:4d:7a:47:80:f0: 02:1d:87:ef:6e:da:fe:78:b1:b1:2a:6b:28:9d:92:e8:7f:3d: 01:49:af:ae:f6:fb:2d:f9:15:1f:1d:2b:59:e7:f7:8a:63:8d: 59:bb:a8:39:a2:5c:e0:da:d4:19:1d:8a:d5:6f:89:08:1f:00: 39:04:48:25:e3:02:4f:cc:0f:00:bd:02:52:0b:d3:99:ce:d6: 45:02:08:72:5a:f1:37:fc:23:d1:6c:78:21:c7:53:9f:3d:a7: a6:7b:6c:3c:2f:a9:81:16:86:57:af:f4:4b:3f:11:be:38:16: 89:e0:a6:7a:e4:3c:d9:1b:9d:83:7f:01:18:e2:08:5f:a1:a2: 8a:f9:f7:85:6a:ec:2b:b0:ef:0d:b3:1c:57:b6:63:60:8e:74: e9:12:bd:14:22:5e:ef:70:85:75:a9:25:24:71:13:99:dd:fc: 87:16:cc:11:17:38:ae:60:3f:a9:3f:bd:30:1b:8f:4d:51:f0: ad:84:c0:72 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUB6YxoZaCDDfIek5+PyRCNLQcS1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDRaFw0yNjExMjAxNTQ5MDRaMDMxMTAvBgNV BAMTKDUyN0RDNTQwRDMxNDU1M0RBMjA2RDMwM0M5RURCQkUzNUIxNkZFQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn2Cm1RVrd8olYKRZ048SmcxpQ asLSOSolKVqlrkjmGDbMmcByr5xnXz01CFqbgpe+mp7wA5gh1+sLEqCjrgp9ouq6 XFNyzBN7oCDucc5d68y9BHgsicTdt0NhvgHupSSTlO7s4gitt8NITRFGI1Hwd4KJ CM6HhFSAV12/lpMJn/9GREEX4OqyYHupUxuSphTlX144kL3gpLs7GCjn8wAfygt9 j7MNIOg3fpcuxVgHSRnZi0o9KR4p1w9Ffd+R+G3572NGNiganOjh3pSD/Kqsa6v3 KItxCkNKDcAgKuYtIEOMSxRg0Lf1JudRI3qntGDwCdnEuGU6tn09iRGUGIzRAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUUn3FQNMUVT2iBtMDye2741sW/rEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODM0MmUzMjMxMmUz MTM3MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABUFaowDQYJKoZIhvcNAQELBQADggEBAJVVmquXdshgImmGOgz3yooOKrOw mcQWpPpulSy4PCCUe1UDKP3rgDVYtmSB+2CTuZ7ct3nxSBwdw169Zh03AMgq/R9N ekeA8AIdh+9u2v54sbEqayidkuh/PQFJr672+y35FR8dK1nn94pjjVm7qDmiXODa 1BkditVviQgfADkESCXjAk/MDwC9AlIL05nO1kUCCHJa8Tf8I9FseCHHU589p6Z7 bDwvqYEWhlev9Es/Eb44FongpnrkPNkbnYN/ARjiCF+hoor594Vq7Cuw7w2zHFe2 Y2COdOkSvRQiXu9whXWpJSRxE5nd/IcWzBEXOK5gP6k/vTAbj01R8K2EwHI= -----END CERTIFICATE-----Generated at Sat Dec 6 15:46:49 2025 by rpki-client