This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3137312e302f32342d3332203d3e203531313637.roa File: 38342e32312e3137312e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: fA7AG3bZRastBf3rlb3c/vxlYIvgO0wxogh3B1faBr4= Subject key identifier: 06:CC:E4:6F:89:C8:A2:3C:C1:B3:C0:2F:97:DC:2A:6B:A3:FC:AF:66 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3F88721E60B7A04578039FE533A2754BE52BABBB Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3137312e302f32342d3332203d3e203531313637.roa Signing time: Fri 21 Nov 2025 15:49:08 +0000 ROA not before: Fri 21 Nov 2025 15:44:08 +0000 ROA not after: Fri 20 Nov 2026 15:49:08 +0000 asID: 51167 IP address blocks: 84.21.171.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:88:72:1e:60:b7:a0:45:78:03:9f:e5:33:a2:75:4b:e5:2b:ab:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:08 2025 GMT Not After : Nov 20 15:49:08 2026 GMT Subject: CN=06CCE46F89C8A23CC1B3C02F97DC2A6BA3FCAF66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:65:63:2e:33:4f:a1:a1:77:6e:bd:48:5c:8f: ad:2e:aa:ad:6c:a9:cd:2a:1b:f2:46:f7:60:02:50: 2a:b9:49:b7:eb:4b:42:2a:01:4d:fa:e0:b6:64:10: fb:db:43:8b:04:3e:b0:df:67:b0:74:e5:3c:71:d4: 83:68:bb:8f:a6:25:12:9b:69:03:58:71:7b:27:28: 0b:cd:73:ec:60:2b:74:c8:0c:f2:53:ed:97:cb:f4: 32:e5:bd:34:2d:18:c8:48:8e:1c:1a:a3:e6:f0:30: 6b:61:11:2b:18:e3:5b:c1:cf:9f:37:6f:97:80:13: 00:cd:d3:2e:ef:e2:96:19:1e:ee:9a:5d:f9:4b:51: c5:32:f3:d2:f1:3b:15:70:50:10:b8:3d:95:cd:ee: 12:89:30:63:a4:53:03:94:8f:03:55:b3:dc:82:9f: 3e:f9:04:d9:c8:5a:bb:5e:79:1b:07:06:39:4a:20: 55:15:b0:46:70:e8:4f:5c:32:10:07:74:1f:ed:0d: ca:d2:e3:aa:be:c3:cc:11:de:c1:af:bc:36:55:fa: b4:ef:2c:cd:81:c9:eb:66:b8:9e:2c:b4:bd:0d:34: fa:48:a9:94:ac:6f:6a:3b:50:9e:61:0b:97:b3:3a: 76:11:87:be:f8:bc:4e:90:12:75:e0:e5:d8:32:bc: 16:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CC:E4:6F:89:C8:A2:3C:C1:B3:C0:2F:97:DC:2A:6B:A3:FC:AF:66 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3137312e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.21.171.0/24 Signature Algorithm: sha256WithRSAEncryption a0:72:8e:4c:7d:b1:02:05:0d:9c:95:77:6a:ef:8e:68:98:8e: f0:46:41:92:73:38:bb:4c:1f:95:8c:f7:b1:61:2b:17:2b:e4: 62:4b:21:71:64:13:ca:83:8b:11:b6:4e:cd:ab:8d:03:93:4d: 24:15:a8:7a:5a:07:da:f3:c1:db:14:53:0a:18:e0:57:6f:c1: f4:00:f3:c5:97:b8:fc:4b:67:9a:55:cb:ef:d9:f0:06:4a:b8: 1f:90:b8:54:9d:40:f0:08:7f:0b:3b:08:31:33:b5:e4:53:8e: 8d:fc:2b:51:56:0c:15:dc:0e:f3:be:22:9b:d6:f3:0d:2d:50: f3:55:ab:9b:ab:68:5b:d4:54:36:72:80:a0:8e:07:ec:5b:17: ad:65:85:0c:52:98:36:c6:3e:2d:36:ad:01:bb:c4:e1:d3:87: 45:d1:e2:f9:44:a8:64:00:4c:0a:ef:08:70:f7:e3:4b:a5:d8: 02:d3:39:66:93:6e:50:47:69:1f:07:81:b1:03:b1:0d:b0:bd: da:19:9d:5e:0d:ef:51:07:3d:0f:d7:71:47:b4:3b:81:b5:34: a0:48:7f:6e:71:be:5e:18:4b:40:3f:88:ee:89:9b:86:a8:99: 1d:c4:46:64:89:9b:3b:97:97:94:38:37:02:db:47:a0:17:12: 5c:3f:f1:16 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUP4hyHmC3oEV4A5/lM6J1S+Urq7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDhaFw0yNjExMjAxNTQ5MDhaMDMxMTAvBgNV BAMTKDA2Q0NFNDZGODlDOEEyM0NDMUIzQzAyRjk3REMyQTZCQTNGQ0FGNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqZWMuM0+hoXduvUhcj60uqq1s qc0qG/JG92ACUCq5SbfrS0IqAU364LZkEPvbQ4sEPrDfZ7B05Txx1INou4+mJRKb aQNYcXsnKAvNc+xgK3TIDPJT7ZfL9DLlvTQtGMhIjhwao+bwMGthESsY41vBz583 b5eAEwDN0y7v4pYZHu6aXflLUcUy89LxOxVwUBC4PZXN7hKJMGOkUwOUjwNVs9yC nz75BNnIWrteeRsHBjlKIFUVsEZw6E9cMhAHdB/tDcrS46q+w8wR3sGvvDZV+rTv LM2ByetmuJ4stL0NNPpIqZSsb2o7UJ5hC5ezOnYRh774vE6QEnXg5dgyvBYpAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUBszkb4nIojzBs8Avl9wqa6P8r2YwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODM0MmUzMjMxMmUz MTM3MzEyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAVBWrMA0GCSqGSIb3DQEBCwUAA4IBAQCgco5MfbECBQ2clXdq745omI7wRkGS czi7TB+VjPexYSsXK+RiSyFxZBPKg4sRtk7Nq40Dk00kFah6Wgfa88HbFFMKGOBX b8H0APPFl7j8S2eaVcvv2fAGSrgfkLhUnUDwCH8LOwgxM7XkU46N/CtRVgwV3A7z viKb1vMNLVDzVaubq2hb1FQ2coCgjgfsWxetZYUMUpg2xj4tNq0Bu8Th04dF0eL5 RKhkAEwK7whw9+NLpdgC0zlmk25QR2kfB4GxA7ENsL3aGZ1eDe9RBz0P13FHtDuB tTSgSH9ucb5eGEtAP4juiZuGqJkdxEZkiZs7l5eUODcC20egFxJcP/EW -----END CERTIFICATE-----Generated at Tue Dec 16 14:05:56 2025 by rpki-client