This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230322e38312e302f32342d3234203d3e20323037313337.roa File: 38352e3230322e38312e302f32342d3234203d3e20323037313337.roa (raw, json) Hash identifier: dRUVzds2M3XPOi9s1tsqAxticRNBqHa/8wa8RZqu3ik= Subject key identifier: B4:7B:19:42:BD:82:82:E2:22:E9:92:B4:CD:85:CA:9C:85:6B:D7:D5 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 200FF76434D994792873D3A0DCB749BD29C5C2FD Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230322e38312e302f32342d3234203d3e20323037313337.roa Signing time: Fri 28 Nov 2025 11:49:47 +0000 ROA not before: Fri 28 Nov 2025 11:44:47 +0000 ROA not after: Fri 27 Nov 2026 11:49:47 +0000 asID: 207137 IP address blocks: 85.202.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:0f:f7:64:34:d9:94:79:28:73:d3:a0:dc:b7:49:bd:29:c5:c2:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:47 2025 GMT Not After : Nov 27 11:49:47 2026 GMT Subject: CN=B47B1942BD8282E222E992B4CD85CA9C856BD7D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b8:8f:7b:5d:6b:3f:4f:59:d5:dd:88:2f:39: 83:46:54:dd:57:7d:83:19:09:66:a1:7a:a0:96:65: 86:34:da:3d:ed:85:8d:54:fb:94:37:6a:ec:91:c7: 77:0b:09:cf:d2:3d:85:fa:4d:38:90:12:8f:67:f6: bc:f0:cc:4b:00:21:5d:eb:9d:bb:b8:74:a7:d3:d3: 8d:77:c9:6c:bb:17:42:40:90:92:ad:1d:76:ae:32: ea:cd:fa:04:0d:d8:e1:d9:12:05:bd:dc:ff:bf:10: bb:a1:bf:27:7b:32:5a:7e:18:4f:54:63:9e:7a:62: 6c:05:30:7e:bb:7a:58:ce:89:8b:b6:24:ed:cf:bb: bf:91:2a:01:c1:e4:8d:c3:c8:79:71:71:09:fa:bd: 09:62:ae:88:25:6f:33:2d:e1:56:53:26:31:ab:18: 21:a2:37:e2:82:77:ce:2a:db:07:84:90:ab:d7:c6: 79:be:25:a5:83:c9:39:6b:49:d8:dd:87:cf:44:d7: cc:53:88:30:9f:66:51:4b:d8:91:ae:e8:6a:af:db: 6b:ca:52:01:d5:c8:34:1b:ea:bf:bb:25:a5:5e:70: 45:0b:99:08:cf:4f:25:b4:f7:fc:56:b9:33:cf:06: ce:00:2e:06:95:2d:98:7e:63:9a:2f:93:20:3e:d1: e4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7B:19:42:BD:82:82:E2:22:E9:92:B4:CD:85:CA:9C:85:6B:D7:D5 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230322e38312e302f32342d3234203d3e20323037313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.202.81.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:25:42:2d:87:54:28:e2:b5:3e:07:6c:f0:8d:e5:dd:41:19: 8b:dd:df:f6:5c:32:57:03:60:de:30:b9:e8:8c:7a:c4:55:d1: 2b:56:a8:45:42:5b:a4:90:89:1a:3a:4b:e9:05:81:53:16:7f: 8f:fe:eb:55:b7:84:63:5a:5e:a2:6e:4d:a0:17:83:91:0b:31: 83:57:ba:4d:8b:c5:20:46:c7:6c:14:f9:3a:46:0d:8b:67:e5: cb:bd:f4:66:60:09:99:a6:8e:02:84:07:19:f5:96:74:c7:c0: 34:e6:f5:79:63:ad:73:75:fe:cd:71:f3:59:29:c0:32:72:3f: 54:c5:2d:4d:72:93:ec:64:35:7d:7b:28:8d:53:1e:15:85:19: 13:ff:b3:40:4b:5c:61:3f:a4:6f:54:a1:30:e3:2c:11:fc:67: 25:39:bb:cc:dd:bc:3d:29:bb:f3:ff:76:02:35:76:54:9c:62: 8b:09:37:16:6b:5b:14:53:85:73:82:d9:11:b3:27:b7:52:23: 3e:53:15:90:50:1b:a6:9b:e9:63:d1:fa:3b:6b:ad:28:73:b1: 58:90:34:d6:35:02:a6:89:d2:f9:58:58:84:80:a1:ba:60:56: 6a:9a:17:f2:c0:1c:e7:64:40:44:00:38:2a:5b:14:0f:0d:8b: ca:13:37:d8 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUIA/3ZDTZlHkoc9Og3LdJvSnFwv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDdaFw0yNjExMjcxMTQ5NDdaMDMxMTAvBgNV BAMTKEI0N0IxOTQyQkQ4MjgyRTIyMkU5OTJCNENEODVDQTlDODU2QkQ3RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkuI97XWs/T1nV3YgvOYNGVN1X fYMZCWaheqCWZYY02j3thY1U+5Q3auyRx3cLCc/SPYX6TTiQEo9n9rzwzEsAIV3r nbu4dKfT0413yWy7F0JAkJKtHXauMurN+gQN2OHZEgW93P+/ELuhvyd7Mlp+GE9U Y556YmwFMH67eljOiYu2JO3Pu7+RKgHB5I3DyHlxcQn6vQliroglbzMt4VZTJjGr GCGiN+KCd84q2weEkKvXxnm+JaWDyTlrSdjdh89E18xTiDCfZlFL2JGu6Gqv22vK UgHVyDQb6r+7JaVecEULmQjPTyW09/xWuTPPBs4ALgaVLZh+Y5ovkyA+0eQjAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUtHsZQr2CguIi6ZK0zYXKnIVr19UwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODM1MmUzMjMwMzIy ZTM4MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzczMTMzMzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABVylEwDQYJKoZIhvcNAQELBQADggEBAF4lQi2HVCjitT4HbPCN5d1BGYvd 3/ZcMlcDYN4wueiMesRV0StWqEVCW6SQiRo6S+kFgVMWf4/+61W3hGNaXqJuTaAX g5ELMYNXuk2LxSBGx2wU+TpGDYtn5cu99GZgCZmmjgKEBxn1lnTHwDTm9XljrXN1 /s1x81kpwDJyP1TFLU1yk+xkNX17KI1THhWFGRP/s0BLXGE/pG9UoTDjLBH8ZyU5 u8zdvD0pu/P/dgI1dlScYosJNxZrWxRThXOC2RGzJ7dSIz5TFZBQG6ab6WPR+jtr rShzsViQNNY1AqaJ0vlYWISAobpgVmqaF/LAHOdkQEQAOCpbFA8Ni8oTN9g= -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:19 2025 by rpki-client