This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230322e38322e302f32342d3332203d3e203536383736.roa File: 38352e3230322e38322e302f32342d3332203d3e203536383736.roa (raw, json) Hash identifier: zmaCT43gpjAAAfclC9znyf2Qe4XvlmNXvCDl4kECF70= Subject key identifier: FF:1F:DE:59:01:8A:B1:39:DB:8E:3B:48:59:8A:47:D0:45:0F:47:75 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0389773EEBED506483DF49DF668C4A6F86154F3C Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230322e38322e302f32342d3332203d3e203536383736.roa Signing time: Fri 28 Nov 2025 11:49:15 +0000 ROA not before: Fri 28 Nov 2025 11:44:15 +0000 ROA not after: Fri 27 Nov 2026 11:49:15 +0000 asID: 56876 IP address blocks: 85.202.82.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:89:77:3e:eb:ed:50:64:83:df:49:df:66:8c:4a:6f:86:15:4f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:15 2025 GMT Not After : Nov 27 11:49:15 2026 GMT Subject: CN=FF1FDE59018AB139DB8E3B48598A47D0450F4775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:a7:ce:2a:74:aa:0b:61:b9:3b:e4:85:06: 4f:51:82:db:ba:7e:a0:70:a8:df:d0:90:88:11:de: 1e:d9:b0:8f:90:c4:34:90:a0:27:05:55:5b:d0:01: b2:17:a4:8a:bb:bf:c3:66:e7:87:88:ba:ef:6d:46: 70:13:b3:b7:e5:6e:22:b4:3f:01:f0:2c:c4:69:bd: c6:7b:7c:5f:87:c9:71:30:27:f1:0a:2e:12:5a:32: 7e:65:2b:19:ba:52:9e:26:d4:43:23:94:d1:8c:35: 32:2e:38:ff:6e:36:1f:95:d5:c3:b0:4d:0b:a1:7f: aa:ea:03:d2:3f:23:75:04:44:db:04:23:c4:d1:43: 6a:d5:f3:4c:2d:c3:c0:df:6a:02:17:a9:ca:5a:28: 09:8d:af:70:03:b6:29:02:47:bd:3e:ab:56:89:3b: 57:89:f2:f9:3a:9a:b3:f4:de:cc:90:61:28:28:b1: f2:1f:e2:65:52:d7:2e:c1:19:9a:28:5d:c3:c0:b6: c2:78:1c:b6:4d:6f:1d:dc:78:f1:52:a0:28:42:6f: 63:21:89:d8:ca:17:35:0d:70:08:92:e8:58:01:45: 49:68:1e:a8:b2:f8:f2:c8:b4:95:30:58:8b:df:bc: 9a:f5:af:12:c7:ee:78:27:24:3f:14:bd:0b:d3:2d: 1b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1F:DE:59:01:8A:B1:39:DB:8E:3B:48:59:8A:47:D0:45:0F:47:75 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230322e38322e302f32342d3332203d3e203536383736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.202.82.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:3b:aa:4c:6c:75:30:e3:fd:4e:c7:2e:c2:33:46:75:34:d4: 90:a4:7e:f4:e2:a2:de:fe:03:9a:0a:d8:1a:b6:64:66:65:fb: 23:6d:ca:55:dc:4e:27:8d:76:b3:a6:96:75:58:15:2f:8b:fd: 7b:d6:4d:e0:59:34:1e:2b:18:31:99:ed:90:a3:b8:e5:fb:ee: 07:85:8e:c6:5c:b7:91:91:30:7e:07:ec:ed:d3:82:dc:d5:f3: c4:69:55:d3:85:5d:7a:40:15:2b:13:13:4f:48:92:1a:93:aa: 91:3d:c5:e9:da:9f:b6:e4:2c:87:06:08:31:a4:7a:e7:36:63: 2b:56:ea:0f:36:26:94:2c:82:97:a4:0e:c2:c5:4d:cf:bd:e4: 13:30:ae:b1:9a:3a:de:7d:44:00:c1:96:c8:ca:68:00:09:a2: e5:48:41:61:8d:de:64:5c:9b:7c:11:22:4a:d5:d5:a7:c0:eb: 03:04:c8:59:82:97:02:cb:7e:af:2d:15:52:d4:d4:7e:aa:40: 40:22:c2:cf:30:32:f8:94:24:dc:47:72:8b:9d:51:d7:37:99: 38:ba:8d:2b:0b:14:e4:5a:40:e5:f6:00:b6:6a:74:f4:8b:33: 54:bb:fb:78:75:18:1f:89:be:c8:55:37:b2:c1:28:ff:ac:d6: b9:44:8e:69 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUA4l3PuvtUGSD30nfZoxKb4YVTzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTVaFw0yNjExMjcxMTQ5MTVaMDMxMTAvBgNV BAMTKEZGMUZERTU5MDE4QUIxMzlEQjhFM0I0ODU5OEE0N0QwNDUwRjQ3NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34KfOKnSqC2G5O+SFBk9Rgtu6 fqBwqN/QkIgR3h7ZsI+QxDSQoCcFVVvQAbIXpIq7v8Nm54eIuu9tRnATs7flbiK0 PwHwLMRpvcZ7fF+HyXEwJ/EKLhJaMn5lKxm6Up4m1EMjlNGMNTIuOP9uNh+V1cOw TQuhf6rqA9I/I3UERNsEI8TRQ2rV80wtw8DfagIXqcpaKAmNr3ADtikCR70+q1aJ O1eJ8vk6mrP03syQYSgosfIf4mVS1y7BGZooXcPAtsJ4HLZNbx3cePFSoChCb2Mh idjKFzUNcAiS6FgBRUloHqiy+PLItJUwWIvfvJr1rxLH7ngnJD8UvQvTLRsPAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQU/x/eWQGKsTnbjjtIWYpH0EUPR3UwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODM1MmUzMjMwMzIy ZTM4MzIyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTM2MzgzNzM2LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAVcpSMA0GCSqGSIb3DQEBCwUAA4IBAQAeO6pMbHUw4/1Oxy7CM0Z1NNSQpH70 4qLe/gOaCtgatmRmZfsjbcpV3E4njXazppZ1WBUvi/171k3gWTQeKxgxme2Qo7jl ++4HhY7GXLeRkTB+B+zt04Lc1fPEaVXThV16QBUrExNPSJIak6qRPcXp2p+25CyH BggxpHrnNmMrVuoPNiaULIKXpA7CxU3PveQTMK6xmjrefUQAwZbIymgACaLlSEFh jd5kXJt8ESJK1dWnwOsDBMhZgpcCy36vLRVS1NR+qkBAIsLPMDL4lCTcR3KLnVHX N5k4uo0rCxTkWkDl9gC2anT0izNUu/t4dRgfib7IVTeywSj/rNa5RI5p -----END CERTIFICATE-----Generated at Sun Dec 7 03:20:35 2025 by rpki-client