This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135372e302f32342d3234203d3e20313336373837.roa File: 38352e3230382e3135372e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: iCmGSwRfMUeULdlMFQdDXwHU+qVuv7QP7+JJRCYnc08= Subject key identifier: A4:21:5F:EC:95:78:E5:5D:32:77:FA:50:76:B9:1A:6B:C0:87:96:C2 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 31D1A2A85DEBA4D71633B95B044728F129DB5CBE Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135372e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:06 +0000 ROA not before: Fri 21 Nov 2025 15:44:06 +0000 ROA not after: Fri 20 Nov 2026 15:49:06 +0000 asID: 136787 IP address blocks: 85.208.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d1:a2:a8:5d:eb:a4:d7:16:33:b9:5b:04:47:28:f1:29:db:5c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:06 2025 GMT Not After : Nov 20 15:49:06 2026 GMT Subject: CN=A4215FEC9578E55D3277FA5076B91A6BC08796C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:17:ca:2d:a1:69:0a:81:3c:40:df:92:03:c0: c4:47:60:01:77:07:de:0a:31:f6:5e:38:18:d2:66: 98:fb:26:a0:06:d4:ad:d2:a3:69:60:2d:60:4b:0e: e6:da:23:f7:0e:a1:5f:30:d0:af:ab:f4:86:89:80: 34:59:5d:75:8f:6e:f0:56:2c:a4:ab:4d:1e:fa:44: 40:4d:c1:c7:7d:7e:6d:ee:19:f7:2d:d8:2d:fc:ab: 7f:8e:67:76:b9:70:cf:3a:e3:31:7b:e3:e9:fb:47: 9a:23:1f:b8:f1:9e:d0:a7:85:ff:8d:0e:d7:8c:12: e3:c9:ac:52:9d:b6:ee:c5:45:82:19:f1:3b:7e:19: ba:3e:25:41:4b:91:35:cc:79:be:c9:45:7e:47:53: d4:93:ea:e6:08:04:86:fc:a2:87:a2:71:0b:c0:c6: 16:42:7f:20:e3:f6:0b:9d:0e:c2:7a:fd:c3:0d:13: 0b:65:3f:7d:96:05:67:e8:07:7f:f2:e9:d7:2c:b5: e6:a3:ed:2a:26:a7:0d:56:8b:b2:04:38:cb:58:07: 50:b8:82:2c:b9:31:9d:af:49:1d:84:74:3e:e4:84: c7:37:df:97:55:ca:4a:d6:07:5a:b4:e6:54:9f:e5: 55:c4:c1:79:7d:8b:59:15:0b:59:2f:27:48:21:2a: 07:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:21:5F:EC:95:78:E5:5D:32:77:FA:50:76:B9:1A:6B:C0:87:96:C2 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135372e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.157.0/24 Signature Algorithm: sha256WithRSAEncryption a2:b7:c2:5c:9b:e9:b8:15:30:88:2d:7f:12:b4:92:20:e8:8b: e4:3c:af:f0:ea:eb:aa:b5:44:01:9d:46:94:37:6d:aa:93:9f: 34:6f:d8:dc:91:68:17:e3:10:68:0a:b2:bc:0b:49:ce:98:30: 7e:0e:a7:88:99:db:66:c8:6d:a2:d4:97:d6:2b:ce:9e:e8:27: 7b:51:52:36:75:4e:00:5d:5b:c7:10:79:e8:af:10:3d:44:ce: 32:eb:a0:d5:0f:0e:c6:65:c5:a5:7a:03:cd:de:50:93:de:91: 20:50:1f:35:63:d6:7e:a3:7c:ab:fd:59:f3:7c:76:71:0a:da: 73:01:d8:17:41:33:49:db:b1:cb:55:1f:76:bb:b6:eb:30:de: 3c:64:c4:8e:c6:92:2e:70:92:cd:68:e8:6e:6c:e8:3a:8f:b2: 7c:b0:7d:d6:29:f2:00:f2:36:ca:39:18:f0:0a:fb:69:b1:af: b9:4e:79:19:d7:77:b8:e2:be:2a:47:05:c5:5e:a9:69:19:b1: b9:3b:bd:c8:86:49:73:fd:af:9c:f1:e3:45:d9:18:fe:ba:7f: dc:9d:31:67:15:93:52:2e:51:4a:3a:4a:1e:46:5f:27:5b:b5: f3:02:8d:fc:70:cc:05:6b:86:5b:c6:9a:7f:f1:11:8f:44:af: 79:b1:ca:0f -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUMdGiqF3rpNcWM7lbBEco8SnbXL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDZaFw0yNjExMjAxNTQ5MDZaMDMxMTAvBgNV BAMTKEE0MjE1RkVDOTU3OEU1NUQzMjc3RkE1MDc2QjkxQTZCQzA4Nzk2QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1F8otoWkKgTxA35IDwMRHYAF3 B94KMfZeOBjSZpj7JqAG1K3So2lgLWBLDubaI/cOoV8w0K+r9IaJgDRZXXWPbvBW LKSrTR76REBNwcd9fm3uGfct2C38q3+OZ3a5cM864zF74+n7R5ojH7jxntCnhf+N DteMEuPJrFKdtu7FRYIZ8Tt+Gbo+JUFLkTXMeb7JRX5HU9ST6uYIBIb8ooeicQvA xhZCfyDj9gudDsJ6/cMNEwtlP32WBWfoB3/y6dcsteaj7Sompw1Wi7IEOMtYB1C4 giy5MZ2vSR2EdD7khMc335dVykrWB1q05lSf5VXEwXl9i1kVC1kvJ0ghKgdNAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUpCFf7JV45V0yd/pQdrkaa8CHlsIwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODM1MmUzMjMwMzgy ZTMxMzUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAFXQnTANBgkqhkiG9w0BAQsFAAOCAQEAorfCXJvpuBUwiC1/ErSSIOiL 5Dyv8OrrqrVEAZ1GlDdtqpOfNG/Y3JFoF+MQaAqyvAtJzpgwfg6niJnbZshtotSX 1ivOnugne1FSNnVOAF1bxxB56K8QPUTOMuug1Q8OxmXFpXoDzd5Qk96RIFAfNWPW fqN8q/1Z83x2cQracwHYF0EzSduxy1Ufdru26zDePGTEjsaSLnCSzWjobmzoOo+y fLB91inyAPI2yjkY8Ar7abGvuU55Gdd3uOK+KkcFxV6paRmxuTu9yIZJc/2vnPHj RdkY/rp/3J0xZxWTUi5RSjpKHkZfJ1u18wKN/HDMBWuGW8aaf/ERj0SvebHKDw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:28 2025 by rpki-client