This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135382e302f32342d3234203d3e20313336373837.roa File: 38352e3230382e3135382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: pBQXf6l6BDMZ4LSAstcAcOtG/X+r9a0yUEDJAZ6V9+s= Subject key identifier: C4:DB:B8:9D:64:55:E6:5C:3E:1B:09:D8:1E:85:60:09:80:B7:C6:73 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2D398D6E9D170B0F9FE3A7C7927637744F4D3581 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:02 +0000 ROA not before: Fri 21 Nov 2025 15:44:02 +0000 ROA not after: Fri 20 Nov 2026 15:49:02 +0000 asID: 136787 IP address blocks: 85.208.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:39:8d:6e:9d:17:0b:0f:9f:e3:a7:c7:92:76:37:74:4f:4d:35:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:02 2025 GMT Not After : Nov 20 15:49:02 2026 GMT Subject: CN=C4DBB89D6455E65C3E1B09D81E85600980B7C673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:eb:6b:e8:64:99:81:63:20:ec:44:02:5d:6e: 74:7e:63:0e:96:6c:e0:8f:66:aa:b6:35:93:7c:30: 3e:14:8a:b1:0b:0e:27:0e:ed:7b:11:eb:06:15:cd: 9c:55:f7:79:ee:ea:d9:d7:32:73:7c:4b:4c:5e:5d: 53:e1:ae:48:9e:23:44:64:f6:eb:59:2d:95:1e:07: 3e:f2:f0:e5:f3:79:38:88:dc:61:d7:ce:b7:d9:97: a5:d2:6c:bd:ef:74:34:19:10:3c:7c:39:6b:b0:5c: fb:e2:3d:c4:b1:6e:f6:67:90:8e:a5:05:be:14:1d: 8e:dc:86:34:62:78:c3:b9:5d:e2:ec:7e:97:63:99: c4:71:1c:e7:83:4e:84:c0:8a:44:bb:eb:d7:22:93: 09:b1:f9:65:ce:9d:74:98:f6:d1:c4:49:96:1b:61: 84:a4:de:91:d5:97:20:7b:fe:a4:8e:ac:a7:b2:cf: 9f:bc:40:b0:02:4c:8d:d2:0c:12:f9:e5:47:dc:92: aa:9e:ff:cf:5d:62:f1:1f:2a:f1:fe:5f:70:03:4d: eb:e7:63:36:ea:1a:2e:10:7f:84:9a:47:a9:c6:3d: 44:31:c2:5f:87:7c:b1:29:57:c7:bc:ac:15:77:f2: da:95:8a:55:8f:c8:00:06:8f:de:7a:0e:e8:a8:bf: e3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DB:B8:9D:64:55:E6:5C:3E:1B:09:D8:1E:85:60:09:80:B7:C6:73 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.158.0/24 Signature Algorithm: sha256WithRSAEncryption 59:b6:ea:46:6e:17:71:a2:32:76:ad:3a:d6:a4:65:6f:94:27: 74:80:3a:c2:6d:5e:74:f0:c6:92:b7:8d:28:b7:f2:82:90:6b: 6a:f2:d5:cd:f1:1c:46:c5:8c:01:80:31:fe:0a:31:a4:3b:0a: e3:7d:02:19:f4:6e:b4:65:59:6d:d6:4b:a6:fd:66:d9:e5:e3: bd:10:a4:ed:10:40:d9:87:f6:86:ae:55:50:b6:79:b5:4d:82: 8f:77:5c:31:d9:45:5c:06:a6:fb:27:79:9f:6b:2a:66:ae:52: ea:82:b7:5c:71:08:30:ee:a7:fc:26:69:0d:6a:95:58:7b:62: 74:8e:4c:3a:97:0d:e5:89:9c:39:d3:a1:80:b8:da:fe:e1:a6: ff:eb:2b:aa:11:93:87:69:c5:94:e4:62:ec:6e:5e:41:6b:ce: 2c:61:77:00:e3:15:b7:54:c4:12:ed:b2:02:62:ad:61:78:1c: 77:c1:95:75:29:2f:46:cd:f2:f6:5c:22:bb:4c:63:7f:33:1a: ee:56:e6:62:b7:18:11:36:ff:cb:6e:65:67:3e:52:22:7c:2f: 56:92:c5:2f:d5:c8:02:24:3c:c0:63:23:65:58:02:1f:0f:a5: 2e:bd:bc:bd:cb:d2:c3:b1:85:55:05:8c:54:7a:36:bd:c0:de: 5b:28:64:aa -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIULTmNbp0XCw+f46fHknY3dE9NNYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDJaFw0yNjExMjAxNTQ5MDJaMDMxMTAvBgNV BAMTKEM0REJCODlENjQ1NUU2NUMzRTFCMDlEODFFODU2MDA5ODBCN0M2NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE62voZJmBYyDsRAJdbnR+Yw6W bOCPZqq2NZN8MD4UirELDicO7XsR6wYVzZxV93nu6tnXMnN8S0xeXVPhrkieI0Rk 9utZLZUeBz7y8OXzeTiI3GHXzrfZl6XSbL3vdDQZEDx8OWuwXPviPcSxbvZnkI6l Bb4UHY7chjRieMO5XeLsfpdjmcRxHOeDToTAikS769cikwmx+WXOnXSY9tHESZYb YYSk3pHVlyB7/qSOrKeyz5+8QLACTI3SDBL55Ufckqqe/89dYvEfKvH+X3ADTevn YzbqGi4Qf4SaR6nGPUQxwl+HfLEpV8e8rBV38tqVilWPyAAGj956Duiov+MDAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUxNu4nWRV5lw+GwnYHoVgCYC3xnMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODM1MmUzMjMwMzgy ZTMxMzUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAFXQnjANBgkqhkiG9w0BAQsFAAOCAQEAWbbqRm4XcaIydq061qRlb5Qn dIA6wm1edPDGkreNKLfygpBravLVzfEcRsWMAYAx/goxpDsK430CGfRutGVZbdZL pv1m2eXjvRCk7RBA2Yf2hq5VULZ5tU2Cj3dcMdlFXAam+yd5n2sqZq5S6oK3XHEI MO6n/CZpDWqVWHtidI5MOpcN5YmcOdOhgLja/uGm/+srqhGTh2nFlORi7G5eQWvO LGF3AOMVt1TEEu2yAmKtYXgcd8GVdSkvRs3y9lwiu0xjfzMa7lbmYrcYETb/y25l Zz5SInwvVpLFL9XIAiQ8wGMjZVgCHw+lLr28vcvSw7GFVQWMVHo2vcDeWyhkqg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:42:52 2025 by rpki-client