This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135392e302f32342d3234203d3e20313336373837.roa File: 38352e3230382e3135392e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: gDMh4VBROdH773ojYLB+8aMmTM4pVMXp2w4KjL5Et/w= Subject key identifier: 7A:93:96:CF:88:15:CB:D0:9F:4F:2C:F5:DC:5C:FA:4B:B7:91:0D:AE Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 53E880A8CBBCA509908A5BC655A3D4BED533BF83 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135392e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:00 +0000 ROA not before: Fri 21 Nov 2025 15:44:00 +0000 ROA not after: Fri 20 Nov 2026 15:49:00 +0000 asID: 136787 IP address blocks: 85.208.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e8:80:a8:cb:bc:a5:09:90:8a:5b:c6:55:a3:d4:be:d5:33:bf:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:00 2025 GMT Not After : Nov 20 15:49:00 2026 GMT Subject: CN=7A9396CF8815CBD09F4F2CF5DC5CFA4BB7910DAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3c:91:d0:19:e7:cb:a1:3e:1a:09:31:e0:46: d6:71:54:10:ae:1a:20:af:ac:6d:e2:a5:be:f6:a0: 8d:bb:20:8b:20:fe:19:ca:a1:25:84:e5:de:ac:87: 2f:36:e5:37:b1:68:22:22:b3:45:d9:2e:43:c3:7e: e3:73:74:1c:a0:85:30:ba:01:df:79:36:7e:b3:bc: c6:cc:ce:e0:2b:b5:04:7c:d6:3e:fe:5c:6f:e6:9f: 00:70:b6:d0:d1:af:b7:ba:3e:7d:4a:52:20:f6:1e: c0:c9:15:32:e8:dd:71:54:1f:d9:c8:fd:27:ec:d7: c5:07:34:46:99:4c:d0:a8:55:78:da:77:78:2b:68: f3:c1:7f:83:5c:9f:4e:7c:8a:9c:de:ce:47:cd:96: ca:a1:2c:ab:02:76:31:4a:81:62:9b:4a:ad:a6:80: 88:a1:b0:bc:5a:bb:5a:30:70:74:91:ae:fc:4a:a7: 5d:d4:21:75:20:03:82:aa:53:c9:6b:0c:44:6b:62: 1f:57:6b:d7:07:39:c9:16:01:67:96:56:65:79:e6: a2:67:f5:51:5a:82:e5:1b:36:10:83:87:be:68:4c: 85:b4:86:66:1d:d1:50:54:c6:d0:1d:a7:ad:26:ce: 8b:51:a3:f2:e0:02:55:3e:0d:03:35:37:b9:e0:81: 59:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:93:96:CF:88:15:CB:D0:9F:4F:2C:F5:DC:5C:FA:4B:B7:91:0D:AE X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135392e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.159.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:5d:a3:ce:83:f6:5d:df:69:d4:c6:61:c8:42:e3:14:27:5d: 76:6e:1f:08:45:16:8a:8d:b2:ed:3b:e4:7a:dd:02:f7:20:50: ba:5f:e7:11:24:b7:8d:37:e9:cc:86:7b:df:cf:31:14:e2:45: 93:92:a2:74:72:19:6d:02:05:93:9b:ba:62:63:0f:d4:05:5f: f0:29:44:d6:d5:8e:d8:26:27:35:73:c5:e3:a2:99:5e:17:8b: 3c:b5:da:e8:b0:34:d9:af:6f:a1:57:da:bb:51:e5:36:c0:09: fc:f8:ab:21:11:1e:f2:e1:ee:50:08:7d:42:e5:cb:24:1d:64: 32:99:f2:14:21:02:1f:79:ba:a7:f0:7b:7d:9f:0f:c0:e1:a0: a2:86:ec:bc:9a:72:0f:7d:54:7d:62:ca:98:23:2f:ef:f9:06: e7:b7:b7:11:6f:91:e3:22:64:ca:78:4d:8d:19:59:f3:c8:15: cf:8c:87:04:64:89:cb:f4:67:25:4e:13:3f:87:18:7d:ac:f5: cd:d7:b9:1b:ce:a5:b7:eb:0f:47:d5:e8:c3:f4:b8:99:06:e3: d7:f9:71:8e:d8:a7:d7:04:92:a8:81:42:f7:8c:ab:2e:1b:11: a4:28:9a:1e:93:57:1d:a6:50:34:92:5f:f9:5d:ab:e3:1b:c4: 89:31:36:ba -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUU+iAqMu8pQmQilvGVaPUvtUzv4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDBaFw0yNjExMjAxNTQ5MDBaMDMxMTAvBgNV BAMTKDdBOTM5NkNGODgxNUNCRDA5RjRGMkNGNURDNUNGQTRCQjc5MTBEQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3PJHQGefLoT4aCTHgRtZxVBCu GiCvrG3ipb72oI27IIsg/hnKoSWE5d6shy825TexaCIis0XZLkPDfuNzdByghTC6 Ad95Nn6zvMbMzuArtQR81j7+XG/mnwBwttDRr7e6Pn1KUiD2HsDJFTLo3XFUH9nI /Sfs18UHNEaZTNCoVXjad3graPPBf4Ncn058ipzezkfNlsqhLKsCdjFKgWKbSq2m gIihsLxau1owcHSRrvxKp13UIXUgA4KqU8lrDERrYh9Xa9cHOckWAWeWVmV55qJn 9VFaguUbNhCDh75oTIW0hmYd0VBUxtAdp60mzotRo/LgAlU+DQM1N7nggVkXAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUepOWz4gVy9CfTyz13Fz6S7eRDa4wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODM1MmUzMjMwMzgy ZTMxMzUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAFXQnzANBgkqhkiG9w0BAQsFAAOCAQEAH12jzoP2Xd9p1MZhyELjFCdd dm4fCEUWio2y7Tvket0C9yBQul/nESS3jTfpzIZ7388xFOJFk5KidHIZbQIFk5u6 YmMP1AVf8ClE1tWO2CYnNXPF46KZXheLPLXa6LA02a9voVfau1HlNsAJ/PirIREe 8uHuUAh9QuXLJB1kMpnyFCECH3m6p/B7fZ8PwOGgoobsvJpyD31UfWLKmCMv7/kG 57e3EW+R4yJkynhNjRlZ88gVz4yHBGSJy/RnJU4TP4cYfaz1zde5G86lt+sPR9Xo w/S4mQbj1/lxjtin1wSSqIFC94yrLhsRpCiaHpNXHaZQNJJf+V2r4xvEiTE2ug== -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:33 2025 by rpki-client