This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33382e302f32342d3332203d3e203531313637.roa File: 38312e32322e33382e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: cat4KlPfshlVXrLvloP5CIKsNxz31E3fzqhsf/a4fHs= Subject key identifier: 5D:D5:9A:CF:A1:0D:A0:D4:A9:D5:45:F0:EA:92:3C:0E:13:95:1C:DB Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 01658D9520861FAAC2F53E4004686C72761A34C0 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33382e302f32342d3332203d3e203531313637.roa Signing time: Fri 21 Nov 2025 15:49:12 +0000 ROA not before: Fri 21 Nov 2025 15:44:12 +0000 ROA not after: Fri 20 Nov 2026 15:49:12 +0000 asID: 51167 IP address blocks: 81.22.38.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:65:8d:95:20:86:1f:aa:c2:f5:3e:40:04:68:6c:72:76:1a:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:12 2025 GMT Not After : Nov 20 15:49:12 2026 GMT Subject: CN=5DD59ACFA10DA0D4A9D545F0EA923C0E13951CDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6c:fc:82:d4:0b:ec:ae:31:e1:12:bf:73:93: e2:db:7c:07:07:eb:07:ae:27:4f:ea:de:c0:f6:64: b5:12:a7:a5:02:e7:48:f2:83:b6:7b:f7:52:47:70: 77:72:b4:9f:df:43:e1:5a:6c:c1:c1:76:b2:2b:72: ce:9d:24:97:10:05:8c:09:c9:5b:f5:1e:5a:c0:df: 49:26:fe:cf:d1:82:5a:24:5e:70:59:78:51:de:37: 04:b4:4e:0d:b8:bd:ae:38:dc:b5:e8:c1:f2:f0:bf: b9:30:d3:05:73:7d:41:69:71:87:ac:c2:1e:51:c2: b0:1c:c3:2c:93:73:9b:d2:79:5a:1b:31:80:f3:e3: ff:08:8c:6a:c7:2a:ed:4b:25:4a:15:65:20:99:9c: 09:fc:9b:6d:e3:ce:71:83:48:b2:89:c2:c1:f3:28: c3:f8:dd:11:3a:7e:f4:91:9c:fb:ed:74:4c:6e:51: c0:60:d1:b2:c3:38:ff:9b:5b:a2:cf:37:34:40:57: 24:8c:cc:93:0b:19:c0:e9:c0:ac:d9:3e:5e:f4:e7: dc:26:14:47:2f:3c:c9:b7:76:4b:e4:22:b0:d2:be: 7b:b9:bf:58:e8:67:64:aa:7d:ae:9e:f1:a2:7d:b5: 1b:aa:a0:c5:79:61:85:c0:dc:e3:5a:7f:c6:68:2e: 06:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D5:9A:CF:A1:0D:A0:D4:A9:D5:45:F0:EA:92:3C:0E:13:95:1C:DB X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33382e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.38.0/24 Signature Algorithm: sha256WithRSAEncryption 79:86:a0:dc:7e:6e:d5:9d:42:9c:07:47:18:ea:c6:8d:15:4e: db:bc:4f:12:b0:22:2e:69:a1:81:57:77:15:c5:9e:fa:19:b2: 3b:fa:f2:1f:9e:34:b2:fc:0b:93:7e:44:3c:b5:eb:7b:9c:c0: af:21:f6:c7:32:9b:07:a5:f2:0d:ed:10:f5:b3:0c:85:ba:e0: 79:17:95:ea:78:66:15:25:d3:3c:04:da:b5:ae:01:0a:7e:0f: 75:12:5b:98:fe:ed:7f:a0:6b:72:49:82:c6:6a:3a:86:37:4f: 89:9d:4b:a6:26:be:4f:c3:e1:61:51:7a:71:1e:24:69:f0:23: f1:c3:54:25:45:a5:35:89:ba:b7:d1:9d:89:bd:b6:9a:fa:19: 58:16:1e:cd:c7:15:06:2d:1a:fd:39:2f:aa:45:70:81:aa:cc: 0e:38:1d:95:5b:0d:f4:ba:ae:5e:df:9c:2b:f4:cf:32:64:51: e8:7b:58:72:3d:70:6b:fe:4d:fc:b5:82:15:17:a1:0f:a7:09: ee:60:01:0a:ad:5e:a8:2f:96:f4:a4:2a:0a:04:8e:e2:67:2c: 00:6a:b5:ff:7a:f5:ef:ee:e0:48:93:79:d4:a3:bc:f4:0d:db: d5:75:80:41:b1:c2:a7:b0:66:e5:98:04:e3:db:b0:f3:7c:1d: a7:19:5f:23 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUAWWNlSCGH6rC9T5ABGhscnYaNMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTJaFw0yNjExMjAxNTQ5MTJaMDMxMTAvBgNV BAMTKDVERDU5QUNGQTEwREEwRDRBOUQ1NDVGMEVBOTIzQzBFMTM5NTFDREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEbPyC1AvsrjHhEr9zk+LbfAcH 6weuJ0/q3sD2ZLUSp6UC50jyg7Z791JHcHdytJ/fQ+FabMHBdrIrcs6dJJcQBYwJ yVv1HlrA30km/s/RglokXnBZeFHeNwS0Tg24va443LXowfLwv7kw0wVzfUFpcYes wh5RwrAcwyyTc5vSeVobMYDz4/8IjGrHKu1LJUoVZSCZnAn8m23jznGDSLKJwsHz KMP43RE6fvSRnPvtdExuUcBg0bLDOP+bW6LPNzRAVySMzJMLGcDpwKzZPl7059wm FEcvPMm3dkvkIrDSvnu5v1joZ2Sqfa6e8aJ9tRuqoMV5YYXA3ONaf8ZoLgalAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUXdWaz6ENoNSp1UXw6pI8DhOVHNswHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMxMmUzMjMyMmUz MzM4MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AFEWJjANBgkqhkiG9w0BAQsFAAOCAQEAeYag3H5u1Z1CnAdHGOrGjRVO27xPErAi LmmhgVd3FcWe+hmyO/ryH540svwLk35EPLXre5zAryH2xzKbB6XyDe0Q9bMMhbrg eReV6nhmFSXTPATata4BCn4PdRJbmP7tf6BrckmCxmo6hjdPiZ1Lpia+T8PhYVF6 cR4kafAj8cNUJUWlNYm6t9Gdib22mvoZWBYezccVBi0a/TkvqkVwgarMDjgdlVsN 9LquXt+cK/TPMmRR6HtYcj1wa/5N/LWCFRehD6cJ7mABCq1eqC+W9KQqCgSO4mcs AGq1/3r17+7gSJN51KO89A3b1XWAQbHCp7Bm5ZgE49uw83wdpxlfIw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:07:52 2025 by rpki-client