This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33392e302f32342d3234203d3e203632323430.roa File: 38312e32322e33392e302f32342d3234203d3e203632323430.roa (raw, json) Hash identifier: /b/zwyi/UdEouq3pN3YELbw6KINOKf4QjPH4t96x3vM= Subject key identifier: 88:A0:0D:FB:EC:B3:27:3E:26:AE:24:59:01:45:16:99:8B:3E:CA:1A Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 55AE896A4537144EA8C134AD098CCDC852694036 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33392e302f32342d3234203d3e203632323430.roa Signing time: Fri 21 Nov 2025 15:49:00 +0000 ROA not before: Fri 21 Nov 2025 15:44:00 +0000 ROA not after: Fri 20 Nov 2026 15:49:00 +0000 asID: 62240 IP address blocks: 81.22.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ae:89:6a:45:37:14:4e:a8:c1:34:ad:09:8c:cd:c8:52:69:40:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:00 2025 GMT Not After : Nov 20 15:49:00 2026 GMT Subject: CN=88A00DFBECB3273E26AE2459014516998B3ECA1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e0:d6:44:36:e9:77:24:70:13:57:ce:89:3a: 72:6f:f2:a2:be:ac:e8:b6:bf:1e:b4:fd:a4:71:eb: 0a:1d:81:88:ae:66:39:5b:fd:2d:7e:71:cf:5d:56: 4d:04:f6:e2:cf:25:59:7e:22:3d:5e:c8:68:35:48: 72:90:08:f6:fc:2d:3d:ee:93:6b:d6:3f:d4:79:90: d5:52:0e:44:8d:f4:12:f0:fe:12:f9:f5:52:37:66: 69:be:98:bb:62:b6:2f:72:94:36:b7:d3:b4:ed:bf: c4:b4:52:9a:b9:e5:54:d0:d3:af:0b:71:b8:f8:8a: 4b:79:33:69:1f:c3:a1:94:98:a7:9f:10:15:d3:af: 35:fe:54:b1:88:d1:57:a5:d3:49:11:2d:18:6f:01: 7c:9c:bb:d7:a1:96:ac:15:9f:34:66:e6:19:25:7f: d0:8f:98:45:9d:02:b3:86:46:16:c3:fa:0c:32:a4: e7:a5:2a:14:af:b9:59:c9:9b:df:2b:1f:3a:0f:cf: 22:ea:31:6a:cc:d3:2a:10:dd:19:ce:92:1f:e9:06: 2c:f6:ea:ef:98:e6:bb:9f:0c:fa:07:3f:06:95:fd: af:99:27:ba:0b:5b:86:ed:b3:09:d2:88:97:46:bc: 95:2d:77:3f:ac:d0:06:50:66:3b:16:8d:ad:60:62: 02:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A0:0D:FB:EC:B3:27:3E:26:AE:24:59:01:45:16:99:8B:3E:CA:1A X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33392e302f32342d3234203d3e203632323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.39.0/24 Signature Algorithm: sha256WithRSAEncryption 33:b9:c2:d9:ea:7e:ea:be:44:56:64:8a:0d:d0:32:f2:aa:ec: 5d:95:32:2a:ef:e0:08:59:9d:2b:e2:25:c2:9e:67:a4:8c:d4: 38:e2:91:4a:af:19:bd:15:3f:47:7b:b7:42:46:09:7c:aa:06: 69:c8:57:b3:85:95:e9:c8:b1:24:06:53:19:f6:bf:08:b9:7a: 78:8e:90:1e:ff:0c:28:82:23:a2:0a:4e:b6:7b:7c:de:93:0f: d8:e9:57:67:9c:72:42:c9:53:b0:41:9f:ea:55:86:37:77:35: b8:d4:6b:a8:a9:b2:54:1e:a0:39:dd:a2:14:0e:2f:15:19:a6: ae:96:3c:27:be:90:c2:c1:a7:e1:86:22:f8:82:90:eb:bc:12: 05:d6:f2:e7:6a:81:ad:87:1b:31:7a:ab:96:75:da:03:27:3e: fd:44:d6:1c:bf:d2:b8:61:c4:9e:61:20:ee:4e:b6:f1:e2:0f: 51:c1:46:1f:cb:86:d6:76:79:a5:3d:41:d4:10:7b:94:09:d6: 25:7d:a1:a2:f0:b8:20:2c:31:03:04:77:44:dd:9b:df:58:d9: 28:dc:16:a5:e7:b4:78:b9:29:2d:10:00:85:5a:69:59:b2:26: 96:23:e8:ce:01:07:d1:eb:1f:3c:d6:0a:51:b8:dd:f6:80:1e: 2c:16:f8:86 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUVa6JakU3FE6owTStCYzNyFJpQDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDBaFw0yNjExMjAxNTQ5MDBaMDMxMTAvBgNV BAMTKDg4QTAwREZCRUNCMzI3M0UyNkFFMjQ1OTAxNDUxNjk5OEIzRUNBMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV4NZENul3JHATV86JOnJv8qK+ rOi2vx60/aRx6wodgYiuZjlb/S1+cc9dVk0E9uLPJVl+Ij1eyGg1SHKQCPb8LT3u k2vWP9R5kNVSDkSN9BLw/hL59VI3Zmm+mLtiti9ylDa307Ttv8S0Upq55VTQ068L cbj4ikt5M2kfw6GUmKefEBXTrzX+VLGI0Vel00kRLRhvAXycu9ehlqwVnzRm5hkl f9CPmEWdArOGRhbD+gwypOelKhSvuVnJm98rHzoPzyLqMWrM0yoQ3RnOkh/pBiz2 6u+Y5rufDPoHPwaV/a+ZJ7oLW4btswnSiJdGvJUtdz+s0AZQZjsWja1gYgJrAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUiKAN++yzJz4mriRZAUUWmYs+yhowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMxMmUzMjMyMmUz MzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMjMyMzQzMC5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AFEWJzANBgkqhkiG9w0BAQsFAAOCAQEAM7nC2ep+6r5EVmSKDdAy8qrsXZUyKu/g CFmdK+Ilwp5npIzUOOKRSq8ZvRU/R3u3QkYJfKoGachXs4WV6cixJAZTGfa/CLl6 eI6QHv8MKIIjogpOtnt83pMP2OlXZ5xyQslTsEGf6lWGN3c1uNRrqKmyVB6gOd2i FA4vFRmmrpY8J76QwsGn4YYi+IKQ67wSBdby52qBrYcbMXqrlnXaAyc+/UTWHL/S uGHEnmEg7k628eIPUcFGH8uG1nZ5pT1B1BB7lAnWJX2hovC4ICwxAwR3RN2b31jZ KNwWpee0eLkpLRAAhVppWbImliPozgEH0esfPNYKUbjd9oAeLBb4hg== -----END CERTIFICATE-----Generated at Fri Dec 19 22:51:23 2025 by rpki-client