This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3139332e302f32342d3234203d3e20323034313730.roa File: 3139342e3131302e3139332e302f32342d3234203d3e20323034313730.roa (raw, json) Hash identifier: mQr4t78AY/PAayhU663lR8pcGmFcTFE9VzK66paA2cM= Subject key identifier: A6:51:71:59:83:B8:9B:CD:3B:C1:51:A5:D3:47:E1:BF:3D:16:37:CF Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2F4EB162989B3450D1008E1D9701832C9FD2AF57 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3139332e302f32342d3234203d3e20323034313730.roa Signing time: Fri 21 Nov 2025 15:49:02 +0000 ROA not before: Fri 21 Nov 2025 15:44:02 +0000 ROA not after: Fri 20 Nov 2026 15:49:02 +0000 asID: 204170 IP address blocks: 194.110.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:4e:b1:62:98:9b:34:50:d1:00:8e:1d:97:01:83:2c:9f:d2:af:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:02 2025 GMT Not After : Nov 20 15:49:02 2026 GMT Subject: CN=A651715983B89BCD3BC151A5D347E1BF3D1637CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:44:34:4a:38:e3:ef:b4:a7:a7:ff:72:f2: 8f:dd:f7:66:e7:e5:ab:d1:d0:b1:34:f1:4e:77:b5: 18:52:64:01:df:60:05:0a:d9:df:33:31:0f:cc:ef: fb:9d:06:38:09:bf:fa:76:d1:6e:76:d4:b9:68:b0: 81:31:93:43:39:d4:42:96:70:a8:50:b4:c9:b1:a4: 06:30:1d:89:96:e2:c7:ac:8b:3f:f1:c4:bc:38:69: b1:5d:08:00:f8:41:55:e0:d8:da:c3:56:c5:59:47: 5b:f2:b7:a1:54:34:91:67:54:1b:a8:47:0a:81:63: de:98:d9:11:81:76:11:fc:a6:5a:9f:ce:65:de:89: 2e:75:2b:84:50:a8:af:a5:bb:d2:4f:01:77:d5:e9: 53:80:8a:dd:12:fe:a7:f8:27:48:5b:79:c1:38:0f: 22:16:26:3a:99:e4:14:62:ec:51:92:3b:3e:b0:80: b6:8e:4a:a5:d4:92:8b:5b:ff:df:3a:99:d5:74:ad: 21:61:78:88:60:09:4f:a1:d2:8d:06:40:cd:9e:d3: 40:55:be:bb:6a:d0:f7:f1:e5:5e:77:52:92:4e:31: fc:72:7c:55:ec:b2:c1:ed:db:aa:07:d1:4a:81:c4: 71:05:44:42:0d:b9:93:5c:87:cc:02:5c:45:d0:7c: 64:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:51:71:59:83:B8:9B:CD:3B:C1:51:A5:D3:47:E1:BF:3D:16:37:CF X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3139332e302f32342d3234203d3e20323034313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.193.0/24 Signature Algorithm: sha256WithRSAEncryption 00:de:96:e8:4d:9d:42:be:f5:b5:d6:fc:d6:5f:bf:80:77:2e: 15:73:ae:d1:21:47:15:4c:2c:01:c7:eb:e4:35:fb:6f:f3:ec: 80:85:62:a0:1e:74:ba:74:0a:27:ba:3c:1f:55:53:24:fe:26: f4:55:b8:ee:82:d0:48:be:06:22:ef:8b:c5:b4:06:97:a5:08: b5:70:f8:e1:7f:0a:bc:e4:5b:f1:29:e9:e2:41:c2:89:a7:e9: 14:48:cd:f4:6f:32:5f:b1:af:02:fa:76:d5:2c:d0:1e:67:7e: 37:f1:b5:98:90:95:c8:9a:09:e2:39:b1:44:b5:90:06:0b:9d: 32:3e:7b:f0:a6:0f:a1:a7:ee:e2:38:c0:24:e3:00:9e:96:c9: c0:4f:af:e1:d6:74:c4:56:2f:80:0f:d5:29:ca:b2:9c:f4:e3: 0b:0c:98:76:2a:4e:f2:b6:05:c4:5c:75:6d:1f:29:d7:1a:41: 2a:c1:91:a7:c4:5d:f6:25:62:fe:8d:12:9e:c5:a8:2a:6b:06: 10:ae:64:15:4b:85:de:b9:1c:49:bb:50:5c:33:f5:35:a2:25: 0b:19:ef:0f:b5:18:4e:ca:8e:a9:35:dc:3b:f9:8f:b0:02:44: 1b:a6:e6:14:bc:c8:17:52:e5:42:24:8f:c7:a7:8b:52:b5:7f: 4c:9a:8f:cb -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUL06xYpibNFDRAI4dlwGDLJ/Sr1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDJaFw0yNjExMjAxNTQ5MDJaMDMxMTAvBgNV BAMTKEE2NTE3MTU5ODNCODlCQ0QzQkMxNTFBNUQzNDdFMUJGM0QxNjM3Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7lkQ0Sjjj77Snp/9y8o/d92bn 5avR0LE08U53tRhSZAHfYAUK2d8zMQ/M7/udBjgJv/p20W521LlosIExk0M51EKW cKhQtMmxpAYwHYmW4sesiz/xxLw4abFdCAD4QVXg2NrDVsVZR1vyt6FUNJFnVBuo RwqBY96Y2RGBdhH8plqfzmXeiS51K4RQqK+lu9JPAXfV6VOAit0S/qf4J0hbecE4 DyIWJjqZ5BRi7FGSOz6wgLaOSqXUkotb/986mdV0rSFheIhgCU+h0o0GQM2e00BV vrtq0Pfx5V53UpJOMfxyfFXsssHt26oH0UqBxHEFREINuZNch8wCXEXQfGTrAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUplFxWYO4m807wVGl00fhvz0WN88wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzEz MDJlMzEzOTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM0MzEzNzMwLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwm7BMA0GCSqGSIb3DQEBCwUAA4IBAQAA3pboTZ1CvvW11vzWX7+A dy4Vc67RIUcVTCwBx+vkNftv8+yAhWKgHnS6dAonujwfVVMk/ib0VbjugtBIvgYi 74vFtAaXpQi1cPjhfwq85FvxKeniQcKJp+kUSM30bzJfsa8C+nbVLNAeZ3438bWY kJXImgniObFEtZAGC50yPnvwpg+hp+7iOMAk4wCelsnAT6/h1nTEVi+AD9UpyrKc 9OMLDJh2Kk7ytgXEXHVtHynXGkEqwZGnxF32JWL+jRKexagqawYQrmQVS4XeuRxJ u1BcM/U1oiULGe8PtRhOyo6pNdw7+Y+wAkQbpuYUvMgXUuVCJI/Hp4tStX9Mmo/L -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:35 2025 by rpki-client