This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e38342e302f32342d3234203d3e20323034313730.roa
File: 3139342e3131302e38342e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: JRQj1ZuJVtUaogp+4+xZVW2g52OSpcIhYo7RAWmletU=
Subject key identifier: AB:6F:6B:79:60:E6:CE:AF:1A:36:9D:66:D4:23:C8:A8:3E:17:22:42
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0DB1255F2447DBDC0A1FF289305502DD3132FE7B
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e38342e302f32342d3234203d3e20323034313730.roa
Signing time: Fri 28 Nov 2025 11:49:22 +0000
ROA not before: Fri 28 Nov 2025 11:44:22 +0000
ROA not after: Fri 27 Nov 2026 11:49:22 +0000
asID: 204170
IP address blocks: 194.110.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 08:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:b1:25:5f:24:47:db:dc:0a:1f:f2:89:30:55:02:dd:31:32:fe:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 28 11:44:22 2025 GMT
Not After : Nov 27 11:49:22 2026 GMT
Subject: CN=AB6F6B7960E6CEAF1A369D66D423C8A83E172242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:4e:9a:03:ca:03:b5:dc:5f:54:db:ef:33:
8d:43:04:95:9c:b6:a9:f7:d7:9b:7d:b8:70:ce:76:
57:73:41:5e:6c:62:30:03:2b:b8:26:d5:e5:2a:67:
57:be:21:8c:8f:8a:d0:74:ab:2b:f9:34:14:db:32:
36:55:c8:6f:54:be:32:76:ce:d5:42:b7:35:05:76:
30:9d:5e:d9:9a:ef:c2:95:c2:c2:b1:a4:bf:00:0d:
93:65:49:44:d3:b0:04:a4:3d:da:fe:d0:bb:44:a8:
71:c3:f6:35:65:fb:2c:a8:c5:0e:2c:ac:5f:a7:8d:
cb:90:5b:87:32:17:65:c2:d1:42:9f:bf:be:af:d5:
9c:59:15:f7:eb:0f:30:18:e6:ef:86:c8:09:55:a3:
d7:b5:56:cf:c6:56:34:dd:48:72:24:95:4f:e9:1b:
b0:46:53:79:57:53:48:01:4d:14:0c:27:95:fa:e2:
58:22:7a:dd:7d:0f:fd:e9:bf:d2:70:5f:81:60:16:
ef:3b:5a:78:b5:11:07:44:e4:2f:b3:4a:a2:c1:04:
06:62:98:fb:5a:b0:a0:fb:6f:dc:57:c6:6f:fd:1b:
7e:66:9a:00:f7:f6:b6:93:e3:93:a8:27:ac:f6:34:
58:58:f0:43:1c:70:41:c8:8c:91:c8:f3:c6:40:30:
b8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6F:6B:79:60:E6:CE:AF:1A:36:9D:66:D4:23:C8:A8:3E:17:22:42
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e38342e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.84.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e6:fb:f7:2f:67:00:5f:2b:a7:ed:77:7e:18:87:9e:cc:e7:
ea:56:15:6b:fd:7d:41:3b:70:d6:8d:65:1f:e6:70:01:84:03:
44:3d:f5:8e:b7:8a:a8:f7:64:88:44:be:29:87:42:d5:b5:96:
59:84:f6:f3:6f:5b:0b:ee:d2:3d:87:bc:9e:13:37:da:17:35:
04:7f:23:fd:bf:c3:16:06:f7:7a:ae:af:5b:dc:87:c8:e1:62:
79:fe:d7:5a:7f:5b:48:2f:a0:5e:89:39:27:6a:78:26:91:b9:
f4:48:c6:74:19:5c:9e:39:b0:70:00:06:c6:62:d7:d3:bf:ab:
8e:76:81:fe:57:95:b7:cc:4a:73:63:14:eb:91:61:6c:26:86:
48:6b:ff:01:72:fa:4a:f2:bc:6c:47:18:e9:5b:51:59:18:42:
b4:7f:47:cb:45:24:e8:22:47:5f:e1:89:ff:4e:65:63:59:51:
de:26:27:35:0a:3e:cd:d8:62:12:ce:33:71:4e:45:05:18:86:
a2:f7:91:bf:73:e5:0a:96:e4:03:00:90:2c:46:41:ae:24:57:
34:3d:8f:8d:9b:9d:8b:13:4b:e8:30:fc:d8:bc:c4:bc:37:ed:
45:66:20:c7:0e:dd:ae:bf:ba:7a:7a:66:44:fe:a1:a9:d6:19:
e7:23:19:2b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:56:11 2025 by rpki-client