This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e38352e302f32342d3234203d3e20313336373837.roa
File: 3139342e3131302e38352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 61e76JCa+d2jBNJpRJmcCzcdybuOnFbzbfTvVpYmGt8=
Subject key identifier: 55:B2:95:B2:F8:CF:02:07:39:3F:EA:ED:E5:D2:3D:2F:7F:D4:A5:9E
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1228C973598B49FE669744112A991ACF262F78C3
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e38352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 28 Nov 2025 11:49:52 +0000
ROA not before: Fri 28 Nov 2025 11:44:52 +0000
ROA not after: Fri 27 Nov 2026 11:49:52 +0000
asID: 136787
IP address blocks: 194.110.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 08:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:28:c9:73:59:8b:49:fe:66:97:44:11:2a:99:1a:cf:26:2f:78:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 28 11:44:52 2025 GMT
Not After : Nov 27 11:49:52 2026 GMT
Subject: CN=55B295B2F8CF0207393FEAEDE5D23D2F7FD4A59E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:db:d1:4a:a4:3a:a7:9d:ad:63:14:1b:0c:
ac:8b:2e:95:54:16:2e:18:a8:af:21:90:a9:bc:49:
bc:54:05:18:a0:5a:b1:92:82:18:bb:be:9d:44:3e:
f3:5b:1d:b0:83:0d:66:87:6f:f9:d4:b1:6c:88:fb:
36:30:63:22:66:9e:c1:b6:34:f4:b6:21:fa:31:be:
e2:2e:7a:3e:e0:9a:f7:4b:29:5a:0a:f9:3c:76:8f:
91:96:de:d2:3f:4d:81:c8:b5:13:ff:2f:f3:3d:27:
02:8c:c2:a7:9b:49:d2:e4:48:fb:70:7f:fd:94:f1:
8e:55:81:65:e4:f7:94:ca:2f:69:da:f8:71:de:c1:
98:67:53:50:66:2c:7a:0c:54:24:74:35:7d:4e:93:
8f:c6:0e:38:63:4a:17:8a:1c:77:4e:d1:e1:69:4f:
3c:61:3d:1a:5f:56:17:69:e2:e1:18:58:2a:d7:77:
d3:56:02:df:d4:fa:b8:e8:ad:c6:f9:9d:90:a3:ac:
72:fe:3b:b9:55:39:ae:f1:f8:6e:e6:44:6a:37:48:
4d:53:a5:58:a2:dd:0a:52:3b:ef:90:a9:4d:8e:d7:
32:18:71:9c:92:b5:1c:3a:c9:53:55:62:f2:b7:ec:
42:60:cd:25:59:16:ba:3e:45:71:ef:e7:7e:55:ea:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B2:95:B2:F8:CF:02:07:39:3F:EA:ED:E5:D2:3D:2F:7F:D4:A5:9E
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e38352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.85.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:9a:be:d9:c9:0f:ca:35:ee:72:5c:92:10:be:91:a6:af:f0:
6d:d5:21:92:ee:5b:cf:c1:30:5c:a0:07:28:30:0b:f3:21:4c:
05:b9:a3:68:56:3f:31:27:4b:59:91:2d:a5:19:b8:dd:bd:4f:
f9:6f:ef:1f:f3:d4:18:ad:71:5d:ed:8f:b4:ee:94:a8:16:c8:
8c:b7:f4:2f:33:61:f4:92:3d:f3:72:91:94:b4:20:15:30:04:
47:da:67:78:68:ba:29:5b:0c:05:c7:a6:ce:68:1d:4d:22:a4:
2c:fc:f9:fa:fe:77:46:6c:41:33:79:57:75:71:31:fb:00:68:
a3:ba:54:5b:e6:27:b6:fe:27:76:9e:76:d4:61:9d:e3:32:b9:
5c:c8:4c:d8:0f:9f:aa:de:30:5c:de:d5:77:0a:c9:bd:69:d1:
5d:29:87:32:57:59:31:31:15:40:12:7c:c3:32:da:fe:2e:40:
2f:7d:d1:3c:2a:5e:4f:77:e2:84:de:b0:94:a4:ec:eb:11:f5:
52:62:d1:a3:4c:8b:1b:5b:65:42:76:c0:e9:94:45:62:00:f7:
50:8b:20:43:b6:98:22:80:4c:53:fd:f2:5a:e9:37:b7:c0:4b:
0f:35:01:59:d7:88:27:f7:c3:9f:10:f6:a8:80:23:f2:42:91:
ee:bc:03:98
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:54:19 2025 by rpki-client