This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e38362e302f32342d3234203d3e20313336373837.roa File: 3139342e3131302e38362e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: xaclh7kZju0vWQFtQzzkylxOl5D1qolq24CPC6a5NRU= Subject key identifier: 4A:7A:B1:76:93:9F:6A:0F:C0:3C:2A:F7:E1:27:28:DE:04:62:96:5F Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6E39A0170824173F035657E4E28770E0D6CE0886 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e38362e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:19 +0000 ROA not before: Fri 28 Nov 2025 11:44:19 +0000 ROA not after: Fri 27 Nov 2026 11:49:19 +0000 asID: 136787 IP address blocks: 194.110.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:39:a0:17:08:24:17:3f:03:56:57:e4:e2:87:70:e0:d6:ce:08:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:19 2025 GMT Not After : Nov 27 11:49:19 2026 GMT Subject: CN=4A7AB176939F6A0FC03C2AF7E12728DE0462965F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:33:38:fe:2f:96:e9:8d:cb:82:97:81:2c:7a: 4b:ea:0c:46:1f:32:74:dd:63:b9:ee:35:0c:7a:c7: b8:88:0d:48:2b:f7:a8:4f:11:1b:5c:88:91:d2:89: 45:16:e7:58:dd:69:b0:41:0e:87:98:d2:44:22:75: 63:58:70:7d:8d:74:a4:74:a7:10:68:79:d3:70:4f: 8b:70:d4:b9:d5:57:8e:48:99:07:a4:51:53:65:a3: 9f:3c:55:4f:08:20:0b:41:a0:f9:f4:00:47:20:9c: 91:64:0e:11:d2:77:8b:d4:7b:c0:05:40:30:d6:25: f2:9c:9c:cf:bc:ae:a9:4a:b1:8b:ab:25:fa:b7:51: 50:9c:24:7d:df:8a:a5:17:33:fc:1a:b9:3d:8a:b0: af:b7:58:47:fc:a6:d4:8b:d4:5f:58:a2:70:af:b9: d3:97:51:13:8d:52:d6:c7:96:1c:4d:a1:72:f1:8f: 6c:ff:90:ca:f6:d3:d8:cb:41:fd:2e:93:19:25:aa: b0:54:a0:55:54:e1:df:e0:ec:1f:94:f7:f9:fe:93: 1b:19:34:dd:9e:ce:99:a7:9e:83:d3:74:5e:e9:56: a3:51:c0:9e:6e:e5:8f:15:d2:a7:a6:69:79:8a:21: ff:3f:07:05:75:03:76:e2:c0:0a:44:26:84:9a:a4: 4a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7A:B1:76:93:9F:6A:0F:C0:3C:2A:F7:E1:27:28:DE:04:62:96:5F X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e38362e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.86.0/24 Signature Algorithm: sha256WithRSAEncryption 19:30:bc:36:35:f8:23:92:40:6d:08:a1:7a:e9:6f:c7:d6:e4: ef:6f:da:a6:b3:99:40:fc:2c:c0:f5:09:4b:75:0d:63:98:93: 0b:0b:2d:17:a2:0b:c0:c9:46:39:f4:a3:70:27:cd:ca:77:0a: 81:d8:59:18:22:ca:24:8c:53:0a:1f:e3:bf:e4:14:c7:98:76: 5e:70:86:f4:48:8f:cb:bc:4f:16:9a:4d:c4:85:29:bf:d2:bd: bd:05:83:e3:f5:bf:a9:58:a0:d6:16:3e:01:eb:16:81:3f:56: db:f4:ad:44:6c:3e:9b:1b:a9:43:a0:0a:c6:64:c5:68:84:06: 82:a6:4e:af:df:a4:4b:82:a2:43:10:01:d9:4a:06:5b:9e:df: 39:b7:ac:9a:56:b6:98:37:48:22:ab:f5:56:84:c7:6f:8c:79: 78:33:d4:09:e2:c7:53:3b:a0:60:73:6e:ff:30:87:5a:99:0e: 2a:44:6a:f7:4b:45:a6:38:5a:47:ef:f8:8d:9a:e6:32:6f:2e: 80:8c:6d:3d:c3:c4:3f:fd:1a:29:d8:52:b0:8a:02:2c:8c:37: ce:e5:f0:bb:f3:85:5a:e7:ae:e5:b0:28:b4:12:39:eb:6d:24: 01:3a:d8:f9:c5:96:00:1e:7a:49:d9:2a:77:94:9c:68:f2:74: 4b:5d:1e:cd -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUbjmgFwgkFz8DVlfk4odw4NbOCIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTlaFw0yNjExMjcxMTQ5MTlaMDMxMTAvBgNV BAMTKDRBN0FCMTc2OTM5RjZBMEZDMDNDMkFGN0UxMjcyOERFMDQ2Mjk2NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Mzj+L5bpjcuCl4EsekvqDEYf MnTdY7nuNQx6x7iIDUgr96hPERtciJHSiUUW51jdabBBDoeY0kQidWNYcH2NdKR0 pxBoedNwT4tw1LnVV45ImQekUVNlo588VU8IIAtBoPn0AEcgnJFkDhHSd4vUe8AF QDDWJfKcnM+8rqlKsYurJfq3UVCcJH3fiqUXM/wauT2KsK+3WEf8ptSL1F9YonCv udOXURONUtbHlhxNoXLxj2z/kMr209jLQf0ukxklqrBUoFVU4d/g7B+U9/n+kxsZ NN2ezpmnnoPTdF7pVqNRwJ5u5Y8V0qemaXmKIf8/BwV1A3biwApEJoSapEpdAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUSnqxdpOfag/APCr34Sco3gRill8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzEz MDJlMzgzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMJuVjANBgkqhkiG9w0BAQsFAAOCAQEAGTC8NjX4I5JAbQiheulvx9bk 72/aprOZQPwswPUJS3UNY5iTCwstF6ILwMlGOfSjcCfNyncKgdhZGCLKJIxTCh/j v+QUx5h2XnCG9EiPy7xPFppNxIUpv9K9vQWD4/W/qVig1hY+AesWgT9W2/StRGw+ mxupQ6AKxmTFaIQGgqZOr9+kS4KiQxAB2UoGW57fObesmla2mDdIIqv1VoTHb4x5 eDPUCeLHUzugYHNu/zCHWpkOKkRq90tFpjhaR+/4jZrmMm8ugIxtPcPEP/0aKdhS sIoCLIw3zuXwu/OFWueu5bAotBI5620kATrY+cWWAB56Sdkqd5ScaPJ0S10ezQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:58 2025 by rpki-client