This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36352e302f32342d3332203d3e203536383736.roa File: 3139342e3131332e36352e302f32342d3332203d3e203536383736.roa (raw, json) Hash identifier: JGqpDOOgl+oxJe7yp2oFSeW2vcjNrwg47rRo41a7xLw= Subject key identifier: CA:26:83:AE:BE:AF:61:4D:B6:34:3E:91:17:94:8D:D7:8D:EC:61:43 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 34D6B23C19A5FFED05562138721AB1C4E6BD9175 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36352e302f32342d3332203d3e203536383736.roa Signing time: Fri 28 Nov 2025 11:49:47 +0000 ROA not before: Fri 28 Nov 2025 11:44:47 +0000 ROA not after: Fri 27 Nov 2026 11:49:47 +0000 asID: 56876 IP address blocks: 194.113.65.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d6:b2:3c:19:a5:ff:ed:05:56:21:38:72:1a:b1:c4:e6:bd:91:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:47 2025 GMT Not After : Nov 27 11:49:47 2026 GMT Subject: CN=CA2683AEBEAF614DB6343E9117948DD78DEC6143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0b:b5:85:2f:ef:de:3d:da:5d:80:e9:92:b8: 5f:fc:4c:7b:c8:79:12:9e:9d:6b:0c:9b:c6:29:8f: c5:fc:1c:1e:be:72:c4:ea:06:60:25:a6:ba:4f:b8: 2c:b3:d2:00:6d:12:dd:f3:e4:d4:66:78:80:6c:97: 0f:c4:5b:0a:de:be:37:9f:75:8c:9e:01:5d:bd:a1: 24:24:e4:0a:bf:2b:cc:e9:d7:43:65:85:f6:6b:d1: a2:fe:ab:1c:e6:54:aa:6d:28:ba:3f:9d:d3:16:ef: 6e:29:7b:b9:52:35:ca:53:08:51:5c:95:45:ea:19: 2a:61:af:e9:7f:a0:3c:98:d6:3e:b1:50:7b:a6:87: 4a:fb:b8:d1:40:65:b9:31:26:f0:4b:05:c6:9d:32: d0:62:93:a9:9f:0e:de:09:cd:ff:fe:d3:e8:75:55: 0a:64:7e:04:32:b9:72:9e:36:70:ec:3c:f6:59:a5: 98:21:6d:03:c4:6b:c3:f4:4b:90:87:6a:28:cc:5d: a4:01:30:95:88:cb:f9:1a:f5:a0:44:17:fd:1c:5d: 0e:8d:de:ac:f6:be:60:de:cd:55:bb:2a:dc:75:fc: 91:68:f7:58:50:33:77:53:2a:ad:66:f3:28:94:3e: 59:20:73:cc:ef:8b:5f:dc:0a:b7:d0:36:af:b5:1a: 54:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:26:83:AE:BE:AF:61:4D:B6:34:3E:91:17:94:8D:D7:8D:EC:61:43 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36352e302f32342d3332203d3e203536383736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.65.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:80:80:f4:fd:e2:62:0a:4d:17:21:3f:30:7a:09:6c:f0:77: 3d:e8:47:9c:4f:d1:06:ea:06:00:3b:f4:86:87:9b:ac:cf:9c: ac:2d:a0:22:37:6b:07:4e:83:b7:b8:88:39:64:d8:6f:d5:a2: ac:a2:9b:a4:01:32:3e:fa:cb:b5:4c:f4:31:c4:f5:e9:7a:7c: 91:21:a5:ca:2f:ba:0f:cb:2c:1f:dd:06:24:07:d5:cf:cd:69: 79:dd:22:41:83:38:27:1d:11:fc:5b:68:a0:a6:64:3c:6b:71: 1e:69:b1:d5:83:46:f2:a9:81:31:79:ad:67:be:3c:ab:86:82: 14:c3:1c:1d:5b:7c:4a:0c:f1:bb:1a:9b:7e:16:35:34:8f:80: f4:86:93:d0:2d:ec:77:57:28:ee:ed:f2:38:71:6f:5d:34:be: 69:54:7e:c7:14:ee:09:22:a9:b0:5f:0d:46:93:11:c1:8f:ec: dc:13:f4:6d:5b:f5:27:ab:00:4a:13:01:81:0f:68:89:f6:c3: 81:69:6b:6c:4c:25:0c:a9:b7:2e:30:3b:12:46:b7:f1:0f:56: f3:2b:52:fc:b0:14:14:1b:ca:0a:02:8b:b1:a5:ff:aa:f8:bd: 4e:30:7c:ba:94:91:e2:64:81:12:a9:a3:ce:f6:bd:62:ad:69: 0b:b2:bd:93 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUNNayPBml/+0FViE4chqxxOa9kXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDdaFw0yNjExMjcxMTQ5NDdaMDMxMTAvBgNV BAMTKENBMjY4M0FFQkVBRjYxNERCNjM0M0U5MTE3OTQ4REQ3OERFQzYxNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnC7WFL+/ePdpdgOmSuF/8THvI eRKenWsMm8Ypj8X8HB6+csTqBmAlprpPuCyz0gBtEt3z5NRmeIBslw/EWwrevjef dYyeAV29oSQk5Aq/K8zp10NlhfZr0aL+qxzmVKptKLo/ndMW724pe7lSNcpTCFFc lUXqGSphr+l/oDyY1j6xUHumh0r7uNFAZbkxJvBLBcadMtBik6mfDt4Jzf/+0+h1 VQpkfgQyuXKeNnDsPPZZpZghbQPEa8P0S5CHaijMXaQBMJWIy/ka9aBEF/0cXQ6N 3qz2vmDezVW7Ktx1/JFo91hQM3dTKq1m8yiUPlkgc8zvi1/cCrfQNq+1GlShAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUyiaDrr6vYU22ND6RF5SN143sYUMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzEz MzJlMzYzNTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzYzODM3MzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADCcUEwDQYJKoZIhvcNAQELBQADggEBAJuAgPT94mIKTRchPzB6CWzwdz3o R5xP0QbqBgA79IaHm6zPnKwtoCI3awdOg7e4iDlk2G/Voqyim6QBMj76y7VM9DHE 9el6fJEhpcovug/LLB/dBiQH1c/NaXndIkGDOCcdEfxbaKCmZDxrcR5psdWDRvKp gTF5rWe+PKuGghTDHB1bfEoM8bsam34WNTSPgPSGk9At7HdXKO7t8jhxb100vmlU fscU7gkiqbBfDUaTEcGP7NwT9G1b9SerAEoTAYEPaIn2w4Fpa2xMJQypty4wOxJG t/EPVvMrUvywFBQbygoCi7Gl/6r4vU4wfLqUkeJkgRKpo872vWKtaQuyvZM= -----END CERTIFICATE-----Generated at Sun Dec 7 02:28:27 2025 by rpki-client