This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36362e302f32342d3234203d3e20313336373837.roa File: 3139342e3131332e36362e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: b3kWo4XpETTZIbEux1gzMNMIY7lN9oXAmzANGQzZ7Hg= Subject key identifier: 62:BC:B9:80:C1:22:ED:E7:EF:E4:BF:AC:90:D4:40:DC:F0:CF:B8:89 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6A83D5BEFEE6B5A0F771917A7BF6F2FA60D55060 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36362e302f32342d3234203d3e20313336373837.roa Signing time: Fri 26 Dec 2025 13:50:21 +0000 ROA not before: Fri 26 Dec 2025 13:45:21 +0000 ROA not after: Fri 25 Dec 2026 13:50:21 +0000 asID: 136787 IP address blocks: 194.113.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:83:d5:be:fe:e6:b5:a0:f7:71:91:7a:7b:f6:f2:fa:60:d5:50:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Dec 26 13:45:21 2025 GMT Not After : Dec 25 13:50:21 2026 GMT Subject: CN=62BCB980C122EDE7EFE4BFAC90D440DCF0CFB889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:78:5a:e4:99:6e:39:fa:98:d1:0b:55:ec:c5: 12:33:86:75:08:91:48:6c:14:32:97:18:55:fb:0d: 7b:bc:58:54:24:6e:71:a8:e0:ed:d5:d7:e9:a6:31: 01:e4:7d:20:c5:55:bc:5d:17:1b:e1:51:1a:78:e4: 8a:ef:61:81:97:d9:c0:7b:4c:e3:cf:9c:a6:b4:09: 4a:1f:10:1e:c1:1d:6c:aa:64:d4:7a:52:65:7a:6e: 99:e7:b7:16:47:8c:d3:b4:f6:1e:6b:f1:fb:a4:9b: 11:be:67:5b:d6:72:f4:a1:18:db:79:79:e3:a5:36: 2d:8e:3d:1d:3f:91:5c:63:bf:b1:95:e5:4f:a0:4b: d2:d7:91:bd:93:fb:2f:84:a1:99:49:5c:29:0f:e3: ac:a5:9f:8c:5e:c0:6e:f9:c6:a3:6f:8d:ac:d1:3d: a5:a6:71:44:98:aa:c0:99:89:aa:67:d3:96:c9:ae: 4c:ec:e3:8f:b1:8a:cc:a1:1d:07:92:04:6b:ee:74: e5:a6:e1:5e:f3:81:a0:f2:9c:bd:19:74:c7:db:58: e5:67:6c:f3:b0:73:5f:eb:ca:c1:5f:51:7e:66:c1: 2f:23:08:d6:03:a7:4f:d5:9e:ae:59:27:77:1d:60: b0:75:f5:9b:84:82:fc:66:1c:0c:1d:83:e2:64:df: 1f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BC:B9:80:C1:22:ED:E7:EF:E4:BF:AC:90:D4:40:DC:F0:CF:B8:89 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36362e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.66.0/24 Signature Algorithm: sha256WithRSAEncryption d7:1e:e3:eb:86:c2:29:51:7f:dd:5c:24:c6:41:6b:e1:4a:ab: c7:2e:0f:1c:2c:69:18:1b:e2:c6:9f:85:cf:94:4a:89:5a:ae: 04:65:85:19:03:0a:0b:fd:1c:79:24:71:a9:98:b4:7d:0b:55: f5:29:ce:6b:8f:c5:bb:7d:c1:9a:c7:b9:24:27:64:7d:72:f4: 93:fd:aa:ef:a9:26:67:13:ef:c3:55:c3:b9:65:ba:1d:80:8c: fa:4c:3e:5e:a6:e0:7a:10:72:1c:ea:f2:a7:f8:46:14:bd:17: 63:9b:59:83:2d:cb:51:c4:84:41:95:a9:9c:92:1d:12:fe:a9: a6:d7:ab:1a:64:3f:ca:3b:b8:76:fe:76:26:ed:11:98:ed:7a: b2:5d:17:ee:7a:19:69:0e:89:01:fd:d4:5a:ce:bc:08:c2:18: 6c:ab:fb:c8:96:21:25:a1:d7:30:22:7d:6e:25:ac:60:72:71: 19:a9:cc:0e:1c:7a:35:f2:7f:b0:2d:cb:66:59:a3:54:0e:60: d2:21:f6:ba:9f:50:9e:8a:fe:8f:d9:c6:fa:b2:77:d0:db:5a: 1c:e0:36:7d:90:49:29:1b:bd:12:d7:6e:5e:9e:89:1f:41:17: 60:19:31:40:98:69:ea:75:91:58:09:ec:53:da:6c:b8:f3:de: 1a:d2:da:e5 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUaoPVvv7mtaD3cZF6e/by+mDVUGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTEyMjYxMzQ1MjFaFw0yNjEyMjUxMzUwMjFaMDMxMTAvBgNV BAMTKDYyQkNCOTgwQzEyMkVERTdFRkU0QkZBQzkwRDQ0MERDRjBDRkI4ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCteFrkmW45+pjRC1XsxRIzhnUI kUhsFDKXGFX7DXu8WFQkbnGo4O3V1+mmMQHkfSDFVbxdFxvhURp45IrvYYGX2cB7 TOPPnKa0CUofEB7BHWyqZNR6UmV6bpnntxZHjNO09h5r8fukmxG+Z1vWcvShGNt5 eeOlNi2OPR0/kVxjv7GV5U+gS9LXkb2T+y+EoZlJXCkP46yln4xewG75xqNvjazR PaWmcUSYqsCZiapn05bJrkzs44+xisyhHQeSBGvudOWm4V7zgaDynL0ZdMfbWOVn bPOwc1/rysFfUX5mwS8jCNYDp0/Vnq5ZJ3cdYLB19ZuEgvxmHAwdg+Jk3x/LAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUYry5gMEi7efv5L+skNRA3PDPuIkwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzEz MzJlMzYzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMJxQjANBgkqhkiG9w0BAQsFAAOCAQEA1x7j64bCKVF/3VwkxkFr4Uqr xy4PHCxpGBvixp+Fz5RKiVquBGWFGQMKC/0ceSRxqZi0fQtV9SnOa4/Fu33Bmse5 JCdkfXL0k/2q76kmZxPvw1XDuWW6HYCM+kw+XqbgehByHOryp/hGFL0XY5tZgy3L UcSEQZWpnJIdEv6ppterGmQ/yju4dv52Ju0RmO16sl0X7noZaQ6JAf3UWs68CMIY bKv7yJYhJaHXMCJ9biWsYHJxGanMDhx6NfJ/sC3LZlmjVA5g0iH2up9Qnor+j9nG +rJ30NtaHOA2fZBJKRu9EtduXp6JH0EXYBkxQJhp6nWRWAnsU9psuPPeGtLa5Q== -----END CERTIFICATE-----Generated at Sun Jan 25 11:49:40 2026 by rpki-client