This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36372e302f32342d3332203d3e203531313637.roa File: 3139342e3131332e36372e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: 6ff0U799Gvnj9KjcAI+yvs560eQTdYp6w2Lgxa6vxJI= Subject key identifier: 95:3C:F8:EA:4D:F7:74:6E:27:1B:9B:8B:E3:D6:6F:4B:72:92:34:F7 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2E8DD3FF56E5B5CB90C118A00FD8858CA885391E Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36372e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:39 +0000 ROA not before: Fri 28 Nov 2025 11:44:39 +0000 ROA not after: Fri 27 Nov 2026 11:49:39 +0000 asID: 51167 IP address blocks: 194.113.67.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:8d:d3:ff:56:e5:b5:cb:90:c1:18:a0:0f:d8:85:8c:a8:85:39:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:39 2025 GMT Not After : Nov 27 11:49:39 2026 GMT Subject: CN=953CF8EA4DF7746E271B9B8BE3D66F4B729234F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:46:6b:37:55:f6:15:fe:31:a0:7d:d6:4a: 79:a7:6c:67:bf:17:84:60:2d:72:5d:30:b3:20:80: e6:a2:16:ca:ee:e8:ba:cf:fd:3f:5f:dd:62:a9:0f: 59:c8:d3:6f:fc:e6:bb:79:af:d2:43:6f:a0:9b:77: 23:2f:f5:42:d4:89:0c:e5:cb:b3:f9:bb:60:ae:52: 49:99:aa:1f:4b:31:0f:48:de:33:aa:a5:bf:1b:c7: 45:32:a5:f5:59:f4:08:ad:d3:4e:d8:0d:8b:82:7d: 1a:ac:d2:f0:6f:6b:75:90:b5:37:ba:a5:a4:9b:ce: 64:9e:91:ad:2a:5d:9b:0e:e0:e8:5d:6c:7a:73:5f: e2:64:fb:29:bc:ca:9d:96:02:65:51:bb:ed:a1:78: 42:82:74:7b:d7:c5:f8:ad:dc:5c:3e:92:72:0a:e6: de:18:d8:62:a9:82:a1:68:a5:42:9d:c8:a8:6d:46: 3a:55:2b:71:76:eb:b1:bd:1f:e0:28:2e:4c:b9:0a: 04:93:2a:ff:46:19:d4:f2:c5:ac:ef:3a:83:e5:cd: 23:fd:b0:1c:8c:dd:48:05:f2:3e:b1:88:81:8e:32: b0:85:9d:34:77:85:e9:5e:ec:00:ab:fa:ad:2d:c7: 57:ba:a8:e5:14:e4:57:3e:79:ec:db:a2:49:98:67: 07:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3C:F8:EA:4D:F7:74:6E:27:1B:9B:8B:E3:D6:6F:4B:72:92:34:F7 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36372e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.67.0/24 Signature Algorithm: sha256WithRSAEncryption c5:39:f3:93:09:c1:55:b3:43:81:dc:18:7e:c3:01:f5:53:04: 1d:06:d9:ff:22:b1:1f:ed:f9:f5:74:f4:a8:c8:7d:89:2f:97: 29:68:8f:b5:9e:12:33:f5:4a:bd:b8:a4:6a:bc:03:d9:e5:b2: 05:96:d0:22:1a:61:f7:63:51:42:df:dd:63:8b:f3:36:22:36: 43:c2:5b:0c:1c:8f:d4:f7:58:51:ee:ca:da:bd:ca:ec:a4:4a: 18:c4:b1:63:03:38:db:a5:d7:36:38:d4:08:6b:81:fc:6a:18: d3:2b:6d:57:f3:8a:4c:d6:59:33:1e:8a:91:51:f5:57:0b:0a: ac:bd:d7:32:76:99:2e:a1:0c:af:9b:f0:0f:7d:3e:85:4a:02: 23:bb:65:eb:22:f6:73:7b:8d:c2:10:c3:a9:71:46:ee:1f:e8: a8:82:52:52:89:f0:eb:22:ee:2e:94:b4:fd:b7:14:7e:de:0e: 8a:f8:dc:78:25:97:d1:ea:74:df:4b:23:2f:c0:60:83:8e:58: 24:0b:71:b8:5e:1c:e8:04:a3:6b:e2:18:bb:33:6b:59:19:85: fc:f3:da:50:46:71:2d:55:40:f9:9f:a2:d7:65:95:e9:40:46: 0f:42:81:09:f4:7f:c8:27:83:1f:dd:05:0c:73:4a:48:d2:46: 9b:fe:bc:a6 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIULo3T/1bltcuQwRigD9iFjKiFOR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzlaFw0yNjExMjcxMTQ5MzlaMDMxMTAvBgNV BAMTKDk1M0NGOEVBNERGNzc0NkUyNzFCOUI4QkUzRDY2RjRCNzI5MjM0RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC510ZrN1X2Ff4xoH3WSnmnbGe/ F4RgLXJdMLMggOaiFsru6LrP/T9f3WKpD1nI02/85rt5r9JDb6CbdyMv9ULUiQzl y7P5u2CuUkmZqh9LMQ9I3jOqpb8bx0UypfVZ9Ait007YDYuCfRqs0vBva3WQtTe6 paSbzmSeka0qXZsO4OhdbHpzX+Jk+ym8yp2WAmVRu+2heEKCdHvXxfit3Fw+knIK 5t4Y2GKpgqFopUKdyKhtRjpVK3F267G9H+AoLky5CgSTKv9GGdTyxazvOoPlzSP9 sByM3UgF8j6xiIGOMrCFnTR3hele7ACr+q0tx1e6qOUU5Fc+eezbokmYZweXAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUlTz46k33dG4nG5uL49ZvS3KSNPcwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzEz MzJlMzYzNzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADCcUMwDQYJKoZIhvcNAQELBQADggEBAMU585MJwVWzQ4HcGH7DAfVTBB0G 2f8isR/t+fV09KjIfYkvlyloj7WeEjP1Sr24pGq8A9nlsgWW0CIaYfdjUULf3WOL 8zYiNkPCWwwcj9T3WFHuytq9yuykShjEsWMDONul1zY41AhrgfxqGNMrbVfzikzW WTMeipFR9VcLCqy91zJ2mS6hDK+b8A99PoVKAiO7Zesi9nN7jcIQw6lxRu4f6KiC UlKJ8Osi7i6UtP23FH7eDor43Hgll9HqdN9LIy/AYIOOWCQLcbheHOgEo2viGLsz a1kZhfzz2lBGcS1VQPmfotdllelARg9CgQn0f8gngx/dBQxzSkjSRpv+vKY= -----END CERTIFICATE-----Generated at Sat Dec 6 12:51:18 2025 by rpki-client