This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35362e302f32332d3234203d3e203631333137.roa File: 3139342e3134372e35362e302f32332d3234203d3e203631333137.roa (raw, json) Hash identifier: JeRr2JdVUjxZvzRLJ171omCaRYkP9VzFnk8qT0fuh/k= Subject key identifier: 1E:C0:6C:AE:E6:31:CD:1A:F7:2C:C7:AA:67:E9:1C:22:17:6A:B1:EA Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0C4B566963F8183DB2550A99290E0B99662B1164 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35362e302f32332d3234203d3e203631333137.roa Signing time: Fri 28 Nov 2025 11:49:44 +0000 ROA not before: Fri 28 Nov 2025 11:44:44 +0000 ROA not after: Fri 27 Nov 2026 11:49:44 +0000 asID: 61317 IP address blocks: 194.147.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:4b:56:69:63:f8:18:3d:b2:55:0a:99:29:0e:0b:99:66:2b:11:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:44 2025 GMT Not After : Nov 27 11:49:44 2026 GMT Subject: CN=1EC06CAEE631CD1AF72CC7AA67E91C22176AB1EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a4:6d:4f:e6:22:d3:f3:b4:37:ca:fa:09:6d: eb:17:36:bb:2b:9a:41:88:a5:56:ec:dc:ce:71:78: 0e:02:ac:45:cd:e5:b5:83:f1:ab:74:f1:6b:30:a9: f7:99:40:c6:af:56:3b:bf:29:1d:19:93:bf:63:1c: f6:6f:d5:51:c6:83:59:19:da:02:d7:a1:19:26:e8: 5a:18:01:c0:4f:88:5f:06:ab:76:d3:31:78:05:e5: 06:41:be:6d:fc:e3:d0:84:d8:53:f8:70:95:92:9d: 81:27:10:86:9d:9e:95:b4:27:56:25:3b:bd:29:fe: be:40:1a:9f:4c:2d:51:28:83:02:e0:bd:dc:5d:80: 43:5d:18:df:96:42:00:e6:db:1b:33:f3:27:cc:38: 5b:0f:f8:96:ba:d8:b7:e1:e9:43:3c:21:fc:7c:52: 67:eb:e7:0c:bb:8a:27:71:52:01:f7:1f:20:f7:aa: 31:56:19:53:a1:80:aa:f8:61:53:42:7b:d2:61:ac: 3b:ff:cb:ba:a9:9f:73:6e:94:7a:88:3d:27:0d:1f: 96:55:dd:22:0c:2f:41:ef:1c:4b:04:53:00:3a:52: 29:03:bb:7a:f5:21:aa:8f:32:46:07:d4:bb:b4:f8: 20:89:98:47:c7:97:3a:5b:1a:59:e3:59:a9:28:40: a7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C0:6C:AE:E6:31:CD:1A:F7:2C:C7:AA:67:E9:1C:22:17:6A:B1:EA X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35362e302f32332d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.56.0/23 Signature Algorithm: sha256WithRSAEncryption 35:24:ff:fb:83:b2:a0:94:37:c4:8b:b9:81:6c:5c:c4:81:ae: 77:9c:12:dd:8d:3d:2f:32:3d:bb:2f:d6:07:fc:5e:fe:3e:ac: 67:d2:fc:42:92:be:e5:f6:37:f4:3b:34:4b:5c:49:f7:30:fb: 07:b4:78:84:8b:91:1b:93:8f:08:ea:ad:2a:f3:13:d0:bf:90: cf:88:71:01:ba:b5:e0:d5:dd:79:39:ac:13:fd:ca:cf:be:9b: d2:32:32:e7:7d:4c:8f:32:cc:9a:13:b4:de:f1:20:cf:53:29: 01:b5:e0:87:dd:f5:ca:fe:0a:ad:87:e0:8e:1d:ae:90:74:cd: c0:21:85:85:bf:df:c0:77:42:ed:09:42:b7:bb:d1:c1:b9:59: a5:ad:a4:7c:e1:b8:21:f6:1a:97:cc:de:8c:44:56:dc:be:1b: cd:82:a7:6b:74:96:43:33:2f:b3:18:8e:81:71:a1:5a:6f:b3: e6:99:38:7a:68:a2:93:7d:57:19:56:82:08:69:2c:25:f8:bc: cc:18:09:dc:93:b2:65:e4:44:68:c2:b2:ff:b9:12:6f:03:1e: 9c:8f:18:2a:23:27:68:22:8c:1b:2d:7b:0e:0b:c3:60:3d:86: e5:c6:8a:ed:a1:04:08:a0:ba:ab:72:d8:3a:b4:7a:7c:40:a1: 04:9a:54:56 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUDEtWaWP4GD2yVQqZKQ4LmWYrEWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDRaFw0yNjExMjcxMTQ5NDRaMDMxMTAvBgNV BAMTKDFFQzA2Q0FFRTYzMUNEMUFGNzJDQzdBQTY3RTkxQzIyMTc2QUIxRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7pG1P5iLT87Q3yvoJbesXNrsr mkGIpVbs3M5xeA4CrEXN5bWD8at08WswqfeZQMavVju/KR0Zk79jHPZv1VHGg1kZ 2gLXoRkm6FoYAcBPiF8Gq3bTMXgF5QZBvm3849CE2FP4cJWSnYEnEIadnpW0J1Yl O70p/r5AGp9MLVEogwLgvdxdgENdGN+WQgDm2xsz8yfMOFsP+Ja62Lfh6UM8Ifx8 Umfr5wy7iidxUgH3HyD3qjFWGVOhgKr4YVNCe9JhrDv/y7qpn3NulHqIPScNH5ZV 3SIML0HvHEsEUwA6UikDu3r1IaqPMkYH1Lu0+CCJmEfHlzpbGlnjWakoQKcZAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUHsBsruYxzRr3LMeqZ+kcIhdqseowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzQz NzJlMzUzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHCkzgwDQYJKoZIhvcNAQELBQADggEBADUk//uDsqCUN8SLuYFsXMSBrnec Et2NPS8yPbsv1gf8Xv4+rGfS/EKSvuX2N/Q7NEtcSfcw+we0eISLkRuTjwjqrSrz E9C/kM+IcQG6teDV3Xk5rBP9ys++m9IyMud9TI8yzJoTtN7xIM9TKQG14Ifd9cr+ Cq2H4I4drpB0zcAhhYW/38B3Qu0JQre70cG5WaWtpHzhuCH2GpfM3oxEVty+G82C p2t0lkMzL7MYjoFxoVpvs+aZOHpoopN9VxlWgghpLCX4vMwYCdyTsmXkRGjCsv+5 Em8DHpyPGCojJ2gijBstew4Lw2A9huXGiu2hBAiguqty2Dq0enxAoQSaVFY= -----END CERTIFICATE-----Generated at Sat Dec 6 16:06:22 2025 by rpki-client