This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3130382e302f32342d3234203d3e20313336373837.roa File: 3139342e31352e3130382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: RDLOeM28s5bRdWYyQTG/jwYrfluvrAaNMBBzoIoIroY= Subject key identifier: A3:6E:A7:C5:67:4F:05:36:AC:C9:27:3B:C2:1D:82:B2:65:53:57:B1 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 5A750293725242476E4C5943DA81755491F56FEC Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3130382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:01 +0000 ROA not before: Fri 21 Nov 2025 15:44:01 +0000 ROA not after: Fri 20 Nov 2026 15:49:01 +0000 asID: 136787 IP address blocks: 194.15.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:75:02:93:72:52:42:47:6e:4c:59:43:da:81:75:54:91:f5:6f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:01 2025 GMT Not After : Nov 20 15:49:01 2026 GMT Subject: CN=A36EA7C5674F0536ACC9273BC21D82B2655357B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5c:15:98:e0:cb:a0:58:f1:3a:84:cd:7e:23: 33:2e:75:3f:8d:3c:ae:04:c3:d7:64:2a:8a:62:ea: 1d:d0:68:b0:d2:cc:e0:a9:fe:85:48:1b:8e:64:24: cc:f7:b6:aa:b4:8e:b4:c2:9b:ed:98:df:59:5d:d1: aa:aa:80:24:1f:e6:5c:07:e8:94:f8:df:7f:a9:3c: d7:3e:c3:36:ff:91:a1:1b:0c:a3:e9:6f:0d:c8:72: e8:12:6a:02:0b:d4:0d:c1:e8:05:6d:46:ee:1b:b3: a5:ac:43:d7:84:cf:69:e7:bb:aa:99:ce:10:db:98: 85:83:a0:b4:08:c1:ba:b0:b7:71:05:d5:78:3c:24: 19:df:7f:11:3e:18:52:c6:41:32:71:22:81:57:73: 69:8f:3b:9c:0d:22:dd:9f:b4:1c:60:4f:b1:4b:1b: 15:69:da:8b:c1:48:95:f3:ae:58:d0:7b:f2:a7:0e: 59:09:0e:90:83:21:1f:34:ba:88:e4:0e:ab:9f:b6: 3c:e2:a8:a0:19:c6:52:2e:bf:69:98:ca:53:0c:c9: c7:10:71:30:60:73:33:4c:db:e1:4a:19:53:ac:b4: b4:dd:c6:28:a6:95:ac:7d:dd:09:1c:77:d7:c1:b7: 68:a9:0e:de:ab:c9:a9:eb:30:32:ff:76:d1:a1:15: e3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6E:A7:C5:67:4F:05:36:AC:C9:27:3B:C2:1D:82:B2:65:53:57:B1 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3130382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.15.108.0/24 Signature Algorithm: sha256WithRSAEncryption de:b4:6d:3f:eb:4d:cb:29:dc:9e:2d:ec:1e:a9:d1:b4:3a:a6: fc:2d:5c:fb:9d:c6:52:01:38:fc:e7:ae:25:d0:04:34:7e:d9: 3c:cc:1d:b4:fe:83:8d:6d:b3:ac:7f:ff:aa:3c:80:3d:a8:4b: 88:db:57:ae:b6:e2:d1:44:57:ae:95:e7:be:29:97:1f:de:80: b6:65:dd:46:c8:8d:49:f0:72:55:07:5c:07:9a:08:aa:df:5f: 84:e4:ae:a3:44:75:01:b1:7b:3e:01:e1:a8:d2:f9:82:b4:69: 0c:44:f8:71:68:4f:03:e5:e8:49:15:00:05:39:89:0a:58:a0: 3c:25:16:7c:f7:51:fc:52:fb:3b:44:8e:51:71:5e:68:8f:b5: 6c:28:fb:fc:ca:da:cb:03:db:8f:99:82:f1:3f:ee:b2:30:a9: 0c:f8:b3:ea:c4:cc:b9:da:08:8a:18:07:90:da:af:7b:6f:5a: 69:fd:f5:e9:6b:b8:a9:a5:38:39:8a:77:dd:5d:01:c2:ea:d0: 3c:48:3c:fe:f9:73:da:69:ca:7d:ae:83:74:85:9a:45:cb:2c: cd:bf:f7:f6:06:49:f3:94:72:0b:1f:c0:8f:48:6a:d1:36:51: cc:8c:13:b8:c7:a8:d7:84:40:bf:df:22:08:a3:07:c8:cb:cf: a9:24:cf:e1 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUWnUCk3JSQkduTFlD2oF1VJH1b+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDFaFw0yNjExMjAxNTQ5MDFaMDMxMTAvBgNV BAMTKEEzNkVBN0M1Njc0RjA1MzZBQ0M5MjczQkMyMUQ4MkIyNjU1MzU3QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHXBWY4MugWPE6hM1+IzMudT+N PK4Ew9dkKopi6h3QaLDSzOCp/oVIG45kJMz3tqq0jrTCm+2Y31ld0aqqgCQf5lwH 6JT433+pPNc+wzb/kaEbDKPpbw3IcugSagIL1A3B6AVtRu4bs6WsQ9eEz2nnu6qZ zhDbmIWDoLQIwbqwt3EF1Xg8JBnffxE+GFLGQTJxIoFXc2mPO5wNIt2ftBxgT7FL GxVp2ovBSJXzrljQe/KnDlkJDpCDIR80uojkDquftjziqKAZxlIuv2mYylMMyccQ cTBgczNM2+FKGVOstLTdxiimlax93Qkcd9fBt2ipDt6ryanrMDL/dtGhFePRAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUo26nxWdPBTasySc7wh2CsmVTV7EwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzUy ZTMxMzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMIPbDANBgkqhkiG9w0BAQsFAAOCAQEA3rRtP+tNyyncni3sHqnRtDqm /C1c+53GUgE4/OeuJdAENH7ZPMwdtP6DjW2zrH//qjyAPahLiNtXrrbi0URXrpXn vimXH96AtmXdRsiNSfByVQdcB5oIqt9fhOSuo0R1AbF7PgHhqNL5grRpDET4cWhP A+XoSRUABTmJCligPCUWfPdR/FL7O0SOUXFeaI+1bCj7/MraywPbj5mC8T/usjCp DPiz6sTMudoIihgHkNqve29aaf316Wu4qaU4OYp33V0BwurQPEg8/vlz2mnKfa6D dIWaRcsszb/39gZJ85RyCx/Aj0hq0TZRzIwTuMeo14RAv98iCKMHyMvPqSTP4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:08 2025 by rpki-client