This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3130392e302f32342d3234203d3e20323131313932.roa File: 3139342e31352e3130392e302f32342d3234203d3e20323131313932.roa (raw, json) Hash identifier: s3zbmzGH7rHz2xyHe95Jhsn7ZbZNvUU4ZCjm+gn3w/c= Subject key identifier: 3B:1C:E4:A6:9A:BD:2B:FE:08:E2:F7:44:1D:38:AA:F7:29:8D:6B:2D Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2886075B483DC31800B11BD733DF80AEF72549C9 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3130392e302f32342d3234203d3e20323131313932.roa Signing time: Fri 21 Nov 2025 15:49:12 +0000 ROA not before: Fri 21 Nov 2025 15:44:12 +0000 ROA not after: Fri 20 Nov 2026 15:49:12 +0000 asID: 211192 IP address blocks: 194.15.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:86:07:5b:48:3d:c3:18:00:b1:1b:d7:33:df:80:ae:f7:25:49:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:12 2025 GMT Not After : Nov 20 15:49:12 2026 GMT Subject: CN=3B1CE4A69ABD2BFE08E2F7441D38AAF7298D6B2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:32:49:af:eb:f4:76:9e:49:42:a8:eb:4b:5a: d3:a9:88:1e:57:f5:bc:40:a9:85:48:d0:fd:7f:09: ed:7b:f9:6a:a0:15:90:24:3d:5d:ae:5d:90:56:b1: c5:ea:b9:a8:1a:f2:d0:0f:d6:55:db:bf:58:06:71: 2a:ec:c9:a3:3d:a0:6a:60:a8:b5:f6:3b:df:bb:5d: ea:ba:68:78:d7:5d:50:7c:72:19:0f:0d:f0:3e:1a: 29:2c:c9:a6:b4:3a:71:c2:bb:73:c0:c0:56:19:b9: 67:13:d4:c3:13:f9:7f:9c:86:69:e6:09:10:2f:9a: 5d:2d:cb:c5:5c:9e:cc:75:e7:d2:1c:06:ed:79:df: 32:37:83:27:9b:43:3b:0c:b3:f5:4a:61:5c:85:55: 26:1a:9d:37:86:ee:ce:93:1b:dd:7e:5e:fe:48:cf: c4:15:21:9a:01:3f:ff:f5:79:37:d8:e7:a4:77:08: b9:11:7a:c6:6f:45:5f:6e:a8:1c:32:ad:80:ba:52: 53:02:75:30:30:55:ce:ab:db:37:2f:e6:51:24:52: 9f:83:01:f3:d7:55:11:d6:4a:30:0f:0c:e4:48:39: f0:f1:e6:ab:d4:93:f4:05:8d:d5:58:e1:3e:f5:82: 4c:e7:c3:3e:d9:12:6f:2f:99:3b:fa:39:c3:3c:f1: de:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1C:E4:A6:9A:BD:2B:FE:08:E2:F7:44:1D:38:AA:F7:29:8D:6B:2D X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3130392e302f32342d3234203d3e20323131313932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.15.109.0/24 Signature Algorithm: sha256WithRSAEncryption c2:24:e6:d4:4e:2b:3c:41:56:c6:88:5d:47:b2:a4:02:75:4c: 19:f8:64:a4:14:40:b8:03:bc:9b:ba:40:4a:46:5c:73:57:75: ec:d4:9b:92:f0:4f:3a:28:e7:c2:2c:81:38:80:7c:2c:27:00: 41:b3:af:22:10:3b:78:47:09:08:02:8d:4c:8d:ee:35:9f:d6: 8d:61:6d:b1:a3:ac:34:3d:be:46:d0:3b:89:d9:e1:b2:8a:6f: b6:6c:50:ba:f2:6e:26:8f:24:15:8a:ae:4b:3e:ee:92:55:0a: 5d:ab:14:9e:a7:38:14:e9:53:e4:d4:84:a8:ea:25:86:d5:29: 1b:3e:ab:61:7a:2a:a9:76:ff:6c:f4:df:f3:68:c2:6a:bd:a5: 76:69:2d:d8:89:eb:0b:ed:05:af:1b:d6:86:31:19:30:97:89: 47:3f:c3:40:04:0b:60:3a:e5:30:19:85:00:e1:a8:a2:e7:c2: 37:83:64:91:66:55:e8:b5:8f:fa:4a:4b:82:e3:10:dc:f2:39: 0a:7a:53:36:75:af:d0:f0:e7:41:26:a8:f5:e1:b1:93:3d:bb: 98:4a:f5:6b:54:0d:33:bb:1f:24:11:00:09:37:41:d3:7d:45: b7:80:bc:96:c9:56:ec:87:fe:1f:8c:6c:84:55:b1:a9:72:6f: 92:10:61:1a -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUKIYHW0g9wxgAsRvXM9+ArvclSckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTJaFw0yNjExMjAxNTQ5MTJaMDMxMTAvBgNV BAMTKDNCMUNFNEE2OUFCRDJCRkUwOEUyRjc0NDFEMzhBQUY3Mjk4RDZCMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeMkmv6/R2nklCqOtLWtOpiB5X 9bxAqYVI0P1/Ce17+WqgFZAkPV2uXZBWscXquaga8tAP1lXbv1gGcSrsyaM9oGpg qLX2O9+7Xeq6aHjXXVB8chkPDfA+Giksyaa0OnHCu3PAwFYZuWcT1MMT+X+chmnm CRAvml0ty8Vcnsx159IcBu153zI3gyebQzsMs/VKYVyFVSYanTeG7s6TG91+Xv5I z8QVIZoBP//1eTfY56R3CLkResZvRV9uqBwyrYC6UlMCdTAwVc6r2zcv5lEkUp+D AfPXVRHWSjAPDORIOfDx5qvUk/QFjdVY4T71gkznwz7ZEm8vmTv6OcM88d5HAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUOxzkppq9K/4I4vdEHTiq9ymNay0wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzUy ZTMxMzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMTMxMzkzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMIPbTANBgkqhkiG9w0BAQsFAAOCAQEAwiTm1E4rPEFWxohdR7KkAnVM GfhkpBRAuAO8m7pASkZcc1d17NSbkvBPOijnwiyBOIB8LCcAQbOvIhA7eEcJCAKN TI3uNZ/WjWFtsaOsND2+RtA7idnhsopvtmxQuvJuJo8kFYquSz7uklUKXasUnqc4 FOlT5NSEqOolhtUpGz6rYXoqqXb/bPTf82jCar2ldmkt2InrC+0FrxvWhjEZMJeJ Rz/DQAQLYDrlMBmFAOGooufCN4NkkWZV6LWP+kpLguMQ3PI5CnpTNnWv0PDnQSao 9eGxkz27mEr1a1QNM7sfJBEACTdB031Ft4C8lslW7If+H4xshFWxqXJvkhBhGg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:22 2025 by rpki-client