This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3131312e302f32342d3234203d3e20313336373837.roa File: 3139342e31352e3131312e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: tTF7Ne5rl79h1LnimBWVDZ286ZiUG49VQ/cSH3GxC+8= Subject key identifier: DA:6A:5C:42:66:D6:20:18:CE:9D:DA:17:93:28:22:E2:F4:00:61:41 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0DA2C440BBB54467AE4700338B8CA3DE47A3C8A3 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3131312e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:05 +0000 ROA not before: Fri 21 Nov 2025 15:44:05 +0000 ROA not after: Fri 20 Nov 2026 15:49:05 +0000 asID: 136787 IP address blocks: 194.15.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:a2:c4:40:bb:b5:44:67:ae:47:00:33:8b:8c:a3:de:47:a3:c8:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:05 2025 GMT Not After : Nov 20 15:49:05 2026 GMT Subject: CN=DA6A5C4266D62018CE9DDA17932822E2F4006141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:13:7b:7f:6e:fa:d2:fb:53:48:f4:95:0b:dd: 25:fe:b3:18:0a:20:9c:cd:0c:6b:35:6c:fb:73:5c: 4c:3a:1e:33:27:31:6d:fc:52:b0:ac:c7:d5:80:80: 58:22:a3:d8:46:30:3c:1b:b4:b1:f9:a1:b8:38:a4: fe:3d:73:f8:6e:33:ba:91:70:db:bc:7c:5c:94:37: d0:9b:58:da:29:26:f6:6a:ab:d2:76:a2:75:0e:3d: a8:ad:8e:e6:93:f3:10:4b:57:93:57:32:2d:e0:ac: c0:f2:0a:80:ca:28:a4:af:46:10:d7:a7:4f:22:29: de:de:01:56:36:2c:07:0d:7b:63:42:55:9a:4c:aa: aa:dc:68:8e:40:f7:4e:c4:b2:fa:f4:85:04:0e:9a: 53:22:b8:7a:3d:a3:8c:d2:89:73:e8:d1:66:25:59: 62:26:ec:2f:cf:63:2b:a5:72:5b:fa:04:28:b8:ec: 84:7f:82:4b:f0:76:32:41:2f:00:05:6f:1e:12:fd: d2:f8:b1:85:70:93:e5:4f:0a:cb:d2:74:64:b9:06: d5:80:26:f7:06:b5:83:1e:89:61:f8:84:96:b5:f1: a7:a5:3c:4f:f0:bc:7b:7c:42:04:91:00:cc:81:f2: a3:21:46:7c:70:e1:b4:cd:fa:6d:69:af:17:19:8e: 51:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6A:5C:42:66:D6:20:18:CE:9D:DA:17:93:28:22:E2:F4:00:61:41 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3131312e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.15.111.0/24 Signature Algorithm: sha256WithRSAEncryption b4:22:2a:49:f3:76:3a:94:f2:69:f7:3c:b5:5f:54:02:fc:6e: a3:02:96:00:07:94:2c:94:a2:9d:39:9d:23:1b:66:b0:97:2e: e9:35:81:37:a4:d0:2c:03:a7:81:ed:65:07:43:e8:1c:0c:5e: 1c:3b:84:0c:43:00:49:7d:83:75:61:6a:88:d0:7a:11:f7:a4: 53:9c:f1:ee:62:c5:49:83:87:c5:d8:c0:69:88:2c:fc:9a:ae: f8:ca:d0:e0:2f:b5:f7:9d:f8:1d:ab:e6:c4:e7:90:5a:60:93: 12:ec:37:69:7d:6e:50:b3:d2:81:99:f2:b2:40:ae:7a:18:3c: 0a:bb:35:ee:d5:84:a3:d3:1a:fc:1b:5e:63:20:6c:02:db:7a: 03:5f:6f:6a:4a:86:f9:ff:f7:18:d8:a7:60:8d:b0:f5:d3:58: 2a:6c:d1:ce:2f:41:b8:b5:88:72:f2:df:41:22:55:71:e4:aa: 5f:be:b8:da:fa:fa:95:b1:3f:62:47:ee:d0:8d:1b:07:69:73: 89:62:f8:2f:b7:b7:c9:21:94:f4:20:ec:c1:a3:d7:d3:41:0e: a8:1f:4b:b0:5c:ca:5c:cf:3e:16:79:6e:31:5b:4c:05:59:52: 44:db:c5:99:d6:76:17:79:e5:1f:29:19:0c:8b:5b:9b:af:9d: d5:0d:ef:17 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUDaLEQLu1RGeuRwAzi4yj3kejyKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDVaFw0yNjExMjAxNTQ5MDVaMDMxMTAvBgNV BAMTKERBNkE1QzQyNjZENjIwMThDRTlEREExNzkzMjgyMkUyRjQwMDYxNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2E3t/bvrS+1NI9JUL3SX+sxgK IJzNDGs1bPtzXEw6HjMnMW38UrCsx9WAgFgio9hGMDwbtLH5obg4pP49c/huM7qR cNu8fFyUN9CbWNopJvZqq9J2onUOPaitjuaT8xBLV5NXMi3grMDyCoDKKKSvRhDX p08iKd7eAVY2LAcNe2NCVZpMqqrcaI5A907Esvr0hQQOmlMiuHo9o4zSiXPo0WYl WWIm7C/PYyulclv6BCi47IR/gkvwdjJBLwAFbx4S/dL4sYVwk+VPCsvSdGS5BtWA JvcGtYMeiWH4hJa18aelPE/wvHt8QgSRAMyB8qMhRnxw4bTN+m1prxcZjlHhAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU2mpcQmbWIBjOndoXkygi4vQAYUEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzUy ZTMxMzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMIPbzANBgkqhkiG9w0BAQsFAAOCAQEAtCIqSfN2OpTyafc8tV9UAvxu owKWAAeULJSinTmdIxtmsJcu6TWBN6TQLAOnge1lB0PoHAxeHDuEDEMASX2DdWFq iNB6EfekU5zx7mLFSYOHxdjAaYgs/Jqu+MrQ4C+19534HavmxOeQWmCTEuw3aX1u ULPSgZnyskCuehg8Crs17tWEo9Ma/BteYyBsAtt6A19vakqG+f/3GNinYI2w9dNY KmzRzi9BuLWIcvLfQSJVceSqX7642vr6lbE/Ykfu0I0bB2lziWL4L7e3ySGU9CDs waPX00EOqB9LsFzKXM8+FnluMVtMBVlSRNvFmdZ2F3nlHykZDItbm6+d1Q3vFw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:46 2025 by rpki-client