This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232342e302f32342d3234203d3e203632323430.roa File: 3139342e3135362e3232342e302f32342d3234203d3e203632323430.roa (raw, json) Hash identifier: 8thqS5Dclq2xT6rA9BN6ukUNEMB8cVOem8dHiXwU7qc= Subject key identifier: 43:D4:72:ED:76:66:7A:3A:AE:00:E3:8C:E9:62:DE:BE:43:CF:82:4B Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 36E20B3619C8925E448A3E22658CFC296D50779B Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232342e302f32342d3234203d3e203632323430.roa Signing time: Fri 28 Nov 2025 11:49:21 +0000 ROA not before: Fri 28 Nov 2025 11:44:21 +0000 ROA not after: Fri 27 Nov 2026 11:49:21 +0000 asID: 62240 IP address blocks: 194.156.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e2:0b:36:19:c8:92:5e:44:8a:3e:22:65:8c:fc:29:6d:50:77:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:21 2025 GMT Not After : Nov 27 11:49:21 2026 GMT Subject: CN=43D472ED76667A3AAE00E38CE962DEBE43CF824B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b2:2b:05:43:3a:52:2a:79:70:6c:59:20:dd: 79:cf:67:9a:ef:7d:45:8a:24:76:53:83:85:95:99: f9:2a:6f:ce:b8:68:1d:0f:3d:c1:6d:48:11:17:a0: e1:a6:e2:76:0d:3a:3d:22:73:d3:92:75:a7:f9:5b: 76:2d:91:9d:da:36:e2:33:3d:a0:5c:bf:d9:f1:e7: 4d:7e:64:e6:84:ad:ad:da:3d:46:a7:00:ee:7f:52: 4d:63:fa:33:cc:6e:e3:7e:6e:6b:cd:d0:c1:3c:0d: a2:fc:9c:dd:4b:df:04:cc:ad:2b:71:bd:ee:2c:d6: af:47:e4:b1:01:89:bc:97:ae:39:a6:ce:db:e1:9c: 2c:95:d8:99:5d:fb:5a:3c:35:88:06:df:ee:2b:66: 55:df:25:af:d3:64:38:99:f5:59:ef:2c:ab:db:f7: 60:85:03:2a:26:be:6c:da:95:2f:80:8c:26:24:b2: ec:9e:c0:cf:e8:c4:49:83:5e:76:49:9a:86:cc:52: 7c:34:a9:7c:45:3e:5e:53:aa:42:fb:e4:d9:b1:fe: da:8f:46:c8:ca:da:b2:85:3b:f1:4f:97:12:e6:74: f9:0a:b2:06:7f:ed:9a:91:4f:56:75:07:5b:11:73: 6c:5b:3a:fe:b1:07:98:7c:81:58:b7:38:b5:c3:a3: f4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D4:72:ED:76:66:7A:3A:AE:00:E3:8C:E9:62:DE:BE:43:CF:82:4B X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232342e302f32342d3234203d3e203632323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.156.224.0/24 Signature Algorithm: sha256WithRSAEncryption 64:4d:5e:92:5d:9a:7f:a5:99:a9:58:be:92:b3:72:45:74:21: bf:c2:7e:5a:c1:ad:16:b7:3b:09:64:ee:d7:ea:bd:2e:da:6f: 7c:33:dd:d3:72:cd:f2:4c:d5:d1:6b:24:f6:4e:5c:3a:d9:21: 6e:ba:b7:11:c0:bb:7e:ed:df:5d:d9:d4:8c:ad:c4:8f:6e:65: d6:28:a3:e4:c0:68:b8:cf:a6:29:99:10:f9:e2:1b:29:c5:d6: be:d8:dc:9e:26:9b:d5:25:37:51:bc:b6:49:9e:4d:f9:97:5d: 0b:1a:3e:d3:5d:15:31:ef:09:c5:b2:1b:03:34:1e:07:17:51: 00:81:4d:16:8c:fa:c5:54:46:c0:bb:b8:9b:52:42:32:72:be: 8a:9d:b7:64:ca:cf:a9:55:2b:df:3e:3a:b9:08:6e:39:ee:5a: ea:0a:1d:6c:d1:eb:8a:49:7b:74:45:79:64:63:60:a5:ee:31: 84:ae:08:89:31:b9:18:73:1f:f5:fc:43:3e:9e:04:5a:88:0b: f3:99:b9:0b:6e:18:a7:f3:1e:a7:2b:d9:1e:1e:9c:56:ac:96: 8d:3f:7d:92:98:6d:59:85:00:04:f6:de:5e:94:66:1a:c0:cd: 51:d4:bd:cb:d3:2b:86:de:eb:63:26:06:97:45:f9:34:d2:78: b7:40:5f:82 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUNuILNhnIkl5Eij4iZYz8KW1Qd5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjFaFw0yNjExMjcxMTQ5MjFaMDMxMTAvBgNV BAMTKDQzRDQ3MkVENzY2NjdBM0FBRTAwRTM4Q0U5NjJERUJFNDNDRjgyNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWsisFQzpSKnlwbFkg3XnPZ5rv fUWKJHZTg4WVmfkqb864aB0PPcFtSBEXoOGm4nYNOj0ic9OSdaf5W3YtkZ3aNuIz PaBcv9nx501+ZOaEra3aPUanAO5/Uk1j+jPMbuN+bmvN0ME8DaL8nN1L3wTMrStx ve4s1q9H5LEBibyXrjmmztvhnCyV2Jld+1o8NYgG3+4rZlXfJa/TZDiZ9VnvLKvb 92CFAyomvmzalS+AjCYksuyewM/oxEmDXnZJmobMUnw0qXxFPl5TqkL75Nmx/tqP RsjK2rKFO/FPlxLmdPkKsgZ/7ZqRT1Z1B1sRc2xbOv6xB5h8gVi3OLXDo/TjAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUQ9Ry7XZmejquAOOM6WLevkPPgkswHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzUz NjJlMzIzMjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMjMyMzQzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMKc4DANBgkqhkiG9w0BAQsFAAOCAQEAZE1ekl2af6WZqVi+krNyRXQh v8J+WsGtFrc7CWTu1+q9LtpvfDPd03LN8kzV0Wsk9k5cOtkhbrq3EcC7fu3fXdnU jK3Ej25l1iij5MBouM+mKZkQ+eIbKcXWvtjcniab1SU3Uby2SZ5N+ZddCxo+010V Me8JxbIbAzQeBxdRAIFNFoz6xVRGwLu4m1JCMnK+ip23ZMrPqVUr3z46uQhuOe5a 6godbNHrikl7dEV5ZGNgpe4xhK4IiTG5GHMf9fxDPp4EWogL85m5C24Yp/MepyvZ Hh6cVqyWjT99kphtWYUABPbeXpRmGsDNUdS9y9Mrht7rYyYGl0X5NNJ4t0Bfgg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:06:00 2025 by rpki-client