This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232352e302f32342d3234203d3e203632323430.roa File: 3139342e3135362e3232352e302f32342d3234203d3e203632323430.roa (raw, json) Hash identifier: QVaZVYfP0iOgIJu0UMh2xKv6TG5fzhbbf98fNVz8AbY= Subject key identifier: B1:21:E2:E3:53:AA:D1:98:79:6D:C6:1B:71:CA:75:B2:16:B4:A6:F6 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 37E8C94963658C27EC10C475101FEF56B1F7A82B Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232352e302f32342d3234203d3e203632323430.roa Signing time: Fri 28 Nov 2025 11:49:27 +0000 ROA not before: Fri 28 Nov 2025 11:44:27 +0000 ROA not after: Fri 27 Nov 2026 11:49:27 +0000 asID: 62240 IP address blocks: 194.156.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e8:c9:49:63:65:8c:27:ec:10:c4:75:10:1f:ef:56:b1:f7:a8:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:27 2025 GMT Not After : Nov 27 11:49:27 2026 GMT Subject: CN=B121E2E353AAD198796DC61B71CA75B216B4A6F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:56:d3:d9:67:cf:07:df:46:ba:7f:2c:69:1c: d8:f2:c9:1e:a4:ce:c3:dc:de:f0:46:7e:c3:c5:3a: 87:57:a2:42:24:b4:d6:94:1d:b6:b7:9a:97:33:bb: d9:98:4c:39:65:c6:3b:93:8e:27:e6:63:84:34:5a: a4:63:c3:ee:5a:66:55:07:1e:df:4c:b7:63:3f:bf: 93:f5:e7:73:81:5e:ba:e6:a2:50:62:3b:43:96:4d: ef:f8:0e:77:2d:90:cc:9c:45:0c:12:19:62:b3:06: 6f:92:21:52:45:92:28:2f:de:26:63:5a:30:e1:f3: 81:f5:f9:42:48:d9:7e:3e:16:9d:73:8d:c9:75:a6: 22:2e:86:38:c0:ab:3f:7c:cc:94:ba:b4:4a:15:09: eb:c3:36:73:f6:16:5e:70:bf:25:de:c5:fb:1b:94: eb:e4:c5:1e:e1:a4:dd:ac:ab:72:a9:a4:3f:44:3b: d8:b0:d5:a6:6d:c7:e1:e3:e5:d5:8d:f0:b0:bd:e6: e3:ed:4e:ce:98:f4:dd:79:f4:ea:0a:a9:36:cb:63: 9c:57:91:26:ac:21:c7:c0:c2:c9:58:82:e1:dd:44: 15:6f:44:3c:17:65:c5:bb:89:35:d3:60:0a:f0:7f: a5:44:4a:92:28:5c:4d:7f:55:91:01:25:a7:16:db: ad:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:21:E2:E3:53:AA:D1:98:79:6D:C6:1B:71:CA:75:B2:16:B4:A6:F6 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232352e302f32342d3234203d3e203632323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.156.225.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:1b:10:40:70:51:cb:14:6b:21:2a:fe:63:7d:61:33:b2:e0: f6:e1:98:00:cb:d2:69:28:ae:48:d5:b2:08:0d:a7:bf:13:9f: 41:21:2c:51:eb:5d:00:49:43:58:db:b3:9c:01:3f:5a:55:93: a5:80:5f:44:54:fa:09:09:0b:8c:18:33:62:53:89:4f:84:e4: 8f:dc:77:ae:9f:a5:68:58:54:fc:78:56:e4:76:9a:e2:54:47: 8e:51:c3:85:5e:6c:ae:c0:3e:15:e0:1f:3d:33:d4:db:a6:7b: f4:c0:0e:08:6e:b1:91:b3:e1:e8:b2:fc:56:e2:20:b3:bc:b3: 5c:4e:f8:62:f8:2e:e2:24:9f:ca:73:ab:f9:69:cf:5f:06:a6: db:d0:f2:b0:11:7e:ce:d5:a0:70:0a:67:f3:2d:77:64:3d:bd: 5b:c2:80:01:9f:36:da:6d:1c:cb:20:3e:21:2e:19:49:9b:e8: 1e:75:e4:5a:f6:f3:bc:97:e4:43:c3:78:b7:40:40:20:fb:58: 54:8f:9a:53:f4:33:43:e5:75:12:6c:b3:c0:5a:7c:c0:cf:6e: 2d:3e:50:d1:b2:58:01:54:2b:a4:ff:bc:d9:78:94:8c:26:6f: 9f:db:d9:e4:fb:20:a0:9b:6c:c0:9c:43:d1:e5:f9:77:4a:74: 38:b4:6c:0c -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUN+jJSWNljCfsEMR1EB/vVrH3qCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjdaFw0yNjExMjcxMTQ5MjdaMDMxMTAvBgNV BAMTKEIxMjFFMkUzNTNBQUQxOTg3OTZEQzYxQjcxQ0E3NUIyMTZCNEE2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4VtPZZ88H30a6fyxpHNjyyR6k zsPc3vBGfsPFOodXokIktNaUHba3mpczu9mYTDllxjuTjifmY4Q0WqRjw+5aZlUH Ht9Mt2M/v5P153OBXrrmolBiO0OWTe/4DnctkMycRQwSGWKzBm+SIVJFkigv3iZj WjDh84H1+UJI2X4+Fp1zjcl1piIuhjjAqz98zJS6tEoVCevDNnP2Fl5wvyXexfsb lOvkxR7hpN2sq3KppD9EO9iw1aZtx+Hj5dWN8LC95uPtTs6Y9N159OoKqTbLY5xX kSasIcfAwslYguHdRBVvRDwXZcW7iTXTYArwf6VESpIoXE1/VZEBJacW263TAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUsSHi41Oq0Zh5bcYbccp1sha0pvYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzUz NjJlMzIzMjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMjMyMzQzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMKc4TANBgkqhkiG9w0BAQsFAAOCAQEAfRsQQHBRyxRrISr+Y31hM7Lg 9uGYAMvSaSiuSNWyCA2nvxOfQSEsUetdAElDWNuznAE/WlWTpYBfRFT6CQkLjBgz YlOJT4Tkj9x3rp+laFhU/HhW5Haa4lRHjlHDhV5srsA+FeAfPTPU26Z79MAOCG6x kbPh6LL8VuIgs7yzXE74Yvgu4iSfynOr+WnPXwam29DysBF+ztWgcApn8y13ZD29 W8KAAZ822m0cyyA+IS4ZSZvoHnXkWvbzvJfkQ8N4t0BAIPtYVI+aU/QzQ+V1Emyz wFp8wM9uLT5Q0bJYAVQrpP+82XiUjCZvn9vZ5PsgoJtswJxD0eX5d0p0OLRsDA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:38:14 2025 by rpki-client