This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137362e302f32342d3332203d3e203531313637.roa File: 3139342e3138302e3137362e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: XYBHEIzBSHPo1msz6fVgoxapoG6guz471d+GldoiwuI= Subject key identifier: 35:EE:2C:F6:E5:64:6A:0C:02:EF:D7:BF:C6:CA:55:A3:8B:5B:40:D9 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 343DA9AC67EF07CB0A4850F9E89C4D6890ADB09A Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137362e302f32342d3332203d3e203531313637.roa Signing time: Fri 21 Nov 2025 15:48:59 +0000 ROA not before: Fri 21 Nov 2025 15:43:59 +0000 ROA not after: Fri 20 Nov 2026 15:48:59 +0000 asID: 51167 IP address blocks: 194.180.176.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:3d:a9:ac:67:ef:07:cb:0a:48:50:f9:e8:9c:4d:68:90:ad:b0:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:43:59 2025 GMT Not After : Nov 20 15:48:59 2026 GMT Subject: CN=35EE2CF6E5646A0C02EFD7BFC6CA55A38B5B40D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7d:72:84:ef:28:1e:eb:b7:79:af:9c:d9:88: 5f:0e:cb:2f:89:a9:bf:da:23:5d:6d:d9:04:9f:8a: 4e:5c:ca:94:8c:ea:ec:cd:1e:0b:e7:0f:7a:94:25: 95:96:92:b8:ad:bb:e5:f9:91:16:0e:9d:51:09:49: 48:e8:4a:7b:74:7d:47:6b:3e:9d:e0:b0:86:9d:9a: 60:ff:95:8a:d9:9c:e7:cd:ed:20:94:9b:0a:0d:57: ac:9d:4d:a6:12:b0:f7:74:90:f3:d4:8b:0a:00:55: 6b:c3:c4:4b:fa:1d:39:87:7d:17:da:6d:32:02:5d: e5:fb:5e:17:99:f7:41:e7:80:48:3e:cd:fd:71:7b: b9:2a:45:4d:35:42:b9:02:e0:0d:3f:b0:79:2a:fe: 20:41:47:61:f4:91:d0:b5:44:cb:c2:b1:0f:20:f7: be:05:2b:86:f5:38:fa:ff:65:6d:50:92:a2:53:a6: be:28:07:1e:38:c9:15:77:fb:c2:8e:46:bc:72:f9: 36:94:9b:7a:ee:d3:1b:8b:5c:9e:d5:1a:bf:01:4b: a3:d3:c5:82:fd:48:09:65:37:2f:c8:10:8d:9e:c3: e9:44:e7:ed:19:48:e3:13:01:d2:74:53:c2:51:00: 87:2c:d8:62:1c:31:b3:c0:22:ae:6e:b6:46:29:fe: 3d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EE:2C:F6:E5:64:6A:0C:02:EF:D7:BF:C6:CA:55:A3:8B:5B:40:D9 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137362e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.180.176.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:f1:28:ee:c0:34:0c:b7:d2:28:f8:ec:b2:20:cc:29:ac:08: 24:2b:8a:f0:22:c6:3c:c5:16:bf:f8:39:54:1c:ce:70:1e:87: 3b:bb:33:42:dd:da:7d:cb:36:87:86:68:b1:e8:a3:44:6e:1d: 40:af:e9:b9:70:aa:ec:dd:fc:8f:a6:34:64:f9:f9:5e:f7:c9: 32:19:16:7e:7a:94:86:01:3c:60:ee:a3:7f:c1:5e:83:57:66: b1:7a:ea:d3:5d:2a:9e:56:0e:22:ad:af:f3:e8:cb:b1:a7:bc: b6:e4:83:9d:ba:c8:8b:47:ff:70:85:ad:d0:41:ca:1c:af:9f: 5c:08:d3:20:36:ab:53:fe:90:17:30:8b:1b:fd:7e:1d:05:cc: 40:bc:66:bb:84:7e:bc:33:fc:5a:3c:d4:4a:5a:4f:ab:05:69: 83:6d:f2:df:cc:0f:b1:6e:75:d8:e7:96:36:b9:dc:ca:0d:8c: ba:93:5e:eb:4b:6c:42:1e:7c:87:28:a9:7b:26:dc:b6:b5:41: 90:62:6d:e4:0d:f5:45:8e:3f:3e:6d:c1:cf:48:64:f9:a2:d0: 2a:17:bd:17:8a:01:d2:69:c4:fa:42:8d:8a:31:4b:32:12:b1: 2d:84:3b:81:1c:87:5f:46:8f:32:3d:8a:e5:54:a4:53:a8:1d: d7:82:dd:14 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUND2prGfvB8sKSFD56JxNaJCtsJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQzNTlaFw0yNjExMjAxNTQ4NTlaMDMxMTAvBgNV BAMTKDM1RUUyQ0Y2RTU2NDZBMEMwMkVGRDdCRkM2Q0E1NUEzOEI1QjQwRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqfXKE7yge67d5r5zZiF8Oyy+J qb/aI11t2QSfik5cypSM6uzNHgvnD3qUJZWWkritu+X5kRYOnVEJSUjoSnt0fUdr Pp3gsIadmmD/lYrZnOfN7SCUmwoNV6ydTaYSsPd0kPPUiwoAVWvDxEv6HTmHfRfa bTICXeX7XheZ90HngEg+zf1xe7kqRU01QrkC4A0/sHkq/iBBR2H0kdC1RMvCsQ8g 974FK4b1OPr/ZW1QkqJTpr4oBx44yRV3+8KORrxy+TaUm3ru0xuLXJ7VGr8BS6PT xYL9SAllNy/IEI2ew+lE5+0ZSOMTAdJ0U8JRAIcs2GIcMbPAIq5utkYp/j3jAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUNe4s9uVkagwC79e/xspVo4tbQNkwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzgz MDJlMzEzNzM2MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMK0sDANBgkqhkiG9w0BAQsFAAOCAQEAb/Eo7sA0DLfSKPjssiDMKawI JCuK8CLGPMUWv/g5VBzOcB6HO7szQt3afcs2h4ZoseijRG4dQK/puXCq7N38j6Y0 ZPn5XvfJMhkWfnqUhgE8YO6jf8Feg1dmsXrq010qnlYOIq2v8+jLsae8tuSDnbrI i0f/cIWt0EHKHK+fXAjTIDarU/6QFzCLG/1+HQXMQLxmu4R+vDP8WjzUSlpPqwVp g23y38wPsW512OeWNrncyg2MupNe60tsQh58hyipeybctrVBkGJt5A31RY4/Pm3B z0hk+aLQKhe9F4oB0mnE+kKNijFLMhKxLYQ7gRyHX0aPMj2K5VSkU6gd14LdFA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:02:35 2025 by rpki-client