This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137372e302f32342d3332203d3e20313431393935.roa File: 3139342e3138302e3137372e302f32342d3332203d3e20313431393935.roa (raw, json) Hash identifier: EaMc5j/Q2Abeto8dKuFreFed9J9e+SfPckcDavIGO4Q= Subject key identifier: 7B:CE:13:AE:31:F4:59:A2:AB:EB:97:C0:4C:7E:8E:96:03:57:53:86 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 5672E07541A72EDFB2FDCF6E23304E646FE83301 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137372e302f32342d3332203d3e20313431393935.roa Signing time: Fri 21 Nov 2025 15:48:59 +0000 ROA not before: Fri 21 Nov 2025 15:43:59 +0000 ROA not after: Fri 20 Nov 2026 15:48:59 +0000 asID: 141995 IP address blocks: 194.180.177.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:72:e0:75:41:a7:2e:df:b2:fd:cf:6e:23:30:4e:64:6f:e8:33:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:43:59 2025 GMT Not After : Nov 20 15:48:59 2026 GMT Subject: CN=7BCE13AE31F459A2ABEB97C04C7E8E9603575386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ee:5c:3d:3c:3f:3d:b8:df:8b:77:a7:05:fd: 04:82:c6:a3:59:01:10:e1:aa:7e:6c:a5:c5:69:86: 13:d1:c8:4a:7f:1e:62:ba:8a:81:2d:62:05:e1:11: 87:0d:66:e1:4b:af:88:22:fe:25:41:a0:28:fd:08: 5e:25:72:33:13:f8:c8:17:54:83:e3:b0:1e:e0:e9: 1e:64:08:0e:e0:89:83:fb:19:5c:78:2e:ba:95:84: e0:f6:b8:6b:9b:d7:77:ff:02:98:59:80:1e:bc:ff: 31:8d:63:a5:3c:d7:f5:4c:df:02:27:88:b7:46:aa: af:39:2f:dd:ae:58:6f:01:69:9e:30:98:d7:2a:6f: 37:25:ec:91:35:fd:35:87:f1:95:c1:75:58:7b:f2: 53:a3:00:a9:ea:d1:61:98:e0:9a:de:1c:bb:17:97: 20:45:08:5a:6f:f0:71:2a:74:58:28:9c:8b:70:26: 0b:7c:7e:80:02:ff:c3:54:e1:c8:6b:9d:be:19:3e: 41:ff:80:4d:3d:98:5a:8f:96:22:b2:95:d5:0e:97: 49:bb:86:fb:9a:58:49:07:46:8e:4b:d3:f6:db:86: 05:6b:b2:c4:24:4c:b0:e9:a6:43:ed:1f:6e:7e:0f: fa:b4:0b:3c:d3:f2:a3:a0:e4:c3:96:dc:c9:09:af: bf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CE:13:AE:31:F4:59:A2:AB:EB:97:C0:4C:7E:8E:96:03:57:53:86 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137372e302f32342d3332203d3e20313431393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.180.177.0/24 Signature Algorithm: sha256WithRSAEncryption c1:16:85:4e:4d:19:d4:0d:d4:6a:aa:b2:62:8b:6d:98:b6:69: e2:17:74:87:37:d8:8e:0a:2c:3a:11:73:a8:c3:e0:1c:e9:87: 1d:f6:06:0b:a8:d8:87:77:d4:c4:42:cd:2b:b3:1e:a2:da:79: 56:4c:4d:fe:b7:1e:d1:26:cc:7c:34:a1:b5:b0:e6:c3:f9:21: af:df:d9:ca:85:42:e8:83:5a:c0:78:8a:ac:59:d3:9e:80:ea: 56:0e:e8:0f:d3:98:a6:3d:05:f7:42:07:37:ee:9b:8d:0f:70: fc:eb:0d:4a:83:47:40:08:35:88:2c:cb:96:ed:7c:3b:ca:b8: 49:f2:60:d5:62:25:c8:3f:5e:41:dd:44:b8:bd:13:d6:53:da: 15:35:c7:13:b1:fa:1d:e6:7b:5e:4b:e8:44:32:d8:a8:cd:c0: 12:70:52:ad:c5:12:1b:3b:7f:4c:f9:8c:1a:2a:e0:95:9c:cd: 3f:7a:be:53:c3:f1:dc:84:9a:b5:24:2a:6c:c1:1a:8b:ac:0b: 5a:ff:38:bf:ab:6d:3b:e7:5a:2c:81:20:78:d8:67:be:3d:c4: 94:19:32:6e:7b:bd:fc:5a:cc:22:12:27:da:22:ed:ef:2a:9d: bb:ea:00:f8:c0:22:8b:2e:03:b5:e2:91:06:52:02:8f:bc:1b: 2a:51:44:f5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUVnLgdUGnLt+y/c9uIzBOZG/oMwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQzNTlaFw0yNjExMjAxNTQ4NTlaMDMxMTAvBgNV BAMTKDdCQ0UxM0FFMzFGNDU5QTJBQkVCOTdDMDRDN0U4RTk2MDM1NzUzODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg7lw9PD89uN+Ld6cF/QSCxqNZ ARDhqn5spcVphhPRyEp/HmK6ioEtYgXhEYcNZuFLr4gi/iVBoCj9CF4lcjMT+MgX VIPjsB7g6R5kCA7giYP7GVx4LrqVhOD2uGub13f/AphZgB68/zGNY6U81/VM3wIn iLdGqq85L92uWG8BaZ4wmNcqbzcl7JE1/TWH8ZXBdVh78lOjAKnq0WGY4JreHLsX lyBFCFpv8HEqdFgonItwJgt8foAC/8NU4chrnb4ZPkH/gE09mFqPliKyldUOl0m7 hvuaWEkHRo5L0/bbhgVrssQkTLDppkPtH25+D/q0CzzT8qOg5MOW3MkJr7+xAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUe84TrjH0WaKr65fATH6OlgNXU4YwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzgz MDJlMzEzNzM3MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzNDMxMzkzOTM1LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwrSxMA0GCSqGSIb3DQEBCwUAA4IBAQDBFoVOTRnUDdRqqrJii22Y tmniF3SHN9iOCiw6EXOow+Ac6Ycd9gYLqNiHd9TEQs0rsx6i2nlWTE3+tx7RJsx8 NKG1sObD+SGv39nKhULog1rAeIqsWdOegOpWDugP05imPQX3Qgc37puND3D86w1K g0dACDWILMuW7Xw7yrhJ8mDVYiXIP15B3US4vRPWU9oVNccTsfod5nteS+hEMtio zcAScFKtxRIbO39M+YwaKuCVnM0/er5Tw/HchJq1JCpswRqLrAta/zi/q20751os gSB42Ge+PcSUGTJue738WswiEifaIu3vKp276gD4wCKLLgO14pEGUgKPvBsqUUT1 -----END CERTIFICATE-----Generated at Sun Dec 7 00:31:25 2025 by rpki-client