This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137382e302f32342d3234203d3e20313336373837.roa File: 3139342e3138302e3137382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: nH29vnE90TTUC8AM7z6NWBTYcqUN2rmY5aIf6e9bMok= Subject key identifier: CA:76:83:A7:88:50:71:28:29:65:94:44:4D:88:3E:79:21:05:A0:E2 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 449FD042EC08B5A879FE9F74F35F930CCB8A387F Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:02 +0000 ROA not before: Fri 21 Nov 2025 15:44:02 +0000 ROA not after: Fri 20 Nov 2026 15:49:02 +0000 asID: 136787 IP address blocks: 194.180.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:9f:d0:42:ec:08:b5:a8:79:fe:9f:74:f3:5f:93:0c:cb:8a:38:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:02 2025 GMT Not After : Nov 20 15:49:02 2026 GMT Subject: CN=CA7683A788507128296594444D883E792105A0E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f6:f5:ee:b3:cd:41:ed:14:bf:58:a6:7a:a7: 91:e4:04:c9:7e:d7:41:6b:8e:8a:55:1f:bf:7c:f1: 0d:c7:12:e9:1f:bc:31:88:06:53:8c:c9:b0:82:2f: 63:c1:10:56:c0:96:bd:63:f7:82:33:16:a0:43:f0: 2a:d9:28:d7:a2:9e:be:e0:e6:9f:1f:5b:c8:3a:dc: 93:d3:dd:0f:62:cf:60:f1:28:95:49:de:fd:32:30: 8b:b4:cb:11:ce:67:8f:ce:8b:9e:99:25:ac:b0:80: 5c:5c:b2:23:0d:57:1a:84:9b:55:f1:c4:8c:c2:1e: b6:07:f8:2b:b8:65:8f:02:1d:2f:61:a9:00:2c:c6: fc:fc:da:4d:4b:19:47:81:68:4a:fc:1e:47:34:19: 6a:87:c7:fc:7d:81:25:ec:05:43:2f:3a:68:26:03: bb:33:4d:37:2c:cc:c2:36:38:c4:6e:f2:b8:94:20: 10:ba:e9:55:0d:ec:d5:c3:91:b0:4f:e0:f1:c7:9a: 5a:de:0a:aa:2c:85:e8:30:b8:d4:44:8c:e2:0e:df: e8:19:e0:4c:0e:80:90:81:95:ef:1d:53:48:34:b5: 68:8a:d1:2a:95:74:d5:78:8d:8c:79:b8:2e:9f:e3: e3:ec:ec:2c:9d:5f:ff:34:7d:f3:0c:11:34:74:97: fa:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:76:83:A7:88:50:71:28:29:65:94:44:4D:88:3E:79:21:05:A0:E2 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.180.178.0/24 Signature Algorithm: sha256WithRSAEncryption 53:54:01:62:76:ec:c0:f9:0a:9e:cb:7f:fb:6c:03:bc:31:a7: 7f:8d:b2:d3:d6:64:aa:05:92:43:f0:bc:3f:98:3c:c7:81:26: 8f:43:a9:55:ca:7a:d7:93:da:07:2d:67:82:55:00:78:4b:5e: 7c:0b:2a:9e:d2:d1:d9:2d:2e:93:f7:92:ae:30:6d:54:44:98: 7b:ad:47:4d:0a:7a:2b:5e:03:64:c9:fe:0e:95:ea:4c:4b:43: 20:0b:ba:87:5e:e0:8f:ae:ef:53:9d:4c:22:27:05:8f:7d:40: b8:72:d5:9d:b4:53:c6:25:ba:83:6b:d0:51:d1:e3:3f:19:2e: 26:55:6d:3f:b8:1c:6b:4a:62:cf:0b:8f:04:e7:7d:71:ec:a3: 95:d4:96:49:1c:fc:65:ac:b5:1c:70:94:27:96:97:6f:d6:9d: 37:b5:7c:1b:48:5d:4c:fd:eb:03:58:f3:86:ad:d6:d8:3b:cd: 6c:e0:33:b8:78:41:b1:cd:7b:e1:08:36:5c:31:a5:08:72:5e: 94:54:eb:87:da:8f:35:ed:fc:86:24:e9:1b:07:4b:fb:b3:39: 96:1f:90:5a:9a:fd:75:07:11:33:3e:b4:48:8e:58:84:a4:3b: 2a:54:d8:bc:b7:35:56:35:93:19:fe:dc:b7:37:15:86:e7:ec: 79:1c:a4:c0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIURJ/QQuwItah5/p9081+TDMuKOH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDJaFw0yNjExMjAxNTQ5MDJaMDMxMTAvBgNV BAMTKENBNzY4M0E3ODg1MDcxMjgyOTY1OTQ0NDREODgzRTc5MjEwNUEwRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79vXus81B7RS/WKZ6p5HkBMl+ 10FrjopVH7988Q3HEukfvDGIBlOMybCCL2PBEFbAlr1j94IzFqBD8CrZKNeinr7g 5p8fW8g63JPT3Q9iz2DxKJVJ3v0yMIu0yxHOZ4/Oi56ZJaywgFxcsiMNVxqEm1Xx xIzCHrYH+Cu4ZY8CHS9hqQAsxvz82k1LGUeBaEr8Hkc0GWqHx/x9gSXsBUMvOmgm A7szTTcszMI2OMRu8riUIBC66VUN7NXDkbBP4PHHmlreCqoshegwuNREjOIO3+gZ 4EwOgJCBle8dU0g0tWiK0SqVdNV4jYx5uC6f4+Ps7CydX/80ffMMETR0l/qxAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUynaDp4hQcSgpZZRETYg+eSEFoOIwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzgz MDJlMzEzNzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwrSyMA0GCSqGSIb3DQEBCwUAA4IBAQBTVAFiduzA+Qqey3/7bAO8 Mad/jbLT1mSqBZJD8Lw/mDzHgSaPQ6lVynrXk9oHLWeCVQB4S158Cyqe0tHZLS6T 95KuMG1URJh7rUdNCnorXgNkyf4OlepMS0MgC7qHXuCPru9TnUwiJwWPfUC4ctWd tFPGJbqDa9BR0eM/GS4mVW0/uBxrSmLPC48E531x7KOV1JZJHPxlrLUccJQnlpdv 1p03tXwbSF1M/esDWPOGrdbYO81s4DO4eEGxzXvhCDZcMaUIcl6UVOuH2o817fyG JOkbB0v7szmWH5Bamv11BxEzPrRIjliEpDsqVNi8tzVWNZMZ/ty3NxWG5+x5HKTA -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:20 2025 by rpki-client