This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137392e302f32342d3234203d3e20313336373837.roa File: 3139342e3138302e3137392e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 7Jg/dmHh1XvOkvYfNOYBXlO48ylfHKCb06eghahpboY= Subject key identifier: 80:F7:21:D0:01:30:96:E9:80:31:D7:99:69:41:2E:6C:A5:45:E9:EB Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 60280F984D3B8EAC7F74A6F035B4FE084D9D31A9 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137392e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:10 +0000 ROA not before: Fri 21 Nov 2025 15:44:10 +0000 ROA not after: Fri 20 Nov 2026 15:49:10 +0000 asID: 136787 IP address blocks: 194.180.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:28:0f:98:4d:3b:8e:ac:7f:74:a6:f0:35:b4:fe:08:4d:9d:31:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:10 2025 GMT Not After : Nov 20 15:49:10 2026 GMT Subject: CN=80F721D0013096E98031D79969412E6CA545E9EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:22:31:d7:a7:48:74:5d:53:84:46:d2:29:f7: f1:2f:79:aa:5c:5e:c2:14:e8:63:75:37:c1:4d:0d: 80:1a:fd:de:db:b0:a0:9e:d0:ef:84:83:4b:6b:fc: b5:76:38:ab:55:42:0b:c0:70:45:67:1d:65:74:bf: 5b:43:0b:32:c0:71:95:1e:06:af:78:03:84:b7:15: ce:03:7e:73:bb:e6:53:63:22:eb:6e:f1:70:d2:d4: a0:d2:fe:88:4a:e7:74:21:70:c4:dd:85:ce:f5:69: a7:80:27:82:1b:4e:a7:bf:42:04:b8:86:38:e6:eb: be:f8:48:f5:82:ec:15:35:7f:a1:70:58:ee:ae:7f: 61:33:f5:3b:5c:62:83:78:8a:78:18:34:7c:19:28: 15:35:f1:0b:29:ac:b7:21:e8:8c:19:b2:72:63:db: 25:72:2b:22:e3:07:3d:7b:06:01:4b:84:f3:85:c6: 94:f4:66:ba:14:e5:df:ae:0b:88:80:88:3c:5b:a5: 88:d1:56:2d:97:6c:cd:28:4b:c7:69:92:d6:83:96: d9:9f:66:f2:8a:ad:fb:d5:02:2d:f7:43:25:ad:34: 28:95:1f:9c:bd:5d:48:9a:e2:29:4b:ef:fc:1b:96: 61:82:a7:b9:57:af:f7:29:5e:6e:67:56:e8:35:c9: ce:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F7:21:D0:01:30:96:E9:80:31:D7:99:69:41:2E:6C:A5:45:E9:EB X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137392e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.180.179.0/24 Signature Algorithm: sha256WithRSAEncryption c7:22:61:e0:18:24:d3:84:43:13:8b:27:09:af:d0:b0:3a:17: 89:07:4b:44:2f:6c:23:2b:a1:23:e7:cc:9f:22:45:34:e2:84: 02:86:c1:bb:47:cb:f8:a2:d0:d5:76:cf:7a:07:c3:ae:a4:ae: 65:a4:91:c9:aa:ae:d8:cb:29:1c:59:18:a4:86:b3:aa:29:a8: 23:33:7c:a5:7c:56:d3:17:7d:c5:44:2a:2f:6b:44:c2:28:ac: 34:7d:43:eb:73:e3:ed:9a:2d:25:20:a2:80:10:e1:10:0e:44: 2d:d2:13:5f:6e:1d:1b:ac:1e:0e:79:4c:16:25:d0:4e:57:86: 0e:20:ad:8c:8c:c2:30:ba:72:6f:7a:24:f5:53:da:45:ec:97: e7:de:bc:af:ee:b9:d5:7c:8a:30:ca:07:53:5a:8d:84:f6:b1: 0d:fb:33:50:15:86:0f:23:6b:91:55:f3:fd:ca:11:2b:60:c1: 73:ae:75:1f:08:9b:ea:31:fa:b2:35:a2:1b:f3:db:fb:ea:2c: 1e:94:0d:c4:b1:5e:14:0e:fd:a6:47:4d:21:ff:69:6a:63:e0: 96:fd:c9:50:44:a2:89:5a:ab:44:ac:c0:71:10:63:78:41:b5: cb:13:e0:4a:43:fa:24:c0:89:8e:30:e1:50:2b:87:3c:8f:66: ae:a4:65:6b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUYCgPmE07jqx/dKbwNbT+CE2dMakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTBaFw0yNjExMjAxNTQ5MTBaMDMxMTAvBgNV BAMTKDgwRjcyMUQwMDEzMDk2RTk4MDMxRDc5OTY5NDEyRTZDQTU0NUU5RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZIjHXp0h0XVOERtIp9/Eveapc XsIU6GN1N8FNDYAa/d7bsKCe0O+Eg0tr/LV2OKtVQgvAcEVnHWV0v1tDCzLAcZUe Bq94A4S3Fc4DfnO75lNjIutu8XDS1KDS/ohK53QhcMTdhc71aaeAJ4IbTqe/QgS4 hjjm6774SPWC7BU1f6FwWO6uf2Ez9TtcYoN4ingYNHwZKBU18QsprLch6IwZsnJj 2yVyKyLjBz17BgFLhPOFxpT0ZroU5d+uC4iAiDxbpYjRVi2XbM0oS8dpktaDltmf ZvKKrfvVAi33QyWtNCiVH5y9XUia4ilL7/wblmGCp7lXr/cpXm5nVug1yc6rAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUgPch0AEwlumAMdeZaUEubKVF6eswHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzgz MDJlMzEzNzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwrSzMA0GCSqGSIb3DQEBCwUAA4IBAQDHImHgGCTThEMTiycJr9Cw OheJB0tEL2wjK6Ej58yfIkU04oQChsG7R8v4otDVds96B8OupK5lpJHJqq7Yyykc WRikhrOqKagjM3ylfFbTF33FRCova0TCKKw0fUPrc+Ptmi0lIKKAEOEQDkQt0hNf bh0brB4OeUwWJdBOV4YOIK2MjMIwunJveiT1U9pF7Jfn3ryv7rnVfIowygdTWo2E 9rEN+zNQFYYPI2uRVfP9yhErYMFzrnUfCJvqMfqyNaIb89v76iwelA3EsV4UDv2m R00h/2lqY+CW/clQRKKJWqtErMBxEGN4QbXLE+BKQ/okwImOMOFQK4c8j2aupGVr -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:10 2025 by rpki-client