This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3234322e35362e302f32342d3332203d3e203531313637.roa File: 3139342e3234322e35362e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: Az0xWISXZ3LoaDy6t9xHsLMgDDbRfDs0glLdhsYZ8WU= Subject key identifier: EF:CA:55:FE:C7:9E:B2:AD:A1:9E:DA:97:78:A8:8C:68:28:3C:97:53 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 20C643A77F966EB1FB3D79BBEDC269AFC8044341 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3234322e35362e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:53 +0000 ROA not before: Fri 28 Nov 2025 11:44:53 +0000 ROA not after: Fri 27 Nov 2026 11:49:53 +0000 asID: 51167 IP address blocks: 194.242.56.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c6:43:a7:7f:96:6e:b1:fb:3d:79:bb:ed:c2:69:af:c8:04:43:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:53 2025 GMT Not After : Nov 27 11:49:53 2026 GMT Subject: CN=EFCA55FEC79EB2ADA19EDA9778A88C68283C9753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b2:f4:fd:a6:2c:7a:ef:44:4d:ce:ef:bc:4c: d9:d5:d9:9f:83:9e:8b:fa:4f:96:43:1a:e1:4e:71: 19:54:fe:4e:4f:a8:dd:78:0d:0b:fc:7d:c4:cf:de: 9a:82:c2:97:9a:36:4d:c9:7b:eb:fe:00:c6:7f:02: dc:d4:f7:b5:13:f1:9a:b4:79:04:6d:a0:e7:df:80: 1b:f2:24:75:ef:01:80:6a:c3:c8:02:29:57:c0:3a: b6:e5:75:df:38:3c:5a:60:98:cd:29:3b:6e:56:bc: 98:b4:fa:90:08:97:3c:3d:3b:d7:81:18:12:ad:40: ea:d6:b4:0b:96:f2:f1:33:34:1c:c6:ba:05:47:b0: 12:34:dd:a8:9c:02:cb:a8:ea:e2:24:6b:80:c0:27: 61:cb:4e:65:4c:9a:a6:0d:aa:2e:77:c7:82:e3:50: 63:08:1d:4e:cf:75:c1:e5:30:4a:a8:1c:c2:5c:4f: dc:c5:0c:72:53:d3:83:8f:5c:a7:12:b1:94:f7:24: 3f:4c:e5:33:5e:81:1b:b2:76:b5:3c:e1:6e:0b:3a: a3:76:ce:ef:76:8c:5c:30:30:a2:18:c7:66:75:0f: 8e:da:54:ea:13:a9:1d:41:f7:72:52:9d:51:98:32: 37:39:0e:d2:85:82:74:23:2b:a3:dd:6c:28:dc:f8: 2c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CA:55:FE:C7:9E:B2:AD:A1:9E:DA:97:78:A8:8C:68:28:3C:97:53 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3234322e35362e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.242.56.0/24 Signature Algorithm: sha256WithRSAEncryption a4:ac:ee:90:90:63:1f:a4:1f:4b:db:6d:5e:07:26:f9:9c:cc: 8c:5b:f2:14:67:05:4f:24:40:01:5b:91:39:25:de:7c:37:18: 7e:fc:fb:cb:98:e2:72:42:eb:80:b3:b0:96:11:37:32:e2:cd: ae:d3:0b:0c:ee:ce:39:9e:61:4a:88:b9:e7:36:a4:76:ea:7d: ac:69:fa:85:5e:4c:40:7b:15:cd:b1:f1:e8:54:d7:ba:65:4b: 77:87:60:a9:d7:3a:4a:87:d4:38:5a:76:83:03:9d:58:7e:fd: 1a:25:a3:5e:ea:d5:1a:3b:ba:92:95:22:f5:f7:20:36:59:63: a6:11:b8:3f:a7:7c:5f:9d:25:39:94:91:b4:5f:0d:92:dd:ba: 7a:2d:43:74:41:04:c0:9e:45:c2:cf:e8:55:0b:96:15:00:23: 39:76:9e:cc:7f:13:69:27:18:df:19:fc:ef:8e:41:d3:e1:bb: c1:46:09:a4:59:cf:01:5d:33:f4:0a:fa:b7:97:b3:3c:7c:c0: 67:ac:e7:65:d8:85:a1:e2:e0:4b:f9:54:7d:61:60:12:4e:af: 74:dd:9d:1e:dd:37:e3:3d:6d:83:b0:60:f0:75:c5:8b:b7:6d: 13:df:0f:05:2d:b4:bd:e4:e2:5f:01:de:e5:10:0b:50:4e:db: ac:9e:41:ad -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUIMZDp3+WbrH7PXm77cJpr8gEQ0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTNaFw0yNjExMjcxMTQ5NTNaMDMxMTAvBgNV BAMTKEVGQ0E1NUZFQzc5RUIyQURBMTlFREE5Nzc4QTg4QzY4MjgzQzk3NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDasvT9pix670RNzu+8TNnV2Z+D nov6T5ZDGuFOcRlU/k5PqN14DQv8fcTP3pqCwpeaNk3Je+v+AMZ/AtzU97UT8Zq0 eQRtoOffgBvyJHXvAYBqw8gCKVfAOrbldd84PFpgmM0pO25WvJi0+pAIlzw9O9eB GBKtQOrWtAuW8vEzNBzGugVHsBI03aicAsuo6uIka4DAJ2HLTmVMmqYNqi53x4Lj UGMIHU7PdcHlMEqoHMJcT9zFDHJT04OPXKcSsZT3JD9M5TNegRuydrU84W4LOqN2 zu92jFwwMKIYx2Z1D47aVOoTqR1B93JSnVGYMjc5DtKFgnQjK6PdbCjc+CwvAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU78pV/seesq2hntqXeKiMaCg8l1MwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMyMzQz MjJlMzUzNjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADC8jgwDQYJKoZIhvcNAQELBQADggEBAKSs7pCQYx+kH0vbbV4HJvmczIxb 8hRnBU8kQAFbkTkl3nw3GH78+8uY4nJC64CzsJYRNzLiza7TCwzuzjmeYUqIuec2 pHbqfaxp+oVeTEB7Fc2x8ehU17plS3eHYKnXOkqH1DhadoMDnVh+/Rolo17q1Ro7 upKVIvX3IDZZY6YRuD+nfF+dJTmUkbRfDZLdunotQ3RBBMCeRcLP6FULlhUAIzl2 nsx/E2knGN8Z/O+OQdPhu8FGCaRZzwFdM/QK+reXszx8wGes52XYhaHi4Ev5VH1h YBJOr3TdnR7dN+M9bYOwYPB1xYu3bRPfDwUttL3k4l8B3uUQC1BO26yeQa0= -----END CERTIFICATE-----Generated at Sat Dec 6 14:01:38 2025 by rpki-client