This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3234322e35372e302f32342d3332203d3e203531313637.roa File: 3139342e3234322e35372e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: nuMPrRCUXH/46n/ZgNga4DT3XgIscTn91J/1hqmyRkE= Subject key identifier: AB:FF:32:7C:CC:15:40:54:04:B0:B6:A4:D4:1E:B8:6A:E7:A4:89:36 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6A65258E701E5E7E23A0F21E47664AA7CA3F5E47 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3234322e35372e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:28 +0000 ROA not before: Fri 28 Nov 2025 11:44:28 +0000 ROA not after: Fri 27 Nov 2026 11:49:28 +0000 asID: 51167 IP address blocks: 194.242.57.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:65:25:8e:70:1e:5e:7e:23:a0:f2:1e:47:66:4a:a7:ca:3f:5e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:28 2025 GMT Not After : Nov 27 11:49:28 2026 GMT Subject: CN=ABFF327CCC15405404B0B6A4D41EB86AE7A48936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1f:3d:af:62:28:19:1a:bc:a2:2f:70:18:02: 35:2b:55:64:f3:3f:09:b2:d1:ed:88:39:fc:48:80: 7b:07:12:a3:3c:35:8e:e8:f6:f9:e1:91:00:0a:d6: dc:57:f8:80:76:ae:68:4f:31:77:b5:4f:7d:4e:6c: 83:5b:a8:95:bf:8e:56:93:89:ec:9f:40:0a:9f:91: d0:92:e8:94:8b:eb:96:82:b5:c3:7f:d3:d0:55:18: 02:f8:06:a5:ce:c2:63:66:a0:79:c0:1e:34:cc:35: 6c:83:ea:27:16:dc:8c:c1:8f:fc:dc:d7:cd:2b:76: 17:71:2e:59:06:11:3d:47:40:6e:6d:3e:ba:86:14: f3:64:d7:5b:9c:7a:15:29:0c:18:ab:e4:2d:06:e7: 06:09:f4:b2:4e:5e:43:a3:d4:1c:41:27:93:ee:df: a0:2b:1b:52:61:01:5e:92:3d:63:5e:ad:9a:71:ea: 46:58:f8:6f:ab:9b:41:68:73:22:b7:3d:28:3a:37: 2f:f5:aa:b9:cb:1a:17:74:ef:ed:45:42:d4:94:a7: 8e:73:76:07:07:38:4f:86:92:29:45:36:90:e7:c7: e9:16:8d:1b:7b:7f:f1:f0:4b:c6:d4:f2:7a:ef:48: a3:a5:46:9f:7c:73:30:d6:64:a3:5e:c6:31:a9:fc: 9c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FF:32:7C:CC:15:40:54:04:B0:B6:A4:D4:1E:B8:6A:E7:A4:89:36 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3234322e35372e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.242.57.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:8f:59:41:b7:f1:4a:95:01:af:fe:53:7c:ba:7b:17:17:6b: 31:18:47:e8:f7:03:f2:ea:bf:be:9e:e2:25:36:2e:00:47:f2: 64:be:b0:50:f0:1e:b2:3a:6b:49:2b:43:8e:00:ea:80:b6:1d: 2c:42:a6:a1:47:e4:81:11:9a:92:36:4d:60:a5:2e:5f:3d:c6: ec:4f:25:53:14:e5:6c:42:09:9d:0a:dd:58:71:bb:ea:2e:a8: 72:f2:ed:20:a2:dc:65:f6:a0:9a:ad:0b:ef:15:e7:3f:8f:f2: d1:f5:f3:27:d6:53:e3:ff:ea:db:fb:3b:dd:eb:2e:57:39:52: 09:23:10:23:25:42:b5:44:c8:74:b5:31:54:e2:e3:4c:fc:04: 45:30:94:29:7f:40:dd:c1:63:fb:f4:21:3e:11:04:52:82:0f: af:a2:0d:36:11:84:9d:7d:2b:fe:57:a5:35:fc:1c:fd:d4:04: 7c:17:8d:c1:fd:20:b9:b5:ec:04:45:5e:88:c9:39:f2:23:04: f6:1b:69:1b:88:dc:e8:74:16:8d:8b:45:0e:26:9b:d3:25:5e: 50:4c:94:d8:f3:cd:31:c6:22:a9:69:75:ae:34:10:1c:a3:62: ac:69:7c:34:6c:90:62:3f:5c:a7:08:59:6a:e7:f0:0f:eb:88: cb:4a:a0:89 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUamUljnAeXn4joPIeR2ZKp8o/XkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjhaFw0yNjExMjcxMTQ5MjhaMDMxMTAvBgNV BAMTKEFCRkYzMjdDQ0MxNTQwNTQwNEIwQjZBNEQ0MUVCODZBRTdBNDg5MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Hz2vYigZGryiL3AYAjUrVWTz Pwmy0e2IOfxIgHsHEqM8NY7o9vnhkQAK1txX+IB2rmhPMXe1T31ObINbqJW/jlaT ieyfQAqfkdCS6JSL65aCtcN/09BVGAL4BqXOwmNmoHnAHjTMNWyD6icW3IzBj/zc 180rdhdxLlkGET1HQG5tPrqGFPNk11ucehUpDBir5C0G5wYJ9LJOXkOj1BxBJ5Pu 36ArG1JhAV6SPWNerZpx6kZY+G+rm0FocyK3PSg6Ny/1qrnLGhd07+1FQtSUp45z dgcHOE+GkilFNpDnx+kWjRt7f/HwS8bU8nrvSKOlRp98czDWZKNexjGp/JzRAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUq/8yfMwVQFQEsLak1B64auekiTYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMyMzQz MjJlMzUzNzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADC8jkwDQYJKoZIhvcNAQELBQADggEBAIuPWUG38UqVAa/+U3y6excXazEY R+j3A/Lqv76e4iU2LgBH8mS+sFDwHrI6a0krQ44A6oC2HSxCpqFH5IERmpI2TWCl Ll89xuxPJVMU5WxCCZ0K3Vhxu+ouqHLy7SCi3GX2oJqtC+8V5z+P8tH18yfWU+P/ 6tv7O93rLlc5UgkjECMlQrVEyHS1MVTi40z8BEUwlCl/QN3BY/v0IT4RBFKCD6+i DTYRhJ19K/5XpTX8HP3UBHwXjcH9ILm17ARFXojJOfIjBPYbaRuI3Oh0Fo2LRQ4m m9MlXlBMlNjzzTHGIqlpda40EByjYqxpfDRskGI/XKcIWWrn8A/riMtKoIk= -----END CERTIFICATE-----Generated at Sat Dec 6 12:51:52 2025 by rpki-client