This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3233322e302f32342d3332203d3e203531313637.roa File: 3139342e33342e3233322e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: KxT2X3yM5hk+Rhy3H2+h3AMI06pQboR8dJNlF6EhD5w= Subject key identifier: BD:D8:EC:60:2A:0F:C0:E7:03:FE:CE:68:12:7B:6E:C9:0B:EB:90:D0 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 62C284E3F86002EA7018A09532783555F53C8C44 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3233322e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:50 +0000 ROA not before: Fri 28 Nov 2025 11:44:50 +0000 ROA not after: Fri 27 Nov 2026 11:49:50 +0000 asID: 51167 IP address blocks: 194.34.232.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:c2:84:e3:f8:60:02:ea:70:18:a0:95:32:78:35:55:f5:3c:8c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:50 2025 GMT Not After : Nov 27 11:49:50 2026 GMT Subject: CN=BDD8EC602A0FC0E703FECE68127B6EC90BEB90D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ff:30:92:d7:51:3c:2b:c6:e4:b2:c4:80:f4: 87:bd:9e:71:39:15:38:2c:7e:75:f2:24:85:0d:d6: 6a:22:4b:a8:bb:cf:39:a2:a6:7e:72:6a:14:9a:64: 06:d6:4a:f1:ba:5b:0e:03:94:f5:af:f8:95:80:79: cf:04:56:6d:ae:ac:66:5b:78:e7:dc:bf:64:97:f0: ea:68:3f:5c:f2:0d:02:a9:1c:28:c7:7d:4e:bb:79: 00:59:67:79:9d:b1:23:49:57:b3:c3:63:39:01:93: a3:97:87:d1:17:6c:0d:9c:eb:87:bc:cb:e8:71:2e: da:34:1e:71:e2:11:b2:d6:c4:91:46:f4:4b:86:e3: 61:13:89:a8:c3:d5:7b:e6:5d:52:8e:63:69:9c:ae: 45:00:7f:5e:04:dd:7f:db:23:b7:e6:6e:14:96:13: 39:b9:f3:06:85:96:a0:bb:aa:d0:29:64:f9:50:d4: 6c:f7:98:5b:97:54:69:13:60:ee:d7:ee:33:c9:61: 90:00:20:bc:5c:95:96:a6:4c:89:fe:70:8d:e6:9a: d1:c4:10:3b:3e:5b:bf:09:95:bf:d5:a1:70:13:81: 0a:92:9b:a8:36:08:4f:5c:33:6f:48:2b:ad:bf:a6: cb:fa:97:cc:ba:9d:11:be:bb:9a:bd:61:84:ff:7f: 0c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D8:EC:60:2A:0F:C0:E7:03:FE:CE:68:12:7B:6E:C9:0B:EB:90:D0 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3233322e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.34.232.0/24 Signature Algorithm: sha256WithRSAEncryption cd:6a:74:3f:7f:d9:90:6a:ae:61:72:24:5a:ee:4f:9c:6f:5b: 3f:02:47:36:75:60:cf:a0:69:a2:ff:47:21:dd:b9:3f:94:c4: d5:a1:da:00:3e:07:2d:3d:79:4d:37:b0:83:cd:ef:b7:8e:38: 79:55:2e:12:fa:fc:3e:b0:86:63:b8:0f:c3:19:1c:73:f5:2d: 5b:01:0d:11:11:99:50:98:2d:51:d0:e2:95:8c:24:6a:1f:73: c2:b2:fb:15:1b:0b:7d:4f:e2:2d:31:75:d6:c8:16:25:b4:c2: 79:51:d3:a7:8e:ef:ba:cd:bb:0f:d8:8a:c3:51:0e:80:9b:6b: b7:ac:91:72:8f:2a:52:e6:7b:4f:26:f6:14:2d:c2:8a:b3:53: de:9d:43:da:3a:fd:9d:25:81:2f:f3:9a:1f:8b:0b:46:92:84: 58:6d:af:4a:27:2e:d5:dd:e3:81:72:e4:f0:e6:dd:00:3b:b4: 91:c5:d8:18:42:16:c6:3b:04:45:05:54:10:6c:d9:8f:b3:05: a7:ce:08:4b:72:64:0f:7b:41:4f:b8:91:9c:72:b5:01:ec:f3: d6:c8:47:dd:f0:86:7a:ff:a1:54:38:81:1a:d0:57:c9:e7:a0: 7f:ef:0c:ce:be:fe:8f:f6:c1:a0:cf:34:7f:2b:2e:9e:e2:f8: 26:ef:d2:b5 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUYsKE4/hgAupwGKCVMng1VfU8jEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTBaFw0yNjExMjcxMTQ5NTBaMDMxMTAvBgNV BAMTKEJERDhFQzYwMkEwRkMwRTcwM0ZFQ0U2ODEyN0I2RUM5MEJFQjkwRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs/zCS11E8K8bkssSA9Ie9nnE5 FTgsfnXyJIUN1moiS6i7zzmipn5yahSaZAbWSvG6Ww4DlPWv+JWAec8EVm2urGZb eOfcv2SX8OpoP1zyDQKpHCjHfU67eQBZZ3mdsSNJV7PDYzkBk6OXh9EXbA2c64e8 y+hxLto0HnHiEbLWxJFG9EuG42ETiajD1XvmXVKOY2mcrkUAf14E3X/bI7fmbhSW Ezm58waFlqC7qtApZPlQ1Gz3mFuXVGkTYO7X7jPJYZAAILxclZamTIn+cI3mmtHE EDs+W78Jlb/VoXATgQqSm6g2CE9cM29IK62/psv6l8y6nRG+u5q9YYT/fwwzAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUvdjsYCoPwOcD/s5oEntuyQvrkNAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMzMzQy ZTMyMzMzMjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADCIugwDQYJKoZIhvcNAQELBQADggEBAM1qdD9/2ZBqrmFyJFruT5xvWz8C RzZ1YM+gaaL/RyHduT+UxNWh2gA+By09eU03sIPN77eOOHlVLhL6/D6whmO4D8MZ HHP1LVsBDRERmVCYLVHQ4pWMJGofc8Ky+xUbC31P4i0xddbIFiW0wnlR06eO77rN uw/YisNRDoCba7eskXKPKlLme08m9hQtwoqzU96dQ9o6/Z0lgS/zmh+LC0aShFht r0onLtXd44Fy5PDm3QA7tJHF2BhCFsY7BEUFVBBs2Y+zBafOCEtyZA97QU+4kZxy tQHs89bIR93whnr/oVQ4gRrQV8nnoH/vDM6+/o/2waDPNH8rLp7i+Cbv0rU= -----END CERTIFICATE-----Generated at Sat Dec 6 12:52:32 2025 by rpki-client