This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3233332e302f32342d3234203d3e20313336373837.roa File: 3139342e33342e3233332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: Vk+n+17EtDIcOGfTPHmGyfZNOUU4LaApAwGy1krbm8k= Subject key identifier: A4:AE:7F:B0:D6:96:2A:D9:8A:2E:D8:88:BF:9A:A5:97:D3:48:6B:16 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 76336D714D5366B341231ADBEC0FDCAD804F312D Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3233332e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:32 +0000 ROA not before: Fri 28 Nov 2025 11:44:32 +0000 ROA not after: Fri 27 Nov 2026 11:49:32 +0000 asID: 136787 IP address blocks: 194.34.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:33:6d:71:4d:53:66:b3:41:23:1a:db:ec:0f:dc:ad:80:4f:31:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:32 2025 GMT Not After : Nov 27 11:49:32 2026 GMT Subject: CN=A4AE7FB0D6962AD98A2ED888BF9AA597D3486B16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ef:7b:7a:0b:cd:af:0b:d0:c0:65:c8:00:8e: e0:84:d9:07:0f:62:f3:3c:bc:a4:f8:3d:1f:9d:9e: 3c:8d:ac:f7:0a:27:2b:30:51:ff:6d:80:a2:1e:b1: 20:f6:6d:bf:de:3d:13:d9:d4:66:f8:94:67:a9:60: 29:f2:70:74:96:33:07:0e:57:2e:ff:a0:ed:e9:c8: 69:8e:e3:b5:27:b6:e7:5b:fb:5e:c1:3f:98:82:63: 90:2d:48:7d:a8:02:ce:6e:c7:b7:1e:ad:15:d2:06: 63:59:10:ba:16:5d:0e:d0:30:48:50:a9:1e:f7:69: aa:1e:73:12:11:50:0a:fd:7c:9a:b7:b8:19:f7:ba: a5:23:ca:32:16:d9:99:10:e0:e8:b0:f3:f6:e1:4c: a6:3c:8b:05:6d:12:0e:9e:38:3c:ba:2b:38:49:d4: fe:79:dd:b2:8e:40:b0:8a:16:7c:2f:45:33:4c:26: 0b:68:9e:21:6c:88:77:dc:dd:bd:9b:a9:f3:85:3a: 53:aa:7c:b2:ad:cb:1a:12:7a:fc:72:2d:4c:2f:69: ed:bd:73:1c:30:0d:ea:b5:f0:6b:ce:80:4a:76:ad: 2a:4b:09:9a:90:bf:83:eb:45:c5:73:5d:10:a1:ef: 66:fb:21:ba:fa:9b:27:6a:50:77:57:f6:80:69:0a: a5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AE:7F:B0:D6:96:2A:D9:8A:2E:D8:88:BF:9A:A5:97:D3:48:6B:16 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3233332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.34.233.0/24 Signature Algorithm: sha256WithRSAEncryption 98:e6:fb:7c:d3:c3:f3:0f:25:6f:a2:69:e5:f1:a2:60:97:56: d6:89:cc:1e:24:b1:bb:0b:9b:3f:e7:f9:aa:4c:67:eb:e0:2c: cf:03:18:9d:a8:b7:77:2d:60:bc:e8:cc:97:65:2a:49:4c:88: 90:cc:1a:72:ae:a0:e4:a6:77:22:af:bc:f9:83:c2:37:68:ea: b4:fd:9f:27:2c:72:74:13:c2:e7:42:b8:a5:70:e3:17:15:c8: 2b:16:8c:fd:1a:7d:bf:7d:34:3d:4e:92:43:4c:10:8f:95:bb: 29:bb:55:65:fe:b6:70:f4:b4:05:c5:73:21:14:56:3c:b6:e5: dd:fb:00:96:c8:90:a7:b7:eb:5c:95:76:93:54:be:13:dd:2b: ab:c3:b5:4a:8f:dc:8d:e2:d2:27:25:53:55:83:57:aa:e5:c2: 1e:c9:62:ec:0b:3c:e6:5f:70:88:37:34:23:eb:8f:4e:f1:d6: af:70:42:ba:90:d9:05:fc:71:86:f6:7c:ff:22:88:3e:81:84: 27:dc:ed:1c:ca:ab:03:25:ba:5e:6c:92:5c:17:ca:0f:6b:6a: 3a:d5:47:5f:2f:db:a5:dc:c5:3a:a6:f9:e7:64:34:ab:c7:ac: 3f:82:f6:22:26:49:98:07:fd:c2:52:7c:55:28:31:dc:58:5e: d5:18:02:e5 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUdjNtcU1TZrNBIxrb7A/crYBPMS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzJaFw0yNjExMjcxMTQ5MzJaMDMxMTAvBgNV BAMTKEE0QUU3RkIwRDY5NjJBRDk4QTJFRDg4OEJGOUFBNTk3RDM0ODZCMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB73t6C82vC9DAZcgAjuCE2QcP YvM8vKT4PR+dnjyNrPcKJyswUf9tgKIesSD2bb/ePRPZ1Gb4lGepYCnycHSWMwcO Vy7/oO3pyGmO47Untudb+17BP5iCY5AtSH2oAs5ux7cerRXSBmNZELoWXQ7QMEhQ qR73aaoecxIRUAr9fJq3uBn3uqUjyjIW2ZkQ4Oiw8/bhTKY8iwVtEg6eODy6KzhJ 1P553bKOQLCKFnwvRTNMJgtoniFsiHfc3b2bqfOFOlOqfLKtyxoSevxyLUwvae29 cxwwDeq18GvOgEp2rSpLCZqQv4PrRcVzXRCh72b7Ibr6mydqUHdX9oBpCqX3AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUpK5/sNaWKtmKLtiIv5qll9NIaxYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMzMzQy ZTMyMzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMIi6TANBgkqhkiG9w0BAQsFAAOCAQEAmOb7fNPD8w8lb6Jp5fGiYJdW 1onMHiSxuwubP+f5qkxn6+AszwMYnai3dy1gvOjMl2UqSUyIkMwacq6g5KZ3Iq+8 +YPCN2jqtP2fJyxydBPC50K4pXDjFxXIKxaM/Rp9v300PU6SQ0wQj5W7KbtVZf62 cPS0BcVzIRRWPLbl3fsAlsiQp7frXJV2k1S+E90rq8O1So/cjeLSJyVTVYNXquXC Hsli7As85l9wiDc0I+uPTvHWr3BCupDZBfxxhvZ8/yKIPoGEJ9ztHMqrAyW6XmyS XBfKD2tqOtVHXy/bpdzFOqb552Q0q8esP4L2IiZJmAf9wlJ8VSgx3Fhe1RgC5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 21:41:53 2025 by rpki-client