This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3233352e302f32342d3234203d3e20313336373837.roa File: 3139342e33342e3233352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: Ko137H1+TgXG4Hg50T42nP9u9f2KMc0/W8Mfp1zaZsk= Subject key identifier: DD:39:88:88:B1:93:A5:18:C1:93:40:38:B0:01:63:97:81:CD:8D:53 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 14293957F1036643D7786A6C970C0537A45EE1B9 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3233352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:42 +0000 ROA not before: Fri 28 Nov 2025 11:44:42 +0000 ROA not after: Fri 27 Nov 2026 11:49:42 +0000 asID: 136787 IP address blocks: 194.34.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:29:39:57:f1:03:66:43:d7:78:6a:6c:97:0c:05:37:a4:5e:e1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:42 2025 GMT Not After : Nov 27 11:49:42 2026 GMT Subject: CN=DD398888B193A518C1934038B001639781CD8D53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b0:65:42:80:cc:5d:bf:77:4a:16:11:8c:77: 63:e3:6a:36:10:54:4f:90:fc:24:bc:e7:bf:44:86: bf:1f:a6:c8:1c:15:82:fd:05:87:e0:62:d5:b9:83: 07:f7:fb:81:b9:06:f6:66:a0:f6:3e:29:79:ec:65: df:87:67:2a:93:85:80:af:c5:6d:4b:7c:60:72:73: bc:b8:6b:ad:60:0d:85:ce:4c:06:14:bd:1a:79:ac: 87:0f:13:e4:d3:9c:d6:b8:95:56:c1:c6:a2:7b:11: d0:e5:51:fb:c5:7a:cd:22:6f:32:87:f9:44:51:c9: f5:f8:96:6a:36:97:2d:bb:4f:e3:ba:76:60:2a:27: ac:38:50:37:fe:3c:8a:7a:90:f5:47:50:c7:3d:bc: 7a:bb:51:a0:ac:62:37:93:3c:44:d4:42:14:f3:b9: d7:43:e5:ff:43:32:97:3c:93:4c:ff:40:50:80:c5: 56:6c:d7:8b:bb:81:1c:cd:ac:b1:e0:88:fe:ca:3d: 93:7d:8d:c2:66:0e:4a:79:48:62:af:0f:65:38:fd: 48:2f:90:54:e1:45:c8:9b:3e:d5:de:d5:b9:dd:57: 5b:49:5b:b2:24:fa:e9:03:a5:4b:7c:b4:5b:ef:f6: cd:30:e9:6e:ce:2f:d9:16:d3:81:75:da:e9:07:18: 7d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:39:88:88:B1:93:A5:18:C1:93:40:38:B0:01:63:97:81:CD:8D:53 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3233352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.34.235.0/24 Signature Algorithm: sha256WithRSAEncryption 08:f9:9c:a5:eb:ac:48:26:2e:63:9a:81:9a:43:1a:df:dc:a2: 59:f9:09:dd:9e:46:87:bc:d2:fa:0f:ae:c3:40:e6:c9:71:1c: dc:68:0d:7b:bf:b5:17:33:b6:38:98:b4:bb:f5:ba:3d:d1:83: ec:e4:a1:68:3a:59:b3:14:24:87:6e:4c:3a:40:b5:0f:e1:09: e0:c1:41:26:7c:75:b1:3e:4e:d6:c1:fe:c4:0f:3a:ea:bf:ea: 12:a5:24:d3:d5:97:e2:be:f0:f3:52:22:dc:86:e6:c6:19:02: 29:93:27:12:9a:c5:98:2d:1c:65:e0:95:8b:39:a8:df:af:43: d1:d7:85:81:20:41:e1:94:04:ba:92:b1:f2:86:6e:29:41:17: b1:7f:46:81:3f:fa:c8:d1:6e:4c:43:48:1d:2c:c5:fc:c1:e6: 58:96:f1:2a:ca:14:27:f7:d8:51:c9:d9:28:57:a2:bf:85:d9: b9:8b:06:fb:e6:83:87:5b:6a:50:86:c0:82:76:0e:fb:28:d1: bc:8f:2f:fa:a9:e2:f8:ef:29:90:41:73:63:f7:3c:b7:c1:05: 34:00:35:27:d3:64:d9:07:19:09:fb:e1:47:be:7e:d1:f4:f7: 3c:f9:f0:a9:b5:06:22:93:fe:19:31:51:82:0f:2c:dd:f7:bc: 8d:57:02:d7 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUFCk5V/EDZkPXeGpslwwFN6Re4bkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDJaFw0yNjExMjcxMTQ5NDJaMDMxMTAvBgNV BAMTKEREMzk4ODg4QjE5M0E1MThDMTkzNDAzOEIwMDE2Mzk3ODFDRDhENTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdsGVCgMxdv3dKFhGMd2PjajYQ VE+Q/CS8579Ehr8fpsgcFYL9BYfgYtW5gwf3+4G5BvZmoPY+KXnsZd+HZyqThYCv xW1LfGByc7y4a61gDYXOTAYUvRp5rIcPE+TTnNa4lVbBxqJ7EdDlUfvFes0ibzKH +URRyfX4lmo2ly27T+O6dmAqJ6w4UDf+PIp6kPVHUMc9vHq7UaCsYjeTPETUQhTz uddD5f9DMpc8k0z/QFCAxVZs14u7gRzNrLHgiP7KPZN9jcJmDkp5SGKvD2U4/Ugv kFThRcibPtXe1bndV1tJW7Ik+ukDpUt8tFvv9s0w6W7OL9kW04F12ukHGH1nAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU3TmIiLGTpRjBk0A4sAFjl4HNjVMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMzMzQy ZTMyMzMzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMIi6zANBgkqhkiG9w0BAQsFAAOCAQEACPmcpeusSCYuY5qBmkMa39yi WfkJ3Z5Gh7zS+g+uw0DmyXEc3GgNe7+1FzO2OJi0u/W6PdGD7OShaDpZsxQkh25M OkC1D+EJ4MFBJnx1sT5O1sH+xA866r/qEqUk09WX4r7w81Ii3IbmxhkCKZMnEprF mC0cZeCVizmo369D0deFgSBB4ZQEupKx8oZuKUEXsX9GgT/6yNFuTENIHSzF/MHm WJbxKsoUJ/fYUcnZKFeiv4XZuYsG++aDh1tqUIbAgnYO+yjRvI8v+qni+O8pkEFz Y/c8t8EFNAA1J9Nk2QcZCfvhR75+0fT3PPnwqbUGIpP+GTFRgg8s3fe8jVcC1w== -----END CERTIFICATE-----Generated at Sat Dec 6 23:37:32 2025 by rpki-client