This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e31322e302f32332d3234203d3e20323033333830.roa File: 3139342e33352e31322e302f32332d3234203d3e20323033333830.roa (raw, json) Hash identifier: ipZ7zAssJNLyggzXSwrWvQA7WR4m4a5+6Ai9g+mWyiE= Subject key identifier: BB:CB:45:5D:8A:D6:BF:6C:DF:21:0A:F1:62:09:C7:8D:D0:C8:45:5A Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3B52DDA0BAD10F8E8A4EEE3F0DA0092BD8F60ECB Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e31322e302f32332d3234203d3e20323033333830.roa Signing time: Fri 28 Nov 2025 11:49:37 +0000 ROA not before: Fri 28 Nov 2025 11:44:37 +0000 ROA not after: Fri 27 Nov 2026 11:49:37 +0000 asID: 203380 IP address blocks: 194.35.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:52:dd:a0:ba:d1:0f:8e:8a:4e:ee:3f:0d:a0:09:2b:d8:f6:0e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:37 2025 GMT Not After : Nov 27 11:49:37 2026 GMT Subject: CN=BBCB455D8AD6BF6CDF210AF16209C78DD0C8455A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a9:a6:2a:3e:bb:5e:e1:95:fa:91:cd:6b:9a: cb:f8:e1:f0:ef:66:72:d9:79:65:7a:8d:c2:84:0e: b8:81:dd:4a:c0:e7:58:c9:81:62:b1:a7:53:b6:82: e5:28:c6:6f:68:00:4d:d3:0c:68:db:5b:1a:11:7f: 68:99:2b:fe:67:e9:a9:fd:7b:4b:fa:ac:17:72:ac: 23:c8:33:fb:5b:03:95:17:1f:9d:54:33:24:33:2e: 60:4c:5c:a3:ca:71:79:0f:2a:ff:ab:c4:e6:73:a8: cd:89:03:a5:05:5a:7b:4a:89:0d:77:20:46:56:8b: 93:8e:82:ba:62:18:94:c2:2e:2f:66:40:f7:d0:2f: f5:23:00:0a:5f:2a:e8:a6:58:3a:95:39:e6:41:bb: 82:6b:6e:5c:bc:da:73:40:43:a2:92:b6:ae:2e:97: 33:e7:0d:aa:07:df:83:aa:55:56:17:0b:2b:51:4f: 2b:99:e2:32:73:d8:65:2e:00:95:65:b1:ae:6b:83: 5a:30:a9:89:24:71:98:b9:75:f8:a9:86:df:d2:d1: dc:49:d0:21:dc:2f:5a:aa:ca:22:fd:40:ff:75:cc: 12:73:01:ec:af:5d:b7:9a:e1:04:97:5d:1c:a8:7c: e9:b4:fb:d2:58:5e:f4:d2:57:04:3a:b6:44:76:5e: 3a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CB:45:5D:8A:D6:BF:6C:DF:21:0A:F1:62:09:C7:8D:D0:C8:45:5A X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e31322e302f32332d3234203d3e20323033333830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.12.0/23 Signature Algorithm: sha256WithRSAEncryption c4:23:b3:5b:ef:10:10:d4:69:fe:42:ae:4b:26:d8:47:73:2f: 1b:2e:23:11:fa:47:db:6c:ba:17:33:fc:50:4f:8d:3e:ee:66: 65:12:24:82:5a:40:b8:7e:8d:27:81:49:ee:00:7d:c9:05:8b: bc:4a:c0:d6:6b:08:34:45:36:49:f8:a4:0c:d7:21:26:1a:ff: d2:41:84:1d:7f:44:1e:be:e0:5b:c5:5a:24:de:6a:b6:db:98: 4f:08:b8:78:68:01:a7:ce:bb:6a:10:4c:99:ad:f9:0e:ba:a7: 5f:0e:29:d6:1b:26:95:c8:57:23:6f:4a:cd:4e:48:da:8b:31: 74:75:2a:b8:44:1a:70:21:53:eb:ed:00:0e:93:63:66:be:5c: 85:2e:7f:0a:ac:4f:a6:81:36:a2:74:c0:79:94:41:d6:d0:df: b0:8e:e1:0f:ea:ca:fc:52:72:68:5e:d4:ce:f3:b5:e1:27:73: 23:cd:e6:14:33:2c:28:52:03:9b:ee:a0:f7:3d:0b:85:3e:cc: f9:3d:e5:55:63:19:67:96:7a:0a:f1:b9:20:35:53:4e:f0:04: dc:cb:3a:de:68:87:52:07:f0:50:01:ea:55:0e:d3:09:12:b1: 4b:31:75:91:f3:f9:27:78:4b:d3:0f:42:36:69:9c:e0:4d:5a: 66:3f:71:3f -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUO1LdoLrRD46KTu4/DaAJK9j2DsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzdaFw0yNjExMjcxMTQ5MzdaMDMxMTAvBgNV BAMTKEJCQ0I0NTVEOEFENkJGNkNERjIxMEFGMTYyMDlDNzhERDBDODQ1NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUqaYqPrte4ZX6kc1rmsv44fDv ZnLZeWV6jcKEDriB3UrA51jJgWKxp1O2guUoxm9oAE3TDGjbWxoRf2iZK/5n6an9 e0v6rBdyrCPIM/tbA5UXH51UMyQzLmBMXKPKcXkPKv+rxOZzqM2JA6UFWntKiQ13 IEZWi5OOgrpiGJTCLi9mQPfQL/UjAApfKuimWDqVOeZBu4Jrbly82nNAQ6KStq4u lzPnDaoH34OqVVYXCytRTyuZ4jJz2GUuAJVlsa5rg1owqYkkcZi5dfipht/S0dxJ 0CHcL1qqyiL9QP91zBJzAeyvXbea4QSXXRyofOm0+9JYXvTSVwQ6tkR2XjrtAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUu8tFXYrWv2zfIQrxYgnHjdDIRVowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMzMzUy ZTMxMzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjMwMzMzMzM4MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHCIwwwDQYJKoZIhvcNAQELBQADggEBAMQjs1vvEBDUaf5Crksm2EdzLxsu IxH6R9tsuhcz/FBPjT7uZmUSJIJaQLh+jSeBSe4AfckFi7xKwNZrCDRFNkn4pAzX ISYa/9JBhB1/RB6+4FvFWiTearbbmE8IuHhoAafOu2oQTJmt+Q66p18OKdYbJpXI VyNvSs1OSNqLMXR1KrhEGnAhU+vtAA6TY2a+XIUufwqsT6aBNqJ0wHmUQdbQ37CO 4Q/qyvxScmhe1M7zteEncyPN5hQzLChSA5vuoPc9C4U+zPk95VVjGWeWegrxuSA1 U07wBNzLOt5oh1IH8FAB6lUO0wkSsUsxdZHz+Sd4S9MPQjZpnOBNWmY/cT8= -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:21 2025 by rpki-client