This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e31322e302f32332d3234203d3e203234393430.roa File: 3139342e33352e31322e302f32332d3234203d3e203234393430.roa (raw, json) Hash identifier: eKU6c0C0Nh/ICaJZEOUNwjK4XP/dA2c3NxGqdvUwnAU= Subject key identifier: 0D:78:BE:60:BC:E9:A6:DE:5F:0C:4D:2F:65:E4:19:7C:EE:F5:C9:0F Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 67341C336F95E0F9D17C62DFCFBF2EFA7F438AE8 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e31322e302f32332d3234203d3e203234393430.roa Signing time: Fri 28 Nov 2025 11:49:52 +0000 ROA not before: Fri 28 Nov 2025 11:44:52 +0000 ROA not after: Fri 27 Nov 2026 11:49:52 +0000 asID: 24940 IP address blocks: 194.35.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:34:1c:33:6f:95:e0:f9:d1:7c:62:df:cf:bf:2e:fa:7f:43:8a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:52 2025 GMT Not After : Nov 27 11:49:52 2026 GMT Subject: CN=0D78BE60BCE9A6DE5F0C4D2F65E4197CEEF5C90F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:45:43:d7:ae:e8:5e:f5:65:97:5a:5d:cc: 4d:e6:1c:39:bb:44:12:1d:de:68:1c:4e:65:45:e4: 4b:6d:07:4f:88:c1:80:9a:4c:ff:bb:9a:00:31:05: 73:be:6d:e7:bf:60:f8:59:6c:26:f4:a6:1f:3b:ed: d9:26:a5:f9:34:1e:76:e4:34:bf:ab:bb:93:72:17: 6c:13:7c:20:91:e5:61:4e:f9:47:de:5d:44:8e:68: ac:f5:85:02:08:09:78:53:a0:04:ff:f7:31:bc:95: a5:00:95:14:2a:a7:5f:72:72:d0:3a:bf:39:8d:09: 63:75:4c:d5:c4:40:a9:04:38:34:9c:34:89:0d:69: d9:12:e2:69:be:d9:6c:00:95:83:a4:97:63:19:09: dc:9d:aa:80:2b:64:65:07:01:85:84:3c:53:12:c5: 61:97:53:66:e8:ef:7b:b3:e6:dc:d7:64:09:05:26: 4c:0d:f5:74:d2:2b:8d:c7:a9:e9:4a:5a:0f:d2:ee: cb:ce:a1:83:c6:7e:8f:1c:59:1d:31:24:9a:98:a7: 6f:c7:d3:69:5e:d7:28:8c:3a:e3:ea:fb:55:e0:60: 30:47:c2:31:9c:d5:6e:79:22:b1:35:f0:04:32:97: da:1d:15:5b:90:6d:d1:6c:4b:47:c7:4e:b7:9a:c3: 68:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:78:BE:60:BC:E9:A6:DE:5F:0C:4D:2F:65:E4:19:7C:EE:F5:C9:0F X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e31322e302f32332d3234203d3e203234393430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.12.0/23 Signature Algorithm: sha256WithRSAEncryption 05:b5:30:41:05:d6:94:34:4a:ec:ef:b3:de:49:e4:7f:66:2a: 0e:af:ea:78:d9:31:80:b8:3c:26:87:53:46:b2:61:13:00:b8: e9:a8:a6:35:24:26:29:48:61:64:bf:6d:e6:e3:f2:f6:ec:d7: c8:9b:d6:83:d5:49:4f:20:62:c5:96:3b:41:11:51:90:d0:7c: 2d:d3:d1:2e:25:21:2f:07:ba:fb:7c:79:dc:be:b9:bb:49:68: 22:e0:01:2c:d1:a9:25:67:95:54:fd:a9:63:66:55:ba:3c:be: ce:3a:83:7d:9c:f8:c3:3d:42:2d:03:07:1f:71:c7:cf:64:77: 62:28:ac:ed:0d:a6:30:87:9d:e8:32:83:a3:65:ff:3f:7e:9c: ec:69:0a:da:bd:62:6c:f0:e2:b5:6d:f7:26:94:da:5a:b3:7a: a8:03:0f:98:f6:d8:af:48:fe:68:22:0e:66:88:84:d8:48:05: 50:d0:4c:ce:54:92:65:ff:1e:3c:5a:75:09:65:33:82:1d:92: b6:18:86:56:b6:32:4b:fd:e0:b8:fb:25:96:91:57:93:87:72: e6:38:48:1b:3c:0b:7d:85:55:5b:9f:c8:26:97:f2:f7:48:4f: 6c:ce:4c:3a:1b:8a:78:5c:45:ff:9b:49:f6:97:8f:a2:99:a6: ce:11:56:cc -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUZzQcM2+V4PnRfGLfz78u+n9DiugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTJaFw0yNjExMjcxMTQ5NTJaMDMxMTAvBgNV BAMTKDBENzhCRTYwQkNFOUE2REU1RjBDNEQyRjY1RTQxOTdDRUVGNUM5MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBokVD167oXvVll1pdzE3mHDm7 RBId3mgcTmVF5EttB0+IwYCaTP+7mgAxBXO+bee/YPhZbCb0ph877dkmpfk0Hnbk NL+ru5NyF2wTfCCR5WFO+UfeXUSOaKz1hQIICXhToAT/9zG8laUAlRQqp19yctA6 vzmNCWN1TNXEQKkEODScNIkNadkS4mm+2WwAlYOkl2MZCdydqoArZGUHAYWEPFMS xWGXU2bo73uz5tzXZAkFJkwN9XTSK43HqelKWg/S7svOoYPGfo8cWR0xJJqYp2/H 02le1yiMOuPq+1XgYDBHwjGc1W55IrE18AQyl9odFVuQbdFsS0fHTreaw2h3AgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUDXi+YLzppt5fDE0vZeQZfO71yQ8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMzMzUy ZTMxMzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM0MzkzNDMwLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBwiMMMA0GCSqGSIb3DQEBCwUAA4IBAQAFtTBBBdaUNErs77PeSeR/ZioOr+p4 2TGAuDwmh1NGsmETALjpqKY1JCYpSGFkv23m4/L27NfIm9aD1UlPIGLFljtBEVGQ 0Hwt09EuJSEvB7r7fHncvrm7SWgi4AEs0aklZ5VU/aljZlW6PL7OOoN9nPjDPUIt AwcfccfPZHdiKKztDaYwh53oMoOjZf8/fpzsaQravWJs8OK1bfcmlNpas3qoAw+Y 9tivSP5oIg5miITYSAVQ0EzOVJJl/x48WnUJZTOCHZK2GIZWtjJL/eC4+yWWkVeT h3LmOEgbPAt9hVVbn8gml/L3SE9szkw6G4p4XEX/m0n2l4+imabOEVbM -----END CERTIFICATE-----Generated at Sat Dec 6 22:34:55 2025 by rpki-client