This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e3132302e302f32342d3332203d3e203531313637.roa File: 3139342e33352e3132302e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: Y6UUrTiAwXqz4AwR+o9HOt1WRT1vzx326ol8dkjo/Lc= Subject key identifier: 71:8E:6B:54:D2:F9:4C:68:3A:EA:4B:C8:D1:DE:86:0E:41:D1:47:CB Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 41CC0D5940ADC873CF3AF43421A624E8C1D31635 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e3132302e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:52 +0000 ROA not before: Fri 28 Nov 2025 11:44:52 +0000 ROA not after: Fri 27 Nov 2026 11:49:52 +0000 asID: 51167 IP address blocks: 194.35.120.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:cc:0d:59:40:ad:c8:73:cf:3a:f4:34:21:a6:24:e8:c1:d3:16:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:52 2025 GMT Not After : Nov 27 11:49:52 2026 GMT Subject: CN=718E6B54D2F94C683AEA4BC8D1DE860E41D147CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:78:4d:06:d4:5c:47:39:26:3d:4d:cb:0a:96: aa:ea:55:cc:ec:f6:73:e9:e1:99:20:d3:e7:c4:bd: 71:d0:fb:73:54:42:ed:42:25:48:59:bb:d6:8a:7b: f7:e2:39:ca:1f:ae:c2:f8:ee:ea:a0:b0:f7:e7:47: 01:e2:7b:03:bb:e6:8c:ec:f3:ea:e3:e2:f2:b1:b9: cf:cf:f1:dc:51:19:75:fa:50:56:d4:24:82:b6:3a: 4d:51:62:e8:ca:56:48:5f:43:f1:d5:bd:ed:70:c4: 45:8c:81:c7:48:8b:ae:8b:be:de:d9:f8:65:5a:9f: ff:28:f8:07:62:1c:55:68:6d:93:c5:42:05:e6:d8: 0c:13:6a:f1:48:4a:bb:57:05:46:f1:e0:c7:6a:4d: 5b:18:5f:ea:a9:c7:bb:cd:62:e9:52:9f:74:d8:83: 1f:12:90:d9:0b:1d:0f:ea:36:1b:b8:f4:22:06:9c: c7:ee:94:86:77:9a:00:e1:a1:7c:64:17:1c:e8:66: 9e:66:f4:3c:16:63:21:df:12:e2:ed:c2:b7:c9:c4: c6:27:11:dc:66:ab:4c:34:6e:b0:7d:87:36:35:e8: ea:ec:01:aa:43:88:98:47:ac:17:50:8a:c9:08:07: 02:30:cd:19:2f:54:3f:04:7e:04:1f:41:5b:68:6f: b2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8E:6B:54:D2:F9:4C:68:3A:EA:4B:C8:D1:DE:86:0E:41:D1:47:CB X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e3132302e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.120.0/24 Signature Algorithm: sha256WithRSAEncryption a0:d6:26:69:f1:6d:f9:c6:b1:99:63:1e:47:72:bc:15:75:be: 66:e0:b0:b9:84:b2:46:d9:d4:af:fd:0c:d0:a3:86:e3:ad:f8: 5e:36:55:28:56:ca:20:7c:2e:32:f9:df:f1:79:67:81:c0:58: bc:52:07:05:f5:d1:76:5d:00:bc:70:33:39:48:7f:ed:9c:41: 2a:2f:38:da:be:87:da:15:4c:86:e0:91:e0:b8:ba:7d:0e:0f: aa:9a:50:35:fe:f1:24:19:2a:7a:92:06:87:01:42:e9:bf:bb: 0f:82:b6:7b:b6:dc:13:c6:c8:53:73:7f:6f:91:0d:84:a7:b3: de:c8:76:b7:27:91:bd:cd:13:e0:55:ce:1e:dd:69:03:af:cf: 2c:d7:23:be:9c:7a:e3:74:d2:ce:79:56:c3:aa:33:96:af:cc: d6:5b:0a:46:ab:34:62:e0:ce:c6:a9:dc:54:90:1d:9f:0c:3c: 4a:81:89:f0:12:21:b3:44:db:b2:fa:1d:e8:fc:d1:3a:b4:dd: 5e:83:02:cd:c4:3f:93:d2:36:b3:f9:14:18:48:b4:9c:41:8a: 50:7a:dd:09:28:79:5f:62:aa:1c:7d:1c:84:4d:fb:f2:60:38: 4c:b3:f7:e9:13:53:c0:5f:84:82:78:ec:6b:81:dd:54:05:31: 26:a9:81:63 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUQcwNWUCtyHPPOvQ0IaYk6MHTFjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTJaFw0yNjExMjcxMTQ5NTJaMDMxMTAvBgNV BAMTKDcxOEU2QjU0RDJGOTRDNjgzQUVBNEJDOEQxREU4NjBFNDFEMTQ3Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjeE0G1FxHOSY9TcsKlqrqVczs 9nPp4Zkg0+fEvXHQ+3NUQu1CJUhZu9aKe/fiOcofrsL47uqgsPfnRwHiewO75ozs 8+rj4vKxuc/P8dxRGXX6UFbUJIK2Ok1RYujKVkhfQ/HVve1wxEWMgcdIi66Lvt7Z +GVan/8o+AdiHFVobZPFQgXm2AwTavFISrtXBUbx4MdqTVsYX+qpx7vNYulSn3TY gx8SkNkLHQ/qNhu49CIGnMfulIZ3mgDhoXxkFxzoZp5m9DwWYyHfEuLtwrfJxMYn Edxmq0w0brB9hzY16OrsAapDiJhHrBdQiskIBwIwzRkvVD8EfgQfQVtob7JjAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUcY5rVNL5TGg66kvI0d6GDkHRR8swHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMzMzUy ZTMxMzIzMDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADCI3gwDQYJKoZIhvcNAQELBQADggEBAKDWJmnxbfnGsZljHkdyvBV1vmbg sLmEskbZ1K/9DNCjhuOt+F42VShWyiB8LjL53/F5Z4HAWLxSBwX10XZdALxwMzlI f+2cQSovONq+h9oVTIbgkeC4un0OD6qaUDX+8SQZKnqSBocBQum/uw+Ctnu23BPG yFNzf2+RDYSns97Idrcnkb3NE+BVzh7daQOvzyzXI76ceuN00s55VsOqM5avzNZb CkarNGLgzsap3FSQHZ8MPEqBifASIbNE27L6Hej80Tq03V6DAs3EP5PSNrP5FBhI tJxBilB63QkoeV9iqhx9HIRN+/JgOEyz9+kTU8BfhIJ47GuB3VQFMSapgWM= -----END CERTIFICATE-----Generated at Sat Dec 6 12:51:39 2025 by rpki-client