This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e3132312e302f32342d3234203d3e20313336373837.roa File: 3139342e33352e3132312e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: UYKWegfOrdMRj2VzpSE3UgJ8mtSRY8VPj3D/Fexmfkk= Subject key identifier: 97:B4:BB:19:57:77:E8:38:7B:87:11:73:58:E9:DF:A3:1C:D0:DA:89 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3EB40DCA0B36EDDB85150BF5D970D582F64AD459 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e3132312e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:30 +0000 ROA not before: Fri 28 Nov 2025 11:44:30 +0000 ROA not after: Fri 27 Nov 2026 11:49:30 +0000 asID: 136787 IP address blocks: 194.35.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b4:0d:ca:0b:36:ed:db:85:15:0b:f5:d9:70:d5:82:f6:4a:d4:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:30 2025 GMT Not After : Nov 27 11:49:30 2026 GMT Subject: CN=97B4BB195777E8387B87117358E9DFA31CD0DA89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:75:44:9b:27:3f:66:d6:ae:0e:d6:41:e2:31: 43:c9:96:ca:27:3b:84:fe:95:2c:46:fc:77:f0:26: 96:19:8d:62:e1:22:df:87:9f:57:f7:0d:b3:ea:18: 45:4c:7d:f0:11:00:45:62:86:3f:65:03:06:70:70: 67:29:0f:e7:e0:c4:e2:c7:33:ec:d0:f6:8d:2d:b0: 21:98:80:00:e2:97:db:2c:5f:83:8b:bc:75:e5:76: bc:f4:3b:97:30:c3:d7:fc:23:58:26:3b:c4:7e:de: e5:b8:ca:80:7a:c2:9b:db:49:b7:17:4a:4b:cc:14: 4e:cc:a8:b5:79:53:9b:26:a6:5f:3d:b9:53:e4:fc: 48:39:f0:a3:d2:a6:e2:eb:40:4a:4c:34:a8:ab:64: 1c:2e:e4:01:fe:85:e7:1e:3e:5f:98:bf:94:d7:b2: ca:44:d5:c1:05:3e:4b:f0:09:2f:98:80:a5:b4:1c: 89:69:4c:19:98:9d:f8:1b:3d:82:a8:1a:e3:25:9d: 78:15:42:5b:14:90:27:10:8d:bc:71:ea:8b:01:73: 2f:62:ed:b1:3c:4e:82:fb:6d:30:ea:fd:e9:57:d6: 79:ac:24:7e:cb:ad:47:25:6b:93:7a:07:0d:70:79: 4a:5d:d0:db:71:17:c6:f3:64:11:d9:b2:98:15:30: e3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B4:BB:19:57:77:E8:38:7B:87:11:73:58:E9:DF:A3:1C:D0:DA:89 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e3132312e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.121.0/24 Signature Algorithm: sha256WithRSAEncryption e0:7d:8d:37:99:cf:84:28:1c:74:fe:26:45:b7:91:7d:44:b5: 9e:29:74:38:17:31:2d:83:82:fd:9b:97:c7:db:8d:61:0f:d9: 50:1f:38:5d:f5:1c:56:ab:e4:af:d2:a3:3a:20:fd:eb:bf:54: 9f:10:0e:7a:e3:31:54:06:24:3f:cc:96:5c:b9:2f:2b:2b:99: a6:7d:fb:71:36:36:81:32:c5:fb:e3:f2:f8:4e:8e:88:5a:fd: 14:d9:39:88:d9:bc:4d:6e:b0:26:36:29:12:a5:e3:af:8f:34: 98:9e:97:e9:63:d9:bf:df:e8:26:15:e0:b4:19:4d:27:9e:d0: 1e:ab:52:c4:19:36:0f:f9:8c:6d:8e:cc:71:15:08:75:d9:43: ac:57:04:a4:6c:97:c1:cb:41:5f:3e:03:41:cf:0b:00:82:4a: 27:65:ce:84:bf:b9:48:15:f1:3a:a0:f2:d0:96:9c:eb:27:d1: 0a:10:ac:6a:d6:e2:16:74:de:69:30:27:85:c8:69:4e:1c:07: 67:bb:de:5f:e7:17:d8:41:17:69:f2:a7:5f:52:bc:8c:74:9c: 13:b8:ee:82:b3:e7:b4:f8:b1:2b:26:41:5d:67:ad:77:65:8e: ad:c6:7a:29:40:0f:a9:03:55:5a:68:f8:e3:ac:a0:16:aa:40: 28:a7:93:ad -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUPrQNygs27duFFQv12XDVgvZK1FkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzBaFw0yNjExMjcxMTQ5MzBaMDMxMTAvBgNV BAMTKDk3QjRCQjE5NTc3N0U4Mzg3Qjg3MTE3MzU4RTlERkEzMUNEMERBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCldUSbJz9m1q4O1kHiMUPJlson O4T+lSxG/HfwJpYZjWLhIt+Hn1f3DbPqGEVMffARAEVihj9lAwZwcGcpD+fgxOLH M+zQ9o0tsCGYgADil9ssX4OLvHXldrz0O5cww9f8I1gmO8R+3uW4yoB6wpvbSbcX SkvMFE7MqLV5U5smpl89uVPk/Eg58KPSpuLrQEpMNKirZBwu5AH+hecePl+Yv5TX sspE1cEFPkvwCS+YgKW0HIlpTBmYnfgbPYKoGuMlnXgVQlsUkCcQjbxx6osBcy9i 7bE8ToL7bTDq/elX1nmsJH7LrUcla5N6Bw1weUpd0NtxF8bzZBHZspgVMOOrAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUl7S7GVd36Dh7hxFzWOnfoxzQ2okwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMzMzUy ZTMxMzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMIjeTANBgkqhkiG9w0BAQsFAAOCAQEA4H2NN5nPhCgcdP4mRbeRfUS1 nil0OBcxLYOC/ZuXx9uNYQ/ZUB84XfUcVqvkr9KjOiD9679UnxAOeuMxVAYkP8yW XLkvKyuZpn37cTY2gTLF++Py+E6OiFr9FNk5iNm8TW6wJjYpEqXjr480mJ6X6WPZ v9/oJhXgtBlNJ57QHqtSxBk2D/mMbY7McRUIddlDrFcEpGyXwctBXz4DQc8LAIJK J2XOhL+5SBXxOqDy0Jac6yfRChCsatbiFnTeaTAnhchpThwHZ7veX+cX2EEXafKn X1K8jHScE7jugrPntPixKyZBXWetd2WOrcZ6KUAPqQNVWmj446ygFqpAKKeTrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:21 2025 by rpki-client