This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e3132332e302f32342d3234203d3e203632323430.roa File: 3139342e33352e3132332e302f32342d3234203d3e203632323430.roa (raw, json) Hash identifier: SVnS2zAYx3tnG5R81ZPZUx/ZIqWCGS03/Fxpl5yeJSE= Subject key identifier: 8F:81:B1:F3:8D:DC:A0:08:72:48:73:A8:E6:EB:EE:2F:C0:95:BA:2A Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 05621B36C4EDBE86A300FCD49FFA850272FBEFF6 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e3132332e302f32342d3234203d3e203632323430.roa Signing time: Fri 28 Nov 2025 11:49:42 +0000 ROA not before: Fri 28 Nov 2025 11:44:42 +0000 ROA not after: Fri 27 Nov 2026 11:49:42 +0000 asID: 62240 IP address blocks: 194.35.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:62:1b:36:c4:ed:be:86:a3:00:fc:d4:9f:fa:85:02:72:fb:ef:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:42 2025 GMT Not After : Nov 27 11:49:42 2026 GMT Subject: CN=8F81B1F38DDCA008724873A8E6EBEE2FC095BA2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:11:a1:58:97:8f:c9:8d:ab:24:ec:6f:6b:97: eb:d6:b8:d6:50:ad:5c:03:32:54:69:22:f3:a7:64: 1d:bf:af:dd:03:26:15:78:a3:6d:61:21:b7:cb:f3: 92:f9:b2:d2:12:5c:3d:0f:0b:42:fe:4b:8f:ad:2c: d2:fd:e9:2a:d2:a9:a2:a6:34:dc:f0:fa:e3:44:10: fe:dd:19:08:19:aa:48:0b:cc:7a:4a:21:29:57:9f: b1:fd:9e:f2:ed:0d:01:07:08:c4:06:fa:5f:b2:ce: 3c:2f:4b:19:e1:b9:6c:19:c5:ad:db:17:92:74:a6: 14:c6:93:be:ca:9f:f9:6e:98:ee:d2:3f:9b:6b:a5: bc:22:57:34:34:ab:1f:3c:4b:56:03:fb:ce:d5:8e: d0:52:43:fa:2b:83:d4:78:9e:f2:2d:ac:79:ef:2a: ad:32:42:db:ea:b1:14:50:44:4b:81:f5:35:c3:e1: 37:6f:9a:c8:7c:14:1f:32:7c:84:54:29:db:03:fa: 13:0f:5c:a3:32:72:78:7d:79:c0:f1:87:35:2d:59: 22:74:8c:41:45:b8:17:be:5a:48:2f:38:42:ac:d4: f3:c0:2c:7e:86:07:41:9e:f9:b5:9e:0d:f9:a5:c7: 69:b7:5b:71:6e:e1:95:ec:a6:fa:9b:6c:ab:1c:31: 65:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:81:B1:F3:8D:DC:A0:08:72:48:73:A8:E6:EB:EE:2F:C0:95:BA:2A X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e3132332e302f32342d3234203d3e203632323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.123.0/24 Signature Algorithm: sha256WithRSAEncryption d0:de:c1:ac:97:4a:e9:49:88:23:e6:aa:50:d7:a4:26:26:e3: 9b:ee:b1:56:0c:83:64:70:69:bc:dc:45:08:c9:b0:c4:b7:6e: cd:2d:4b:a2:c3:74:bd:10:f5:4f:ee:3e:48:ab:d7:be:8e:0b: 6f:cd:c1:9f:2d:45:9a:0a:55:8d:6a:f4:3f:e0:ab:44:a8:79: 45:12:dd:9e:cb:46:ff:2d:ed:7a:d0:82:2b:37:b5:34:1b:12: fa:2c:b0:93:b1:c2:fc:1e:89:35:55:1e:19:b4:26:dc:2b:33: fc:60:98:83:6a:25:94:82:65:96:82:47:1a:bc:8c:15:e8:e1: 35:2a:79:49:de:5d:a0:0c:da:84:81:39:0e:13:8f:4d:84:82: f5:5d:58:69:9f:d0:01:6e:e3:26:8d:91:c2:46:eb:ba:67:43: f8:fd:44:12:cf:de:b9:79:fd:78:15:df:51:85:00:d5:71:4f: 2d:38:bb:47:ba:79:01:b6:bf:ee:36:f5:5c:01:32:63:95:24: 9a:b9:da:c9:45:97:60:02:b6:6a:31:00:a0:a6:32:0f:07:ad: bd:40:26:7e:9f:4e:b1:fe:59:34:29:16:5c:c4:14:68:8e:e7: eb:47:0c:67:05:1c:08:dc:48:00:fb:f9:85:a2:f4:bc:45:af: f4:93:90:30 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUBWIbNsTtvoajAPzUn/qFAnL77/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDJaFw0yNjExMjcxMTQ5NDJaMDMxMTAvBgNV BAMTKDhGODFCMUYzOEREQ0EwMDg3MjQ4NzNBOEU2RUJFRTJGQzA5NUJBMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJEaFYl4/Jjask7G9rl+vWuNZQ rVwDMlRpIvOnZB2/r90DJhV4o21hIbfL85L5stISXD0PC0L+S4+tLNL96SrSqaKm NNzw+uNEEP7dGQgZqkgLzHpKISlXn7H9nvLtDQEHCMQG+l+yzjwvSxnhuWwZxa3b F5J0phTGk77Kn/lumO7SP5trpbwiVzQ0qx88S1YD+87VjtBSQ/org9R4nvItrHnv Kq0yQtvqsRRQREuB9TXD4Tdvmsh8FB8yfIRUKdsD+hMPXKMycnh9ecDxhzUtWSJ0 jEFFuBe+WkgvOEKs1PPALH6GB0Ge+bWeDfmlx2m3W3Fu4ZXspvqbbKscMWX1AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUj4Gx843coAhySHOo5uvuL8CVuiowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMzMzUy ZTMxMzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzIzMjM0MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADCI3swDQYJKoZIhvcNAQELBQADggEBANDewayXSulJiCPmqlDXpCYm45vu sVYMg2RwabzcRQjJsMS3bs0tS6LDdL0Q9U/uPkir176OC2/NwZ8tRZoKVY1q9D/g q0SoeUUS3Z7LRv8t7XrQgis3tTQbEvossJOxwvweiTVVHhm0JtwrM/xgmINqJZSC ZZaCRxq8jBXo4TUqeUneXaAM2oSBOQ4Tj02EgvVdWGmf0AFu4yaNkcJG67pnQ/j9 RBLP3rl5/XgV31GFANVxTy04u0e6eQG2v+429VwBMmOVJJq52slFl2ACtmoxAKCm Mg8Hrb1AJn6fTrH+WTQpFlzEFGiO5+tHDGcFHAjcSAD7+YWi9LxFr/STkDA= -----END CERTIFICATE-----Generated at Thu Dec 18 12:45:23 2025 by rpki-client