This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e31342e302f32342d3234203d3e20313336373837.roa File: 3139342e33352e31342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: +1Ro89oGkbxaJVNhhEFyhPQiSM5Ge0gRk68INtlr0y8= Subject key identifier: 46:3C:09:4A:FC:AF:F4:2E:A1:61:47:E1:E9:C6:D3:EF:85:DA:64:CF Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 64E5D2E8F339275E7A34D5AAF6911D978728CFB0 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e31342e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:22 +0000 ROA not before: Fri 28 Nov 2025 11:44:22 +0000 ROA not after: Fri 27 Nov 2026 11:49:22 +0000 asID: 136787 IP address blocks: 194.35.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:e5:d2:e8:f3:39:27:5e:7a:34:d5:aa:f6:91:1d:97:87:28:cf:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:22 2025 GMT Not After : Nov 27 11:49:22 2026 GMT Subject: CN=463C094AFCAFF42EA16147E1E9C6D3EF85DA64CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8a:32:5f:f5:52:a9:de:9e:52:22:e8:3c:4a: 35:80:52:47:02:f1:85:07:0b:a3:76:46:8d:97:e6: 8e:f7:f2:71:a8:3b:77:ff:52:e3:b1:96:c3:dc:42: 66:a8:2e:89:01:82:f9:27:ab:f5:88:76:e0:1b:05: 96:c6:63:30:81:91:dd:b7:36:64:cd:3b:3b:1b:20: 9f:27:33:b3:3a:3e:83:83:f9:10:1f:0d:4c:5a:d5: ea:2a:de:f2:3f:43:82:69:e7:e6:a2:6b:a3:a3:eb: 3e:5d:89:2f:15:de:c6:55:84:76:1c:ba:c9:e5:22: 97:d0:07:43:0f:35:e7:cb:03:60:c8:02:f3:28:ed: 7e:3e:5f:9f:6d:ea:11:dd:aa:f5:24:ed:67:93:e7: 90:68:c5:bf:cf:6f:a5:e5:5a:98:24:71:7d:7d:88: 36:b8:92:de:b6:b4:17:d2:b4:d7:49:8a:92:76:75: 80:66:ee:8a:b4:54:ab:3b:95:2a:12:a3:d9:e9:c7: e1:ed:15:b9:ad:cc:67:8e:03:e0:e5:da:b4:a3:55: 34:5d:c9:ae:cb:dd:a9:a6:10:28:6c:0d:12:b0:22: 61:77:0b:73:1c:b0:92:6c:db:71:fc:2a:e0:59:69: 73:b7:23:18:08:15:42:0c:62:5e:ac:fe:2b:9a:fb: 6e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3C:09:4A:FC:AF:F4:2E:A1:61:47:E1:E9:C6:D3:EF:85:DA:64:CF X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e31342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.14.0/24 Signature Algorithm: sha256WithRSAEncryption 27:9a:6a:3b:6b:ac:cd:1e:17:5c:ac:97:06:2e:67:d3:d4:d6: 54:4d:28:4a:af:ea:d7:53:bf:92:ca:19:18:25:f6:aa:82:44: 7e:36:b9:99:79:fc:12:4e:df:db:e1:ad:d2:96:35:8a:89:41: e6:44:b1:8b:e3:89:60:aa:3a:11:e4:24:f5:ff:23:b8:b3:a4: 12:9c:a0:dc:d2:01:8f:e5:0d:18:c5:b9:69:6a:ec:78:62:36: 77:95:8d:11:9b:26:78:a9:ec:fe:e8:19:8b:cb:28:2b:29:e3: 3c:a0:af:95:4a:2c:ac:1f:31:32:d9:f9:ec:16:67:dc:31:f1: c7:be:e8:e1:32:3a:ee:e0:6c:7b:70:c5:39:da:a9:3e:28:40: 64:ca:21:00:be:18:62:1d:19:39:3d:6f:62:c7:6f:c6:15:c7: a4:04:28:0f:81:5b:9e:72:88:5e:7b:93:83:a4:10:20:cb:60: a5:28:8b:4f:ea:47:0a:04:e4:ce:3f:2b:3e:4a:40:91:33:7f: 60:f1:dc:81:89:ef:2a:1b:f4:96:5b:a3:57:a8:db:35:12:53: 03:ef:8c:17:cb:01:1c:92:22:d6:b6:0b:dd:09:4f:8e:a0:7b: c7:b3:13:ef:96:a6:26:39:cd:d0:f8:24:fb:88:50:4b:15:7f: c3:23:79:06 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUZOXS6PM5J156NNWq9pEdl4coz7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjJaFw0yNjExMjcxMTQ5MjJaMDMxMTAvBgNV BAMTKDQ2M0MwOTRBRkNBRkY0MkVBMTYxNDdFMUU5QzZEM0VGODVEQTY0Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoijJf9VKp3p5SIug8SjWAUkcC 8YUHC6N2Ro2X5o738nGoO3f/UuOxlsPcQmaoLokBgvknq/WIduAbBZbGYzCBkd23 NmTNOzsbIJ8nM7M6PoOD+RAfDUxa1eoq3vI/Q4Jp5+aia6Oj6z5diS8V3sZVhHYc usnlIpfQB0MPNefLA2DIAvMo7X4+X59t6hHdqvUk7WeT55Boxb/Pb6XlWpgkcX19 iDa4kt62tBfStNdJipJ2dYBm7oq0VKs7lSoSo9npx+HtFbmtzGeOA+Dl2rSjVTRd ya7L3ammEChsDRKwImF3C3McsJJs23H8KuBZaXO3IxgIFUIMYl6s/iua+27/AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQURjwJSvyv9C6hYUfh6cbT74XaZM8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMzMzUy ZTMxMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADCIw4wDQYJKoZIhvcNAQELBQADggEBACeaajtrrM0eF1yslwYuZ9PU1lRN KEqv6tdTv5LKGRgl9qqCRH42uZl5/BJO39vhrdKWNYqJQeZEsYvjiWCqOhHkJPX/ I7izpBKcoNzSAY/lDRjFuWlq7HhiNneVjRGbJnip7P7oGYvLKCsp4zygr5VKLKwf MTLZ+ewWZ9wx8ce+6OEyOu7gbHtwxTnaqT4oQGTKIQC+GGIdGTk9b2LHb8YVx6QE KA+BW55yiF57k4OkECDLYKUoi0/qRwoE5M4/Kz5KQJEzf2Dx3IGJ7yob9JZbo1eo 2zUSUwPvjBfLARySIta2C90JT46ge8ezE++WpiY5zdD4JPuIUEsVf8MjeQY= -----END CERTIFICATE-----Generated at Sat Dec 6 23:37:21 2025 by rpki-client