This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e31352e302f32342d3234203d3e20313336373837.roa File: 3139342e33352e31352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: Ob/7UoSfy1nLjo9uKYGOcPZGWogSTSa8u40OzLyIbw4= Subject key identifier: C4:9D:E6:85:4A:24:E5:AB:DA:41:71:1D:B8:F5:0E:BC:B3:0E:0A:A9 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 61DDEFCF63C035F41095705599803C0F13140D45 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e31352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:40 +0000 ROA not before: Fri 28 Nov 2025 11:44:40 +0000 ROA not after: Fri 27 Nov 2026 11:49:40 +0000 asID: 136787 IP address blocks: 194.35.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:dd:ef:cf:63:c0:35:f4:10:95:70:55:99:80:3c:0f:13:14:0d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:40 2025 GMT Not After : Nov 27 11:49:40 2026 GMT Subject: CN=C49DE6854A24E5ABDA41711DB8F50EBCB30E0AA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:de:21:5f:e2:40:9a:26:24:07:41:a5:89:22: ef:1e:8a:2b:d9:9a:c1:c8:33:e5:90:d3:c9:48:29: af:63:1f:b6:40:15:17:7c:94:b2:c9:0d:ff:48:1e: 32:c0:9e:8a:dc:8c:2d:9c:94:ba:bf:96:6a:a0:40: 46:c7:59:df:9e:47:d8:25:86:9d:42:f7:33:d9:52: 47:57:e4:27:db:08:e7:cf:08:6b:c0:55:54:89:bc: b5:09:dd:da:f3:94:78:98:f4:dd:d2:13:5a:6e:eb: 7c:6b:b0:8e:a8:da:9b:94:6d:f6:de:7d:99:28:5c: 21:f5:90:4c:d7:c8:b4:59:1c:16:32:e2:c0:b8:08: 08:f3:4c:be:3d:e3:71:b7:59:22:e1:1d:2f:ae:56: 95:1f:b2:2e:74:27:2d:f1:5a:09:2b:b9:09:79:0e: d8:95:0b:24:0c:76:61:8e:0f:d6:86:38:46:58:03: c6:9b:f9:ca:28:e3:db:0d:d8:93:2d:44:37:13:12: 86:56:9e:7d:02:1d:37:9a:25:59:99:73:3a:23:65: f3:1e:75:44:9e:bc:b8:0a:70:cb:c9:27:58:d2:48: c8:0d:83:c2:2e:88:1f:f7:ab:fd:81:ac:a1:fd:79: 74:89:15:5b:53:81:25:a3:75:76:9c:ce:7b:00:e6: 12:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9D:E6:85:4A:24:E5:AB:DA:41:71:1D:B8:F5:0E:BC:B3:0E:0A:A9 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e31352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.15.0/24 Signature Algorithm: sha256WithRSAEncryption b9:a5:39:23:a9:9c:ec:31:e4:9d:08:6f:15:63:a7:c8:43:63: b4:c2:60:8a:61:0a:93:46:3c:c1:e5:d5:10:20:95:e1:fc:c7: 8e:fe:6b:07:12:87:7a:c4:d9:d7:9e:8d:15:4b:99:63:86:21: 5a:9e:39:33:df:c5:8f:ca:43:86:e6:92:86:fe:9e:b9:82:21: d8:85:f3:fc:59:cc:70:1e:f3:19:ba:08:76:3d:c6:93:5f:b7: 2a:58:e8:da:29:a6:1b:c0:25:fa:67:c7:8e:d7:3f:bb:94:5a: 2b:bf:06:d4:43:1f:35:87:86:76:70:f6:3e:df:a1:bd:67:fd: 1b:93:69:28:57:36:29:f4:bd:48:b0:dd:c3:47:98:fd:f5:f6: 43:1e:5d:6e:53:75:15:47:95:0b:ac:7b:b5:92:3f:50:79:5a: cc:a0:47:17:64:1a:6e:29:30:15:bf:57:07:15:eb:0b:66:b3: 02:5d:3d:85:50:54:e4:78:f6:42:06:76:03:b5:11:ca:78:f8: 3e:25:f7:04:c8:30:c0:24:39:48:52:0d:cd:5e:cb:75:35:58: ed:57:b4:bb:26:5d:dd:46:9a:71:f7:a6:8b:ce:f6:7a:58:10: 2a:fa:7e:19:cf:30:a9:8f:cf:93:51:c1:a9:e5:e0:7b:4b:1e: 58:3c:c2:ea -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUYd3vz2PANfQQlXBVmYA8DxMUDUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDBaFw0yNjExMjcxMTQ5NDBaMDMxMTAvBgNV BAMTKEM0OURFNjg1NEEyNEU1QUJEQTQxNzExREI4RjUwRUJDQjMwRTBBQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl3iFf4kCaJiQHQaWJIu8eiivZ msHIM+WQ08lIKa9jH7ZAFRd8lLLJDf9IHjLAnorcjC2clLq/lmqgQEbHWd+eR9gl hp1C9zPZUkdX5CfbCOfPCGvAVVSJvLUJ3drzlHiY9N3SE1pu63xrsI6o2puUbfbe fZkoXCH1kEzXyLRZHBYy4sC4CAjzTL4943G3WSLhHS+uVpUfsi50Jy3xWgkruQl5 DtiVCyQMdmGOD9aGOEZYA8ab+coo49sN2JMtRDcTEoZWnn0CHTeaJVmZczojZfMe dUSevLgKcMvJJ1jSSMgNg8IuiB/3q/2BrKH9eXSJFVtTgSWjdXacznsA5hKVAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUxJ3mhUok5avaQXEduPUOvLMOCqkwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMzMzUy ZTMxMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADCIw8wDQYJKoZIhvcNAQELBQADggEBALmlOSOpnOwx5J0IbxVjp8hDY7TC YIphCpNGPMHl1RAgleH8x47+awcSh3rE2deejRVLmWOGIVqeOTPfxY/KQ4bmkob+ nrmCIdiF8/xZzHAe8xm6CHY9xpNftypY6NopphvAJfpnx47XP7uUWiu/BtRDHzWH hnZw9j7fob1n/RuTaShXNin0vUiw3cNHmP319kMeXW5TdRVHlQuse7WSP1B5Wsyg RxdkGm4pMBW/VwcV6wtmswJdPYVQVOR49kIGdgO1Ecp4+D4l9wTIMMAkOUhSDc1e y3U1WO1XtLsmXd1GmnH3povO9npYECr6fhnPMKmPz5NRwanl4HtLHlg8wuo= -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:15 2025 by rpki-client