This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135322e302f32342d3332203d3e203531313637.roa File: 3139342e352e3135322e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: wggj0O/SbnVVGckrYml4WZLzTObM9D1+Rwdh4aTZn+c= Subject key identifier: FB:E6:EC:97:DA:AF:81:41:EE:59:08:8F:1F:F1:34:93:13:DE:C3:A3 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 226EF0F42444B9288108DFF7F1073669B1174AC9 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135322e302f32342d3332203d3e203531313637.roa Signing time: Fri 21 Nov 2025 15:49:05 +0000 ROA not before: Fri 21 Nov 2025 15:44:05 +0000 ROA not after: Fri 20 Nov 2026 15:49:05 +0000 asID: 51167 IP address blocks: 194.5.152.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:6e:f0:f4:24:44:b9:28:81:08:df:f7:f1:07:36:69:b1:17:4a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:05 2025 GMT Not After : Nov 20 15:49:05 2026 GMT Subject: CN=FBE6EC97DAAF8141EE59088F1FF1349313DEC3A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:56:79:e7:58:64:fe:7f:bc:ae:9d:68:10:09: 7e:ca:28:03:72:8c:0c:18:1e:b6:5c:81:0e:d3:84: fa:a7:36:4f:f4:95:1b:0c:f8:b8:10:d5:58:fc:24: 46:79:e7:d3:22:73:c4:05:1a:29:b5:50:cb:0f:2c: 06:c7:88:eb:3b:6d:73:a6:ec:95:c3:49:67:be:67: 04:41:0e:3e:dc:99:6f:c4:64:bc:5d:ce:62:0f:fc: 39:6b:79:61:ab:4b:17:76:9a:92:d5:1a:11:e9:f7: 0c:55:28:b6:67:80:8d:e4:5a:e5:a6:bd:af:9a:db: 22:d1:98:76:c3:50:b4:08:50:b9:53:01:48:ce:96: d2:9e:9b:2e:96:38:90:46:46:fe:fa:ba:b5:87:d1: b8:d1:c3:f3:d1:52:fc:95:9d:91:61:55:94:2f:5f: 00:69:54:90:93:ee:20:0c:99:a6:76:12:76:36:1d: 38:49:f7:76:0e:c2:7a:40:46:bb:10:44:60:81:66: de:5a:7f:0f:b1:06:76:89:ff:68:df:33:5e:92:e9: 0f:b1:eb:18:66:5b:22:8a:3b:71:9f:d6:b5:c8:cd: 6e:96:90:19:71:05:f7:b0:3b:0d:87:2f:3e:08:6f: c3:84:ba:79:b6:f6:c5:91:dc:a3:3f:21:13:73:40: 29:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E6:EC:97:DA:AF:81:41:EE:59:08:8F:1F:F1:34:93:13:DE:C3:A3 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135322e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.5.152.0/24 Signature Algorithm: sha256WithRSAEncryption 22:b4:06:68:c9:f7:ba:72:68:ed:65:97:2e:8e:b5:8c:5c:c2: d9:7e:7a:be:d5:59:f4:0d:cc:e8:ea:b8:8c:1d:1c:70:e1:10: a5:71:37:2a:17:61:bb:7d:a7:19:cc:57:f0:56:c0:3e:43:9a: 72:4e:1e:f2:02:6a:97:f5:72:06:3f:c1:14:db:d3:c2:ca:3f: 18:a8:8b:eb:9d:6a:e2:e2:d7:2b:54:3d:81:fa:2c:ef:bd:40: e9:c5:4c:de:d2:0f:d8:23:f3:e7:37:a4:aa:d9:07:69:98:8f: 30:d9:67:4a:29:b6:1b:62:dd:cd:86:a8:b5:ba:85:68:15:10: a3:59:d1:cb:e1:93:e0:82:f3:92:d4:ec:bc:66:5b:79:5f:03: eb:bf:2d:c7:fb:10:77:95:ca:a1:ee:c9:38:a6:b8:12:56:ba: 72:72:47:56:98:d3:bd:6b:9b:10:ee:20:f9:73:ca:5f:fa:cd: 40:24:ad:a8:82:aa:72:2c:dd:e0:20:36:b4:e3:38:74:51:65: 36:d3:83:78:08:b1:b4:99:9f:9b:8f:4c:d9:46:52:cb:f5:05: e3:17:4e:82:0d:2d:07:f9:1a:87:0a:c8:dd:80:06:9e:44:57: f2:9c:3e:0f:1f:62:87:c5:b8:13:f9:be:d4:a5:8d:9d:5f:06: b5:df:2a:1e -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUIm7w9CREuSiBCN/38Qc2abEXSskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDVaFw0yNjExMjAxNTQ5MDVaMDMxMTAvBgNV BAMTKEZCRTZFQzk3REFBRjgxNDFFRTU5MDg4RjFGRjEzNDkzMTNERUMzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCVnnnWGT+f7yunWgQCX7KKANy jAwYHrZcgQ7ThPqnNk/0lRsM+LgQ1Vj8JEZ559Mic8QFGim1UMsPLAbHiOs7bXOm 7JXDSWe+ZwRBDj7cmW/EZLxdzmIP/DlreWGrSxd2mpLVGhHp9wxVKLZngI3kWuWm va+a2yLRmHbDULQIULlTAUjOltKemy6WOJBGRv76urWH0bjRw/PRUvyVnZFhVZQv XwBpVJCT7iAMmaZ2EnY2HThJ93YOwnpARrsQRGCBZt5afw+xBnaJ/2jfM16S6Q+x 6xhmWyKKO3Gf1rXIzW6WkBlxBfewOw2HLz4Ib8OEunm29sWR3KM/IRNzQCkhAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQU++bsl9qvgUHuWQiPH/E0kxPew6MwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM1MmUz MTM1MzIyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAwgWYMA0GCSqGSIb3DQEBCwUAA4IBAQAitAZoyfe6cmjtZZcujrWMXMLZfnq+ 1Vn0Dczo6riMHRxw4RClcTcqF2G7facZzFfwVsA+Q5pyTh7yAmqX9XIGP8EU29PC yj8YqIvrnWri4tcrVD2B+izvvUDpxUze0g/YI/PnN6Sq2QdpmI8w2WdKKbYbYt3N hqi1uoVoFRCjWdHL4ZPggvOS1Oy8Zlt5XwPrvy3H+xB3lcqh7sk4prgSVrpyckdW mNO9a5sQ7iD5c8pf+s1AJK2ogqpyLN3gIDa04zh0UWU204N4CLG0mZ+bj0zZRlLL 9QXjF06CDS0H+RqHCsjdgAaeRFfynD4PH2KHxbgT+b7UpY2dXwa13yoe -----END CERTIFICATE-----Generated at Sat Dec 6 12:51:23 2025 by rpki-client