This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135332e302f32342d3332203d3e20313431393935.roa File: 3139342e352e3135332e302f32342d3332203d3e20313431393935.roa (raw, json) Hash identifier: cCMwRdqZApH70A0eBeaKZyocxKOZvQ5ZeMaOvyadZOE= Subject key identifier: 6C:EC:E0:60:ED:20:A0:EA:44:61:A9:8D:64:61:C7:49:94:E8:7A:16 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0AFD2A8C5E7AB8933AE4A5DD5CF61A878F943AB5 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135332e302f32342d3332203d3e20313431393935.roa Signing time: Fri 21 Nov 2025 15:49:02 +0000 ROA not before: Fri 21 Nov 2025 15:44:02 +0000 ROA not after: Fri 20 Nov 2026 15:49:02 +0000 asID: 141995 IP address blocks: 194.5.153.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:fd:2a:8c:5e:7a:b8:93:3a:e4:a5:dd:5c:f6:1a:87:8f:94:3a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:02 2025 GMT Not After : Nov 20 15:49:02 2026 GMT Subject: CN=6CECE060ED20A0EA4461A98D6461C74994E87A16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a8:f3:d2:fc:ec:ae:b2:17:ab:0b:20:3f:5d: cc:1b:ff:68:87:ef:65:59:a9:f6:1b:d5:18:ca:0e: a1:26:66:f0:d6:5b:95:a5:6e:0f:f9:cf:bd:22:b0: 11:2d:6d:3a:24:8b:9e:a7:ce:3c:a1:9a:74:ac:88: ea:19:4b:15:7b:fe:a6:84:cd:d5:26:a6:76:4e:3c: fd:0d:3a:f6:b5:8e:55:ae:fe:71:2b:66:50:54:ec: 89:67:18:15:07:6c:4e:2a:a9:ae:72:30:ff:b6:3d: c9:65:18:ae:3c:d1:29:47:75:ef:38:cb:58:43:57: 2d:bb:74:68:39:64:f2:54:ed:9d:02:e7:7a:8d:d5: 78:ca:ee:40:f7:b1:6f:e0:97:d7:18:59:21:d1:03: af:d2:2f:42:22:f5:87:a9:53:1c:f1:b0:6d:55:9c: 30:87:94:38:21:67:71:fd:cc:03:c8:3d:de:b6:49: c9:6b:16:b2:ab:aa:1c:73:7b:db:3b:ca:0a:7a:01: c3:ed:fb:f1:dd:7e:9f:85:3f:fc:29:1c:b1:05:cf: 25:64:e7:2e:a7:e5:b9:a8:16:4a:b2:40:bf:3c:f3: 6d:db:92:4d:c4:e9:7d:99:cf:13:0f:fb:13:61:6e: 7a:db:c3:1a:a9:75:be:8f:45:6e:58:04:ee:08:76: 50:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EC:E0:60:ED:20:A0:EA:44:61:A9:8D:64:61:C7:49:94:E8:7A:16 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135332e302f32342d3332203d3e20313431393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.5.153.0/24 Signature Algorithm: sha256WithRSAEncryption 30:61:4f:92:9a:9b:a4:5d:53:6e:de:89:aa:71:bd:f3:3e:00: 88:15:58:c3:19:4f:e9:8f:2e:a1:97:8c:16:e7:63:e2:81:7a: 6b:44:99:6d:53:8a:79:f7:e7:77:0e:bd:ac:34:f6:43:f1:8e: 1c:b7:48:00:2b:a7:23:a5:1f:7b:8a:8b:ac:22:8e:bf:a5:ef: a1:71:fb:06:38:10:ad:39:71:53:b8:e4:bd:33:44:1c:2e:3a: 53:62:d6:60:36:c5:2a:6e:3d:ae:c9:76:49:14:71:70:28:51: 6f:7f:67:82:6d:3c:81:5b:23:f5:b7:07:81:61:cf:d1:b8:e1: 52:8d:1d:77:26:e0:d0:0c:3c:b9:36:3d:d7:18:10:ab:48:23: f5:0a:a9:2b:b8:48:1f:fb:6b:ec:9b:20:f7:11:9d:d6:2a:d1: 92:4e:26:dc:2a:14:68:4b:11:54:b8:70:14:41:da:6a:2a:70: 67:1c:ed:50:d2:75:74:ac:6f:9c:47:31:8d:ce:2a:6b:5e:f8: 3f:2d:d5:51:0f:7f:af:58:72:28:49:9d:e4:af:31:9a:0e:4d: ae:e6:2a:95:9f:a5:9b:fe:15:8d:c1:14:53:a4:53:fa:7f:0b: d3:4a:32:b3:2d:95:ae:85:3c:74:e3:47:95:14:b0:ed:5c:19: 65:db:7d:2d -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUCv0qjF56uJM65KXdXPYah4+UOrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDJaFw0yNjExMjAxNTQ5MDJaMDMxMTAvBgNV BAMTKDZDRUNFMDYwRUQyMEEwRUE0NDYxQTk4RDY0NjFDNzQ5OTRFODdBMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCqPPS/OyusherCyA/Xcwb/2iH 72VZqfYb1RjKDqEmZvDWW5Wlbg/5z70isBEtbToki56nzjyhmnSsiOoZSxV7/qaE zdUmpnZOPP0NOva1jlWu/nErZlBU7IlnGBUHbE4qqa5yMP+2PcllGK480SlHde84 y1hDVy27dGg5ZPJU7Z0C53qN1XjK7kD3sW/gl9cYWSHRA6/SL0Ii9YepUxzxsG1V nDCHlDghZ3H9zAPIPd62SclrFrKrqhxze9s7ygp6AcPt+/Hdfp+FP/wpHLEFzyVk 5y6n5bmoFkqyQL88823bkk3E6X2ZzxMP+xNhbnrbwxqpdb6PRW5YBO4IdlCpAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUbOzgYO0goOpEYamNZGHHSZToehYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM1MmUz MTM1MzMyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMTM0MzEzOTM5MzUucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADCBZkwDQYJKoZIhvcNAQELBQADggEBADBhT5Kam6RdU27eiapxvfM+AIgV WMMZT+mPLqGXjBbnY+KBemtEmW1Tinn353cOvaw09kPxjhy3SAArpyOlH3uKi6wi jr+l76Fx+wY4EK05cVO45L0zRBwuOlNi1mA2xSpuPa7JdkkUcXAoUW9/Z4JtPIFb I/W3B4Fhz9G44VKNHXcm4NAMPLk2PdcYEKtII/UKqSu4SB/7a+ybIPcRndYq0ZJO JtwqFGhLEVS4cBRB2moqcGcc7VDSdXSsb5xHMY3OKmte+D8t1VEPf69YcihJneSv MZoOTa7mKpWfpZv+FY3BFFOkU/p/C9NKMrMtla6FPHTjR5UUsO1cGWXbfS0= -----END CERTIFICATE-----Generated at Sun Dec 7 00:31:19 2025 by rpki-client