This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135342e302f32342d3234203d3e20313336373837.roa File: 3139342e352e3135342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: DFmclkj4zK5AOoG8m/gj/TVOkR+8P9y8ZESCrXmcXqM= Subject key identifier: 01:D7:3C:36:DB:E6:54:92:6E:E9:EC:23:73:55:98:4A:F1:94:D7:D4 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 055BE1ABED102941B248F62DA91E4341B974560A Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135342e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:01 +0000 ROA not before: Fri 21 Nov 2025 15:44:01 +0000 ROA not after: Fri 20 Nov 2026 15:49:01 +0000 asID: 136787 IP address blocks: 194.5.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:5b:e1:ab:ed:10:29:41:b2:48:f6:2d:a9:1e:43:41:b9:74:56:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:01 2025 GMT Not After : Nov 20 15:49:01 2026 GMT Subject: CN=01D73C36DBE654926EE9EC237355984AF194D7D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bb:c5:25:fc:03:70:43:6f:f4:b9:42:ad:72: a7:dd:8b:cb:ea:20:44:a0:7e:7d:6b:50:95:38:c1: 93:fa:fa:2c:eb:f5:be:67:9c:7f:4f:7a:4b:13:37: 74:54:e5:46:65:93:90:90:f9:ff:71:38:88:9d:19: fa:be:68:48:ea:2b:9a:bc:0a:04:73:72:60:82:60: 00:b6:43:64:9e:3d:64:c0:64:8f:b8:d1:56:34:e9: c2:bb:6c:b2:45:63:05:96:84:2b:7f:4f:3f:4c:22: 78:26:fa:40:72:38:7c:ca:dd:3c:1f:d4:30:43:a4: 39:4c:09:38:27:3d:20:67:69:30:73:18:1e:7b:22: 3d:11:e7:4c:bd:f2:83:36:03:73:4d:54:8d:6e:fd: 73:6e:d5:a5:81:f7:55:35:f5:18:65:92:20:c8:2d: 5c:e1:b1:53:19:20:f0:99:56:a1:0e:ab:db:ce:79: 76:22:1d:7a:5d:59:c7:27:10:ab:e5:84:22:e8:86: 0c:90:1e:27:5c:34:9a:d3:28:7f:69:d3:59:50:b9: cf:90:f9:b3:5f:df:00:ed:19:13:f1:b3:da:6e:bd: f9:fe:b7:bd:1c:6d:16:01:3d:58:fb:d3:b4:fe:99: 0c:2a:64:ec:42:d1:f7:3e:e8:ca:ec:d2:9b:5b:d0: 8a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D7:3C:36:DB:E6:54:92:6E:E9:EC:23:73:55:98:4A:F1:94:D7:D4 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.5.154.0/24 Signature Algorithm: sha256WithRSAEncryption 91:8f:9a:08:16:33:d5:51:1e:fa:71:cf:f5:67:18:74:b4:51: 15:29:47:77:d5:0c:52:e4:d9:45:5e:34:25:10:ec:66:47:e5: ef:04:cd:ea:3b:4c:35:75:48:58:c5:b1:bf:21:6f:e5:13:1f: ac:e2:4b:fe:23:97:f3:58:e3:9e:7f:95:63:4f:19:76:4b:6f: 7e:7d:b7:8a:72:03:a5:ad:91:b0:7d:2c:42:40:a6:d6:ae:15: 5a:f8:51:f2:7d:61:a9:ab:30:42:f3:d5:a5:3b:38:71:dd:db: b1:00:99:ab:5a:9f:a5:f2:4a:89:02:98:3d:92:46:4f:e5:d4: 21:ac:d7:a2:7e:35:56:1c:b1:de:90:4b:2e:a0:04:20:21:55: 87:0f:b5:e6:28:5f:a2:bf:be:21:bf:e1:63:f9:4d:d6:38:f6: 28:29:f5:66:64:ad:62:1f:67:72:51:b2:eb:e4:3c:1a:6a:95: 2a:27:82:94:95:2b:87:74:05:38:d2:83:24:bb:5e:ba:90:9c: a6:b2:2a:35:bb:81:06:f3:19:65:3e:81:42:54:61:ca:22:8a: ac:1d:89:76:47:0c:16:71:26:81:e8:13:9d:b0:a4:97:9a:9d: 80:b2:02:71:c0:c6:98:33:10:52:49:be:c6:e7:bc:5f:97:ac: 5a:c0:28:40 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUBVvhq+0QKUGySPYtqR5DQbl0VgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDFaFw0yNjExMjAxNTQ5MDFaMDMxMTAvBgNV BAMTKDAxRDczQzM2REJFNjU0OTI2RUU5RUMyMzczNTU5ODRBRjE5NEQ3RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeu8Ul/ANwQ2/0uUKtcqfdi8vq IESgfn1rUJU4wZP6+izr9b5nnH9PeksTN3RU5UZlk5CQ+f9xOIidGfq+aEjqK5q8 CgRzcmCCYAC2Q2SePWTAZI+40VY06cK7bLJFYwWWhCt/Tz9MIngm+kByOHzK3Twf 1DBDpDlMCTgnPSBnaTBzGB57Ij0R50y98oM2A3NNVI1u/XNu1aWB91U19RhlkiDI LVzhsVMZIPCZVqEOq9vOeXYiHXpdWccnEKvlhCLohgyQHidcNJrTKH9p01lQuc+Q +bNf3wDtGRPxs9puvfn+t70cbRYBPVj707T+mQwqZOxC0fc+6Mrs0ptb0IrVAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUAdc8NtvmVJJu6ewjc1WYSvGU19QwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM1MmUz MTM1MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADCBZowDQYJKoZIhvcNAQELBQADggEBAJGPmggWM9VRHvpxz/VnGHS0URUp R3fVDFLk2UVeNCUQ7GZH5e8Ezeo7TDV1SFjFsb8hb+UTH6ziS/4jl/NY455/lWNP GXZLb359t4pyA6WtkbB9LEJAptauFVr4UfJ9YamrMELz1aU7OHHd27EAmatan6Xy SokCmD2SRk/l1CGs16J+NVYcsd6QSy6gBCAhVYcPteYoX6K/viG/4WP5TdY49igp 9WZkrWIfZ3JRsuvkPBpqlSongpSVK4d0BTjSgyS7XrqQnKayKjW7gQbzGWU+gUJU YcoiiqwdiXZHDBZxJoHoE52wpJeanYCyAnHAxpgzEFJJvsbnvF+XrFrAKEA= -----END CERTIFICATE-----Generated at Sat Dec 6 23:37:45 2025 by rpki-client