This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135352e302f32342d3234203d3e20313336373837.roa File: 3139342e352e3135352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: KmRoQq9h83uS6KX8DWjb42D5ATSeKY8Adf8VLOPr2P8= Subject key identifier: 0A:6A:A9:DE:91:DE:A2:A8:F3:64:5D:2A:6C:24:D2:28:72:CF:3B:EA Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7697C73694ABF030B575391553F6DAE339135E4E Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:06 +0000 ROA not before: Fri 21 Nov 2025 15:44:06 +0000 ROA not after: Fri 20 Nov 2026 15:49:06 +0000 asID: 136787 IP address blocks: 194.5.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:97:c7:36:94:ab:f0:30:b5:75:39:15:53:f6:da:e3:39:13:5e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:06 2025 GMT Not After : Nov 20 15:49:06 2026 GMT Subject: CN=0A6AA9DE91DEA2A8F3645D2A6C24D22872CF3BEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d5:16:f9:0b:72:e2:49:28:40:22:6d:aa:a3: 85:47:5f:c1:93:35:76:2b:07:3d:0d:52:3f:8e:bb: 0a:14:b1:bd:bb:62:29:16:42:9e:88:92:9f:a3:49: e3:e3:92:ed:68:b7:be:0e:0f:f6:ce:4b:75:95:3a: af:80:2d:10:78:80:f7:fa:46:99:3d:68:88:1d:fc: e8:7f:03:a2:7b:cd:48:ad:d6:8a:03:6b:9b:d7:29: 85:7e:2f:e0:34:df:49:0d:08:75:ec:c6:7f:d9:b6: 23:dc:db:31:88:24:a3:a2:93:61:0d:21:b1:e3:6e: f3:64:60:4e:24:6c:66:88:42:c1:7a:1f:43:b5:7f: 5d:42:85:4a:c0:e7:69:ac:6c:cf:9b:e2:5f:ba:3e: 9c:46:25:58:6c:90:74:6c:ff:35:68:07:7a:5d:1c: c5:56:93:e8:22:99:8c:a7:38:9a:88:bd:c5:cc:62: e2:96:a2:6b:54:59:49:94:20:da:ee:fc:f9:c1:80: 0c:f5:c1:f1:20:7f:e7:cf:c6:2b:74:40:c9:b8:59: e3:f4:5d:2c:93:8c:f9:2f:39:be:cd:a4:a2:35:ae: 2c:4d:be:f7:1c:92:18:8a:8a:6f:80:96:a0:d6:a7: 08:df:24:64:d4:01:fa:7d:8c:af:20:9e:32:50:0e: 7b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6A:A9:DE:91:DE:A2:A8:F3:64:5D:2A:6C:24:D2:28:72:CF:3B:EA X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.5.155.0/24 Signature Algorithm: sha256WithRSAEncryption 62:2f:9f:1e:b9:7b:69:92:c7:7e:2a:14:c8:e1:cc:d1:80:bd: 31:1a:5f:5c:b2:35:80:4d:d1:14:0b:fc:f9:e2:4b:af:f3:9c: ac:7e:dc:9d:09:6e:0c:90:d6:4f:e6:63:ce:76:78:66:19:c0: 34:e7:f6:61:6c:76:5d:75:16:54:22:09:17:43:89:e6:e5:56: 87:13:9d:50:a9:de:58:ed:ea:60:e6:60:f3:78:48:a1:29:94: 99:e6:18:a7:20:30:16:e3:3a:ff:c0:46:56:2d:b6:e8:71:42: c4:30:46:45:15:ff:b2:fa:7f:c4:5b:94:61:d1:78:06:f7:47: 3e:e1:91:20:c1:48:05:51:e5:a9:d0:13:79:cf:9e:42:ca:fa: 62:3a:67:12:a0:c9:3d:52:89:41:af:05:09:d8:d4:2b:0f:86: e8:ad:45:c2:89:2f:7c:c7:2b:07:a2:54:68:5d:b9:a7:b8:99: 38:9e:a3:76:26:d4:5c:6f:67:ab:b0:80:e7:8a:71:4f:62:72: 56:67:75:a2:c0:af:73:a8:7f:82:32:84:00:70:be:45:95:dd: 67:6c:60:3f:43:f7:a6:00:e1:5c:01:ef:2b:fe:11:44:f7:0b: ba:76:3e:76:30:0a:fa:24:9c:eb:fa:0e:d8:d0:54:f6:3b:90: e3:2e:f5:a5 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUdpfHNpSr8DC1dTkVU/ba4zkTXk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDZaFw0yNjExMjAxNTQ5MDZaMDMxMTAvBgNV BAMTKDBBNkFBOURFOTFERUEyQThGMzY0NUQyQTZDMjREMjI4NzJDRjNCRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo1Rb5C3LiSShAIm2qo4VHX8GT NXYrBz0NUj+OuwoUsb27YikWQp6Ikp+jSePjku1ot74OD/bOS3WVOq+ALRB4gPf6 Rpk9aIgd/Oh/A6J7zUit1ooDa5vXKYV+L+A030kNCHXsxn/ZtiPc2zGIJKOik2EN IbHjbvNkYE4kbGaIQsF6H0O1f11ChUrA52msbM+b4l+6PpxGJVhskHRs/zVoB3pd HMVWk+gimYynOJqIvcXMYuKWomtUWUmUINru/PnBgAz1wfEgf+fPxit0QMm4WeP0 XSyTjPkvOb7NpKI1rixNvvcckhiKim+AlqDWpwjfJGTUAfp9jK8gnjJQDnsDAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUCmqp3pHeoqjzZF0qbCTSKHLPO+owHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM1MmUz MTM1MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADCBZswDQYJKoZIhvcNAQELBQADggEBAGIvnx65e2mSx34qFMjhzNGAvTEa X1yyNYBN0RQL/PniS6/znKx+3J0JbgyQ1k/mY852eGYZwDTn9mFsdl11FlQiCRdD ieblVocTnVCp3ljt6mDmYPN4SKEplJnmGKcgMBbjOv/ARlYttuhxQsQwRkUV/7L6 f8RblGHReAb3Rz7hkSDBSAVR5anQE3nPnkLK+mI6ZxKgyT1SiUGvBQnY1CsPhuit RcKJL3zHKweiVGhduae4mTieo3Ym1FxvZ6uwgOeKcU9iclZndaLAr3Oof4IyhABw vkWV3WdsYD9D96YA4VwB7yv+EUT3C7p2PnYwCvoknOv6DtjQVPY7kOMu9aU= -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:48 2025 by rpki-client