This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3130382e302f32342d3234203d3e20313336373837.roa File: 3139342e35332e3130382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: LuSEfuYHiIE1Vn6CaT6hH0DpM/NYl4MLhy7AnqvTrKg= Subject key identifier: 3E:E2:FB:C2:7B:FB:AB:CA:C3:92:B8:FD:12:44:79:2F:0F:95:26:11 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 5F287243FD70461A2EC777BADEC69AEB518A643A Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3130382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:02 +0000 ROA not before: Fri 21 Nov 2025 15:44:02 +0000 ROA not after: Fri 20 Nov 2026 15:49:02 +0000 asID: 136787 IP address blocks: 194.53.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:28:72:43:fd:70:46:1a:2e:c7:77:ba:de:c6:9a:eb:51:8a:64:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:02 2025 GMT Not After : Nov 20 15:49:02 2026 GMT Subject: CN=3EE2FBC27BFBABCAC392B8FD1244792F0F952611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e7:6f:77:8a:71:a3:a7:1d:51:06:36:df:84: e5:e5:4c:eb:5e:e3:54:43:5b:d0:2a:8f:53:df:9c: 1f:3b:e5:5b:23:52:00:cd:88:f9:db:dd:09:ff:a5: 75:92:3f:c0:40:f3:fe:7a:39:44:ee:6c:52:2c:8a: e4:49:aa:cc:55:ed:c7:c8:cc:6f:1c:ff:3b:d4:dd: 27:96:88:87:1d:02:12:b5:45:e9:49:39:36:3b:ea: 55:57:eb:12:f5:bb:ea:f4:9d:61:38:53:7f:5a:a2: d5:ea:24:b5:57:29:fc:7d:f0:f7:f7:8e:2e:4f:06: e3:fb:28:12:01:94:44:44:e7:46:34:74:23:b8:18: 61:d7:13:14:35:df:ae:4e:5b:f6:3a:c9:6d:fa:6e: 97:42:ef:2d:83:d3:62:ef:c5:66:dd:b1:51:7f:39: d2:b8:de:58:15:49:3d:d9:9f:78:6d:4d:54:ca:d2: 41:1e:7d:52:15:2d:4f:8f:46:a6:00:45:71:60:04: 02:9f:9a:4e:70:88:58:0a:12:13:9e:4e:c5:20:fd: 30:d5:c0:c7:c0:e7:f8:cc:e8:18:d1:8c:23:bb:5a: 89:f7:ee:b5:97:e7:30:1f:09:f7:c5:d6:5d:3d:9b: 67:17:5b:8e:28:8f:a8:f8:23:1b:91:07:6a:01:1e: 48:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E2:FB:C2:7B:FB:AB:CA:C3:92:B8:FD:12:44:79:2F:0F:95:26:11 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3130382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.53.108.0/24 Signature Algorithm: sha256WithRSAEncryption 36:c2:73:bc:06:df:c3:ba:c9:0c:b0:9d:e3:ba:b6:e5:6e:84: f9:83:e4:9b:54:22:0a:29:d6:9d:9c:4b:c6:63:1d:09:68:f0: 9d:c4:f6:ff:c6:24:78:cb:df:37:36:3d:98:c7:e7:5c:cc:b6: d4:34:d6:00:6a:d8:c8:59:d1:b7:20:32:bf:68:e4:5b:3e:72: 75:be:d4:5c:11:a3:53:06:9d:39:f1:81:2a:5a:da:93:ca:3c: 43:5e:2e:8a:c3:35:d4:c2:9c:c4:9f:f4:b9:13:cb:e5:9e:0b: a7:12:69:77:74:5f:c3:fe:52:85:21:bc:f0:48:ea:a1:80:b3: aa:f4:34:c4:2b:cc:28:b5:7d:45:25:01:f1:73:bc:36:ff:69: 65:bf:81:a6:58:1d:0a:e4:41:36:8f:42:93:f5:a1:ac:f8:b0: b8:6b:82:be:38:e8:83:5d:92:c7:72:3e:72:ad:df:e3:42:18: c4:76:2e:72:b6:4f:6e:86:f3:a6:28:ca:05:43:f3:03:03:5b: e7:41:fb:ff:d8:79:f4:d8:00:97:b2:3d:6b:b3:1e:37:c2:f5: 0a:5a:28:d5:44:0a:7c:4d:8a:ae:f8:6e:38:f1:25:72:02:17: 7f:8c:cc:6d:9c:39:a8:2c:9e:5c:95:cf:c3:1c:93:06:c7:5d: a8:eb:32:2d -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUXyhyQ/1wRhoux3e63saa61GKZDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDJaFw0yNjExMjAxNTQ5MDJaMDMxMTAvBgNV BAMTKDNFRTJGQkMyN0JGQkFCQ0FDMzkyQjhGRDEyNDQ3OTJGMEY5NTI2MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH5293inGjpx1RBjbfhOXlTOte 41RDW9Aqj1PfnB875VsjUgDNiPnb3Qn/pXWSP8BA8/56OUTubFIsiuRJqsxV7cfI zG8c/zvU3SeWiIcdAhK1RelJOTY76lVX6xL1u+r0nWE4U39aotXqJLVXKfx98Pf3 ji5PBuP7KBIBlERE50Y0dCO4GGHXExQ1365OW/Y6yW36bpdC7y2D02LvxWbdsVF/ OdK43lgVST3Zn3htTVTK0kEefVIVLU+PRqYARXFgBAKfmk5wiFgKEhOeTsUg/TDV wMfA5/jM6BjRjCO7Won37rWX5zAfCffF1l09m2cXW44oj6j4IxuRB2oBHkihAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUPuL7wnv7q8rDkrj9EkR5Lw+VJhEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM1MzMy ZTMxMzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMI1bDANBgkqhkiG9w0BAQsFAAOCAQEANsJzvAbfw7rJDLCd47q25W6E +YPkm1QiCinWnZxLxmMdCWjwncT2/8YkeMvfNzY9mMfnXMy21DTWAGrYyFnRtyAy v2jkWz5ydb7UXBGjUwadOfGBKlrak8o8Q14uisM11MKcxJ/0uRPL5Z4LpxJpd3Rf w/5ShSG88EjqoYCzqvQ0xCvMKLV9RSUB8XO8Nv9pZb+BplgdCuRBNo9Ck/WhrPiw uGuCvjjog12Sx3I+cq3f40IYxHYucrZPbobzpijKBUPzAwNb50H7/9h59NgAl7I9 a7MeN8L1Cloo1UQKfE2KrvhuOPElcgIXf4zMbZw5qCyeXJXPwxyTBsddqOsyLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:56 2025 by rpki-client