This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3130392e302f32342d3234203d3e20313336373837.roa File: 3139342e35332e3130392e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 38ykChjGgozum27SPtqjIt6qxg4Jy4HnzHFMSAMD2lw= Subject key identifier: 4C:1B:20:4C:F9:DA:5D:C1:A8:52:97:71:12:4C:0C:11:C0:F2:66:76 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2E1AAB058B157537BA7B9359FCD9707F2D291219 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3130392e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:04 +0000 ROA not before: Fri 21 Nov 2025 15:44:04 +0000 ROA not after: Fri 20 Nov 2026 15:49:04 +0000 asID: 136787 IP address blocks: 194.53.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:1a:ab:05:8b:15:75:37:ba:7b:93:59:fc:d9:70:7f:2d:29:12:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:04 2025 GMT Not After : Nov 20 15:49:04 2026 GMT Subject: CN=4C1B204CF9DA5DC1A8529771124C0C11C0F26676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:01:f7:5b:e9:65:2e:7c:0d:09:dd:53:bc:56: f1:c4:1d:5e:5c:13:80:1f:47:76:65:6c:87:a6:38: ab:f8:ac:23:d4:cd:ed:e2:e2:2e:10:17:d2:60:22: de:4f:51:4f:1f:ac:2d:88:66:bf:c8:f4:ac:53:7b: ae:bc:f3:7f:43:dc:b2:55:0e:40:4f:a3:60:fe:fc: 3c:64:50:ef:9f:22:43:0a:6f:79:b2:de:1a:ad:a1: af:67:5a:0b:36:5d:59:c2:51:7e:2f:74:d9:4a:81: b2:f3:c4:12:94:3a:f4:8f:c4:66:8a:3d:1a:e9:4c: d7:89:0f:47:98:f2:91:58:0e:da:e5:40:b3:e2:27: 82:f1:ac:54:bd:94:9f:6f:6d:3a:01:7a:61:49:86: 70:d0:62:1f:cc:a4:48:f7:6e:6f:65:cd:06:d4:bd: ca:57:3a:ff:78:42:2b:da:a9:24:ca:c4:01:f5:86: 6d:05:e2:be:1e:7b:ab:5f:02:28:fd:2f:74:39:d7: fe:0a:10:7e:54:8d:8b:61:56:fb:60:71:ac:5b:89: 3c:b1:2c:b2:6d:31:8b:26:09:0a:9e:91:64:1f:24: 7d:ee:e0:59:86:12:19:b3:ad:18:f7:e6:25:29:c2: e4:bd:e3:19:89:f2:c7:57:71:58:d2:b4:8a:72:2b: 77:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1B:20:4C:F9:DA:5D:C1:A8:52:97:71:12:4C:0C:11:C0:F2:66:76 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3130392e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.53.109.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:c1:8c:3b:f7:58:b9:7d:39:b8:9e:13:b8:44:e3:f4:41:f5: 8f:27:c9:88:c0:44:7f:65:3d:d4:24:ad:07:1e:9a:93:bd:fc: ed:b6:03:5c:39:ff:d1:f0:46:60:d5:05:93:4e:f5:ea:c8:ff: 48:52:3d:d3:31:02:bd:1f:08:5a:73:d7:8c:09:9c:6c:2a:9d: 9a:45:1f:1a:dd:c2:56:5c:86:9a:13:5f:44:30:16:89:b1:6c: bd:c6:95:e8:19:fc:87:6f:2c:ca:ce:8d:97:36:63:77:9c:33: f2:f3:e0:69:dd:78:41:40:0b:e4:82:30:b0:15:e1:87:1d:44: 48:70:f2:ff:22:1f:ec:30:98:cb:f9:5c:cc:2c:c1:a3:c8:9b: f1:77:35:0d:22:3a:21:34:f5:63:d3:f0:75:dc:b8:ff:cc:a7: 9c:02:1d:41:25:6b:fc:34:7f:81:d6:1e:10:06:18:92:fa:c2: 4a:b2:1b:20:35:b1:61:44:ca:37:08:96:79:87:63:5c:18:30: ea:c6:29:ce:3a:31:c2:19:ac:c0:f2:c3:0f:aa:43:18:95:41: 63:c7:74:53:c5:9a:02:1a:23:ab:4b:c0:b7:af:26:dc:f9:50: dd:ee:e7:1e:ef:d0:e7:12:3f:80:65:10:d9:36:9f:22:4e:4a: c9:b3:a8:09 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIULhqrBYsVdTe6e5NZ/Nlwfy0pEhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDRaFw0yNjExMjAxNTQ5MDRaMDMxMTAvBgNV BAMTKDRDMUIyMDRDRjlEQTVEQzFBODUyOTc3MTEyNEMwQzExQzBGMjY2NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPAfdb6WUufA0J3VO8VvHEHV5c E4AfR3ZlbIemOKv4rCPUze3i4i4QF9JgIt5PUU8frC2IZr/I9KxTe668839D3LJV DkBPo2D+/DxkUO+fIkMKb3my3hqtoa9nWgs2XVnCUX4vdNlKgbLzxBKUOvSPxGaK PRrpTNeJD0eY8pFYDtrlQLPiJ4LxrFS9lJ9vbToBemFJhnDQYh/MpEj3bm9lzQbU vcpXOv94QivaqSTKxAH1hm0F4r4ee6tfAij9L3Q51/4KEH5UjYthVvtgcaxbiTyx LLJtMYsmCQqekWQfJH3u4FmGEhmzrRj35iUpwuS94xmJ8sdXcVjStIpyK3efAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUTBsgTPnaXcGoUpdxEkwMEcDyZnYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM1MzMy ZTMxMzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMI1bTANBgkqhkiG9w0BAQsFAAOCAQEAb8GMO/dYuX05uJ4TuETj9EH1 jyfJiMBEf2U91CStBx6ak7387bYDXDn/0fBGYNUFk0716sj/SFI90zECvR8IWnPX jAmcbCqdmkUfGt3CVlyGmhNfRDAWibFsvcaV6Bn8h28sys6NlzZjd5wz8vPgad14 QUAL5IIwsBXhhx1ESHDy/yIf7DCYy/lczCzBo8ib8Xc1DSI6ITT1Y9Pwddy4/8yn nAIdQSVr/DR/gdYeEAYYkvrCSrIbIDWxYUTKNwiWeYdjXBgw6sYpzjoxwhmswPLD D6pDGJVBY8d0U8WaAhojq0vAt68m3PlQ3e7nHu/Q5xI/gGUQ2TafIk5KybOoCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:55 2025 by rpki-client