This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3131302e302f32342d3234203d3e20313336373837.roa File: 3139342e35332e3131302e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: QE4sYildaLIMlfzyDZUuZLVm4I9N7Q76cx1629BDohw= Subject key identifier: 58:4E:09:60:20:EE:AF:32:91:58:96:83:08:A3:33:AB:11:AC:3C:B0 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 5BF91657079EEB215D84A68BA77791ABC12B26EF Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3131302e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:04 +0000 ROA not before: Fri 21 Nov 2025 15:44:04 +0000 ROA not after: Fri 20 Nov 2026 15:49:04 +0000 asID: 136787 IP address blocks: 194.53.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f9:16:57:07:9e:eb:21:5d:84:a6:8b:a7:77:91:ab:c1:2b:26:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:04 2025 GMT Not After : Nov 20 15:49:04 2026 GMT Subject: CN=584E096020EEAF329158968308A333AB11AC3CB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7c:08:9f:4f:9c:ae:09:d7:85:87:06:92:45: da:9f:a4:f3:3c:e9:5e:b8:84:51:84:68:b6:fe:22: c3:c7:4b:4b:a9:23:fe:d3:ff:8a:2f:16:ec:97:bb: c4:0f:ef:00:50:ab:f2:55:23:77:5e:31:57:34:7a: 5b:be:35:d9:e9:ff:42:fa:65:43:26:75:15:fe:0d: 81:7c:76:49:c4:dd:b0:5e:d6:9d:6b:e7:59:b0:49: 0c:71:ca:af:d5:f6:c1:94:25:da:42:19:96:97:32: ef:18:1d:24:8c:58:67:34:77:13:a1:e2:59:28:d1: 8f:b9:c9:79:43:43:c0:d2:3a:f7:a8:b2:c0:c0:5f: 83:8a:e4:93:64:4d:20:27:3e:0d:13:4f:e9:fa:59: 93:e4:5e:9c:02:0b:88:fe:51:f2:e7:97:5d:ac:7b: 6d:4d:68:25:0c:aa:7e:ff:04:da:87:79:ab:6a:b5: 50:fc:89:23:e3:29:73:3a:e2:82:8f:18:ff:a5:7b: f5:9c:b6:0f:09:70:2e:aa:e6:70:e4:d5:26:a3:f9: d9:85:59:5c:e3:6c:14:5d:8d:7d:ff:1a:d5:e4:a0: c6:17:9a:7e:04:3a:b4:18:0f:6c:eb:9b:92:82:c7: 61:32:07:27:49:d0:6e:3c:80:fa:63:b5:41:cc:47: 67:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4E:09:60:20:EE:AF:32:91:58:96:83:08:A3:33:AB:11:AC:3C:B0 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3131302e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.53.110.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:95:6d:62:9e:c2:c4:42:11:f0:88:26:e8:55:85:ea:53:fd: 77:33:5e:60:3f:b4:eb:97:b8:8d:06:ef:9a:de:0a:fe:57:c5: 96:d3:38:b9:bb:4b:2a:26:9e:17:fc:37:bf:d6:69:d1:28:0e: 42:ee:ed:a5:ae:62:53:94:39:7d:17:24:44:f3:ce:e0:a7:d1: 15:04:34:6a:bd:aa:c8:62:a9:64:86:e4:da:8b:04:14:d4:d2: be:ed:2a:d0:c4:69:5f:2a:43:bb:40:f3:95:41:5c:83:91:f3: 39:1b:bb:0a:e8:dd:ff:a1:21:ae:03:18:ed:04:e6:f3:f0:a8: 73:98:94:4e:1c:bd:a9:4a:e0:dd:e6:0e:ca:ca:66:a6:3e:8c: 3d:65:4e:c7:cd:f6:5b:99:e7:d6:e4:b2:41:23:46:a1:29:e6: 33:8d:58:27:a6:dc:90:a1:f8:84:02:32:25:10:4f:00:14:c5: 53:40:c5:7b:91:a0:a5:84:cf:fd:ed:e9:e1:6d:39:f7:dd:d2: e8:be:c5:db:31:74:af:54:9c:18:2b:c2:54:01:8e:da:05:6e: b2:d0:95:4f:cb:1c:0c:36:bb:fd:94:76:ed:10:92:dc:8e:cb: 94:4f:a6:67:45:88:15:9b:46:b9:6c:ac:fa:4d:67:0f:2d:d4: 28:74:44:4c -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUW/kWVwee6yFdhKaLp3eRq8ErJu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDRaFw0yNjExMjAxNTQ5MDRaMDMxMTAvBgNV BAMTKDU4NEUwOTYwMjBFRUFGMzI5MTU4OTY4MzA4QTMzM0FCMTFBQzNDQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnfAifT5yuCdeFhwaSRdqfpPM8 6V64hFGEaLb+IsPHS0upI/7T/4ovFuyXu8QP7wBQq/JVI3deMVc0elu+Ndnp/0L6 ZUMmdRX+DYF8dknE3bBe1p1r51mwSQxxyq/V9sGUJdpCGZaXMu8YHSSMWGc0dxOh 4lko0Y+5yXlDQ8DSOveossDAX4OK5JNkTSAnPg0TT+n6WZPkXpwCC4j+UfLnl12s e21NaCUMqn7/BNqHeatqtVD8iSPjKXM64oKPGP+le/Wctg8JcC6q5nDk1Saj+dmF WVzjbBRdjX3/GtXkoMYXmn4EOrQYD2zrm5KCx2EyBydJ0G48gPpjtUHMR2ebAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUWE4JYCDurzKRWJaDCKMzqxGsPLAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM1MzMy ZTMxMzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMI1bjANBgkqhkiG9w0BAQsFAAOCAQEAXpVtYp7CxEIR8Igm6FWF6lP9 dzNeYD+065e4jQbvmt4K/lfFltM4ubtLKiaeF/w3v9Zp0SgOQu7tpa5iU5Q5fRck RPPO4KfRFQQ0ar2qyGKpZIbk2osEFNTSvu0q0MRpXypDu0DzlUFcg5HzORu7Cujd /6EhrgMY7QTm8/Coc5iUThy9qUrg3eYOyspmpj6MPWVOx832W5nn1uSyQSNGoSnm M41YJ6bckKH4hAIyJRBPABTFU0DFe5GgpYTP/e3p4W05993S6L7F2zF0r1ScGCvC VAGO2gVustCVT8scDDa7/ZR27RCS3I7LlE+mZ0WIFZtGuWys+k1nDy3UKHRETA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:07 2025 by rpki-client