This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3131312e302f32342d3234203d3e20313336373837.roa File: 3139342e35332e3131312e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: oNvKx/hXp9/oPDM3KYsdQZOmr4s2GGRRyfC57NrtxSw= Subject key identifier: 24:8A:21:53:1B:07:C9:B7:F3:DA:DA:A6:F3:AD:46:F1:6E:63:95:23 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 70A90A278DC71D163DCC76B1114F586EBDEE4BBC Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3131312e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:07 +0000 ROA not before: Fri 21 Nov 2025 15:44:07 +0000 ROA not after: Fri 20 Nov 2026 15:49:07 +0000 asID: 136787 IP address blocks: 194.53.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:a9:0a:27:8d:c7:1d:16:3d:cc:76:b1:11:4f:58:6e:bd:ee:4b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:07 2025 GMT Not After : Nov 20 15:49:07 2026 GMT Subject: CN=248A21531B07C9B7F3DADAA6F3AD46F16E639523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dc:ba:19:77:64:3b:b6:c5:74:70:72:e2:fa: df:be:76:f2:c2:5d:4e:4a:a8:26:56:77:57:7a:1f: bd:e7:98:e5:77:e0:69:87:53:e1:88:e7:13:4a:a4: fb:a9:ae:23:73:ea:6c:b5:8f:4b:44:fa:e1:81:a1: d9:1f:11:e6:94:c3:50:64:f6:73:10:dc:10:2a:a4: 58:bb:15:ad:e9:5a:a5:17:1c:37:dc:05:f2:ba:8b: cc:27:ca:b7:fd:11:17:7c:54:bf:60:f0:b0:af:93: 30:79:20:cb:5f:71:6b:e7:0b:4d:4e:a3:2f:25:96: f0:4e:e9:94:a0:c7:ab:f0:d1:b0:1e:d7:d1:e3:20: bd:ad:87:e2:7d:17:91:fb:cf:02:71:c4:b3:dc:26: a6:e8:5d:24:85:d3:1c:7e:ff:63:88:a2:c0:9b:8a: 08:ef:87:13:9e:0c:22:05:51:1a:4a:66:f4:e2:77: 92:7c:85:f0:b3:0a:1d:28:3d:a5:a9:60:86:84:ac: 06:d2:47:00:c6:f8:35:32:a5:9d:78:d8:a8:13:fb: 0a:f7:8a:11:67:3a:f4:e7:1c:f0:25:75:fa:62:37: de:e9:5d:d2:94:7e:23:04:01:ea:52:69:c5:53:9f: 82:88:aa:29:ac:6a:ed:ee:f2:da:16:0c:98:ef:ba: 45:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8A:21:53:1B:07:C9:B7:F3:DA:DA:A6:F3:AD:46:F1:6E:63:95:23 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3131312e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.53.111.0/24 Signature Algorithm: sha256WithRSAEncryption 58:0e:94:08:d7:5b:9b:c6:7e:60:a7:06:9a:54:11:95:6e:4c: a5:09:d8:ae:33:14:06:d2:f3:8f:d8:91:6d:99:d7:15:0b:bc: e2:37:ba:fb:29:63:dd:15:8c:8e:5c:fd:80:cd:08:89:f3:3d: 9c:a6:81:d0:28:a4:de:c1:9c:af:af:84:f2:55:fe:e0:1f:b6: 2b:57:17:31:3d:00:c5:79:25:56:1f:83:43:ca:9f:ba:95:41: 13:d3:9f:fa:fa:43:ee:60:84:94:9f:7a:78:90:99:3e:2e:54: a2:7a:12:0b:a7:cc:17:44:4b:1d:67:91:cc:92:b2:4a:cd:d0: e7:fb:8b:af:e8:c7:5c:80:89:89:52:54:7a:46:ed:df:f0:cb: fc:cd:99:83:0b:43:57:64:9b:86:49:2b:7f:e8:fc:19:87:47: ff:7a:8e:f6:93:98:fc:e1:bf:78:df:dc:86:42:d6:60:fd:38: ae:d9:04:92:0a:86:6c:f0:b9:a3:a7:c8:58:6d:ff:85:f8:5c: 9f:1d:20:7b:3d:ad:22:71:b7:9d:4a:e3:68:77:fd:2f:59:e6: 0b:fb:00:d0:13:8e:5d:e1:61:53:b2:89:3d:e9:41:f3:97:dc: b1:d1:0a:6b:42:f1:b8:e8:e6:49:50:c8:7b:42:a9:11:af:58: ec:6f:4d:14 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUcKkKJ43HHRY9zHaxEU9Ybr3uS7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDdaFw0yNjExMjAxNTQ5MDdaMDMxMTAvBgNV BAMTKDI0OEEyMTUzMUIwN0M5QjdGM0RBREFBNkYzQUQ0NkYxNkU2Mzk1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI3LoZd2Q7tsV0cHLi+t++dvLC XU5KqCZWd1d6H73nmOV34GmHU+GI5xNKpPupriNz6my1j0tE+uGBodkfEeaUw1Bk 9nMQ3BAqpFi7Fa3pWqUXHDfcBfK6i8wnyrf9ERd8VL9g8LCvkzB5IMtfcWvnC01O oy8llvBO6ZSgx6vw0bAe19HjIL2th+J9F5H7zwJxxLPcJqboXSSF0xx+/2OIosCb igjvhxOeDCIFURpKZvTid5J8hfCzCh0oPaWpYIaErAbSRwDG+DUypZ142KgT+wr3 ihFnOvTnHPAldfpiN97pXdKUfiMEAepSacVTn4KIqimsau3u8toWDJjvukU9AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUJIohUxsHybfz2tqm861G8W5jlSMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM1MzMy ZTMxMzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMI1bzANBgkqhkiG9w0BAQsFAAOCAQEAWA6UCNdbm8Z+YKcGmlQRlW5M pQnYrjMUBtLzj9iRbZnXFQu84je6+ylj3RWMjlz9gM0IifM9nKaB0Cik3sGcr6+E 8lX+4B+2K1cXMT0AxXklVh+DQ8qfupVBE9Of+vpD7mCElJ96eJCZPi5UonoSC6fM F0RLHWeRzJKySs3Q5/uLr+jHXICJiVJUekbt3/DL/M2ZgwtDV2Sbhkkrf+j8GYdH /3qO9pOY/OG/eN/chkLWYP04rtkEkgqGbPC5o6fIWG3/hfhcnx0gez2tInG3nUrj aHf9L1nmC/sA0BOOXeFhU7KJPelB85fcsdEKa0LxuOjmSVDIe0KpEa9Y7G9NFA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:26 2025 by rpki-client