This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3235322e302f32342d3234203d3e20313336373837.roa File: 3139342e35392e3235322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: RclMSgEf0YimowyIFNrLqL03ftKeW5vkiKpRuCcMoFU= Subject key identifier: CF:77:DE:71:46:4D:ED:24:F8:63:8B:85:AA:1C:05:F9:15:22:E5:15 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6BFA50EABF29B3554CC7DF108DFA99220BB4CBBA Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3235322e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:44 +0000 ROA not before: Fri 28 Nov 2025 11:44:44 +0000 ROA not after: Fri 27 Nov 2026 11:49:44 +0000 asID: 136787 IP address blocks: 194.59.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:fa:50:ea:bf:29:b3:55:4c:c7:df:10:8d:fa:99:22:0b:b4:cb:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:44 2025 GMT Not After : Nov 27 11:49:44 2026 GMT Subject: CN=CF77DE71464DED24F8638B85AA1C05F91522E515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6f:16:ce:4a:a8:28:af:f3:af:2b:6c:b6:1b: 14:fc:0b:61:80:96:28:89:42:6b:eb:44:75:1c:6b: 6a:df:bf:31:34:0e:9f:8a:09:93:69:e4:e0:bc:d9: ac:c4:f6:bb:d4:07:05:0b:1b:2a:77:cc:6a:b6:77: 44:28:c1:d5:46:82:c6:9c:b2:77:16:e7:a9:1f:a2: c6:6b:49:31:e4:d9:b3:c6:5e:6a:74:e6:62:07:b2: 64:3a:9b:3c:0b:53:c7:50:11:22:8c:24:42:60:be: e7:7b:2b:41:e6:b9:f8:67:00:e4:a9:0f:d0:22:f4: 89:09:03:6e:ab:db:28:4e:e9:68:6b:0b:7d:cb:93: 14:1e:e4:3b:eb:2a:59:d0:3f:d2:fa:83:1e:a1:40: 14:96:3d:f0:f0:55:ff:ae:f9:a7:fe:02:bd:02:f0: 8a:67:da:b7:71:22:0b:52:71:18:89:b2:6d:af:87: 91:bc:64:0c:0a:61:23:99:a6:da:94:d1:8f:61:b4: ab:a8:db:55:bb:dd:d7:61:64:0b:48:88:3e:1d:3d: cb:39:a3:e3:58:1e:e6:33:fc:d4:9c:26:5e:dc:48: 17:6d:2a:11:17:5b:f1:96:e9:d4:e6:0c:4b:d3:e7: ee:17:6a:04:00:f4:f3:2a:23:6b:7e:93:61:cb:3d: 0b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:77:DE:71:46:4D:ED:24:F8:63:8B:85:AA:1C:05:F9:15:22:E5:15 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3235322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.252.0/24 Signature Algorithm: sha256WithRSAEncryption e0:5c:54:9d:ee:28:72:f6:49:cd:2c:c2:98:cb:c3:12:1a:2d: 7f:be:ef:f9:ba:f1:51:fe:d5:1c:23:08:20:c1:d9:92:62:67: 62:4a:b8:3d:55:b6:73:74:05:79:37:ac:92:0a:42:d3:f3:91: 23:fa:ba:9b:83:ce:3d:52:4d:e0:ad:9a:db:9b:c4:7d:eb:38: cd:2f:ff:ab:88:58:16:a0:d7:8a:50:df:8b:ce:a3:ef:52:ea: 88:87:13:7b:c6:b5:ee:b7:20:3c:cb:88:9e:08:1c:b0:a3:f1: 0c:e8:3c:7d:22:3c:2c:27:29:a1:8a:98:3f:30:f4:07:d1:cf: c3:58:8d:c8:79:ca:39:cf:86:75:75:e4:5d:53:32:3b:b1:82: 60:4b:33:f1:78:36:bb:be:e1:c2:42:90:82:ce:92:61:6d:52: 39:f7:45:2b:88:8f:97:7c:94:c2:b0:5d:68:cf:60:69:f2:01: 7c:91:0a:7c:e6:6d:46:9b:fd:49:84:71:d9:3c:0e:22:5e:a1: b3:cb:1e:82:f3:70:a6:47:ba:14:d1:34:dd:ff:57:a7:93:2e: b3:f3:9a:07:b5:69:55:80:d7:1c:c0:68:d3:58:48:6d:c8:48: e2:12:6a:02:ef:01:d4:3e:11:a7:0d:cf:ba:36:29:92:ab:1b: af:dd:fe:d1 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUa/pQ6r8ps1VMx98QjfqZIgu0y7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDRaFw0yNjExMjcxMTQ5NDRaMDMxMTAvBgNV BAMTKENGNzdERTcxNDY0REVEMjRGODYzOEI4NUFBMUMwNUY5MTUyMkU1MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAbxbOSqgor/OvK2y2GxT8C2GA liiJQmvrRHUca2rfvzE0Dp+KCZNp5OC82azE9rvUBwULGyp3zGq2d0QowdVGgsac sncW56kfosZrSTHk2bPGXmp05mIHsmQ6mzwLU8dQESKMJEJgvud7K0HmufhnAOSp D9Ai9IkJA26r2yhO6WhrC33LkxQe5DvrKlnQP9L6gx6hQBSWPfDwVf+u+af+Ar0C 8Ipn2rdxIgtScRiJsm2vh5G8ZAwKYSOZptqU0Y9htKuo21W73ddhZAtIiD4dPcs5 o+NYHuYz/NScJl7cSBdtKhEXW/GW6dTmDEvT5+4XagQA9PMqI2t+k2HLPQsPAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUz3fecUZN7ST4Y4uFqhwF+RUi5RUwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM1Mzky ZTMyMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMI7/DANBgkqhkiG9w0BAQsFAAOCAQEA4FxUne4ocvZJzSzCmMvDEhot f77v+brxUf7VHCMIIMHZkmJnYkq4PVW2c3QFeTeskgpC0/ORI/q6m4POPVJN4K2a 25vEfes4zS//q4hYFqDXilDfi86j71LqiIcTe8a17rcgPMuInggcsKPxDOg8fSI8 LCcpoYqYPzD0B9HPw1iNyHnKOc+GdXXkXVMyO7GCYEsz8Xg2u77hwkKQgs6SYW1S OfdFK4iPl3yUwrBdaM9gafIBfJEKfOZtRpv9SYRx2TwOIl6hs8segvNwpke6FNE0 3f9Xp5Mus/OaB7VpVYDXHMBo01hIbchI4hJqAu8B1D4Rpw3PujYpkqsbr93+0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:01:13 2025 by rpki-client