This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3235332e302f32342d3234203d3e20313336373837.roa File: 3139342e35392e3235332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: kVBGDD4cBG9BwiKBjbHSD/4AqxzN/uvkdrf0BTRKnfE= Subject key identifier: 12:A6:B7:8F:2F:19:9E:CC:9A:D5:4A:CB:56:7B:45:D4:7C:ED:AB:46 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 07913F542F3D6516B7D1B8C0563A475E72B9FB2F Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3235332e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:17 +0000 ROA not before: Fri 28 Nov 2025 11:44:17 +0000 ROA not after: Fri 27 Nov 2026 11:49:17 +0000 asID: 136787 IP address blocks: 194.59.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:91:3f:54:2f:3d:65:16:b7:d1:b8:c0:56:3a:47:5e:72:b9:fb:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:17 2025 GMT Not After : Nov 27 11:49:17 2026 GMT Subject: CN=12A6B78F2F199ECC9AD54ACB567B45D47CEDAB46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:e8:84:cf:14:8b:98:02:ec:e2:21:a9:93: c4:fe:4d:c5:bb:07:41:2e:bf:a1:85:01:c5:d7:05: ab:c9:86:af:a7:77:d0:f0:bf:c1:e9:19:fe:bb:3f: 22:5a:7f:ac:f2:b7:1a:af:69:f3:3e:50:36:11:f9: 5f:f0:39:48:71:82:3f:ff:fb:e8:02:bc:49:28:83: 68:80:5a:73:7d:af:a1:ad:05:ff:c7:3b:62:ca:da: 09:98:fb:89:fb:35:27:d7:25:ad:a5:52:ab:bf:fe: fe:a0:4f:ab:3a:99:a6:7c:b1:ed:12:96:db:69:11: c3:98:7f:6b:00:86:90:bc:6a:97:6a:12:6c:53:61: 2a:87:74:b2:68:e2:0f:b9:8e:ad:01:fb:ab:c7:25: e1:a0:22:48:5e:be:7e:e3:12:41:69:c3:5b:11:e8: c0:5b:cd:23:e2:a6:c5:48:2f:b9:e9:86:1d:27:48: 74:29:8a:c6:c3:56:44:60:8d:55:74:97:09:3e:84: 3b:2c:72:69:0f:d3:23:f4:3f:3a:d9:21:7f:37:be: 03:52:1a:71:36:4d:e0:67:c9:e1:29:b6:18:40:3b: 27:67:2a:e9:33:dc:4c:eb:42:8a:43:37:7a:ab:18: 57:ec:f0:fa:93:04:96:67:09:00:55:fc:5a:00:85: ca:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A6:B7:8F:2F:19:9E:CC:9A:D5:4A:CB:56:7B:45:D4:7C:ED:AB:46 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3235332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.253.0/24 Signature Algorithm: sha256WithRSAEncryption ad:a7:05:c6:13:1b:e5:ac:eb:b0:a9:e1:72:1f:59:7e:b6:86: 6d:0b:bf:cf:ea:a0:17:f5:9d:72:50:d2:2e:0e:7a:09:4a:8b: 27:98:6f:54:c9:3c:b5:39:20:54:00:81:71:b8:6b:64:bc:8b: 6d:d6:85:2b:db:d5:8b:67:72:0c:39:02:21:28:79:aa:bb:6d: b0:f4:90:b3:5a:58:2e:d0:a3:53:6d:01:6c:26:6e:ed:b5:be: 0e:b6:35:f7:63:93:46:a8:e4:2e:f2:6a:81:1f:f3:6a:da:a6: 49:6f:59:3c:2a:5b:24:63:f2:68:c6:3e:a7:46:8e:e8:8f:a9: 5c:51:dc:6a:7d:63:18:0e:0e:58:53:ac:ce:3d:a1:6c:0f:c9: ff:ce:67:f0:04:7f:76:bf:9f:d5:a1:51:d9:50:c3:ef:87:7d: 3e:98:ea:c1:23:33:9f:98:54:21:94:c4:f1:42:af:6b:e5:b5: 93:ab:d6:6b:33:c1:25:26:e0:cb:6f:03:1b:6d:6b:0b:a9:bf: 17:40:ba:7b:aa:ac:46:b7:6e:9d:92:fb:ea:58:6c:f8:18:be: 44:7e:d1:62:1a:68:ee:3f:77:e9:1b:5e:fd:36:27:b7:e7:a5: f4:a7:21:3c:04:96:4a:10:ec:35:fb:fd:42:20:75:c6:c2:30: 4e:7b:88:77 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUB5E/VC89ZRa30bjAVjpHXnK5+y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTdaFw0yNjExMjcxMTQ5MTdaMDMxMTAvBgNV BAMTKDEyQTZCNzhGMkYxOTlFQ0M5QUQ1NEFDQjU2N0I0NUQ0N0NFREFCNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+M+iEzxSLmALs4iGpk8T+TcW7 B0Euv6GFAcXXBavJhq+nd9Dwv8HpGf67PyJaf6zytxqvafM+UDYR+V/wOUhxgj// ++gCvEkog2iAWnN9r6GtBf/HO2LK2gmY+4n7NSfXJa2lUqu//v6gT6s6maZ8se0S lttpEcOYf2sAhpC8apdqEmxTYSqHdLJo4g+5jq0B+6vHJeGgIkhevn7jEkFpw1sR 6MBbzSPipsVIL7nphh0nSHQpisbDVkRgjVV0lwk+hDsscmkP0yP0PzrZIX83vgNS GnE2TeBnyeEpthhAOydnKukz3EzrQopDN3qrGFfs8PqTBJZnCQBV/FoAhcqJAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUEqa3jy8Znsya1UrLVntF1Hztq0YwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM1Mzky ZTMyMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMI7/TANBgkqhkiG9w0BAQsFAAOCAQEAracFxhMb5azrsKnhch9ZfraG bQu/z+qgF/WdclDSLg56CUqLJ5hvVMk8tTkgVACBcbhrZLyLbdaFK9vVi2dyDDkC ISh5qrttsPSQs1pYLtCjU20BbCZu7bW+DrY192OTRqjkLvJqgR/zatqmSW9ZPCpb JGPyaMY+p0aO6I+pXFHcan1jGA4OWFOszj2hbA/J/85n8AR/dr+f1aFR2VDD74d9 PpjqwSMzn5hUIZTE8UKva+W1k6vWazPBJSbgy28DG21rC6m/F0C6e6qsRrdunZL7 6lhs+Bi+RH7RYhpo7j936Rte/TYnt+el9KchPASWShDsNfv9QiB1xsIwTnuIdw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:01:10 2025 by rpki-client