This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3235342e302f32342d3234203d3e20313336373837.roa File: 3139342e35392e3235342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: HRi0G3isGOnUkU5aq/bkEFNeDxTq2bJqfeyBDSq2e50= Subject key identifier: 93:46:81:96:CF:DF:D9:BA:55:BA:3A:8D:C5:E5:2F:5A:53:B7:3E:6C Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0D0C0D0049D0663B80CAB81A0AEEC44DAF042FE0 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3235342e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:26 +0000 ROA not before: Fri 28 Nov 2025 11:44:26 +0000 ROA not after: Fri 27 Nov 2026 11:49:26 +0000 asID: 136787 IP address blocks: 194.59.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:0c:0d:00:49:d0:66:3b:80:ca:b8:1a:0a:ee:c4:4d:af:04:2f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:26 2025 GMT Not After : Nov 27 11:49:26 2026 GMT Subject: CN=93468196CFDFD9BA55BA3A8DC5E52F5A53B73E6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e7:74:c8:06:d1:73:e7:1a:ea:48:b5:75:3f: 7d:77:cc:27:0c:e8:bc:ee:7c:90:b3:9f:28:a2:a2: 30:1b:44:1e:dd:14:0f:2e:6e:26:e2:70:07:0a:b2: cf:ff:21:df:c7:07:f6:84:1c:46:7a:79:9b:d6:36: 84:f0:ab:2c:c6:18:1f:0f:e5:1e:36:68:94:36:97: 53:c8:0d:42:52:4b:17:1c:9f:54:0c:db:3c:e0:4b: c2:61:8f:8a:d5:b7:dc:32:e8:28:a8:77:f4:76:02: b0:9e:87:19:aa:9f:cd:15:b2:bf:30:0c:44:ad:7b: 7f:ec:6d:8e:91:dd:db:99:c6:94:d0:66:30:88:01: 60:d0:16:5b:56:7c:56:6e:7d:6e:2e:80:8a:fd:e3: 26:b0:66:d5:12:8e:70:e2:58:76:23:19:35:ca:9b: a4:d6:e5:ab:28:a4:a7:5d:d0:2d:73:60:d0:72:20: 45:fa:18:a9:90:ae:6f:8a:7f:c2:8f:7c:84:5d:a4: d2:89:c3:37:34:89:6f:e7:19:79:28:64:ca:ea:8f: f2:5a:cc:fa:98:11:51:fb:a2:7b:02:13:62:90:2f: c8:a9:4e:32:69:c9:5a:8d:41:2c:d0:cb:78:c7:ff: 8e:59:79:fd:1e:8c:6f:e7:d9:20:90:23:de:6b:41: a7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:46:81:96:CF:DF:D9:BA:55:BA:3A:8D:C5:E5:2F:5A:53:B7:3E:6C X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3235342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.254.0/24 Signature Algorithm: sha256WithRSAEncryption 07:61:cf:56:28:6d:bb:76:69:1b:31:ea:4a:91:9e:db:3f:f3: cb:00:b3:58:ab:c5:88:0e:36:4d:65:d0:5c:36:7d:79:7c:a8: ca:88:2e:6f:ce:40:21:01:0f:1e:88:36:22:ae:c8:3b:ac:d4: 5f:a7:d3:30:bb:88:bb:43:38:3b:d2:04:7b:23:95:9f:58:91: 16:f7:26:5a:ac:ae:c0:b8:2f:d7:54:01:e8:05:1a:55:a6:13: 59:d3:25:35:94:f1:27:58:78:7b:40:0e:e1:cc:7c:f9:32:5c: 4a:ea:ba:c4:32:40:2f:72:5b:71:d5:6b:ba:46:e1:9e:ac:f7: c1:65:21:aa:ae:e1:50:31:17:74:d2:11:f4:f3:52:56:d4:37: 84:98:84:76:a7:1b:06:58:c5:b3:3a:b0:5f:cf:ba:d2:a2:9c: 88:48:42:7b:cb:a9:3a:09:2b:f4:c3:04:80:95:c0:02:21:5d: 91:dd:cb:01:63:1e:4e:75:b1:c4:5a:7d:fa:2e:b4:bc:02:d2: b5:b4:c7:9d:79:27:f3:bd:18:6b:68:d6:89:76:bd:7c:67:cf: 25:f5:4a:09:f0:7d:8c:b9:15:20:b8:45:b4:c6:be:af:be:6d: 2f:24:00:e9:b8:26:1b:28:74:a2:27:bb:5f:c7:33:c8:5b:e1: 22:58:0b:1c -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUDQwNAEnQZjuAyrgaCu7ETa8EL+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjZaFw0yNjExMjcxMTQ5MjZaMDMxMTAvBgNV BAMTKDkzNDY4MTk2Q0ZERkQ5QkE1NUJBM0E4REM1RTUyRjVBNTNCNzNFNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs53TIBtFz5xrqSLV1P313zCcM 6LzufJCznyiiojAbRB7dFA8ubibicAcKss//Id/HB/aEHEZ6eZvWNoTwqyzGGB8P 5R42aJQ2l1PIDUJSSxccn1QM2zzgS8Jhj4rVt9wy6Ciod/R2ArCehxmqn80Vsr8w DESte3/sbY6R3duZxpTQZjCIAWDQFltWfFZufW4ugIr94yawZtUSjnDiWHYjGTXK m6TW5asopKdd0C1zYNByIEX6GKmQrm+Kf8KPfIRdpNKJwzc0iW/nGXkoZMrqj/Ja zPqYEVH7onsCE2KQL8ipTjJpyVqNQSzQy3jH/45Zef0ejG/n2SCQI95rQadFAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUk0aBls/f2bpVujqNxeUvWlO3PmwwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM1Mzky ZTMyMzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMI7/jANBgkqhkiG9w0BAQsFAAOCAQEAB2HPVihtu3ZpGzHqSpGe2z/z ywCzWKvFiA42TWXQXDZ9eXyoyogub85AIQEPHog2Iq7IO6zUX6fTMLuIu0M4O9IE eyOVn1iRFvcmWqyuwLgv11QB6AUaVaYTWdMlNZTxJ1h4e0AO4cx8+TJcSuq6xDJA L3JbcdVrukbhnqz3wWUhqq7hUDEXdNIR9PNSVtQ3hJiEdqcbBljFszqwX8+60qKc iEhCe8upOgkr9MMEgJXAAiFdkd3LAWMeTnWxxFp9+i60vALStbTHnXkn870Ya2jW iXa9fGfPJfVKCfB9jLkVILhFtMa+r75tLyQA6bgmGyh0oie7X8czyFvhIlgLHA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:53:52 2025 by rpki-client