This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3235352e302f32342d3234203d3e20313336373837.roa File: 3139342e35392e3235352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: TYMIneR4r+7+4JpCpa26QyCq15T/tBMxA0tWUNXwqk8= Subject key identifier: B5:F9:52:00:6C:21:65:48:3A:82:7D:10:E4:2B:F3:E0:D5:AC:8F:97 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 146D3F5A0AF1C73EB2B411B6591F05D8DE87AF5D Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3235352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:15 +0000 ROA not before: Fri 28 Nov 2025 11:44:15 +0000 ROA not after: Fri 27 Nov 2026 11:49:15 +0000 asID: 136787 IP address blocks: 194.59.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:6d:3f:5a:0a:f1:c7:3e:b2:b4:11:b6:59:1f:05:d8:de:87:af:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:15 2025 GMT Not After : Nov 27 11:49:15 2026 GMT Subject: CN=B5F952006C2165483A827D10E42BF3E0D5AC8F97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9f:32:17:73:ba:df:5e:bb:99:47:24:c0:cd: 13:47:c6:b0:bb:16:c9:27:d6:06:ad:e8:54:c1:17: 22:cf:93:02:47:f0:6a:de:cd:4d:44:c8:ab:da:9f: a6:f8:7f:79:ef:2c:18:ac:f1:fd:0e:d9:d4:8e:37: 96:44:dc:7f:58:d6:4f:f1:3b:9c:b6:a0:dc:fe:d0: f5:5a:22:dd:b7:84:c1:d4:de:0b:1d:79:35:01:1f: d6:9a:da:7c:42:6f:de:82:af:2a:05:a8:a7:79:4c: 5b:ef:91:a0:1a:be:a1:b0:8e:68:40:1e:d3:74:f9: 3b:61:10:b6:73:35:25:d4:63:3f:87:85:23:bf:53: 1d:10:a0:62:67:fc:43:e0:a4:de:ee:5c:02:29:a0: b4:65:2a:1e:b1:80:5a:97:db:f5:28:1c:7c:40:c7: 9b:df:cc:10:42:ee:19:7c:0d:59:0d:e7:bf:ed:e2: cf:d9:69:0a:df:86:dc:60:6f:f8:b6:ea:86:c4:e9: 1c:20:c2:d7:87:73:ca:f3:1a:02:b9:59:dc:52:fb: 29:3e:3f:a3:10:8b:f5:68:b8:24:bf:90:a0:67:f4: 3d:99:f8:e8:e8:5b:bb:12:d0:d1:04:3f:40:dc:a7: ce:03:a8:9e:34:85:1f:29:c7:5e:71:2d:93:b9:d3: 20:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F9:52:00:6C:21:65:48:3A:82:7D:10:E4:2B:F3:E0:D5:AC:8F:97 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3235352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.255.0/24 Signature Algorithm: sha256WithRSAEncryption 41:ec:fe:f5:76:6d:34:2a:1e:3d:f8:7d:02:b7:2e:f5:38:35: 38:5c:94:ef:10:f1:9e:06:e7:a8:07:ea:dd:9e:1f:ca:42:50: 91:05:47:15:a8:a7:9f:a4:60:91:cf:db:cd:e8:7e:3d:e0:5f: 8e:df:49:6e:2c:49:10:c8:d3:49:2c:34:14:e1:f2:a7:b6:38: 6e:dd:c2:e0:9c:8a:5e:42:bb:39:89:01:26:05:fa:b3:90:0f: b0:31:21:37:e9:fb:2a:97:18:5f:c4:c2:a6:fa:f3:0d:f7:2b: a1:2f:f1:e7:da:f9:d5:27:b9:6f:47:5d:b7:f2:a0:c9:a0:25: 8b:65:89:22:e0:69:9c:1a:46:40:4d:bc:3a:c8:4a:0b:64:e9: 83:91:a0:26:d5:c9:1d:6d:8b:56:fa:d8:19:3f:cf:01:94:5f: 45:6f:08:ae:73:d9:a3:2d:26:a9:64:44:c4:65:2c:16:79:53: 77:8a:2a:de:b6:2f:d3:eb:89:aa:78:c0:cc:43:9d:57:f0:4f: b4:f9:ba:f1:2b:d9:1b:60:4c:a3:88:96:77:92:f0:9c:22:ad: 66:b5:ae:68:ab:a5:2a:0c:5f:37:6a:b4:c7:f8:18:34:37:92: 3e:96:97:0c:54:33:72:56:49:e8:98:17:f1:19:4d:c7:20:e6: ff:01:46:61 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUFG0/Wgrxxz6ytBG2WR8F2N6Hr10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTVaFw0yNjExMjcxMTQ5MTVaMDMxMTAvBgNV BAMTKEI1Rjk1MjAwNkMyMTY1NDgzQTgyN0QxMEU0MkJGM0UwRDVBQzhGOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCunzIXc7rfXruZRyTAzRNHxrC7 Fskn1gat6FTBFyLPkwJH8GrezU1EyKvan6b4f3nvLBis8f0O2dSON5ZE3H9Y1k/x O5y2oNz+0PVaIt23hMHU3gsdeTUBH9aa2nxCb96CryoFqKd5TFvvkaAavqGwjmhA HtN0+TthELZzNSXUYz+HhSO/Ux0QoGJn/EPgpN7uXAIpoLRlKh6xgFqX2/UoHHxA x5vfzBBC7hl8DVkN57/t4s/ZaQrfhtxgb/i26obE6RwgwteHc8rzGgK5WdxS+yk+ P6MQi/VouCS/kKBn9D2Z+OjoW7sS0NEEP0Dcp84DqJ40hR8px15xLZO50yAdAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUtflSAGwhZUg6gn0Q5Cvz4NWsj5cwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM1Mzky ZTMyMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMI7/zANBgkqhkiG9w0BAQsFAAOCAQEAQez+9XZtNCoePfh9Arcu9Tg1 OFyU7xDxngbnqAfq3Z4fykJQkQVHFainn6Rgkc/bzeh+PeBfjt9JbixJEMjTSSw0 FOHyp7Y4bt3C4JyKXkK7OYkBJgX6s5APsDEhN+n7KpcYX8TCpvrzDfcroS/x59r5 1Se5b0ddt/KgyaAli2WJIuBpnBpGQE28OshKC2Tpg5GgJtXJHW2LVvrYGT/PAZRf RW8IrnPZoy0mqWRExGUsFnlTd4oq3rYv0+uJqnjAzEOdV/BPtPm68SvZG2BMo4iW d5LwnCKtZrWuaKulKgxfN2q0x/gYNDeSPpaXDFQzclZJ6JgX8RlNxyDm/wFGYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:01:15 2025 by rpki-client