This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e3230302e302f32342d3234203d3e20323034313730.roa File: 3139342e36302e3230302e302f32342d3234203d3e20323034313730.roa (raw, json) Hash identifier: +xpLxS946++D0JmME/FDUsMADl7hCsR/OV2EpOF/+DI= Subject key identifier: 03:33:4E:14:34:40:B6:37:FD:4C:A2:57:18:A1:8E:E3:89:FB:F0:EE Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 39A173BAE5728955C8CC3449F0D7FA12230F71C5 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e3230302e302f32342d3234203d3e20323034313730.roa Signing time: Fri 28 Nov 2025 11:49:41 +0000 ROA not before: Fri 28 Nov 2025 11:44:41 +0000 ROA not after: Fri 27 Nov 2026 11:49:41 +0000 asID: 204170 IP address blocks: 194.60.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a1:73:ba:e5:72:89:55:c8:cc:34:49:f0:d7:fa:12:23:0f:71:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:41 2025 GMT Not After : Nov 27 11:49:41 2026 GMT Subject: CN=03334E143440B637FD4CA25718A18EE389FBF0EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ac:bb:f2:9e:27:3d:da:c5:8f:1b:d9:9b:f2: 2a:12:eb:5f:2e:d5:0e:04:1d:2b:79:6c:ec:bf:07: a4:12:8c:46:8d:d0:f0:7a:9a:98:23:a0:62:0d:dc: 08:c4:63:5e:b4:30:02:14:6f:49:7f:22:d3:7d:31: ff:cf:9c:9e:d2:7e:20:cd:b4:9f:85:44:00:c9:2f: 9e:32:69:f1:a8:2a:1e:56:39:13:32:47:86:f2:c0: 8a:c4:3b:4d:ea:cd:bb:20:db:f2:e8:26:5f:f0:7f: d7:58:db:d1:93:e4:7a:5f:1a:b3:07:5a:36:d3:76: 71:8e:a7:21:b3:b4:69:29:d2:86:0c:4b:0d:a3:1c: 46:71:d4:79:4e:11:f5:fd:4f:81:32:ac:3e:c2:6b: 84:c0:9f:66:06:24:b7:18:cf:d9:55:ee:03:88:3c: 2f:a5:90:a9:d1:32:a9:d7:f7:63:50:a7:94:4f:d1: 29:9e:b6:8a:61:25:90:3c:ab:46:fa:64:34:16:50: 1c:5d:2c:03:bd:db:cf:45:e4:4f:e9:1b:36:b9:78: 66:13:26:16:5f:ca:72:a7:fa:11:8d:c5:15:88:0b: fc:26:e6:04:e0:5c:26:a9:50:df:87:83:40:47:6d: 4b:cd:ac:b5:05:80:46:63:10:c5:fd:ab:82:04:19: 35:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:33:4E:14:34:40:B6:37:FD:4C:A2:57:18:A1:8E:E3:89:FB:F0:EE X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e3230302e302f32342d3234203d3e20323034313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.60.200.0/24 Signature Algorithm: sha256WithRSAEncryption de:46:b6:fb:5a:8d:c6:f5:94:55:d4:07:3a:9c:7a:d4:ad:a4: c7:26:70:89:a8:da:9f:df:5b:78:d4:4d:cd:1d:dc:8d:56:8a: 48:df:72:04:12:10:91:e7:7c:25:31:03:45:49:48:2d:a7:8c: 80:13:23:71:60:22:f0:5c:4c:23:32:66:90:a8:09:66:9d:13: d2:36:9f:0e:c0:f6:6b:ed:fc:0e:a5:9e:2e:fa:f6:b1:a8:90: 4e:82:38:a4:d0:3f:4f:68:27:a1:0f:79:d6:e2:a8:df:56:18: 44:85:ee:9c:a9:c4:f8:10:d0:c8:a0:f3:15:d6:8c:d5:b5:26: 36:dc:a3:cf:a7:8f:ed:31:28:6e:f0:9b:20:65:bb:10:4b:b6: cb:e0:0e:a2:75:f4:bf:b8:3d:e6:c2:ec:d2:24:54:e5:96:9a: 9a:8c:31:6b:f8:39:d0:1c:c4:17:bb:a6:60:49:1f:b1:f2:0c: 35:e3:13:23:63:cf:f4:c6:e8:16:59:52:60:60:03:e8:b3:8d: 05:c7:9b:5f:a8:a2:9b:98:80:4b:f9:59:f8:0c:db:3d:f8:9a: d8:57:81:09:f4:6f:14:8e:d3:e3:5d:c7:3c:fc:6a:7c:72:52: 2e:76:e5:20:41:2c:16:81:8c:c0:33:fb:5a:dc:b4:bb:30:9e: 35:7b:f0:91 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUOaFzuuVyiVXIzDRJ8Nf6EiMPccUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDFaFw0yNjExMjcxMTQ5NDFaMDMxMTAvBgNV BAMTKDAzMzM0RTE0MzQ0MEI2MzdGRDRDQTI1NzE4QTE4RUUzODlGQkYwRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkrLvynic92sWPG9mb8ioS618u 1Q4EHSt5bOy/B6QSjEaN0PB6mpgjoGIN3AjEY160MAIUb0l/ItN9Mf/PnJ7SfiDN tJ+FRADJL54yafGoKh5WORMyR4bywIrEO03qzbsg2/LoJl/wf9dY29GT5HpfGrMH WjbTdnGOpyGztGkp0oYMSw2jHEZx1HlOEfX9T4EyrD7Ca4TAn2YGJLcYz9lV7gOI PC+lkKnRMqnX92NQp5RP0SmetophJZA8q0b6ZDQWUBxdLAO9289F5E/pGza5eGYT JhZfynKn+hGNxRWIC/wm5gTgXCapUN+Hg0BHbUvNrLUFgEZjEMX9q4IEGTU9AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUAzNOFDRAtjf9TKJXGKGO44n78O4wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM2MzAy ZTMyMzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDMxMzczMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMI8yDANBgkqhkiG9w0BAQsFAAOCAQEA3ka2+1qNxvWUVdQHOpx61K2k xyZwiajan99beNRNzR3cjVaKSN9yBBIQked8JTEDRUlILaeMgBMjcWAi8FxMIzJm kKgJZp0T0jafDsD2a+38DqWeLvr2saiQToI4pNA/T2gnoQ951uKo31YYRIXunKnE +BDQyKDzFdaM1bUmNtyjz6eP7TEobvCbIGW7EEu2y+AOonX0v7g95sLs0iRU5Zaa mowxa/g50BzEF7umYEkfsfIMNeMTI2PP9MboFllSYGAD6LONBcebX6iim5iAS/lZ +AzbPfia2FeBCfRvFI7T413HPPxqfHJSLnblIEEsFoGMwDP7Wty0uzCeNXvwkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:01:49 2025 by rpki-client