This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e3230312e302f32342d3332203d3e203531313637.roa File: 3139342e36302e3230312e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: W01z6ao7k/FemWBnX90K4EuRkLTbJHnhHqlOxIIN/Lg= Subject key identifier: 3F:41:94:A9:E8:3D:0C:31:AE:BB:AE:42:12:AE:7C:6F:22:64:53:2C Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7D5F21D35FC922D73ABE64E488D7EF63194BB06D Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e3230312e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:33 +0000 ROA not before: Fri 28 Nov 2025 11:44:33 +0000 ROA not after: Fri 27 Nov 2026 11:49:33 +0000 asID: 51167 IP address blocks: 194.60.201.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:5f:21:d3:5f:c9:22:d7:3a:be:64:e4:88:d7:ef:63:19:4b:b0:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:33 2025 GMT Not After : Nov 27 11:49:33 2026 GMT Subject: CN=3F4194A9E83D0C31AEBBAE4212AE7C6F2264532C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0a:83:6d:63:4e:91:f9:8c:2a:00:0b:6d:65: 6f:cc:cf:a5:5e:5a:c5:73:ad:28:aa:f3:31:d0:72: cc:0b:cc:66:58:07:7a:24:8e:f6:2a:2e:2a:61:96: d1:c9:f6:40:ce:b1:03:46:90:19:9e:d4:bb:a3:89: 67:33:f6:6a:7d:a2:3c:bf:db:2e:b5:40:88:8a:c6: cf:cc:73:73:2c:df:46:1b:d3:24:21:16:5f:52:ef: cd:3f:de:17:fa:4b:f2:41:15:ff:62:1a:15:f5:53: 03:c6:20:ef:95:bd:c4:f2:24:09:6a:8e:98:f8:2d: 7d:d7:9c:69:37:e4:f1:d9:7b:77:d5:f0:30:82:24: 5e:cc:2d:ec:84:10:07:bc:8c:76:85:d1:2f:94:19: 16:54:a9:52:73:5f:c7:ab:94:82:98:d8:77:cc:30: 69:b7:b6:d1:b3:2c:d9:87:be:e1:a2:13:d9:40:06: 21:7a:6f:36:72:cb:6e:ec:33:33:57:cf:8c:f7:f8: 01:ff:07:ea:c5:50:41:d7:75:0a:27:3b:3e:f0:3e: dc:34:5c:9d:34:32:0c:3f:4b:eb:ac:4b:1a:3f:0a: 27:76:67:ed:18:fb:1c:30:c9:5a:6f:db:a5:4a:6f: ad:0e:23:f6:6e:d2:1e:cc:91:ca:8c:9f:72:43:4a: 19:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:41:94:A9:E8:3D:0C:31:AE:BB:AE:42:12:AE:7C:6F:22:64:53:2C X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e3230312e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.60.201.0/24 Signature Algorithm: sha256WithRSAEncryption 92:89:b8:8e:72:5d:5f:2d:77:3f:42:5a:4e:f6:ef:ba:96:dc: a4:8e:51:49:55:a0:a9:7e:8b:02:d2:eb:ec:02:22:ff:38:ea: a7:cf:14:74:77:83:45:69:38:95:bd:63:95:55:8d:a5:65:44: 87:37:3c:bb:23:a0:00:c6:45:03:76:be:df:0f:26:9c:9c:5e: fd:7c:f6:15:72:e8:c4:d6:db:33:6f:e4:cd:6b:43:bb:9f:53: 9e:04:a8:d9:1a:52:17:63:c0:aa:3d:24:91:f2:e5:2f:5d:08: a6:b7:98:77:c9:c2:e0:26:82:9e:a6:43:7b:47:eb:3d:39:c3: 9b:ed:62:b9:5e:d1:1c:6b:1e:b3:7b:a0:37:70:3d:95:90:60: e6:dd:34:d1:8f:c4:03:62:42:53:ac:60:07:3a:14:d5:21:67: dd:f0:4f:66:73:e4:f3:2d:95:f3:e0:e6:c5:e2:c1:ef:74:32: d3:57:6b:7d:b3:a1:94:7f:c5:b2:56:cc:4c:c8:bc:01:a8:a3: 84:c7:f7:cf:da:5d:15:5d:5d:7c:25:1e:15:78:fd:81:45:a0: 25:98:17:a5:58:29:6d:36:70:44:ca:fb:8c:52:90:d6:16:50: b1:a0:7a:28:ed:df:f0:e3:e9:8c:27:20:5a:54:26:7a:79:9f: 91:8f:f3:76 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUfV8h01/JItc6vmTkiNfvYxlLsG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzNaFw0yNjExMjcxMTQ5MzNaMDMxMTAvBgNV BAMTKDNGNDE5NEE5RTgzRDBDMzFBRUJCQUU0MjEyQUU3QzZGMjI2NDUzMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfCoNtY06R+YwqAAttZW/Mz6Ve WsVzrSiq8zHQcswLzGZYB3okjvYqLiphltHJ9kDOsQNGkBme1LujiWcz9mp9ojy/ 2y61QIiKxs/Mc3Ms30Yb0yQhFl9S780/3hf6S/JBFf9iGhX1UwPGIO+VvcTyJAlq jpj4LX3XnGk35PHZe3fV8DCCJF7MLeyEEAe8jHaF0S+UGRZUqVJzX8erlIKY2HfM MGm3ttGzLNmHvuGiE9lABiF6bzZyy27sMzNXz4z3+AH/B+rFUEHXdQonOz7wPtw0 XJ00Mgw/S+usSxo/Cid2Z+0Y+xwwyVpv26VKb60OI/Zu0h7MkcqMn3JDShmpAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUP0GUqeg9DDGuu65CEq58byJkUywwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM2MzAy ZTMyMzAzMTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADCPMkwDQYJKoZIhvcNAQELBQADggEBAJKJuI5yXV8tdz9CWk7277qW3KSO UUlVoKl+iwLS6+wCIv846qfPFHR3g0VpOJW9Y5VVjaVlRIc3PLsjoADGRQN2vt8P JpycXv189hVy6MTW2zNv5M1rQ7ufU54EqNkaUhdjwKo9JJHy5S9dCKa3mHfJwuAm gp6mQ3tH6z05w5vtYrle0RxrHrN7oDdwPZWQYObdNNGPxANiQlOsYAc6FNUhZ93w T2Zz5PMtlfPg5sXiwe90MtNXa32zoZR/xbJWzEzIvAGoo4TH98/aXRVdXXwlHhV4 /YFFoCWYF6VYKW02cETK+4xSkNYWULGgeijt3/Dj6YwnIFpUJnp5n5GP83Y= -----END CERTIFICATE-----Generated at Sat Dec 6 17:50:29 2025 by rpki-client