This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38372e302f32342d3234203d3e20333935303932.roa File: 3139342e36302e38372e302f32342d3234203d3e20333935303932.roa (raw, json) Hash identifier: gH7dp9hKJ5r9l9BAlgj0zQxVlc/7XLfQmKOs/jA2q0w= Subject key identifier: FB:48:02:31:A5:43:19:77:87:F3:B2:FD:DD:18:F6:24:91:0E:73:6A Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 71F6A089C7C9AF6037D7F8E0BD6CBE923D1CBE37 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38372e302f32342d3234203d3e20333935303932.roa Signing time: Fri 28 Nov 2025 11:49:19 +0000 ROA not before: Fri 28 Nov 2025 11:44:19 +0000 ROA not after: Fri 27 Nov 2026 11:49:19 +0000 asID: 395092 IP address blocks: 194.60.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:f6:a0:89:c7:c9:af:60:37:d7:f8:e0:bd:6c:be:92:3d:1c:be:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:19 2025 GMT Not After : Nov 27 11:49:19 2026 GMT Subject: CN=FB480231A543197787F3B2FDDD18F624910E736A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:65:f5:8e:d0:80:7b:1a:a3:6a:e3:ca:52:bd: c0:64:f7:88:5d:f5:51:56:4e:5f:73:b1:f5:19:45: a5:97:6b:b2:5d:ca:1a:fc:35:79:7c:ea:d9:80:43: db:cd:4e:e9:ef:bc:e1:4b:c5:fc:9d:e3:a2:c0:47: 07:71:d8:ec:86:e6:73:ab:7a:5e:a9:b3:97:3c:1c: 27:3c:d2:7b:4d:5c:1c:43:6a:74:74:d5:ac:f9:11: 0e:08:df:5f:92:97:e9:f8:57:de:b7:e3:0e:db:49: a0:10:ff:61:55:8e:40:e0:51:8c:19:6e:dc:5e:9b: eb:45:bd:96:a7:bf:e5:7c:dd:41:2e:49:a1:bc:c2: d6:1b:4c:b5:97:c2:08:4a:a2:93:c3:63:35:04:38: 02:fa:26:cc:65:7a:92:33:a6:ed:df:ff:27:aa:52: 15:e7:ae:33:6e:87:58:ae:f4:db:48:c8:4a:e3:51: f0:d0:3a:42:28:d5:92:fa:18:a9:78:ad:70:98:f5: ed:9c:58:67:c7:59:a8:6e:7a:a2:d2:6b:34:cd:5d: 3a:fb:cc:35:b5:42:3c:46:7c:e1:52:c7:22:c3:28: 00:99:7f:42:cb:20:64:72:17:37:30:0d:74:b0:26: 6b:91:83:3e:f4:ba:3d:ce:b0:c6:87:66:5e:dd:e9: 94:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:48:02:31:A5:43:19:77:87:F3:B2:FD:DD:18:F6:24:91:0E:73:6A X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38372e302f32342d3234203d3e20333935303932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.60.87.0/24 Signature Algorithm: sha256WithRSAEncryption 10:c0:37:46:96:e0:c4:d1:aa:a2:f4:f1:1e:bf:4e:00:c4:f8: 01:c1:39:39:b9:c5:51:88:0f:ce:6a:36:c2:15:f7:4a:8c:73: 4b:4c:2e:f1:ca:83:21:73:66:53:b3:95:46:35:fe:f6:38:c9: cc:6b:d6:d1:44:4a:4f:c6:8b:09:40:19:fe:86:e3:29:bd:23: 1c:93:e7:37:5f:46:9c:a7:2a:75:57:74:1f:ef:03:f5:8c:7d: 41:1f:2f:2f:99:16:25:f9:4e:9c:30:75:e7:cd:57:2f:62:8f: 28:6d:6e:2f:e4:e4:be:d5:96:ea:85:a3:c5:70:70:1d:86:22: 0d:e9:0b:8b:10:58:f4:e9:e8:0d:e6:f0:5b:9b:e8:b3:04:9b: 88:09:9a:45:3d:94:b9:94:9c:90:5d:fe:61:60:94:e4:7b:2c: de:8f:e2:50:26:7f:e0:b1:4b:95:0f:d0:f6:1d:24:e2:97:1c: 3e:ba:94:5c:13:24:20:e6:e7:bd:8e:0a:21:80:54:e3:fd:2b: f4:3e:e4:b6:fe:5c:5d:b6:e8:f6:95:94:4f:f3:fa:44:b9:6e: c1:7c:ca:1b:9a:16:a7:cb:67:5e:2b:3d:39:1a:7f:6c:5e:58: b0:02:9c:be:61:2e:15:3d:3a:56:50:fb:69:3f:18:33:2a:3d: 49:b5:ca:f2 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUcfagicfJr2A31/jgvWy+kj0cvjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTlaFw0yNjExMjcxMTQ5MTlaMDMxMTAvBgNV BAMTKEZCNDgwMjMxQTU0MzE5Nzc4N0YzQjJGREREMThGNjI0OTEwRTczNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZfWO0IB7GqNq48pSvcBk94hd 9VFWTl9zsfUZRaWXa7Jdyhr8NXl86tmAQ9vNTunvvOFLxfyd46LARwdx2OyG5nOr el6ps5c8HCc80ntNXBxDanR01az5EQ4I31+Sl+n4V9634w7bSaAQ/2FVjkDgUYwZ btxem+tFvZanv+V83UEuSaG8wtYbTLWXwghKopPDYzUEOAL6JsxlepIzpu3f/yeq UhXnrjNuh1iu9NtIyErjUfDQOkIo1ZL6GKl4rXCY9e2cWGfHWahueqLSazTNXTr7 zDW1QjxGfOFSxyLDKACZf0LLIGRyFzcwDXSwJmuRgz70uj3OsMaHZl7d6ZR5AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU+0gCMaVDGXeH87L93Rj2JJEOc2owHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM2MzAy ZTM4MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzUzMDM5MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADCPFcwDQYJKoZIhvcNAQELBQADggEBABDAN0aW4MTRqqL08R6/TgDE+AHB OTm5xVGID85qNsIV90qMc0tMLvHKgyFzZlOzlUY1/vY4ycxr1tFESk/GiwlAGf6G 4ym9IxyT5zdfRpynKnVXdB/vA/WMfUEfLy+ZFiX5TpwwdefNVy9ijyhtbi/k5L7V luqFo8VwcB2GIg3pC4sQWPTp6A3m8Fub6LMEm4gJmkU9lLmUnJBd/mFglOR7LN6P 4lAmf+CxS5UP0PYdJOKXHD66lFwTJCDm572OCiGAVOP9K/Q+5Lb+XF226PaVlE/z +kS5bsF8yhuaFqfLZ14rPTkaf2xeWLACnL5hLhU9OlZQ+2k/GDMqPUm1yvI= -----END CERTIFICATE-----Generated at Sat Dec 6 14:05:01 2025 by rpki-client