This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38372e302f32342d3234203d3e203631333137.roa File: 3139342e36302e38372e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: 41YD2mxKrDYgj7MBM14+aaDhgnLZRPkUk7X6aUvLouA= Subject key identifier: FA:02:28:02:F1:B1:89:D9:F4:3F:22:19:64:A9:C5:D7:5E:E8:24:A7 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0E873EE4754DC3CFB0608990417A8EDFD37FE12C Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38372e302f32342d3234203d3e203631333137.roa Signing time: Fri 28 Nov 2025 11:49:37 +0000 ROA not before: Fri 28 Nov 2025 11:44:37 +0000 ROA not after: Fri 27 Nov 2026 11:49:37 +0000 asID: 61317 IP address blocks: 194.60.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:87:3e:e4:75:4d:c3:cf:b0:60:89:90:41:7a:8e:df:d3:7f:e1:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:37 2025 GMT Not After : Nov 27 11:49:37 2026 GMT Subject: CN=FA022802F1B189D9F43F221964A9C5D75EE824A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ad:1a:47:d2:cf:46:6a:54:e5:13:a2:a4:ed: 3e:00:31:1a:b9:69:42:20:f8:fe:e9:87:a0:69:bb: 8d:b0:7d:5b:9a:37:3c:c3:38:d3:6a:1b:bb:78:f2: 48:01:79:ce:91:a9:1b:63:13:4a:73:d7:ea:85:08: c4:5e:f7:1c:72:65:39:9a:59:38:39:03:94:7c:40: 03:11:1e:2e:89:84:49:90:0e:1f:c0:84:03:59:53: 68:5e:a5:49:02:03:b9:01:39:c5:7c:8d:05:02:c7: dc:00:43:9c:81:9f:e1:dd:b4:dc:75:3c:a1:f9:02: 94:96:ff:67:bf:12:c8:a7:52:29:09:af:64:d5:25: ce:9a:3e:c6:32:02:64:e7:8a:39:0e:ea:e3:15:6c: a4:3c:17:bd:cf:43:22:62:01:99:ef:a3:3a:10:3d: 56:0c:e4:0a:71:2f:02:db:01:1e:95:5a:b5:49:b3: 81:27:3c:32:f1:4e:76:4f:36:72:da:38:9e:70:8b: d6:38:ac:a7:06:ca:f6:db:53:ee:82:e8:ec:74:b7: d4:ee:46:65:df:9b:33:ad:9a:34:0e:38:31:e4:80: 8a:4c:48:80:a7:12:df:cc:49:7f:99:56:40:5d:da: cf:98:3f:6a:a8:af:99:5f:d6:27:00:3d:f4:9f:0d: 4f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:02:28:02:F1:B1:89:D9:F4:3F:22:19:64:A9:C5:D7:5E:E8:24:A7 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38372e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.60.87.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:04:d4:3f:7e:13:48:d2:5e:f7:1a:b4:ba:c4:15:c8:ce:30: 91:a7:70:e2:de:2b:59:35:c0:35:51:18:07:cd:6d:19:c7:df: 14:33:dc:26:6d:67:30:e1:bd:63:01:18:67:ac:4c:35:88:27: 69:f6:97:ad:4e:1c:6b:82:b9:ea:49:67:5e:30:e5:aa:f3:7d: 78:b5:80:52:3b:4a:41:5d:a7:ad:1c:20:00:af:77:fd:eb:b5: e5:f9:af:ed:6c:2d:60:ea:e8:99:11:f0:a2:63:52:4c:d5:c7: 05:f6:57:99:39:dc:84:26:1c:79:e2:03:96:8b:0f:1b:55:d6: 83:01:bc:23:f0:a6:8e:d7:c9:58:3c:86:81:3d:09:92:a5:f7: 10:ef:96:8b:01:54:ca:99:d7:e3:bf:51:55:e4:59:08:f8:7b: f2:21:f9:c7:db:be:d7:5e:e4:58:40:1a:d5:b1:8a:cd:5b:f3: 5e:cc:b0:f1:60:3f:60:be:64:00:6e:4d:0a:9f:fe:ab:4f:f6: 0f:8c:e1:8a:45:0f:e7:f1:d8:9e:f9:b0:74:b2:5a:d1:42:ba: 7c:bc:e6:69:de:76:64:c6:8a:6a:71:3e:96:10:e5:18:57:c8: e6:92:dd:fd:e1:0a:37:df:af:f2:a6:70:8d:b7:5c:0d:7f:9a: 15:26:96:d2 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUDoc+5HVNw8+wYImQQXqO39N/4SwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzdaFw0yNjExMjcxMTQ5MzdaMDMxMTAvBgNV BAMTKEZBMDIyODAyRjFCMTg5RDlGNDNGMjIxOTY0QTlDNUQ3NUVFODI0QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rRpH0s9GalTlE6Kk7T4AMRq5 aUIg+P7ph6Bpu42wfVuaNzzDONNqG7t48kgBec6RqRtjE0pz1+qFCMRe9xxyZTma WTg5A5R8QAMRHi6JhEmQDh/AhANZU2hepUkCA7kBOcV8jQUCx9wAQ5yBn+HdtNx1 PKH5ApSW/2e/EsinUikJr2TVJc6aPsYyAmTnijkO6uMVbKQ8F73PQyJiAZnvozoQ PVYM5ApxLwLbAR6VWrVJs4EnPDLxTnZPNnLaOJ5wi9Y4rKcGyvbbU+6C6Ox0t9Tu RmXfmzOtmjQOODHkgIpMSICnEt/MSX+ZVkBd2s+YP2qor5lf1icAPfSfDU/9AgMB AAGjggJAMIICPDAdBgNVHQ4EFgQU+gIoAvGxidn0PyIZZKnF117oJKcwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM2MzAy ZTM4MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAwjxXMA0GCSqGSIb3DQEBCwUAA4IBAQAOBNQ/fhNI0l73GrS6xBXIzjCRp3Di 3itZNcA1URgHzW0Zx98UM9wmbWcw4b1jARhnrEw1iCdp9petThxrgrnqSWdeMOWq 8314tYBSO0pBXaetHCAAr3f967Xl+a/tbC1g6uiZEfCiY1JM1ccF9leZOdyEJhx5 4gOWiw8bVdaDAbwj8KaO18lYPIaBPQmSpfcQ75aLAVTKmdfjv1FV5FkI+HvyIfnH 277XXuRYQBrVsYrNW/NezLDxYD9gvmQAbk0Kn/6rT/YPjOGKRQ/n8die+bB0slrR Qrp8vOZp3nZkxopqcT6WEOUYV8jmkt394Qo336/ypnCNt1wNf5oVJpbS -----END CERTIFICATE-----Generated at Thu Dec 18 11:17:21 2025 by rpki-client