This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38372e302f32342d3332203d3e203531313637.roa File: 3139342e36302e38372e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: vCOYi4n47wOKm0f9b1OH1Ig3c0Fan7Ep7+DGutwWjqA= Subject key identifier: FC:41:8E:E7:59:72:FA:4E:73:5C:4D:34:3D:1B:98:C9:BC:35:90:78 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 791A8C4DDEA52D45B3F53C9E3C0E07F77B93C37F Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38372e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:50 +0000 ROA not before: Fri 28 Nov 2025 11:44:50 +0000 ROA not after: Fri 27 Nov 2026 11:49:50 +0000 asID: 51167 IP address blocks: 194.60.87.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:1a:8c:4d:de:a5:2d:45:b3:f5:3c:9e:3c:0e:07:f7:7b:93:c3:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:50 2025 GMT Not After : Nov 27 11:49:50 2026 GMT Subject: CN=FC418EE75972FA4E735C4D343D1B98C9BC359078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:92:dc:30:1a:ef:88:4e:d9:c4:d6:ad:0f:75: 37:96:f4:69:3c:48:65:00:6b:ea:f9:c6:ae:20:f4: 61:5f:5b:21:dc:6e:51:94:e8:7e:e1:55:ae:83:2f: 4a:d8:14:b0:6a:00:87:07:01:40:e8:2d:c2:7a:e6: 62:61:d4:7b:63:07:04:e7:58:4c:4f:d9:54:d1:d0: 42:65:87:38:d8:bb:e7:80:ce:5c:59:56:79:47:ab: 31:cb:5c:81:ef:cd:f2:68:8f:01:16:37:ca:b1:bd: 17:68:b7:62:6c:c3:cd:b9:39:41:89:35:ca:7e:35: 3a:a6:42:db:d0:f8:8f:31:a5:c2:29:8a:25:80:ea: 18:f2:ee:46:1d:7e:bb:af:33:87:17:80:be:36:5c: 84:5d:f0:57:8c:69:04:ba:5f:63:9f:91:0e:af:b6: c5:3b:43:4a:59:52:6c:6b:c9:47:ef:28:4f:21:ea: 2d:6f:72:a5:83:ea:92:80:24:cf:15:b7:2c:b8:f3: 90:72:73:cb:2a:31:e7:02:f1:7e:c3:d2:0a:26:87: df:f0:43:da:56:1a:e7:eb:3a:54:fc:31:0c:13:ea: f9:0e:ad:d8:e5:86:09:f3:2a:73:af:a1:16:84:31: 82:20:47:23:ad:e0:3f:b6:56:a7:0a:61:9c:da:44: c5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:41:8E:E7:59:72:FA:4E:73:5C:4D:34:3D:1B:98:C9:BC:35:90:78 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38372e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.60.87.0/24 Signature Algorithm: sha256WithRSAEncryption 17:6e:49:ca:94:c0:a6:2e:61:f7:9e:28:a4:e5:dd:f8:25:ad: 0e:78:59:b0:58:c4:5f:10:8c:93:df:45:83:d5:63:6b:5d:21: 1c:3e:2d:42:4f:bf:bf:e8:03:a6:8b:65:ad:6b:9d:74:a3:02: f7:57:bf:28:96:74:b9:ee:fa:89:d6:42:13:1f:04:44:8a:6e: 51:62:e1:56:1e:52:8a:f9:af:84:cf:aa:db:d1:b1:b7:70:f2: d1:bc:d4:09:23:65:aa:29:b9:be:63:38:98:e7:b4:a4:69:4e: f2:8f:44:27:42:27:d1:8e:9e:41:84:2e:20:0a:6c:3c:b5:bf: a1:cf:b2:6d:24:5d:09:63:92:12:fa:04:39:99:c3:fa:67:2a: 67:84:35:bc:ff:ce:db:f0:14:7e:0b:f6:78:e4:b6:eb:83:7a: da:35:c1:ef:fc:d7:b7:bd:88:ea:e3:6e:d8:3c:10:63:ac:eb: 8f:6b:90:e4:24:f1:f3:8e:89:49:c7:61:fc:cb:ef:0d:1b:67: d7:94:49:5e:5e:b7:3d:13:2b:3d:cc:2e:1a:b3:6f:bd:81:b1: ee:f0:e6:e4:bc:0c:d0:5d:68:9e:eb:38:bc:5a:a9:08:a4:34: 89:33:7b:0b:0d:a6:db:57:e4:d5:e1:ba:8a:90:d3:81:72:b9: ab:57:bd:79 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUeRqMTd6lLUWz9TyePA4H93uTw38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTBaFw0yNjExMjcxMTQ5NTBaMDMxMTAvBgNV BAMTKEZDNDE4RUU3NTk3MkZBNEU3MzVDNEQzNDNEMUI5OEM5QkMzNTkwNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBktwwGu+ITtnE1q0PdTeW9Gk8 SGUAa+r5xq4g9GFfWyHcblGU6H7hVa6DL0rYFLBqAIcHAUDoLcJ65mJh1HtjBwTn WExP2VTR0EJlhzjYu+eAzlxZVnlHqzHLXIHvzfJojwEWN8qxvRdot2Jsw825OUGJ Ncp+NTqmQtvQ+I8xpcIpiiWA6hjy7kYdfruvM4cXgL42XIRd8FeMaQS6X2OfkQ6v tsU7Q0pZUmxryUfvKE8h6i1vcqWD6pKAJM8Vtyy485Byc8sqMecC8X7D0gomh9/w Q9pWGufrOlT8MQwT6vkOrdjlhgnzKnOvoRaEMYIgRyOt4D+2VqcKYZzaRMX/AgMB AAGjggJAMIICPDAdBgNVHQ4EFgQU/EGO51ly+k5zXE00PRuYybw1kHgwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM2MzAy ZTM4MzcyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAwjxXMA0GCSqGSIb3DQEBCwUAA4IBAQAXbknKlMCmLmH3niik5d34Ja0OeFmw WMRfEIyT30WD1WNrXSEcPi1CT7+/6AOmi2Wta510owL3V78olnS57vqJ1kITHwRE im5RYuFWHlKK+a+Ez6rb0bG3cPLRvNQJI2WqKbm+YziY57SkaU7yj0QnQifRjp5B hC4gCmw8tb+hz7JtJF0JY5IS+gQ5mcP6ZypnhDW8/87b8BR+C/Z45Lbrg3raNcHv /Ne3vYjq427YPBBjrOuPa5DkJPHzjolJx2H8y+8NG2fXlEleXrc9Eys9zC4as2+9 gbHu8ObkvAzQXWie6zi8WqkIpDSJM3sLDabbV+TV4bqKkNOBcrmrV715 -----END CERTIFICATE-----Generated at Tue Dec 16 14:05:54 2025 by rpki-client