This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36312e32382e302f32342d3332203d3e203531313637.roa File: 3139342e36312e32382e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: /dJQkLpY+Sk/Oc9ckQM6+o01hy/+5mLe5sEf+DMzlA8= Subject key identifier: C2:A5:C7:F0:29:58:30:F6:83:A2:48:87:FF:85:72:97:11:FF:26:90 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7CB649083C86CF00DEF6064DBC40A9C19E89D28F Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36312e32382e302f32342d3332203d3e203531313637.roa Signing time: Fri 21 Nov 2025 15:49:03 +0000 ROA not before: Fri 21 Nov 2025 15:44:03 +0000 ROA not after: Fri 20 Nov 2026 15:49:03 +0000 asID: 51167 IP address blocks: 194.61.28.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b6:49:08:3c:86:cf:00:de:f6:06:4d:bc:40:a9:c1:9e:89:d2:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:03 2025 GMT Not After : Nov 20 15:49:03 2026 GMT Subject: CN=C2A5C7F0295830F683A24887FF85729711FF2690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:8c:0e:49:a3:28:18:44:ca:92:a6:e9:49: dc:85:f2:d0:1c:7e:df:58:ac:af:b8:03:ba:5b:e9: 80:b5:8a:66:94:02:38:84:6a:36:f5:c2:c9:1a:4e: 8b:d6:2e:02:98:76:fa:12:74:c5:cd:7a:51:73:60: 57:bc:90:2e:32:d7:25:ea:65:bb:30:87:d5:ce:91: 5b:36:4c:8d:07:8e:f3:71:cc:ef:fc:92:7b:db:67: f5:f8:64:e3:51:0d:3a:24:a4:85:5f:40:2a:e9:9a: e9:73:bc:cc:3a:ff:25:f7:d1:e3:8a:5e:af:c1:65: 2a:45:7c:ba:92:a2:c0:57:ad:c3:58:ca:84:52:c7: 95:93:a7:10:11:72:fb:52:bc:1d:bb:c6:9b:17:75: 17:b2:e8:ae:ac:d0:0f:bc:f4:f7:38:8f:f2:5f:8f: 8d:5e:00:ac:dd:56:3d:43:5f:24:52:bc:36:d9:d8: 26:b3:4a:00:89:bc:d8:5b:da:7c:b9:90:06:89:ea: f5:d2:10:df:81:82:c5:e8:bb:3c:93:da:2f:4c:28: f5:b0:c2:bf:1b:2a:f5:09:96:24:b4:a3:7c:e3:c3: d8:4f:88:f6:1f:5b:51:3c:f7:c3:8a:a6:5d:60:cc: 51:b9:aa:8e:4e:09:19:77:9d:18:eb:e3:08:41:1a: 83:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A5:C7:F0:29:58:30:F6:83:A2:48:87:FF:85:72:97:11:FF:26:90 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36312e32382e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.61.28.0/24 Signature Algorithm: sha256WithRSAEncryption cf:1a:e3:d9:f9:12:0a:6a:a3:2c:ad:a0:13:4b:ee:98:d1:8c: a1:9d:4a:7b:99:a7:80:29:3f:90:df:4e:06:da:e1:34:4a:35: 49:86:26:22:29:eb:f1:f0:ae:43:d9:fe:a9:94:e2:ca:56:5d: 93:d5:b0:13:dd:7a:c0:02:30:f6:0b:da:50:95:63:ec:d0:1d: 88:a1:be:19:f2:02:a9:3e:53:f6:fc:21:77:bc:ff:f4:8a:91: b8:de:0d:a8:6d:c5:c4:20:6e:c7:d5:c0:eb:82:25:cc:c5:fc: 23:0f:08:c6:87:fb:2a:30:9a:ce:29:15:51:be:5c:21:d0:f3: f1:35:56:d8:e7:84:39:f5:62:15:a8:17:25:bd:1a:78:1a:92: 72:e1:75:ff:26:06:6b:8c:06:72:4d:9f:61:da:81:52:27:f8: 1b:b6:30:9e:73:02:49:d6:70:f1:c2:d6:ba:2e:a9:c3:49:85: ff:91:16:07:d3:70:bf:9f:56:d6:4f:f0:ec:10:19:93:9d:f3: 8a:09:e1:b8:53:96:f3:0e:cb:9a:94:42:8b:bf:75:32:c9:ea: a0:32:f4:be:bc:45:f4:ce:c6:c3:a7:83:0e:69:e2:10:ee:1a: 67:8f:76:92:ee:a0:4e:9f:00:d8:69:bd:19:25:d8:3c:1d:9e: 13:bd:24:91 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUfLZJCDyGzwDe9gZNvECpwZ6J0o8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDNaFw0yNjExMjAxNTQ5MDNaMDMxMTAvBgNV BAMTKEMyQTVDN0YwMjk1ODMwRjY4M0EyNDg4N0ZGODU3Mjk3MTFGRjI2OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx4YwOSaMoGETKkqbpSdyF8tAc ft9YrK+4A7pb6YC1imaUAjiEajb1wskaTovWLgKYdvoSdMXNelFzYFe8kC4y1yXq Zbswh9XOkVs2TI0HjvNxzO/8knvbZ/X4ZONRDTokpIVfQCrpmulzvMw6/yX30eOK Xq/BZSpFfLqSosBXrcNYyoRSx5WTpxARcvtSvB27xpsXdRey6K6s0A+89Pc4j/Jf j41eAKzdVj1DXyRSvDbZ2CazSgCJvNhb2ny5kAaJ6vXSEN+BgsXouzyT2i9MKPWw wr8bKvUJliS0o3zjw9hPiPYfW1E898OKpl1gzFG5qo5OCRl3nRjr4whBGoOPAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUwqXH8ClYMPaDokiH/4VylxH/JpAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM2MzEy ZTMyMzgyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAwj0cMA0GCSqGSIb3DQEBCwUAA4IBAQDPGuPZ+RIKaqMsraATS+6Y0YyhnUp7 maeAKT+Q304G2uE0SjVJhiYiKevx8K5D2f6plOLKVl2T1bAT3XrAAjD2C9pQlWPs 0B2Iob4Z8gKpPlP2/CF3vP/0ipG43g2obcXEIG7H1cDrgiXMxfwjDwjGh/sqMJrO KRVRvlwh0PPxNVbY54Q59WIVqBclvRp4GpJy4XX/JgZrjAZyTZ9h2oFSJ/gbtjCe cwJJ1nDxwta6LqnDSYX/kRYH03C/n1bWT/DsEBmTnfOKCeG4U5bzDsualEKLv3Uy yeqgMvS+vEX0zsbDp4MOaeIQ7hpnj3aS7qBOnwDYab0ZJdg8HZ4TvSSR -----END CERTIFICATE-----Generated at Sat Dec 6 17:50:56 2025 by rpki-client