This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36312e32392e302f32342d3234203d3e20313336373837.roa File: 3139342e36312e32392e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: mwQvqecEvwMFf8NIsq84xOgM4JJ7RAIhd3t0YOE2/ws= Subject key identifier: 9B:13:E0:0D:BF:EA:28:E9:59:BA:B2:42:50:F1:6F:EB:37:D6:E9:CA Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 5F7543F00A2CABEC17E1E329A580A2E019EEABD3 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36312e32392e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:07 +0000 ROA not before: Fri 21 Nov 2025 15:44:07 +0000 ROA not after: Fri 20 Nov 2026 15:49:07 +0000 asID: 136787 IP address blocks: 194.61.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:75:43:f0:0a:2c:ab:ec:17:e1:e3:29:a5:80:a2:e0:19:ee:ab:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:07 2025 GMT Not After : Nov 20 15:49:07 2026 GMT Subject: CN=9B13E00DBFEA28E959BAB24250F16FEB37D6E9CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e6:3c:21:50:22:6c:a1:35:62:53:b4:d3:9c: 96:2a:5d:c1:c9:2b:86:4a:60:44:d8:78:4a:d9:ce: f6:e7:fa:77:19:13:93:b6:b0:16:9e:74:be:75:89: 0c:49:87:9d:c2:b0:7f:4d:0f:cd:6c:31:f9:49:58: 63:f5:79:2d:21:37:75:bc:56:34:28:38:80:fe:77: b3:a4:ee:08:fb:38:9f:9a:81:e8:54:32:ef:03:2a: 3d:19:18:7f:02:86:23:de:ce:75:48:63:3f:02:a0: b9:2b:f9:40:59:1d:69:ef:d7:43:22:3c:24:ce:7a: c4:1f:9f:c8:04:b8:52:98:fa:bc:87:29:b6:3e:c4: d3:6c:6d:c5:76:d9:2f:7d:c3:f8:1a:c8:81:fa:75: 5d:2f:56:b7:92:20:9e:e9:4c:54:8d:29:0c:25:da: d2:c2:c3:6d:c9:61:d4:b9:eb:e6:c6:5b:d4:b2:01: cc:21:77:da:3e:3f:2a:b5:1c:dd:ac:b3:d7:7c:6a: c6:b7:a0:3f:e3:c5:e4:81:17:a9:63:80:47:ad:4c: b7:85:8d:93:57:4e:ea:2a:15:da:12:37:f5:46:87: c4:1f:11:7e:81:0d:0b:8a:6a:7c:e8:f0:dd:44:bf: 00:53:8d:a1:b7:ee:67:00:df:c2:c7:53:8c:66:2b: fd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:13:E0:0D:BF:EA:28:E9:59:BA:B2:42:50:F1:6F:EB:37:D6:E9:CA X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36312e32392e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.61.29.0/24 Signature Algorithm: sha256WithRSAEncryption dd:0b:d2:d0:3d:21:5b:5f:db:b8:84:a6:12:66:39:91:b6:0d: fe:7a:d0:6f:28:b5:43:1f:71:37:57:56:93:ec:df:7d:4a:1a: e6:b6:ff:83:f4:5b:ef:96:d2:31:8c:c2:10:c7:88:f7:b9:2e: d1:21:51:80:29:a5:3a:5b:da:22:8a:67:ae:9c:79:01:73:d2: 54:3a:a8:01:ce:00:94:fa:8d:83:22:b3:d8:50:a5:70:69:e7: 3d:44:22:2c:8c:ba:d6:46:70:fb:22:b5:ab:fc:ba:c2:5f:da: 65:6a:01:bd:48:1e:06:33:de:eb:b8:f6:48:10:71:e7:25:7b: 9d:f6:c4:67:2b:ac:49:f0:37:e4:ef:45:5a:96:a0:49:fd:94: f0:7f:2a:6c:e6:a1:7f:88:3e:a0:10:06:a7:dd:b5:2c:60:61: 3e:3d:24:80:ad:ac:62:58:23:76:04:a1:e7:d8:e1:21:2b:76: 84:bc:7a:75:7b:60:73:0b:93:7c:91:3c:06:27:5a:4a:19:ea: 9e:8c:6d:ad:8d:e2:a3:b2:5d:ea:be:5f:01:12:8d:76:4b:3c: bb:32:9a:9e:a3:74:23:37:bf:ca:2e:08:65:65:ed:ba:c1:25: 20:05:c1:96:a2:f5:e9:83:27:7d:30:20:f0:51:14:a3:bd:d9: b1:4f:84:c2 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUX3VD8Aosq+wX4eMppYCi4Bnuq9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDdaFw0yNjExMjAxNTQ5MDdaMDMxMTAvBgNV BAMTKDlCMTNFMDBEQkZFQTI4RTk1OUJBQjI0MjUwRjE2RkVCMzdENkU5Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh5jwhUCJsoTViU7TTnJYqXcHJ K4ZKYETYeErZzvbn+ncZE5O2sBaedL51iQxJh53CsH9ND81sMflJWGP1eS0hN3W8 VjQoOID+d7Ok7gj7OJ+agehUMu8DKj0ZGH8ChiPeznVIYz8CoLkr+UBZHWnv10Mi PCTOesQfn8gEuFKY+ryHKbY+xNNsbcV22S99w/gayIH6dV0vVreSIJ7pTFSNKQwl 2tLCw23JYdS56+bGW9SyAcwhd9o+Pyq1HN2ss9d8asa3oD/jxeSBF6ljgEetTLeF jZNXTuoqFdoSN/VGh8QfEX6BDQuKanzo8N1EvwBTjaG37mcA38LHU4xmK/1PAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUmxPgDb/qKOlZurJCUPFv6zfW6cowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM2MzEy ZTMyMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADCPR0wDQYJKoZIhvcNAQELBQADggEBAN0L0tA9IVtf27iEphJmOZG2Df56 0G8otUMfcTdXVpPs331KGua2/4P0W++W0jGMwhDHiPe5LtEhUYAppTpb2iKKZ66c eQFz0lQ6qAHOAJT6jYMis9hQpXBp5z1EIiyMutZGcPsitav8usJf2mVqAb1IHgYz 3uu49kgQcecle532xGcrrEnwN+TvRVqWoEn9lPB/KmzmoX+IPqAQBqfdtSxgYT49 JICtrGJYI3YEoefY4SErdoS8enV7YHMLk3yRPAYnWkoZ6p6Mba2N4qOyXeq+XwES jXZLPLsymp6jdCM3v8ouCGVl7brBJSAFwZai9emDJ30wIPBRFKO92bFPhMI= -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:11 2025 by rpki-client