This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36312e33312e302f32342d3332203d3e20313431393935.roa
File: 3139342e36312e33312e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier: 2mr0PI3OLtGh5WxztkKId8Fc0ghRWGj6dYU6gOg8dv8=
Subject key identifier: EF:14:AF:F9:4E:10:3F:DD:33:5A:EF:EF:2F:BF:7C:02:2D:75:FA:E0
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 666E9D0F600403C89489C7D18A2F429B741D3AA8
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36312e33312e302f32342d3332203d3e20313431393935.roa
Signing time: Fri 21 Nov 2025 15:49:01 +0000
ROA not before: Fri 21 Nov 2025 15:44:01 +0000
ROA not after: Fri 20 Nov 2026 15:49:01 +0000
asID: 141995
IP address blocks: 194.61.31.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 08:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:6e:9d:0f:60:04:03:c8:94:89:c7:d1:8a:2f:42:9b:74:1d:3a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 21 15:44:01 2025 GMT
Not After : Nov 20 15:49:01 2026 GMT
Subject: CN=EF14AFF94E103FDD335AEFEF2FBF7C022D75FAE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:47:a0:ac:46:63:43:37:4b:f2:84:63:70:
27:38:d0:1e:f0:11:51:07:b1:70:fd:5d:a5:9a:1c:
83:1f:29:51:3f:6f:78:da:ab:75:a5:fa:6d:3f:4c:
4e:9f:a8:95:62:54:f5:2d:b3:ee:3e:ec:fe:5a:d5:
d9:d8:3d:6e:5d:64:1a:58:cb:a1:11:d8:07:cb:4e:
99:aa:b2:12:e1:02:a6:3d:ce:69:89:a0:fc:1c:49:
b4:51:64:af:15:e4:79:3d:3e:50:37:b4:42:b0:41:
f6:5d:c1:56:3a:02:dd:ae:2c:2e:38:1c:47:78:f7:
23:92:b4:2c:65:f0:98:c0:bd:eb:cd:2c:a1:04:0b:
15:fe:89:c7:80:2a:8a:b5:30:af:77:92:20:17:ea:
13:d4:f0:f6:60:6e:02:cb:4d:ba:15:f0:c5:d6:4a:
f7:fc:3f:43:b1:58:aa:29:bb:41:b2:b8:48:91:94:
44:f9:3e:be:71:49:cf:18:ae:34:dc:a1:1b:a4:2d:
95:07:b0:65:69:aa:80:b5:c3:35:15:7c:0a:35:04:
19:2e:ce:ce:bb:fe:9b:fa:3a:52:8d:1a:65:7b:20:
cc:b7:b9:4b:65:f7:8c:9f:60:1a:6a:0b:67:1d:98:
8d:5e:f2:6a:13:bd:f1:f1:0d:fb:88:d1:d9:7c:35:
43:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:14:AF:F9:4E:10:3F:DD:33:5A:EF:EF:2F:BF:7C:02:2D:75:FA:E0
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36312e33312e302f32342d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.31.0/24
Signature Algorithm: sha256WithRSAEncryption
84:74:c4:1c:5c:0e:14:60:f0:98:6d:56:f2:d9:02:34:cb:46:
da:47:a6:27:6d:4c:a3:73:30:0f:58:9f:d3:6f:10:f4:2c:69:
b0:00:22:91:44:15:88:75:a8:3d:9e:51:66:8d:ea:7e:fc:47:
25:b8:83:15:ec:bf:ec:4c:83:9b:e5:aa:ac:a5:9f:47:73:50:
aa:6f:c3:50:24:ea:aa:60:17:e1:a9:46:33:c6:51:ed:c8:f2:
4c:43:dd:dd:04:c9:c8:9b:e3:68:29:01:ef:ba:b1:c0:da:10:
71:39:0f:2f:25:85:bd:7b:7e:d5:51:3d:8f:3a:bd:22:d1:6b:
b8:40:f8:eb:5b:05:ff:f3:c5:31:e1:4b:01:9f:f1:fb:d6:f5:
03:ec:b0:94:be:d9:58:d6:66:98:44:24:53:17:0b:cb:55:2c:
80:59:18:b1:0f:4c:d4:ad:be:8c:c9:70:a9:8e:6a:66:a2:c1:
ff:e8:37:01:63:43:25:bf:01:c1:98:6b:16:20:0d:e9:bd:aa:
c2:5d:0d:22:65:43:ad:e3:39:74:7f:a6:5b:0a:8d:0c:9d:82:
29:cf:c2:80:fe:cb:35:d6:4f:a9:d5:c9:36:bf:43:9c:a9:6e:
36:ab:21:e4:b7:de:5a:d3:b1:ca:93:07:20:d2:72:91:93:cf:
94:4a:e0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:28:20 2025 by rpki-client