This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139352e372e342e302f32322d3332203d3e203531313637.roa File: 3139352e372e342e302f32322d3332203d3e203531313637.roa (raw, json) Hash identifier: w3T/Ny/PiA0f3O42G5LPgN2UchfBJooABznzmihk69k= Subject key identifier: 80:40:57:3D:26:38:D9:10:6F:18:FB:34:71:B1:11:E8:C4:4F:52:12 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 5F7B88A6CDCAACE35B85EB53275C2C3986F3578E Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139352e372e342e302f32322d3332203d3e203531313637.roa Signing time: Fri 21 Nov 2025 15:49:13 +0000 ROA not before: Fri 21 Nov 2025 15:44:13 +0000 ROA not after: Fri 20 Nov 2026 15:49:13 +0000 asID: 51167 IP address blocks: 195.7.4.0/22 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:7b:88:a6:cd:ca:ac:e3:5b:85:eb:53:27:5c:2c:39:86:f3:57:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:13 2025 GMT Not After : Nov 20 15:49:13 2026 GMT Subject: CN=8040573D2638D9106F18FB3471B111E8C44F5212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:e4:d0:0a:e8:15:bf:21:74:6c:96:fd:f1: c8:36:e0:56:a1:14:63:10:1a:b0:62:f5:b1:55:f1: 53:d2:6f:7d:58:0f:f5:0d:ba:60:f4:36:c2:4a:cb: 2f:40:ed:00:ff:41:ad:1c:fd:ee:45:fb:7f:36:d9: 3d:62:2f:84:ac:a4:d8:14:dc:d1:7e:ed:9a:ce:d2: eb:b4:92:b9:cc:fc:60:d2:c0:a2:c1:62:e1:72:b8: 12:55:4c:b1:fc:11:7c:d5:d0:80:c7:47:9c:f0:cf: 7e:13:26:c2:05:11:77:5d:63:d6:61:04:99:c8:4c: 01:cf:29:91:01:4c:41:b6:e8:50:4e:96:bf:51:e3: 23:76:03:1f:17:81:42:e4:5c:77:b6:fb:54:9d:c4: 81:8b:6a:2b:b7:3f:0f:3e:39:5c:25:98:05:d6:00: d3:d1:0d:ad:c1:2d:bb:c2:19:b7:d5:60:5c:15:ab: 2f:94:b0:ce:67:b5:e4:09:67:3e:35:e3:30:2a:48: 75:b3:50:4f:3d:fc:bb:69:2f:f1:b0:aa:e7:4f:2f: dd:4c:ee:da:0c:f9:c3:fe:6a:d9:04:04:8c:54:f3: d6:7a:85:62:f6:d5:f5:9b:64:3e:a3:2c:95:d3:2f: ec:55:60:dc:55:47:36:0a:af:12:45:88:11:cc:b3: 65:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:40:57:3D:26:38:D9:10:6F:18:FB:34:71:B1:11:E8:C4:4F:52:12 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139352e372e342e302f32322d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.7.4.0/22 Signature Algorithm: sha256WithRSAEncryption bd:f2:56:ab:8d:dc:d7:3d:0b:05:5a:c1:6e:14:24:82:7e:a4: eb:ae:b6:08:78:8a:22:3b:e4:9d:21:75:4c:f4:fa:be:e2:55: 61:e7:eb:2f:d8:c8:02:4c:79:68:fd:a0:4e:9b:e6:f0:41:78: 76:e1:c7:db:4e:2c:a9:eb:71:cb:06:78:9d:c6:3b:30:d4:f4: b3:65:7f:3b:74:89:30:f6:42:ca:23:28:99:65:61:54:39:df: d8:ea:df:35:7b:f8:d4:2e:23:b0:f6:a4:d5:ef:ed:a8:bf:a1: f3:9e:bd:f7:8b:4a:29:ba:a4:ea:ad:75:cb:78:31:b9:3c:7f: 09:5a:7c:6d:f7:47:55:f7:ed:61:32:b6:a5:19:41:b0:f2:a1: 7d:a6:a0:22:36:56:b7:e8:89:97:09:08:f7:28:da:ed:3f:ce: 7f:cf:73:08:0e:e4:6c:44:15:e3:74:b3:11:82:af:34:ec:af: 42:f5:20:a3:08:5b:ff:ab:9f:b4:f9:95:9a:19:a0:37:0a:6a: 32:f3:1a:6a:44:5d:5a:d2:9a:6a:ac:0c:8a:23:70:38:0c:8f: cf:0f:01:f3:a2:f9:9e:f2:f6:fb:8f:72:01:91:a3:71:e7:5d: 16:9f:a3:6d:f2:d6:7f:16:d9:a7:81:5e:ad:28:be:fc:93:6b: 97:37:09:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX3uIps3KrONbhetTJ1wsOYbzV44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTNaFw0yNjExMjAxNTQ5MTNaMDMxMTAvBgNV BAMTKDgwNDA1NzNEMjYzOEQ5MTA2RjE4RkIzNDcxQjExMUU4QzQ0RjUyMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA/OTQCugVvyF0bJb98cg24Fah FGMQGrBi9bFV8VPSb31YD/UNumD0NsJKyy9A7QD/Qa0c/e5F+3822T1iL4SspNgU 3NF+7ZrO0uu0krnM/GDSwKLBYuFyuBJVTLH8EXzV0IDHR5zwz34TJsIFEXddY9Zh BJnITAHPKZEBTEG26FBOlr9R4yN2Ax8XgULkXHe2+1SdxIGLaiu3Pw8+OVwlmAXW ANPRDa3BLbvCGbfVYFwVqy+UsM5nteQJZz414zAqSHWzUE89/LtpL/GwqudPL91M 7toM+cP+atkEBIxU89Z6hWL21fWbZD6jLJXTL+xVYNxVRzYKrxJFiBHMs2VTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgEBXPSY42RBvGPs0cbER6MRPUhIwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzUyZTM3MmUz NDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALD BwQwDQYJKoZIhvcNAQELBQADggEBAL3yVquN3Nc9CwVawW4UJIJ+pOuutgh4iiI7 5J0hdUz0+r7iVWHn6y/YyAJMeWj9oE6b5vBBeHbhx9tOLKnrccsGeJ3GOzDU9LNl fzt0iTD2QsojKJllYVQ539jq3zV7+NQuI7D2pNXv7ai/ofOevfeLSim6pOqtdct4 Mbk8fwlafG33R1X37WEytqUZQbDyoX2moCI2VrfoiZcJCPco2u0/zn/PcwgO5GxE FeN0sxGCrzTsr0L1IKMIW/+rn7T5lZoZoDcKajLzGmpEXVrSmmqsDIojcDgMj88P AfOi+Z7y9vuPcgGRo3HnXRafo23y1n8W2aeBXq0ovvyTa5c3CTk= -----END CERTIFICATE-----Generated at Tue Dec 16 14:05:55 2025 by rpki-client