This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131322e302f32342d3234203d3e20323131313932.roa File: 39342e3130312e3131322e302f32342d3234203d3e20323131313932.roa (raw, json) Hash identifier: n0ta6di1ZT3X9iSthtJKNwlinsOiSgqsM4lJpI9roEk= Subject key identifier: 80:96:9A:25:39:5F:45:41:AF:07:D5:7D:8B:05:12:C3:4F:2F:5A:2C Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 50AE2F13EA28CEE4B1FD99499E4566DCEF4CCFED Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131322e302f32342d3234203d3e20323131313932.roa Signing time: Fri 21 Nov 2025 15:49:09 +0000 ROA not before: Fri 21 Nov 2025 15:44:09 +0000 ROA not after: Fri 20 Nov 2026 15:49:09 +0000 asID: 211192 IP address blocks: 94.101.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ae:2f:13:ea:28:ce:e4:b1:fd:99:49:9e:45:66:dc:ef:4c:cf:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:09 2025 GMT Not After : Nov 20 15:49:09 2026 GMT Subject: CN=80969A25395F4541AF07D57D8B0512C34F2F5A2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:58:7b:f3:dc:7a:c1:52:0e:7f:6e:7a:ca:4e: 3a:75:cc:01:cb:85:f2:ef:62:46:6f:07:60:24:41: b7:03:aa:1d:98:71:5a:bd:7e:b4:d6:fb:d4:09:02: 4f:c0:81:8a:20:d8:b5:e2:41:16:4d:05:67:f4:69: bc:9a:c8:d2:ea:c4:97:d0:b3:a5:b5:0c:6c:8b:e4: 84:77:76:e5:21:62:da:ab:9b:56:01:8f:da:9d:8c: 48:5f:5f:2f:8c:e2:82:34:49:63:ec:3b:27:4f:88: 2b:6b:0d:2d:24:fc:1c:34:9a:3f:05:fd:8a:7d:1d: 45:b5:c7:f8:00:17:4b:2a:a8:2f:db:03:3e:51:41: 94:de:17:9d:01:8f:a5:e5:51:bf:9b:86:a4:92:71: 14:62:3e:bf:4f:4f:32:a8:a2:6c:84:65:7b:75:3d: 9d:ec:dd:87:13:9c:4c:7e:7d:b3:5f:76:ed:e7:9c: 04:50:de:bf:41:01:8b:8b:3b:40:43:fe:4e:f2:f0: 97:23:7a:4b:6b:37:ca:99:0f:34:7b:7c:09:48:70: b3:63:06:59:17:3e:21:66:a3:e2:f4:76:42:fe:d9: 2a:03:e0:70:14:38:e9:96:b1:dc:57:92:18:4b:f7: 00:0b:fd:c8:99:ab:db:a1:c6:2f:c3:66:dc:29:d9: 52:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:96:9A:25:39:5F:45:41:AF:07:D5:7D:8B:05:12:C3:4F:2F:5A:2C X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131322e302f32342d3234203d3e20323131313932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.101.112.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:0f:61:77:53:a4:f5:b0:70:2f:76:74:12:79:09:ef:be:df: 65:7d:4d:75:85:5f:e4:4a:76:24:f2:63:73:1c:a1:a4:7d:d1: 72:d1:8c:a4:9b:ec:57:e1:9f:bf:a1:3f:c7:4a:f7:f7:ff:fb: 51:81:2a:10:72:c6:fa:9c:0d:39:3b:ba:73:82:f1:11:80:f8: 28:b7:1a:3c:dd:c5:a3:32:f1:3d:65:2c:b0:a1:96:be:9e:ba: c6:dd:fb:cc:36:b2:51:03:f7:3b:a8:29:7c:7a:c7:2c:a6:03: 75:47:00:be:04:b2:f5:8a:06:15:b0:78:17:b8:85:15:27:75: db:76:2f:f7:cb:04:a9:a5:06:d8:ce:f9:d8:73:5e:af:91:48: 6f:56:78:63:9b:fc:2f:18:f7:99:3a:fc:07:0a:f8:41:9a:96: e1:22:a4:ec:df:41:23:a2:7e:15:5c:d0:b0:90:ce:c6:01:75: f4:9b:79:0f:32:eb:a6:03:e0:07:d9:7c:5c:51:f3:49:ae:8e: a7:e9:a1:d1:44:73:59:88:d2:99:af:6f:1a:f7:c8:be:9e:1c: a6:4f:aa:7a:b8:38:a1:13:c3:41:ab:5e:09:86:7b:a3:34:a3: f3:1e:b6:d6:83:85:06:9f:c6:42:c8:2c:20:ec:94:63:b9:53: 3f:47:b1:23 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUUK4vE+oozuSx/ZlJnkVm3O9Mz+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDlaFw0yNjExMjAxNTQ5MDlaMDMxMTAvBgNV BAMTKDgwOTY5QTI1Mzk1RjQ1NDFBRjA3RDU3RDhCMDUxMkMzNEYyRjVBMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcWHvz3HrBUg5/bnrKTjp1zAHL hfLvYkZvB2AkQbcDqh2YcVq9frTW+9QJAk/AgYog2LXiQRZNBWf0abyayNLqxJfQ s6W1DGyL5IR3duUhYtqrm1YBj9qdjEhfXy+M4oI0SWPsOydPiCtrDS0k/Bw0mj8F /Yp9HUW1x/gAF0sqqC/bAz5RQZTeF50Bj6XlUb+bhqSScRRiPr9PTzKoomyEZXt1 PZ3s3YcTnEx+fbNfdu3nnARQ3r9BAYuLO0BD/k7y8JcjektrN8qZDzR7fAlIcLNj BlkXPiFmo+L0dkL+2SoD4HAUOOmWsdxXkhhL9wAL/ciZq9uhxi/DZtwp2VITAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUgJaaJTlfRUGvB9V9iwUSw08vWiwwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTM0MmUzMTMwMzEy ZTMxMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMTMxMzkzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAF5lcDANBgkqhkiG9w0BAQsFAAOCAQEAjw9hd1Ok9bBwL3Z0EnkJ777f ZX1NdYVf5Ep2JPJjcxyhpH3RctGMpJvsV+Gfv6E/x0r39//7UYEqEHLG+pwNOTu6 c4LxEYD4KLcaPN3FozLxPWUssKGWvp66xt37zDayUQP3O6gpfHrHLKYDdUcAvgSy 9YoGFbB4F7iFFSd123Yv98sEqaUG2M752HNer5FIb1Z4Y5v8Lxj3mTr8Bwr4QZqW 4SKk7N9BI6J+FVzQsJDOxgF19Jt5DzLrpgPgB9l8XFHzSa6Op+mh0URzWYjSma9v GvfIvp4cpk+qerg4oRPDQateCYZ7ozSj8x621oOFBp/GQsgsIOyUY7lTP0exIw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:14:15 2025 by rpki-client