This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131332e302f32342d3332203d3e203531313637.roa File: 39342e3130312e3131332e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: ECYJ1BOLzKENv/rpm+dqgmwF1hJ5K2OE9EBbDskoHZs= Subject key identifier: E9:4F:07:70:6A:F4:78:E5:00:46:79:22:24:9A:A6:E7:2D:2C:2C:82 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3B4FB7C9914F1CC3FCA15BA7E25789F66A6D3FDF Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131332e302f32342d3332203d3e203531313637.roa Signing time: Fri 21 Nov 2025 15:49:13 +0000 ROA not before: Fri 21 Nov 2025 15:44:13 +0000 ROA not after: Fri 20 Nov 2026 15:49:13 +0000 asID: 51167 IP address blocks: 94.101.113.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4f:b7:c9:91:4f:1c:c3:fc:a1:5b:a7:e2:57:89:f6:6a:6d:3f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:13 2025 GMT Not After : Nov 20 15:49:13 2026 GMT Subject: CN=E94F07706AF478E500467922249AA6E72D2C2C82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2a:58:d2:12:68:ba:10:56:90:fb:b3:7b:3b: 8b:01:dd:94:7e:d4:63:ba:7d:0c:5a:5d:21:2b:00: fa:df:97:40:87:e0:1b:1f:a7:81:24:e3:c8:92:e6: 04:3d:f9:fa:5f:10:cd:0e:42:e1:4b:dd:29:c4:f1: eb:af:fa:3b:87:96:6e:08:6b:6e:df:f4:a3:79:c9: 3c:b7:c2:1c:d3:0c:55:72:90:46:97:61:af:0a:2a: 56:d4:1d:55:04:95:60:fd:ae:f5:00:0f:e4:a4:c4: 7f:48:f7:6a:80:3e:d2:60:fc:c9:b6:99:c1:cb:7a: 49:a4:a2:46:3f:bc:bd:84:f4:26:29:c6:14:a0:82: 33:1f:0c:28:1e:27:46:fb:56:ab:f6:32:76:1b:33: a8:61:0d:c2:be:af:5b:59:68:f1:12:8f:b1:48:6f: 4c:37:50:1a:00:51:4b:cc:4d:4b:83:d1:3b:26:be: 5a:dc:7d:7e:d5:7a:f1:9e:4a:92:ef:6e:42:6e:b4: c5:ef:b0:d5:ff:84:b0:93:97:05:f2:96:04:12:dc: f1:18:1b:57:52:71:1f:03:e2:43:b6:eb:3b:e6:26: ca:8b:72:91:0f:a1:60:b2:a2:3e:fd:77:a6:35:0e: e0:db:9d:33:bf:cc:c0:76:ef:9c:ca:15:de:09:ec: 63:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4F:07:70:6A:F4:78:E5:00:46:79:22:24:9A:A6:E7:2D:2C:2C:82 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131332e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.101.113.0/24 Signature Algorithm: sha256WithRSAEncryption bc:0b:37:5d:ca:32:9a:39:b2:d0:71:33:ab:3d:5e:7d:b8:6b: ed:66:56:bf:a9:06:fd:c2:42:05:a6:70:89:8b:6a:46:36:84: 8b:ce:2b:f2:56:e2:f9:f1:b9:97:94:9d:4e:61:f3:1f:9f:74: 6d:e1:48:32:84:2e:fb:50:39:d3:1a:db:15:59:a2:a5:ab:86: dd:61:ae:ae:97:7f:18:2d:e6:1d:e4:88:e1:14:f9:2e:e9:69: cf:6b:72:90:d0:52:13:8a:46:38:74:34:f5:35:29:cb:e9:27: 65:f0:e5:b4:f8:73:20:32:a5:ca:c3:24:fc:d4:1b:95:a6:65: 81:46:a5:d3:c1:f7:d2:12:0f:5a:73:17:58:ee:5a:68:e8:52: 21:12:47:8a:45:69:56:dc:d6:4e:af:9c:dc:2c:a6:13:02:30: 9e:17:d0:c4:9c:71:cd:e7:2e:13:b1:de:c2:ed:1b:64:e0:8d: 49:8d:48:08:da:96:49:c5:1c:d0:a3:f1:c4:cb:a5:1e:73:f7: 09:5f:13:24:57:31:05:63:d1:b6:5b:19:37:fe:99:00:d1:64: 23:03:19:2e:54:59:40:94:3d:36:2d:74:1f:7d:95:2d:87:c8: 3c:c7:5c:a2:10:42:3b:7b:47:d3:c9:1c:04:fd:70:a9:92:33: 15:ca:79:70 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUO0+3yZFPHMP8oVun4leJ9mptP98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTNaFw0yNjExMjAxNTQ5MTNaMDMxMTAvBgNV BAMTKEU5NEYwNzcwNkFGNDc4RTUwMDQ2NzkyMjI0OUFBNkU3MkQyQzJDODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAKljSEmi6EFaQ+7N7O4sB3ZR+ 1GO6fQxaXSErAPrfl0CH4Bsfp4Ek48iS5gQ9+fpfEM0OQuFL3SnE8euv+juHlm4I a27f9KN5yTy3whzTDFVykEaXYa8KKlbUHVUElWD9rvUAD+SkxH9I92qAPtJg/Mm2 mcHLekmkokY/vL2E9CYpxhSggjMfDCgeJ0b7Vqv2MnYbM6hhDcK+r1tZaPESj7FI b0w3UBoAUUvMTUuD0TsmvlrcfX7VevGeSpLvbkJutMXvsNX/hLCTlwXylgQS3PEY G1dScR8D4kO26zvmJsqLcpEPoWCyoj79d6Y1DuDbnTO/zMB275zKFd4J7GMvAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU6U8HcGr0eOUARnkiJJqm5y0sLIIwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTM0MmUzMTMwMzEy ZTMxMzEzMzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABeZXEwDQYJKoZIhvcNAQELBQADggEBALwLN13KMpo5stBxM6s9Xn24a+1m Vr+pBv3CQgWmcImLakY2hIvOK/JW4vnxuZeUnU5h8x+fdG3hSDKELvtQOdMa2xVZ oqWrht1hrq6Xfxgt5h3kiOEU+S7pac9rcpDQUhOKRjh0NPU1KcvpJ2Xw5bT4cyAy pcrDJPzUG5WmZYFGpdPB99ISD1pzF1juWmjoUiESR4pFaVbc1k6vnNwsphMCMJ4X 0MSccc3nLhOx3sLtG2TgjUmNSAjalknFHNCj8cTLpR5z9wlfEyRXMQVj0bZbGTf+ mQDRZCMDGS5UWUCUPTYtdB99lS2HyDzHXKIQQjt7R9PJHAT9cKmSMxXKeXA= -----END CERTIFICATE-----Generated at Tue Dec 16 14:05:53 2025 by rpki-client