This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131342e302f32342d3234203d3e20313336373837.roa File: 39342e3130312e3131342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: PxDq/EIrlpdnjeBkmO6jUMphD+TdrUcyq5ZgoCS9ZhQ= Subject key identifier: 0F:A3:13:BF:50:DD:B0:97:A2:11:F8:5A:2A:33:A9:80:AA:C7:66:2D Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3DB067C4540BD1636953D0733DF63360CD7EAF31 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131342e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:48:59 +0000 ROA not before: Fri 21 Nov 2025 15:43:59 +0000 ROA not after: Fri 20 Nov 2026 15:48:59 +0000 asID: 136787 IP address blocks: 94.101.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b0:67:c4:54:0b:d1:63:69:53:d0:73:3d:f6:33:60:cd:7e:af:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:43:59 2025 GMT Not After : Nov 20 15:48:59 2026 GMT Subject: CN=0FA313BF50DDB097A211F85A2A33A980AAC7662D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d3:11:a8:18:0d:22:63:6e:fe:16:53:d4:95: 7d:aa:54:fc:d1:14:2c:2c:7d:75:88:bc:a5:89:86: 23:2e:ab:eb:8c:14:70:4d:a0:ef:81:30:66:12:e8: 72:c4:2d:66:4d:a1:45:1c:72:7b:0d:84:d5:80:0c: 0f:68:ec:6f:8a:4e:df:a9:e3:75:65:28:b7:8f:85: dc:e4:f7:9c:19:93:c1:96:00:42:aa:6a:f6:43:4e: 64:dd:4a:0a:d1:4d:ef:48:4e:74:56:74:91:d9:c8: a0:26:c7:20:d6:29:80:b4:47:e0:c3:88:3f:31:a8: f8:bf:7a:41:50:8d:f2:74:35:fe:3a:72:3c:f7:bd: fc:84:cd:77:01:ef:a7:18:55:16:33:b2:0b:e8:60: 82:8b:9a:e9:31:93:61:f2:0c:62:23:55:4d:9f:25: ac:da:6c:f5:37:d6:0b:eb:9c:42:4f:81:4c:ea:0a: 8e:24:8c:24:25:50:74:bc:c8:51:2f:8e:31:9f:55: 61:f3:63:74:0b:48:4e:17:58:07:7b:c2:82:07:24: 11:32:d0:4a:0b:1b:a6:63:19:7e:99:15:3b:a2:50: d8:2b:58:df:2a:a6:bc:c7:fc:88:c3:60:41:69:8c: 84:bc:56:76:bb:24:5f:59:23:9a:31:d6:cb:74:f3: 6b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A3:13:BF:50:DD:B0:97:A2:11:F8:5A:2A:33:A9:80:AA:C7:66:2D X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.101.114.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:92:08:1a:fd:e7:b7:b1:50:c8:e4:28:73:79:b3:6f:42:9a: 60:a4:1d:6a:de:93:34:74:b3:6e:f5:ef:4f:21:e7:56:7a:eb: 17:42:f8:49:d7:8c:1b:2d:1a:9b:31:f9:0a:fd:05:85:20:d4: ef:7b:49:bb:c1:34:e0:84:0d:b2:53:4f:de:8e:58:9a:a8:a4: 05:be:f6:0a:7b:77:64:7d:a4:d6:50:44:5f:13:02:70:0f:2b: 07:f8:97:c7:b5:b2:8c:45:1e:c1:ea:a0:b5:0e:05:9c:b8:09: be:fb:04:e7:47:23:b1:0e:db:f6:df:44:39:7f:72:b9:82:03: 7f:1e:2c:9a:c3:1d:41:f4:96:21:ed:48:c7:d0:6b:a1:8d:52: e6:e9:fa:b1:ef:58:62:bd:41:05:f1:64:59:2e:59:e5:76:ca: f3:fe:f7:f0:c2:4b:1c:9c:97:ce:32:0e:c7:3e:33:85:f6:d5: 10:53:6e:a7:4d:d5:b6:f0:e0:ba:1f:14:66:f8:f8:b5:cc:70: ee:79:82:10:6a:e7:a2:3d:88:f4:8f:cd:41:f1:47:94:ce:6e: e0:bf:e0:89:94:9e:27:47:9b:68:36:49:3d:a1:f5:f3:91:72: 13:4e:31:94:30:90:53:c1:d8:92:f9:ba:2d:40:55:a3:a8:d9: 7f:9c:8b:6f -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUPbBnxFQL0WNpU9BzPfYzYM1+rzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQzNTlaFw0yNjExMjAxNTQ4NTlaMDMxMTAvBgNV BAMTKDBGQTMxM0JGNTBEREIwOTdBMjExRjg1QTJBMzNBOTgwQUFDNzY2MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC90xGoGA0iY27+FlPUlX2qVPzR FCwsfXWIvKWJhiMuq+uMFHBNoO+BMGYS6HLELWZNoUUccnsNhNWADA9o7G+KTt+p 43VlKLePhdzk95wZk8GWAEKqavZDTmTdSgrRTe9ITnRWdJHZyKAmxyDWKYC0R+DD iD8xqPi/ekFQjfJ0Nf46cjz3vfyEzXcB76cYVRYzsgvoYIKLmukxk2HyDGIjVU2f JazabPU31gvrnEJPgUzqCo4kjCQlUHS8yFEvjjGfVWHzY3QLSE4XWAd7woIHJBEy 0EoLG6ZjGX6ZFTuiUNgrWN8qprzH/IjDYEFpjIS8Vna7JF9ZI5ox1st082tZAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUD6MTv1DdsJeiEfhaKjOpgKrHZi0wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTM0MmUzMTMwMzEy ZTMxMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAF5lcjANBgkqhkiG9w0BAQsFAAOCAQEAS5IIGv3nt7FQyOQoc3mzb0Ka YKQdat6TNHSzbvXvTyHnVnrrF0L4SdeMGy0amzH5Cv0FhSDU73tJu8E04IQNslNP 3o5YmqikBb72Cnt3ZH2k1lBEXxMCcA8rB/iXx7WyjEUeweqgtQ4FnLgJvvsE50cj sQ7b9t9EOX9yuYIDfx4smsMdQfSWIe1Ix9BroY1S5un6se9YYr1BBfFkWS5Z5XbK 8/738MJLHJyXzjIOxz4zhfbVEFNup03VtvDguh8UZvj4tcxw7nmCEGrnoj2I9I/N QfFHlM5u4L/giZSeJ0ebaDZJPaH185FyE04xlDCQU8HYkvm6LUBVo6jZf5yLbw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:38 2025 by rpki-client