This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131352e302f32342d3234203d3e20313336373837.roa File: 39342e3130312e3131352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: BsCypp2yEHqZW8m8csSNG0wL3TXJtsBW/ptin2s4t9c= Subject key identifier: F6:CC:B9:B9:17:B6:21:14:F0:84:FF:18:CA:6D:75:E9:D0:03:55:F5 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3C4D6D8CF09545BD0DE731B9855EFCC10E9F8AB6 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131352e302f32342d3234203d3e20313336373837.roa Signing time: Wed 21 Jan 2026 12:00:43 +0000 ROA not before: Wed 21 Jan 2026 11:55:43 +0000 ROA not after: Wed 20 Jan 2027 12:00:43 +0000 asID: 136787 IP address blocks: 94.101.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:4d:6d:8c:f0:95:45:bd:0d:e7:31:b9:85:5e:fc:c1:0e:9f:8a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Jan 21 11:55:43 2026 GMT Not After : Jan 20 12:00:43 2027 GMT Subject: CN=F6CCB9B917B62114F084FF18CA6D75E9D00355F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1c:1a:a0:22:9a:4f:c5:a9:27:4b:4f:94:1c: 96:45:ad:13:8f:13:67:3b:b2:08:7c:f3:99:6e:d2: dd:54:fc:33:d4:4f:25:52:8e:38:56:e3:71:0c:ef: d2:af:ab:de:99:58:74:84:c1:f5:57:20:a8:ab:ce: f0:30:5d:6a:e3:7b:01:fc:c4:de:9b:ef:c1:0d:55: c1:2e:a7:d0:42:31:a7:c9:f7:60:f8:11:a0:af:d0: 73:dc:49:b8:43:a1:df:a3:d8:fa:68:15:4a:74:ff: a5:2a:30:b6:09:6c:ff:66:22:aa:9c:1d:92:ef:c7: f7:ed:7c:1a:f4:b8:f4:15:1e:df:c4:ee:b6:c7:ab: 77:c1:ff:d9:ff:68:52:bb:b8:65:6d:fb:21:39:a1: 13:f7:b8:a9:34:dd:0c:38:6f:8b:47:0f:9f:96:be: 6a:1c:59:8e:bc:e2:2a:24:21:78:12:6d:83:a0:6d: 64:e0:0d:87:06:28:55:bc:da:05:1c:c0:f8:4d:39: 0e:36:85:0a:a0:53:2f:51:df:f2:be:bb:06:c1:10: 8b:ca:98:4b:26:60:98:95:55:6c:e9:f4:44:e4:00: 5f:d8:73:97:82:84:31:0d:36:35:21:0d:b2:53:8e: f8:48:99:02:cb:f7:dc:41:ea:37:bb:48:f1:e0:34: 62:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CC:B9:B9:17:B6:21:14:F0:84:FF:18:CA:6D:75:E9:D0:03:55:F5 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.101.115.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:50:c5:c4:e7:6e:de:8e:f8:2a:8f:34:53:4a:b5:79:96:aa: 50:60:e6:8e:4c:72:68:fe:0a:1f:bc:7e:3b:a3:d9:a3:b1:c1: af:fe:1b:14:29:03:79:c7:64:46:c4:ba:db:a3:51:0f:ae:78: d1:6f:64:63:95:5f:fc:fe:d5:a9:17:84:05:a5:1e:2f:ad:2d: 1f:4b:60:92:4f:97:94:2b:f6:d1:99:df:e4:66:63:ae:a5:93: d0:9a:f1:07:44:52:e8:32:32:43:70:68:45:fa:06:bc:cc:c5: 63:64:44:dd:f1:1f:50:2e:78:ba:86:c5:cb:b0:c4:cd:c4:0a: 48:06:fc:ff:9d:f1:b9:2e:8d:dc:57:c1:cb:ac:99:78:98:ab: 6a:82:13:90:bb:d2:29:19:5e:31:bc:c9:f7:cd:ac:b5:d5:a2: ab:e1:6a:c7:6a:b9:4a:c7:16:03:1f:a5:33:d5:58:12:39:0f: f4:a9:66:be:52:17:2c:dd:e5:30:e5:11:7f:e2:29:cf:87:f4: 31:f7:c2:44:e4:ac:d0:79:51:ca:56:aa:96:58:cb:2b:69:a0: e8:32:ac:5d:38:12:ca:72:de:32:78:41:33:5f:f9:df:cd:8d: dd:bf:d8:ab:3e:9c:13:ac:11:a8:57:c2:22:8e:d4:64:22:4f: a8:e8:f4:4d -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUPE1tjPCVRb0N5zG5hV78wQ6firYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNjAxMjExMTU1NDNaFw0yNzAxMjAxMjAwNDNaMDMxMTAvBgNV BAMTKEY2Q0NCOUI5MTdCNjIxMTRGMDg0RkYxOENBNkQ3NUU5RDAwMzU1RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHBqgIppPxaknS0+UHJZFrROP E2c7sgh885lu0t1U/DPUTyVSjjhW43EM79Kvq96ZWHSEwfVXIKirzvAwXWrjewH8 xN6b78ENVcEup9BCMafJ92D4EaCv0HPcSbhDod+j2PpoFUp0/6UqMLYJbP9mIqqc HZLvx/ftfBr0uPQVHt/E7rbHq3fB/9n/aFK7uGVt+yE5oRP3uKk03Qw4b4tHD5+W vmocWY684iokIXgSbYOgbWTgDYcGKFW82gUcwPhNOQ42hQqgUy9R3/K+uwbBEIvK mEsmYJiVVWzp9ETkAF/Yc5eChDENNjUhDbJTjvhImQLL99xB6je7SPHgNGIVAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU9sy5uRe2IRTwhP8Yym116dADVfUwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTM0MmUzMTMwMzEy ZTMxMzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAF5lczANBgkqhkiG9w0BAQsFAAOCAQEAjlDFxOdu3o74Ko80U0q1eZaq UGDmjkxyaP4KH7x+O6PZo7HBr/4bFCkDecdkRsS626NRD6540W9kY5Vf/P7VqReE BaUeL60tH0tgkk+XlCv20Znf5GZjrqWT0JrxB0RS6DIyQ3BoRfoGvMzFY2RE3fEf UC54uobFy7DEzcQKSAb8/53xuS6N3FfBy6yZeJiraoITkLvSKRleMbzJ982stdWi q+Fqx2q5SscWAx+lM9VYEjkP9KlmvlIXLN3lMOURf+Ipz4f0MffCROSs0HlRylaq lljLK2mg6DKsXTgSynLeMnhBM1/5382N3b/Yqz6cE6wRqFfCIo7UZCJPqOj0TQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:18 2026 by rpki-client