This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33392e302f32342d3234203d3e203437353833.roa File: 3134392e36322e33392e302f32342d3234203d3e203437353833.roa (raw, json) Hash identifier: +WkN65ZDG/BhH6sXrLN6koJ4mjo3JkyFGVwanBXrO/o= Subject key identifier: 24:D3:33:47:A2:3B:E2:67:47:6D:B1:34:76:CE:3B:C8:C5:37:88:EB Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 06F3FEE956EC27E985A872574F3DBBAC50394522 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33392e302f32342d3234203d3e203437353833.roa Signing time: Fri 28 Nov 2025 11:49:51 +0000 ROA not before: Fri 28 Nov 2025 11:44:51 +0000 ROA not after: Fri 27 Nov 2026 11:49:51 +0000 asID: 47583 IP address blocks: 149.62.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f3:fe:e9:56:ec:27:e9:85:a8:72:57:4f:3d:bb:ac:50:39:45:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:51 2025 GMT Not After : Nov 27 11:49:51 2026 GMT Subject: CN=24D33347A23BE267476DB13476CE3BC8C53788EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bb:eb:08:3b:6d:7b:9b:78:c1:e9:00:a5:c8: ab:09:25:a9:55:f5:36:29:4a:e5:68:dd:11:c5:9b: 39:57:bf:bf:66:46:1e:3a:7c:a7:b3:7b:b3:f0:ca: 96:ad:95:34:21:d7:1a:0b:32:84:4e:ae:af:7b:2d: d8:26:8d:1f:6a:8e:33:9f:6f:35:86:c3:8a:46:41: de:c2:e1:36:30:fc:b9:95:e0:37:4a:16:89:e8:6d: 61:a2:68:62:1a:a7:4e:fe:a7:6d:38:d4:41:b1:a9: cb:63:f6:35:86:59:e4:85:a6:7f:82:88:58:d3:18: 5c:82:d0:0e:6a:fa:3e:7b:31:62:80:c7:c9:b9:de: 4e:0d:90:f4:30:ea:b2:52:85:0d:8b:7e:c9:88:c5: 02:23:95:ce:82:e6:d0:2d:54:09:c9:ac:f7:c4:a9: 88:01:d5:a3:a7:13:f2:49:b0:08:61:b0:6d:fe:59: d3:a7:3e:9c:d5:8c:99:ce:db:d1:9b:8e:93:05:a0: db:53:8f:37:d1:ed:2a:db:3d:9c:90:f4:0a:a2:f9: d3:15:fd:eb:0a:3c:6e:7b:32:8a:3a:b5:33:8a:df: d4:37:20:29:c8:2a:00:ae:46:ee:c0:61:e4:09:b6: c9:ab:c2:31:fa:d3:61:52:4c:b4:97:6d:05:d2:42: 47:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D3:33:47:A2:3B:E2:67:47:6D:B1:34:76:CE:3B:C8:C5:37:88:EB X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33392e302f32342d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.62.39.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:52:f1:2c:f7:db:91:86:2f:06:41:a0:88:68:ad:33:de:42: 9c:bd:78:8b:34:f4:c6:45:73:fc:58:0e:66:82:07:29:3c:00: 5f:83:6a:03:19:72:5f:7f:d2:77:97:f8:dd:f9:c1:e6:d4:88: c8:b7:7f:ff:84:db:e2:37:1b:a9:cf:26:80:c7:1b:af:6a:03: 28:d0:2b:aa:bd:29:4f:a5:64:ff:64:67:60:e5:c1:5e:12:fa: f6:24:a7:74:85:11:51:c3:a6:99:cb:ce:5c:e9:7f:3b:b1:c0: 85:f6:30:fe:f9:fb:c2:1e:14:4f:3d:01:f3:78:84:f5:02:41: e8:5b:e0:4d:53:bb:44:2a:a4:7d:66:2c:56:9e:54:ab:a7:77: 52:4b:07:05:4e:c8:54:ca:83:b5:7a:1b:99:a7:51:b1:a6:e2: 82:da:f9:e0:40:fa:fb:3b:f8:1c:0b:76:59:0c:d4:28:8b:47: 59:a0:61:af:a1:7a:76:e9:59:69:56:c2:39:1c:b0:cf:15:82: 82:fc:4f:ec:d8:a0:d7:69:20:48:7e:9c:2a:c6:4b:c3:da:a5: f8:ef:49:d1:e9:87:51:09:b6:52:d1:57:f4:d2:d0:35:1d:c1: a2:f0:2e:57:24:5e:53:6f:b2:d1:3f:1e:30:50:7a:1c:4d:6d: 97:81:b8:48 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUBvP+6VbsJ+mFqHJXTz27rFA5RSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTFaFw0yNjExMjcxMTQ5NTFaMDMxMTAvBgNV BAMTKDI0RDMzMzQ3QTIzQkUyNjc0NzZEQjEzNDc2Q0UzQkM4QzUzNzg4RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuu+sIO217m3jB6QClyKsJJalV 9TYpSuVo3RHFmzlXv79mRh46fKeze7PwypatlTQh1xoLMoROrq97LdgmjR9qjjOf bzWGw4pGQd7C4TYw/LmV4DdKFonobWGiaGIap07+p2041EGxqctj9jWGWeSFpn+C iFjTGFyC0A5q+j57MWKAx8m53k4NkPQw6rJShQ2LfsmIxQIjlc6C5tAtVAnJrPfE qYgB1aOnE/JJsAhhsG3+WdOnPpzVjJnO29GbjpMFoNtTjzfR7SrbPZyQ9Aqi+dMV /esKPG57Moo6tTOK39Q3ICnIKgCuRu7AYeQJtsmrwjH602FSTLSXbQXSQkf1AgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUJNMzR6I74mdHbbE0ds47yMU3iOswHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM0MzkyZTM2MzIy ZTMzMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAlT4nMA0GCSqGSIb3DQEBCwUAA4IBAQBvUvEs99uRhi8GQaCIaK0z3kKcvXiL NPTGRXP8WA5mggcpPABfg2oDGXJff9J3l/jd+cHm1IjIt3//hNviNxupzyaAxxuv agMo0CuqvSlPpWT/ZGdg5cFeEvr2JKd0hRFRw6aZy85c6X87scCF9jD++fvCHhRP PQHzeIT1AkHoW+BNU7tEKqR9ZixWnlSrp3dSSwcFTshUyoO1ehuZp1GxpuKC2vng QPr7O/gcC3ZZDNQoi0dZoGGvoXp26VlpVsI5HLDPFYKC/E/s2KDXaSBIfpwqxkvD 2qX470nR6YdRCbZS0Vf00tA1HcGi8C5XJF5Tb7LRPx4wUHocTW2XgbhI -----END CERTIFICATE-----Generated at Fri Dec 5 18:55:01 2025 by rpki-client