This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e38352e302f32342d3234203d3e20323037313337.roa File: 3139342e3131302e38352e302f32342d3234203d3e20323037313337.roa (raw, json) Hash identifier: AiiuVQvcCqMnxbeTtisTmjvaaedCaK00UBHmIjjONGk= Subject key identifier: F6:8C:56:E6:D4:DC:44:74:E7:DD:78:77:7E:0E:3C:70:65:73:9C:FF Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0C889685011069DF965930FC31646FBDAF7BD3C4 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e38352e302f32342d3234203d3e20323037313337.roa Signing time: Fri 09 Jan 2026 11:28:58 +0000 ROA not before: Fri 09 Jan 2026 11:23:58 +0000 ROA not after: Fri 08 Jan 2027 11:28:58 +0000 asID: 207137 IP address blocks: 194.110.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:88:96:85:01:10:69:df:96:59:30:fc:31:64:6f:bd:af:7b:d3:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Jan 9 11:23:58 2026 GMT Not After : Jan 8 11:28:58 2027 GMT Subject: CN=F68C56E6D4DC4474E7DD78777E0E3C7065739CFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a3:f6:93:e6:cd:41:a0:9a:26:00:5b:87:f8: 87:a1:56:15:4b:d4:88:2c:fc:44:17:97:df:fc:5d: c8:30:99:b3:89:5e:cd:3d:86:ee:da:a0:8a:68:b5: bc:82:af:b9:25:24:59:a1:b6:fe:1b:44:82:40:18: 1b:ea:69:4f:e9:45:8b:53:53:30:61:a2:d3:69:77: b7:70:47:16:ca:45:63:c6:9f:de:76:eb:44:56:51: 8b:51:a0:e3:81:1e:3b:c7:1f:8b:6f:ec:c6:17:fc: 93:e7:2e:d9:c4:1d:3b:45:a5:4f:da:06:8d:f9:2a: 6b:97:90:7d:a2:fe:d4:68:4d:49:ea:fe:ad:1e:d2: 67:79:af:91:f1:9a:65:de:e2:d2:b4:b2:64:0a:a4: d1:21:9c:4d:a0:7b:c8:34:2d:fa:6e:f7:2b:82:33: 75:c6:32:6f:a7:bf:a2:74:82:de:54:29:f1:ac:c2: dc:d4:94:a6:20:61:fa:c2:b9:32:bd:47:dd:96:db: 7d:d8:04:1b:8c:3a:51:65:76:bf:fd:d5:2c:12:8c: f3:b4:78:f2:86:a5:a4:96:35:fb:d2:30:d7:f3:96: 1b:f1:70:dc:01:ef:7a:d6:23:8c:cf:58:d7:9d:f2: ad:9f:75:4b:49:7b:0d:4c:5f:d5:c1:9a:79:cb:0b: f3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8C:56:E6:D4:DC:44:74:E7:DD:78:77:7E:0E:3C:70:65:73:9C:FF X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e38352e302f32342d3234203d3e20323037313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.85.0/24 Signature Algorithm: sha256WithRSAEncryption ae:0c:bd:6b:c7:cf:b7:dd:aa:c2:46:f1:65:41:c9:db:c9:af: 15:1f:a5:36:3c:ea:c9:6f:3b:e7:54:40:a3:2a:02:7a:67:ad: 11:76:c7:9b:20:e4:95:32:82:30:92:d1:e1:98:98:8b:bb:c9: 88:0c:c6:6f:88:de:47:15:8e:bc:95:b4:4f:fd:07:4a:e3:d1: 89:e2:5a:81:73:8f:0b:ab:87:75:f3:e5:d4:5f:0c:d3:a0:3b: 33:5c:31:c5:e8:7f:10:4f:05:f4:af:b7:95:fa:94:ef:62:c0: 14:89:4d:60:ce:3a:33:19:5c:c8:c9:8b:2f:66:36:cc:d8:92: 36:14:ce:81:e1:0a:a5:b7:ae:e8:0f:10:c7:f0:51:cb:8e:92: 20:3f:e7:dc:29:4a:67:98:f3:59:6b:0d:4f:9f:5b:c0:21:48: a3:55:3c:5a:83:dc:5e:ff:45:de:03:a2:4f:3a:3a:b7:67:e2: 3b:e0:6d:95:da:11:91:60:e5:24:67:76:00:e7:f1:d4:02:52: 5e:03:8a:f0:be:4d:3f:94:29:0e:03:5d:ed:54:24:81:0f:35: 02:0b:69:7b:d5:9a:13:bd:db:4d:e7:a6:10:56:56:8a:23:09: a4:59:b7:3b:8e:46:3e:4f:be:f5:bc:4e:9d:28:9e:8d:97:d5: bd:28:16:ea -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUDIiWhQEQad+WWTD8MWRvva9708QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNjAxMDkxMTIzNThaFw0yNzAxMDgxMTI4NThaMDMxMTAvBgNV BAMTKEY2OEM1NkU2RDREQzQ0NzRFN0RENzg3NzdFMEUzQzcwNjU3MzlDRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDio/aT5s1BoJomAFuH+IehVhVL 1Igs/EQXl9/8XcgwmbOJXs09hu7aoIpotbyCr7klJFmhtv4bRIJAGBvqaU/pRYtT UzBhotNpd7dwRxbKRWPGn95260RWUYtRoOOBHjvHH4tv7MYX/JPnLtnEHTtFpU/a Bo35KmuXkH2i/tRoTUnq/q0e0md5r5HxmmXe4tK0smQKpNEhnE2ge8g0Lfpu9yuC M3XGMm+nv6J0gt5UKfGswtzUlKYgYfrCuTK9R92W233YBBuMOlFldr/91SwSjPO0 ePKGpaSWNfvSMNfzlhvxcNwB73rWI4zPWNed8q2fdUtJew1MX9XBmnnLC/OHAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU9oxW5tTcRHTn3Xh3fg48cGVznP8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzEz MDJlMzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNzMxMzMzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMJuVTANBgkqhkiG9w0BAQsFAAOCAQEArgy9a8fPt92qwkbxZUHJ28mv FR+lNjzqyW8751RAoyoCemetEXbHmyDklTKCMJLR4ZiYi7vJiAzGb4jeRxWOvJW0 T/0HSuPRieJagXOPC6uHdfPl1F8M06A7M1wxxeh/EE8F9K+3lfqU72LAFIlNYM46 MxlcyMmLL2Y2zNiSNhTOgeEKpbeu6A8Qx/BRy46SID/n3ClKZ5jzWWsNT59bwCFI o1U8WoPcXv9F3gOiTzo6t2fiO+BtldoRkWDlJGd2AOfx1AJSXgOK8L5NP5QpDgNd 7VQkgQ81Agtpe9WaE73bTeemEFZWiiMJpFm3O45GPk++9bxOnSiejZfVvSgW6g== -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:05 2026 by rpki-client