This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36372e302f32342d3332203d3e203430303231.roa
File: 3139342e3131332e36372e302f32342d3332203d3e203430303231.roa (raw, json)
Hash identifier: 1rTHK5Mz01nPOw3k0fq/cVJOrySYQelQdxHwCwdtJN0=
Subject key identifier: 26:CF:39:1E:10:0A:4F:40:7F:B1:F9:92:D5:5C:28:D9:D5:01:49:59
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 138293B7AA60DF8DF99881160EAEFDA1ACCB4FE0
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36372e302f32342d3332203d3e203430303231.roa
Signing time: Fri 28 Nov 2025 11:49:27 +0000
ROA not before: Fri 28 Nov 2025 11:44:27 +0000
ROA not after: Fri 27 Nov 2026 11:49:27 +0000
asID: 40021
IP address blocks: 194.113.67.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 02:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:82:93:b7:aa:60:df:8d:f9:98:81:16:0e:ae:fd:a1:ac:cb:4f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 28 11:44:27 2025 GMT
Not After : Nov 27 11:49:27 2026 GMT
Subject: CN=26CF391E100A4F407FB1F992D55C28D9D5014959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:92:22:8f:32:ba:1e:30:d3:51:c6:97:ad:
22:15:98:c3:a8:17:4b:13:ed:b9:be:55:e0:66:7a:
19:25:b8:9d:52:d9:7a:81:77:2d:a6:59:86:0e:3c:
dd:3e:ad:21:1c:c2:31:23:a7:77:e2:a5:d0:cd:a9:
95:78:bc:a7:d6:07:61:8a:b1:19:29:d7:eb:30:e8:
01:3d:cc:f9:02:7c:fa:89:ac:11:db:1d:ca:bf:8c:
bf:55:1d:fb:af:7d:63:ed:a1:c3:39:ba:d7:a3:76:
a6:a5:6b:a7:94:c6:3f:92:4f:86:92:3b:80:46:7e:
dc:bb:34:b1:84:07:da:7b:7e:b8:1d:2d:97:d7:74:
82:1b:59:db:96:13:70:41:05:d4:ad:21:23:d4:b4:
d3:af:0c:e1:b0:49:be:a3:68:51:b1:24:49:6f:bc:
b5:87:bb:10:54:77:9a:62:bf:ed:13:be:23:44:f6:
2e:60:70:9e:a9:06:34:1d:40:b1:7a:42:be:5a:72:
ce:55:77:6a:a3:00:d9:24:a2:d1:3a:8c:a7:f0:0f:
29:c3:6e:ab:5d:2d:a6:7e:ad:4e:33:9f:29:59:aa:
f2:8d:41:25:0a:c8:a9:d9:61:65:ea:ec:70:a1:1e:
e3:5d:de:8c:74:3a:19:e0:b7:29:4a:1d:a0:74:05:
c9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CF:39:1E:10:0A:4F:40:7F:B1:F9:92:D5:5C:28:D9:D5:01:49:59
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36372e302f32342d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.67.0/24
Signature Algorithm: sha256WithRSAEncryption
07:74:93:1f:28:87:37:8f:1d:88:b4:a3:34:b2:b6:63:7e:de:
39:00:38:a8:a0:3c:29:6c:ff:3a:55:80:2a:e8:60:e8:68:18:
a5:39:f8:07:c7:1e:a1:1d:5c:21:eb:7f:bd:41:ec:53:95:02:
4d:90:a3:c1:81:16:5d:ca:20:e7:75:6f:d3:9a:c1:23:37:c5:
41:fa:c0:b3:98:51:c0:9a:ef:61:cd:65:c0:c6:fd:25:39:a9:
3f:71:84:79:9b:f3:37:72:be:f3:fa:4c:66:29:3a:5d:d8:c2:
f4:76:9c:f0:d0:e8:43:d5:19:ba:41:d2:cf:71:3c:cb:e7:bc:
20:33:5d:d7:a1:68:a5:65:28:5c:c7:18:ac:cd:0b:c2:e1:58:
ae:a9:04:62:52:9b:08:cf:c1:c1:83:38:1c:62:d5:aa:76:a2:
46:22:c4:dc:a5:51:3c:91:f6:77:13:6e:e6:34:c3:87:82:56:
1c:a8:83:ff:3b:eb:46:a4:c0:6f:2a:fd:b4:e8:5b:ff:56:b9:
ef:14:db:5d:4f:84:80:e5:0a:05:cb:ad:a6:b8:7b:a5:16:65:
6d:ca:a3:d1:d3:ef:c4:da:51:9a:4e:47:69:ae:64:66:1d:c2:
fa:41:0f:9f:45:38:5a:7b:cb:b6:26:09:49:91:21:27:75:e5:
d6:f8:2c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 14:50:55 2025 by rpki-client