This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35362e302f32342d3234203d3e203239303134.roa File: 3139342e3134372e35362e302f32342d3234203d3e203239303134.roa (raw, json) Hash identifier: +TPKRGbIVzkVrwm1cZCZJOtu2mWmgbrb+VZqMX3HKcY= Subject key identifier: 39:58:CF:86:22:4E:5F:DF:31:B9:E5:52:D0:4D:96:A1:62:A4:CD:C4 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2F9D64FF8066CB8435288CEE7FC9CE92B47288E1 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35362e302f32342d3234203d3e203239303134.roa Signing time: Mon 08 Dec 2025 18:50:14 +0000 ROA not before: Mon 08 Dec 2025 18:45:14 +0000 ROA not after: Mon 07 Dec 2026 18:50:14 +0000 asID: 29014 IP address blocks: 194.147.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 10:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:9d:64:ff:80:66:cb:84:35:28:8c:ee:7f:c9:ce:92:b4:72:88:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Dec 8 18:45:14 2025 GMT Not After : Dec 7 18:50:14 2026 GMT Subject: CN=3958CF86224E5FDF31B9E552D04D96A162A4CDC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d5:af:3a:bc:c2:ff:5c:e8:dc:dd:c4:bc:21: a0:17:53:cd:30:ea:37:26:d1:24:ad:73:77:cd:4c: d0:26:9c:10:e2:79:e9:bc:6f:76:85:37:37:97:72: bf:8a:f6:db:8c:c2:65:36:c3:28:bd:b8:20:4b:ba: ed:9f:59:58:42:35:44:61:6d:fd:00:fc:64:a8:c3: bd:56:a6:88:8e:c9:db:13:6e:2f:1e:d9:f5:91:91: 79:c5:1a:da:c6:fe:d7:c4:45:6f:f2:c3:95:07:55: 5a:99:52:eb:b3:49:2b:2e:41:6e:51:b9:43:79:ee: 99:00:82:e1:c4:bd:b8:35:4b:cc:a9:20:de:4a:b9: c2:cd:e1:d3:73:21:43:33:bf:54:60:8e:99:8a:5d: 61:e4:c6:03:c4:c5:11:d0:3e:89:3a:58:48:f7:0b: 10:2c:2c:20:70:19:9d:33:0f:6f:b6:07:ad:b8:3c: 42:96:a0:e2:db:6e:0f:af:80:42:e0:7a:68:a2:fd: 67:19:46:c2:79:a9:f1:4a:01:9a:4e:d7:30:e7:43: eb:dd:be:af:83:1f:a9:cf:21:44:3d:37:02:f2:15: aa:10:4a:d4:91:c3:61:dd:5c:4f:d6:ff:5e:54:32: 82:de:f9:18:cb:dd:cd:b5:cd:ee:90:2e:77:e3:7d: fd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:58:CF:86:22:4E:5F:DF:31:B9:E5:52:D0:4D:96:A1:62:A4:CD:C4 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35362e302f32342d3234203d3e203239303134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.56.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:99:cc:84:3b:c2:a2:b4:d2:bb:d7:62:f3:f1:01:ad:98:21: 1b:c1:3a:ce:c6:2c:6f:7e:29:2f:77:9f:90:c5:86:57:31:2f: 8a:fb:60:1f:91:34:3a:ed:f7:52:1a:fa:5b:33:f7:ce:03:be: d6:8a:be:28:a3:d6:6e:57:aa:5f:40:98:7e:ec:e5:b5:e2:94: ac:09:67:3b:62:20:40:01:f8:3a:02:23:07:3d:54:c0:86:19: 56:f5:d5:9f:fe:89:77:6f:13:85:5e:ee:f0:11:7e:4a:e3:f4: bb:98:2a:5a:3c:73:50:63:e1:32:97:47:7c:b3:e1:17:dc:57: 4d:4e:9b:cb:e3:ab:59:fb:71:41:8b:9f:11:8e:b5:e1:29:5d: c5:16:9c:5d:31:79:f1:d3:b0:ad:9c:92:00:44:b2:73:6d:aa: 84:c4:b7:48:3c:51:65:b0:11:8b:47:32:dd:8f:16:d9:fa:99: 17:5e:32:db:5c:fc:68:3f:79:01:aa:07:4b:0f:bd:c0:b8:58: 2f:4d:93:95:3c:21:9c:3d:09:fb:66:36:0c:8e:9e:b3:25:44: 58:7c:21:62:4f:33:76:c6:e1:75:31:06:59:09:88:6a:2d:ee: 09:37:5f:32:36:b5:be:77:2e:c8:1f:26:e6:0a:22:98:5a:a4: ac:c6:1d:91 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUL51k/4Bmy4Q1KIzuf8nOkrRyiOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTEyMDgxODQ1MTRaFw0yNjEyMDcxODUwMTRaMDMxMTAvBgNV BAMTKDM5NThDRjg2MjI0RTVGREYzMUI5RTU1MkQwNEQ5NkExNjJBNENEQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51a86vML/XOjc3cS8IaAXU80w 6jcm0SStc3fNTNAmnBDieem8b3aFNzeXcr+K9tuMwmU2wyi9uCBLuu2fWVhCNURh bf0A/GSow71WpoiOydsTbi8e2fWRkXnFGtrG/tfERW/yw5UHVVqZUuuzSSsuQW5R uUN57pkAguHEvbg1S8ypIN5KucLN4dNzIUMzv1RgjpmKXWHkxgPExRHQPok6WEj3 CxAsLCBwGZ0zD2+2B624PEKWoOLbbg+vgELgemii/WcZRsJ5qfFKAZpO1zDnQ+vd vq+DH6nPIUQ9NwLyFaoQStSRw2HdXE/W/15UMoLe+RjL3c21ze6QLnfjff17AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUOVjPhiJOX98xueVS0E2WoWKkzcQwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzQz NzJlMzUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzkzMDMxMzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADCkzgwDQYJKoZIhvcNAQELBQADggEBAH6ZzIQ7wqK00rvXYvPxAa2YIRvB Os7GLG9+KS93n5DFhlcxL4r7YB+RNDrt91Ia+lsz984DvtaKviij1m5Xql9AmH7s 5bXilKwJZztiIEAB+DoCIwc9VMCGGVb11Z/+iXdvE4Ve7vARfkrj9LuYKlo8c1Bj 4TKXR3yz4RfcV01Om8vjq1n7cUGLnxGOteEpXcUWnF0xefHTsK2ckgBEsnNtqoTE t0g8UWWwEYtHMt2PFtn6mRdeMttc/Gg/eQGqB0sPvcC4WC9Nk5U8IZw9CftmNgyO nrMlRFh8IWJPM3bG4XUxBlkJiGot7gk3XzI2tb53LsgfJuYKIphapKzGHZE= -----END CERTIFICATE-----Generated at Fri Dec 12 00:28:19 2025 by rpki-client