This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232362e302f32342d3234203d3e20323034313730.roa File: 3139342e3135362e3232362e302f32342d3234203d3e20323034313730.roa (raw, json) Hash identifier: ifok00fESuDYROHGMBdvuCxYsOGb8TY2bbKg38X4fZ0= Subject key identifier: 0C:88:EF:7A:13:95:93:69:89:9B:1A:FA:3B:40:80:FC:09:AD:B8:44 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2ED42238B1F5016D283A81CFACF3B6206D504D58 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232362e302f32342d3234203d3e20323034313730.roa Signing time: Fri 28 Nov 2025 11:49:37 +0000 ROA not before: Fri 28 Nov 2025 11:44:37 +0000 ROA not after: Fri 27 Nov 2026 11:49:37 +0000 asID: 204170 IP address blocks: 194.156.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d4:22:38:b1:f5:01:6d:28:3a:81:cf:ac:f3:b6:20:6d:50:4d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:37 2025 GMT Not After : Nov 27 11:49:37 2026 GMT Subject: CN=0C88EF7A13959369899B1AFA3B4080FC09ADB844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:08:7d:c2:5b:94:f6:28:04:fe:33:ed:1f:94: 11:be:41:43:15:ea:f9:5d:fd:d8:12:b1:4f:44:96: 04:c9:79:4f:5e:10:ed:f0:f7:c1:ab:cb:7f:e3:2c: 9f:be:c9:49:31:7a:cf:d0:ab:d9:c2:27:4f:43:4b: e5:a4:1f:ed:e5:21:2d:cf:9e:ad:c7:61:6c:87:46: 9d:4f:97:7d:c4:e9:28:aa:7c:95:43:01:0f:63:b4: c5:25:96:91:9b:a4:dd:4a:3f:a9:4c:18:cb:78:9b: c4:f3:7c:48:bf:7b:fd:9c:dc:91:f0:12:9b:fb:4d: 9c:a1:69:fa:64:d4:fe:42:7f:e1:65:31:80:77:1a: fc:3d:38:e8:a8:d7:eb:fc:b5:9c:f2:9d:31:fd:c4: bb:78:51:cc:ae:b9:aa:82:88:24:99:42:b8:5a:6d: 14:ef:9b:32:2f:81:5d:c9:57:83:6e:cf:97:bb:c0: cf:e3:e9:15:b7:ba:0f:c7:09:ed:8c:9f:2a:1e:b8: a2:3d:84:5e:26:5a:5e:5a:b9:cc:78:4d:eb:68:35: f8:dc:a5:e8:da:5b:58:92:4e:a2:3f:74:95:cc:64: 68:7a:9e:8a:b0:fa:70:e2:49:07:61:b3:e2:f6:bd: d4:d0:00:79:d3:7e:dd:ae:b0:89:64:6d:4e:22:8d: 3f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:88:EF:7A:13:95:93:69:89:9B:1A:FA:3B:40:80:FC:09:AD:B8:44 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232362e302f32342d3234203d3e20323034313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.156.226.0/24 Signature Algorithm: sha256WithRSAEncryption d9:a1:d4:09:64:c8:34:c2:34:c5:56:41:cc:01:c9:e4:49:cc: 9d:1c:22:c2:75:34:6d:46:38:16:ac:ea:69:69:a0:00:33:d7: 85:ec:cd:33:73:42:be:9c:34:98:99:97:95:d2:4b:8d:a5:5b: 76:d3:59:6f:9a:77:40:67:9f:ca:7c:1c:1f:af:51:7a:e0:40: 88:d1:9f:19:54:72:2a:d4:33:0c:fa:1b:41:47:ba:11:e6:2b: 12:39:3d:af:de:46:35:fc:3a:fc:ea:5c:41:9b:62:39:16:51: 56:e9:03:18:d7:f3:63:dd:74:79:70:d9:45:9c:85:2b:48:2f: 93:9e:01:18:47:52:be:cc:c6:1c:f7:60:3a:39:18:92:4d:0d: 1f:db:e7:4b:21:ef:6b:41:0a:47:90:41:d4:c7:4b:6a:cd:d0: b2:30:5d:c9:32:62:4e:64:0c:e2:d0:f7:d3:94:e6:09:41:19: eb:16:fb:d8:80:ba:a4:b8:11:0f:6e:a6:d7:34:38:73:6d:24: 2b:4a:a6:32:24:9b:8d:28:28:58:32:54:87:bc:8c:7a:63:a6: 03:c7:e7:49:6c:ad:a3:52:72:85:7d:40:eb:f6:67:42:9b:45: 51:8f:8e:5d:70:73:e2:29:56:c7:f8:43:06:34:f2:6f:e5:4e: 9e:f9:52:ed -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIULtQiOLH1AW0oOoHPrPO2IG1QTVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzdaFw0yNjExMjcxMTQ5MzdaMDMxMTAvBgNV BAMTKDBDODhFRjdBMTM5NTkzNjk4OTlCMUFGQTNCNDA4MEZDMDlBREI4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQCH3CW5T2KAT+M+0flBG+QUMV 6vld/dgSsU9ElgTJeU9eEO3w98Gry3/jLJ++yUkxes/Qq9nCJ09DS+WkH+3lIS3P nq3HYWyHRp1Pl33E6SiqfJVDAQ9jtMUllpGbpN1KP6lMGMt4m8TzfEi/e/2c3JHw Epv7TZyhafpk1P5Cf+FlMYB3Gvw9OOio1+v8tZzynTH9xLt4UcyuuaqCiCSZQrha bRTvmzIvgV3JV4Nuz5e7wM/j6RW3ug/HCe2MnyoeuKI9hF4mWl5aucx4TetoNfjc pejaW1iSTqI/dJXMZGh6noqw+nDiSQdhs+L2vdTQAHnTft2usIlkbU4ijT95AgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUDIjvehOVk2mJmxr6O0CA/AmtuEQwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzUz NjJlMzIzMjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM0MzEzNzMwLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwpziMA0GCSqGSIb3DQEBCwUAA4IBAQDZodQJZMg0wjTFVkHMAcnk ScydHCLCdTRtRjgWrOppaaAAM9eF7M0zc0K+nDSYmZeV0kuNpVt201lvmndAZ5/K fBwfr1F64ECI0Z8ZVHIq1DMM+htBR7oR5isSOT2v3kY1/Dr86lxBm2I5FlFW6QMY 1/Nj3XR5cNlFnIUrSC+TngEYR1K+zMYc92A6ORiSTQ0f2+dLIe9rQQpHkEHUx0tq zdCyMF3JMmJOZAzi0PfTlOYJQRnrFvvYgLqkuBEPbqbXNDhzbSQrSqYyJJuNKChY MlSHvIx6Y6YDx+dJbK2jUnKFfUDr9mdCm0VRj45dcHPiKVbH+EMGNPJv5U6e+VLt -----END CERTIFICATE-----Generated at Sun Dec 7 03:38:15 2025 by rpki-client