This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33362e3138342e302f32332d3234203d3e203437353833.roa
File: 3139342e33362e3138342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: 9F7uWTIrjh8dcUfD90vHiVafs5MdZDhNlyzz00Q/chk=
Subject key identifier: EB:F2:28:4E:84:CB:87:D9:03:00:7E:25:3D:D6:34:6B:61:8C:4E:5D
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7637235E7ECF886E5F439A11208D62DC3712D53A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33362e3138342e302f32332d3234203d3e203437353833.roa
Signing time: Fri 28 Nov 2025 11:49:51 +0000
ROA not before: Fri 28 Nov 2025 11:44:51 +0000
ROA not after: Fri 27 Nov 2026 11:49:51 +0000
asID: 47583
IP address blocks: 194.36.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:37:23:5e:7e:cf:88:6e:5f:43:9a:11:20:8d:62:dc:37:12:d5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 28 11:44:51 2025 GMT
Not After : Nov 27 11:49:51 2026 GMT
Subject: CN=EBF2284E84CB87D903007E253DD6346B618C4E5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:15:3b:54:61:9f:0b:7b:5a:96:65:68:f7:f1:
6e:f2:47:a7:da:10:0e:ed:92:41:61:3e:b3:70:09:
01:1c:8f:5a:3c:8f:a4:c1:72:31:b3:9d:92:95:22:
5e:51:0c:32:a4:72:38:f4:0c:3a:a0:15:bf:5b:8e:
aa:43:4e:14:67:f0:75:36:16:61:bf:d8:70:f7:28:
d5:85:89:51:49:89:1c:d3:b2:76:95:44:77:93:a7:
9a:bf:49:e1:15:f1:36:f1:1b:58:2e:13:cb:9e:f8:
2d:b0:30:52:4d:8b:5e:ec:58:76:6e:25:63:ec:2a:
ee:95:f1:12:cf:70:7d:bd:aa:01:60:91:65:eb:c6:
86:be:87:67:23:8f:98:95:c8:ae:a3:75:05:1e:31:
3c:a5:d4:ca:46:23:de:d8:f2:7d:8a:7f:8c:0e:52:
2a:d6:b7:fa:01:bb:fc:16:f5:42:6b:40:f5:ca:89:
25:5b:01:f1:b0:d9:65:1d:5e:23:5b:48:d3:08:cb:
f5:14:0d:fc:26:91:5b:b8:b5:9d:b1:26:7a:c5:b3:
98:e9:20:04:d6:47:3e:1f:e0:cc:3b:c9:cc:0c:b5:
3f:54:47:0a:58:3b:2a:b5:5f:0a:a2:6d:ef:ec:09:
25:e3:86:12:c7:68:8e:14:f1:14:0b:b0:83:e6:21:
0a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F2:28:4E:84:CB:87:D9:03:00:7E:25:3D:D6:34:6B:61:8C:4E:5D
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33362e3138342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.184.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:81:e2:cd:f7:f7:fa:c2:02:3c:57:27:39:49:dc:41:3c:63:
d8:07:6b:9a:b6:b2:01:23:f8:46:cc:6c:dc:af:52:03:39:5d:
f9:af:65:94:e8:1e:68:bb:05:fe:53:9c:bd:3b:05:16:d5:b5:
7f:34:64:4d:a3:e0:8c:5c:55:57:b9:a5:92:89:47:af:01:dd:
2c:16:f4:a0:2c:c8:cb:09:bb:4d:7c:aa:1e:43:36:2d:32:55:
df:65:4f:8c:f7:1b:5d:d6:f0:bd:04:3d:a1:ae:d3:52:11:eb:
97:a8:d5:ba:b1:a1:30:80:32:46:cb:c9:5b:fd:0c:ed:c3:eb:
80:1f:2c:ca:d0:a1:95:05:cf:b9:6a:c3:ce:f1:2a:b2:be:b7:
86:2d:f0:a7:e2:8d:49:d8:ea:2b:45:98:63:4a:6f:92:a3:84:
07:74:c1:4a:1b:8f:56:d8:a4:98:06:19:a6:7a:2a:01:60:cd:
dd:70:ae:28:eb:30:8d:ac:83:82:dd:d5:1e:49:8c:8a:f7:da:
41:19:27:1b:66:eb:7d:45:7b:3d:88:91:c5:62:b5:df:44:c3:
a5:e4:10:94:df:30:7c:d6:c7:5a:96:e5:19:5a:d4:5b:d6:97:
39:53:9e:83:3f:a2:24:c7:14:d1:c4:cc:78:71:4d:eb:84:c6:
04:0f:2d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 19:00:24 2025 by rpki-client