This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33362e3138362e302f32332d3234203d3e203437353833.roa File: 3139342e33362e3138362e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: mHcn7y6fX2xoaZ3yHpaIEE2prF6ltsK56m3hLTwmYnc= Subject key identifier: 6A:AB:8F:66:2A:B6:B1:3C:B7:C1:BE:6F:A3:DB:96:37:95:1B:83:7C Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 74DA222BC9AFA52A69C36A33DF9D07156DF5083B Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33362e3138362e302f32332d3234203d3e203437353833.roa Signing time: Fri 28 Nov 2025 11:49:37 +0000 ROA not before: Fri 28 Nov 2025 11:44:37 +0000 ROA not after: Fri 27 Nov 2026 11:49:37 +0000 asID: 47583 IP address blocks: 194.36.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:da:22:2b:c9:af:a5:2a:69:c3:6a:33:df:9d:07:15:6d:f5:08:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:37 2025 GMT Not After : Nov 27 11:49:37 2026 GMT Subject: CN=6AAB8F662AB6B13CB7C1BE6FA3DB9637951B837C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:97:d4:97:96:6a:80:96:4a:d4:61:75:33:d1: cc:58:ea:e6:3a:27:7e:77:b7:b1:7d:ba:7e:d6:c1: bf:0e:26:66:4c:9e:ae:f6:2e:3c:23:df:59:50:5a: 23:62:03:28:31:b5:a6:ef:c8:e1:33:37:6d:2b:b1: fd:87:97:58:80:10:84:0e:08:91:fe:3b:bc:38:f0: e2:9a:45:20:6b:f9:fc:66:9a:5a:f0:09:4b:38:e7: af:a8:12:f1:31:32:68:b4:c3:4c:05:42:ae:e1:2e: 52:db:0b:67:80:c6:c6:87:cf:d5:d2:3f:b2:a0:22: 9a:8d:ce:36:07:32:c7:53:06:e0:73:ba:91:7b:00: c7:71:2f:b0:7f:f3:83:ed:78:b1:f5:dd:82:ef:88: 73:f1:5f:36:e4:f5:31:3d:64:71:d8:14:cc:ce:97: c7:de:c3:b2:99:5c:a8:44:72:54:92:72:eb:32:da: 15:b7:ce:7c:be:24:a4:30:c1:31:ae:c9:8c:32:f8: 26:89:20:99:e8:79:03:f1:45:a5:14:63:c4:44:37: 6b:4c:30:0d:71:9e:49:80:ed:b3:35:0c:58:77:9a: bf:d8:f9:3c:f2:07:a5:26:3f:c7:fb:ce:e1:47:60: a7:c7:7c:54:08:93:2a:f3:52:55:f9:49:9e:ed:d1: c5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AB:8F:66:2A:B6:B1:3C:B7:C1:BE:6F:A3:DB:96:37:95:1B:83:7C X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33362e3138362e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.36.186.0/23 Signature Algorithm: sha256WithRSAEncryption b5:54:68:66:3b:ca:76:1c:d3:78:62:64:97:51:68:ae:84:74: c4:1d:12:d4:79:0e:59:fd:e1:20:7c:a4:96:d7:41:77:01:79: 86:c3:81:22:64:e8:b4:07:9f:70:b9:83:bc:bf:16:34:7e:a3: 78:c5:fa:39:ec:68:2a:ab:89:33:81:4f:50:ca:d4:b5:4a:23: 62:c5:ff:46:ea:a0:9b:b1:43:1e:67:38:ca:a0:29:80:ba:ff: 92:02:2b:4d:c9:61:eb:32:75:e2:27:6e:e1:35:95:a5:94:8f: 01:06:94:2f:cb:dc:0f:1d:84:f2:72:87:08:50:de:e8:bb:24: 1b:07:e3:4d:b2:56:16:8b:6b:18:b6:61:8c:c1:04:c8:80:13: 99:90:62:2c:95:75:38:1a:ef:0c:5b:eb:f9:0e:d7:1c:00:61: a9:28:ad:87:5d:79:b9:f2:a4:f7:0b:86:65:7b:03:19:4a:98: f3:62:9e:08:6c:98:89:08:2b:34:04:8a:f8:29:3f:d6:b1:21: e2:3b:83:7f:1e:44:8b:ed:08:e5:9b:bd:71:19:84:f2:98:34: 95:05:92:27:e5:9b:25:db:72:11:09:8e:ea:45:a1:39:2a:fd: 84:75:b6:2f:2e:62:73:28:d7:55:9b:01:4d:7a:f4:dc:5a:ed: 64:3c:e3:7e -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUdNoiK8mvpSppw2oz350HFW31CDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzdaFw0yNjExMjcxMTQ5MzdaMDMxMTAvBgNV BAMTKDZBQUI4RjY2MkFCNkIxM0NCN0MxQkU2RkEzREI5NjM3OTUxQjgzN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5l9SXlmqAlkrUYXUz0cxY6uY6 J353t7F9un7Wwb8OJmZMnq72Ljwj31lQWiNiAygxtabvyOEzN20rsf2Hl1iAEIQO CJH+O7w48OKaRSBr+fxmmlrwCUs456+oEvExMmi0w0wFQq7hLlLbC2eAxsaHz9XS P7KgIpqNzjYHMsdTBuBzupF7AMdxL7B/84PteLH13YLviHPxXzbk9TE9ZHHYFMzO l8few7KZXKhEclSScusy2hW3zny+JKQwwTGuyYwy+CaJIJnoeQPxRaUUY8REN2tM MA1xnkmA7bM1DFh3mr/Y+TzyB6UmP8f7zuFHYKfHfFQIkyrzUlX5SZ7t0cXNAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUaquPZiq2sTy3wb5vo9uWN5Ubg3wwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMzMzYy ZTMxMzgzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHCJLowDQYJKoZIhvcNAQELBQADggEBALVUaGY7ynYc03hiZJdRaK6EdMQd EtR5Dln94SB8pJbXQXcBeYbDgSJk6LQHn3C5g7y/FjR+o3jF+jnsaCqriTOBT1DK 1LVKI2LF/0bqoJuxQx5nOMqgKYC6/5ICK03JYesydeInbuE1laWUjwEGlC/L3A8d hPJyhwhQ3ui7JBsH402yVhaLaxi2YYzBBMiAE5mQYiyVdTga7wxb6/kO1xwAYako rYddebnypPcLhmV7AxlKmPNinghsmIkIKzQEivgpP9axIeI7g38eRIvtCOWbvXEZ hPKYNJUFkiflmyXbchEJjupFoTkq/YR1ti8uYnMo11WbAU169Nxa7WQ8434= -----END CERTIFICATE-----Generated at Fri Dec 5 18:54:40 2025 by rpki-client