This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3136342e302f32332d3234203d3e203437353833.roa File: 3139342e35392e3136342e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: vP0NZKml69qXUXT4lz8h6mEv31ObjJ9Q9PjY/Bz5CCs= Subject key identifier: D9:F7:EF:DA:26:09:C4:86:BC:3C:8E:04:C9:C9:94:38:42:51:C9:79 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 402AE162605A2FB35F22A01687B0047F70110748 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3136342e302f32332d3234203d3e203437353833.roa Signing time: Fri 28 Nov 2025 11:49:35 +0000 ROA not before: Fri 28 Nov 2025 11:44:35 +0000 ROA not after: Fri 27 Nov 2026 11:49:35 +0000 asID: 47583 IP address blocks: 194.59.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:2a:e1:62:60:5a:2f:b3:5f:22:a0:16:87:b0:04:7f:70:11:07:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:35 2025 GMT Not After : Nov 27 11:49:35 2026 GMT Subject: CN=D9F7EFDA2609C486BC3C8E04C9C994384251C979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7e:11:8e:45:b1:05:b9:95:ba:07:ce:f4:55: 10:c8:09:11:f6:31:e6:07:ba:7c:b9:04:57:9c:a2: ac:b0:b9:5e:6f:9f:ef:b5:d3:7e:b2:97:6f:cc:20: d9:58:d6:a8:e6:24:d7:2b:cc:e0:c2:0c:e6:b0:bb: 86:1c:87:b4:68:6b:d7:c8:1a:c9:57:8f:55:8c:2e: c3:95:ee:63:d1:30:d0:7d:eb:9d:ec:ce:f3:ec:74: 91:c9:21:6f:93:14:f9:fa:36:e8:30:1f:64:9d:c0: 14:f5:8a:67:14:1d:81:21:c5:8c:5b:6b:99:89:95: 05:6c:08:eb:f8:e1:5a:59:d8:18:0e:76:0f:21:71: 49:e8:34:63:4e:bc:89:b0:6c:fb:bf:52:93:4f:0a: f1:38:5f:c4:2f:a0:a4:76:ea:e2:0c:c4:ff:7b:2e: 7e:db:39:cc:51:eb:d7:73:44:3b:15:17:ac:ff:d6: 9e:ac:ea:d3:63:af:fe:8b:12:97:fa:df:12:7f:76: 74:07:a8:d7:6f:d0:3a:df:7e:99:a2:a2:b5:b1:a1: de:b0:12:44:a6:a3:02:a4:3b:15:9a:d7:f6:d7:a9: 9f:ca:9e:35:47:cd:f5:95:f9:96:77:e2:04:11:a7: 14:a0:2b:39:b7:d4:69:9a:a0:5a:7f:f5:54:cf:cd: 07:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F7:EF:DA:26:09:C4:86:BC:3C:8E:04:C9:C9:94:38:42:51:C9:79 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3136342e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.164.0/23 Signature Algorithm: sha256WithRSAEncryption 41:93:70:2a:71:d2:02:02:8e:4e:86:5a:02:fe:75:12:30:d4: 7e:b1:f2:1e:00:1a:bc:31:34:e7:4e:5b:92:2d:fa:9e:35:dc: 66:90:b0:b0:97:56:eb:a9:d5:79:8c:4c:03:f0:95:a6:dd:f5: 0b:4d:db:31:83:84:fd:32:c6:47:9e:f8:19:5f:14:00:ae:50: 4a:c7:f1:0b:f4:99:fc:db:83:86:17:d8:ff:8f:37:0f:71:4e: 60:63:bf:e2:60:c9:8a:8c:82:ee:6e:ec:72:6a:41:67:5a:8f: 33:42:05:15:84:8b:99:f3:fb:d8:fc:da:9d:e3:56:a2:a0:b8: 8f:97:8b:e0:40:ed:84:98:65:ff:c7:98:cf:f4:17:5a:f5:ee: e3:63:2a:e7:b8:a2:7c:5d:f1:ee:ff:4e:16:ce:77:39:98:7e: f1:51:bf:28:68:d6:6b:e3:37:39:d5:ec:57:e5:64:e2:4d:3c: 67:59:91:26:e1:22:45:0f:57:5a:58:74:20:1a:16:87:13:e3: f2:f5:93:e1:d4:ec:5d:03:a2:6a:f1:9f:06:d1:c8:e5:ce:29: dc:44:43:33:66:bc:b3:97:00:4b:8c:ab:57:ed:65:98:c7:74: 7c:30:f9:8c:9b:e1:8a:f3:f6:a9:60:ce:66:ca:d9:fb:95:c7: 4d:2a:f1:0b -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUQCrhYmBaL7NfIqAWh7AEf3ARB0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzVaFw0yNjExMjcxMTQ5MzVaMDMxMTAvBgNV BAMTKEQ5RjdFRkRBMjYwOUM0ODZCQzNDOEUwNEM5Qzk5NDM4NDI1MUM5NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbfhGORbEFuZW6B870VRDICRH2 MeYHuny5BFecoqywuV5vn++1036yl2/MINlY1qjmJNcrzODCDOawu4Ych7Roa9fI GslXj1WMLsOV7mPRMNB9653szvPsdJHJIW+TFPn6NugwH2SdwBT1imcUHYEhxYxb a5mJlQVsCOv44VpZ2BgOdg8hcUnoNGNOvImwbPu/UpNPCvE4X8QvoKR26uIMxP97 Ln7bOcxR69dzRDsVF6z/1p6s6tNjr/6LEpf63xJ/dnQHqNdv0DrffpmiorWxod6w EkSmowKkOxWa1/bXqZ/KnjVHzfWV+ZZ34gQRpxSgKzm31GmaoFp/9VTPzQepAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU2ffv2iYJxIa8PI4EycmUOEJRyXkwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM1Mzky ZTMxMzYzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHCO6QwDQYJKoZIhvcNAQELBQADggEBAEGTcCpx0gICjk6GWgL+dRIw1H6x 8h4AGrwxNOdOW5It+p413GaQsLCXVuup1XmMTAPwlabd9QtN2zGDhP0yxkee+Blf FACuUErH8Qv0mfzbg4YX2P+PNw9xTmBjv+JgyYqMgu5u7HJqQWdajzNCBRWEi5nz +9j82p3jVqKguI+Xi+BA7YSYZf/HmM/0F1r17uNjKue4onxd8e7/ThbOdzmYfvFR vyho1mvjNznV7FflZOJNPGdZkSbhIkUPV1pYdCAaFocT4/L1k+HU7F0DomrxnwbR yOXOKdxEQzNmvLOXAEuMq1ftZZjHdHww+Yyb4Yrz9qlgzmbK2fuVx00q8Qs= -----END CERTIFICATE-----Generated at Fri Dec 5 18:58:54 2025 by rpki-client