This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3136362e302f32332d3234203d3e203437353833.roa File: 3139342e35392e3136362e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: UFTJoJDjBknIkOENwmTIuHbFgS18Wnp0pe488Oz28hM= Subject key identifier: DD:1E:77:29:5C:34:0B:00:AC:47:C6:B5:C8:B5:38:BA:E6:A4:A7:0D Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6AC91946225AAC0D10F34011568A42151DFA32C6 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3136362e302f32332d3234203d3e203437353833.roa Signing time: Fri 28 Nov 2025 11:49:18 +0000 ROA not before: Fri 28 Nov 2025 11:44:18 +0000 ROA not after: Fri 27 Nov 2026 11:49:18 +0000 asID: 47583 IP address blocks: 194.59.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c9:19:46:22:5a:ac:0d:10:f3:40:11:56:8a:42:15:1d:fa:32:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:18 2025 GMT Not After : Nov 27 11:49:18 2026 GMT Subject: CN=DD1E77295C340B00AC47C6B5C8B538BAE6A4A70D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:32:97:07:79:ca:4d:b7:74:cf:d4:8c:78:a0: 7b:aa:f1:8d:b2:9e:cb:7d:50:14:cb:a0:2c:c5:b1: a6:24:b2:ff:17:59:d5:87:0c:ab:23:26:26:14:61: 4a:ea:a6:36:6f:57:75:7d:89:fd:b3:59:1a:a5:00: 58:78:7b:28:9f:85:44:e0:55:60:12:c4:a8:9c:1c: 1e:e5:26:cd:24:e7:fd:8b:4a:b5:c0:09:57:4d:e0: 73:93:f7:30:8b:19:9f:91:e9:6f:e3:ab:4f:96:d4: 20:a2:98:8e:71:06:4e:0a:22:69:1c:23:1c:46:57: 32:97:0b:63:41:70:bc:00:45:ab:24:44:fa:16:35: 7b:0b:46:5f:3a:ca:1f:d5:f5:3d:91:17:5c:d3:82: 52:a4:a5:36:7e:a0:2a:4b:f5:cb:38:b1:d2:e9:bc: c3:00:04:8b:c2:57:d5:35:e7:6f:ac:bc:83:06:cb: fe:37:4f:b6:32:2e:c2:dd:42:e7:97:3d:03:e4:47: 8d:ec:c8:7b:2a:e8:b9:ef:86:10:98:52:05:96:a0: 70:f0:a8:4f:af:a2:b9:6b:80:8a:e1:0c:7f:32:e7: f7:89:f8:58:dd:c4:65:96:e5:08:7b:8f:cd:ee:cb: ee:97:d0:91:0f:7d:cd:06:9c:d5:c0:9e:f3:4a:02: cc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1E:77:29:5C:34:0B:00:AC:47:C6:B5:C8:B5:38:BA:E6:A4:A7:0D X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3136362e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.166.0/23 Signature Algorithm: sha256WithRSAEncryption 32:e9:e3:09:0d:d6:8a:90:cd:a8:53:f9:16:d9:af:62:9b:70: 7b:df:be:77:a3:55:2f:07:f6:68:57:c8:46:5d:35:cd:3a:47: b0:ae:39:6f:03:8d:5f:27:65:8f:31:ca:21:1d:c4:29:58:3c: 4a:f4:a3:e0:91:76:d4:16:4b:aa:55:9b:f6:72:4c:1b:06:d4: 2f:d2:34:7e:e2:03:5b:ef:a7:1f:80:df:14:93:2e:f9:60:40: 3a:0a:3a:14:5b:ae:d5:7f:3a:24:80:d0:6b:9c:87:af:d0:66: e7:c0:8f:e7:1b:b8:18:a3:45:93:34:dc:1a:bd:fb:0b:3e:43: cd:f6:4f:fa:14:b0:49:d5:50:b3:92:98:27:c9:88:32:7c:f1: 65:fe:4d:b5:2f:c3:1b:e2:2c:5a:d8:0d:5c:58:2e:fd:90:32: 54:b6:62:54:84:64:f9:72:50:98:ae:7a:dd:37:93:37:d6:54: 1b:a6:3b:4e:01:e9:6c:2b:b8:e8:2b:41:f1:c1:49:95:85:32: bc:0e:a7:fe:5b:11:e1:f7:83:e8:58:88:ed:68:5e:1a:08:4f: 06:04:f4:df:dc:c8:af:46:48:8c:8c:7b:a1:e9:ee:9c:e6:8c: c6:75:cc:81:51:19:06:72:bc:da:9c:77:fd:60:5d:fc:65:b9: d5:56:9e:af -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUaskZRiJarA0Q80ARVopCFR36MsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MThaFw0yNjExMjcxMTQ5MThaMDMxMTAvBgNV BAMTKEREMUU3NzI5NUMzNDBCMDBBQzQ3QzZCNUM4QjUzOEJBRTZBNEE3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMMpcHecpNt3TP1Ix4oHuq8Y2y nst9UBTLoCzFsaYksv8XWdWHDKsjJiYUYUrqpjZvV3V9if2zWRqlAFh4eyifhUTg VWASxKicHB7lJs0k5/2LSrXACVdN4HOT9zCLGZ+R6W/jq0+W1CCimI5xBk4KImkc IxxGVzKXC2NBcLwARaskRPoWNXsLRl86yh/V9T2RF1zTglKkpTZ+oCpL9cs4sdLp vMMABIvCV9U152+svIMGy/43T7YyLsLdQueXPQPkR43syHsq6LnvhhCYUgWWoHDw qE+vorlrgIrhDH8y5/eJ+FjdxGWW5Qh7j83uy+6X0JEPfc0GnNXAnvNKAsyLAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU3R53KVw0CwCsR8a1yLU4uuakpw0wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM1Mzky ZTMxMzYzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHCO6YwDQYJKoZIhvcNAQELBQADggEBADLp4wkN1oqQzahT+RbZr2KbcHvf vnejVS8H9mhXyEZdNc06R7CuOW8DjV8nZY8xyiEdxClYPEr0o+CRdtQWS6pVm/Zy TBsG1C/SNH7iA1vvpx+A3xSTLvlgQDoKOhRbrtV/OiSA0Guch6/QZufAj+cbuBij RZM03Bq9+ws+Q832T/oUsEnVULOSmCfJiDJ88WX+TbUvwxviLFrYDVxYLv2QMlS2 YlSEZPlyUJiuet03kzfWVBumO04B6WwruOgrQfHBSZWFMrwOp/5bEeH3g+hYiO1o XhoITwYE9N/cyK9GSIyMe6Hp7pzmjMZ1zIFRGQZyvNqcd/1gXfxludVWnq8= -----END CERTIFICATE-----Generated at Fri Dec 5 19:00:27 2025 by rpki-client