This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131332e302f32342d3332203d3e203430303231.roa File: 39342e3130312e3131332e302f32342d3332203d3e203430303231.roa (raw, json) Hash identifier: HYowudXqYA98Bj9ehronfZwnQlvqhMadkVzGGVoLdqw= Subject key identifier: 8E:01:87:C1:20:F6:44:EC:BC:61:89:4B:A9:D2:CF:A7:34:69:26:42 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0A548CE7FE701D14E9FB7E20FEE85E3182E0B15C Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131332e302f32342d3332203d3e203430303231.roa Signing time: Fri 21 Nov 2025 15:49:07 +0000 ROA not before: Fri 21 Nov 2025 15:44:07 +0000 ROA not after: Fri 20 Nov 2026 15:49:07 +0000 asID: 40021 IP address blocks: 94.101.113.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 02:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:54:8c:e7:fe:70:1d:14:e9:fb:7e:20:fe:e8:5e:31:82:e0:b1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:07 2025 GMT Not After : Nov 20 15:49:07 2026 GMT Subject: CN=8E0187C120F644ECBC61894BA9D2CFA734692642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:a8:29:89:6f:45:83:c8:ae:a4:cd:09:18: b4:ac:bf:17:9f:72:87:cf:94:e2:3b:7a:10:08:11: 93:e9:07:45:ac:76:f6:84:e1:f1:6a:a9:04:dd:db: 32:56:95:6d:68:2e:99:b0:28:cc:5d:e5:0e:60:d0: 9a:9d:0f:4e:49:ee:c0:b9:2f:1f:c4:83:69:dc:fd: 89:2f:c9:e5:e2:c9:e0:53:12:02:2a:2a:1b:33:4e: 34:70:41:21:dc:bc:e8:80:97:d0:38:3e:22:3b:58: 95:ac:c8:1b:2d:bf:b7:0b:de:68:10:f3:c6:18:d6: 44:64:d3:68:75:7e:21:35:0a:b6:74:0e:35:1e:1f: c9:04:94:68:bb:86:93:02:15:86:5e:6c:0e:dd:a5: 26:31:ff:27:1b:0c:29:2f:74:d2:2c:ff:54:9a:ed: c7:75:d3:93:6f:c9:07:18:e4:69:f4:97:c7:6b:1c: f3:a5:04:ac:da:ff:0e:25:e4:1e:bc:68:f1:8a:59: 19:0a:b1:01:bf:b9:22:d1:04:09:b1:e3:7e:bb:7d: 71:6d:3f:db:de:ee:18:ed:79:f1:1e:89:aa:61:ce: 32:98:7a:8c:48:08:c8:20:52:13:db:f6:72:af:0b: b6:c3:0a:c1:50:f7:f6:87:14:67:bf:2f:68:1a:7c: f3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:01:87:C1:20:F6:44:EC:BC:61:89:4B:A9:D2:CF:A7:34:69:26:42 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131332e302f32342d3332203d3e203430303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.101.113.0/24 Signature Algorithm: sha256WithRSAEncryption 93:31:43:ba:4d:21:3f:1b:e2:ca:cf:6c:23:88:b5:59:3e:38: 76:9f:8c:19:45:67:9e:e0:13:8c:5d:f3:34:5d:b2:19:38:a8: 08:7d:e2:cf:43:ad:41:6a:71:d6:6f:e6:8e:2c:76:3b:03:a0: 64:f5:a0:48:cb:22:bc:da:e4:69:78:03:f2:53:14:9d:8e:55: 43:c4:d7:f5:12:40:8b:cc:c2:3c:60:c2:d0:98:47:82:2d:3e: 43:90:7e:a1:7e:66:05:b6:be:59:39:b0:13:30:80:23:81:c5: a1:22:0e:60:a7:cb:48:35:2f:3f:01:d3:01:79:00:e6:db:40: f9:98:a6:7c:0e:7f:8a:9d:54:94:48:53:50:42:27:da:02:e1: 01:5b:2b:f9:b5:49:08:63:ac:c9:c5:d5:d2:46:9c:34:4b:b4: a2:a0:c6:08:93:3a:c9:eb:60:cf:2c:81:7c:d4:78:07:5e:d5: d4:27:d8:81:26:47:c0:32:f1:af:9a:11:9b:0c:fb:45:93:cd: 4e:f7:02:50:8e:f3:41:15:cf:dc:56:2d:42:80:29:12:ff:6b: 34:76:39:0d:f2:cc:50:26:34:e1:4e:07:98:f5:10:14:be:00: 67:89:cd:17:a9:56:46:b4:dd:53:fb:c1:af:51:4e:3e:73:cf: 40:70:77:1c -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUClSM5/5wHRTp+34g/uheMYLgsVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDdaFw0yNjExMjAxNTQ5MDdaMDMxMTAvBgNV BAMTKDhFMDE4N0MxMjBGNjQ0RUNCQzYxODk0QkE5RDJDRkE3MzQ2OTI2NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6EqgpiW9Fg8iupM0JGLSsvxef cofPlOI7ehAIEZPpB0WsdvaE4fFqqQTd2zJWlW1oLpmwKMxd5Q5g0JqdD05J7sC5 Lx/Eg2nc/YkvyeXiyeBTEgIqKhszTjRwQSHcvOiAl9A4PiI7WJWsyBstv7cL3mgQ 88YY1kRk02h1fiE1CrZ0DjUeH8kElGi7hpMCFYZebA7dpSYx/ycbDCkvdNIs/1Sa 7cd105NvyQcY5Gn0l8drHPOlBKza/w4l5B68aPGKWRkKsQG/uSLRBAmx4367fXFt P9ve7hjtefEeiaphzjKYeoxICMggUhPb9nKvC7bDCsFQ9/aHFGe/L2gafPOvAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUjgGHwSD2ROy8YYlLqdLPpzRpJkIwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTM0MmUzMTMwMzEy ZTMxMzEzMzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM0MzAzMDMyMzEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABeZXEwDQYJKoZIhvcNAQELBQADggEBAJMxQ7pNIT8b4srPbCOItVk+OHaf jBlFZ57gE4xd8zRdshk4qAh94s9DrUFqcdZv5o4sdjsDoGT1oEjLIrza5Gl4A/JT FJ2OVUPE1/USQIvMwjxgwtCYR4ItPkOQfqF+ZgW2vlk5sBMwgCOBxaEiDmCny0g1 Lz8B0wF5AObbQPmYpnwOf4qdVJRIU1BCJ9oC4QFbK/m1SQhjrMnF1dJGnDRLtKKg xgiTOsnrYM8sgXzUeAde1dQn2IEmR8Ay8a+aEZsM+0WTzU73AlCO80EVz9xWLUKA KRL/azR2OQ3yzFAmNOFOB5j1EBS+AGeJzRepVka03VP7wa9RTj5zz0Bwdxw= -----END CERTIFICATE-----Generated at Fri Dec 5 14:52:17 2025 by rpki-client