This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e35332e302f32342d3234203d3e203437353833.roa File: 3139342e33312e35332e302f32342d3234203d3e203437353833.roa (raw, json) Hash identifier: nNMnXLVAIR+4adSwv5OTUSHlPe7Q9AtNtXYLLLi2aQQ= Subject key identifier: 77:8E:12:68:E4:ED:D0:8E:DB:52:37:CA:B1:89:EC:97:87:A3:E6:32 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 091B66D6D19CA4F290120705C44F15D5FC8D9474 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e35332e302f32342d3234203d3e203437353833.roa Signing time: Mon 01 Dec 2025 15:50:02 +0000 ROA not before: Mon 01 Dec 2025 15:45:02 +0000 ROA not after: Mon 30 Nov 2026 15:50:02 +0000 asID: 47583 IP address blocks: 194.31.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:1b:66:d6:d1:9c:a4:f2:90:12:07:05:c4:4f:15:d5:fc:8d:94:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:02 2025 GMT Not After : Nov 30 15:50:02 2026 GMT Subject: CN=778E1268E4EDD08EDB5237CAB189EC9787A3E632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:aa:b4:2e:65:60:67:47:4c:38:44:c5:de:9c: 9f:ab:6b:82:c0:27:8e:78:72:53:af:cc:60:dd:de: a9:69:e5:89:c0:d1:cf:c1:6c:c9:c9:0f:5c:19:e1: 4e:b2:2e:f9:3d:00:2e:be:48:96:37:65:30:32:c4: 16:50:e5:96:74:f5:b3:a9:c2:55:1a:d0:94:8f:dc: 99:19:23:47:b9:82:25:a9:a5:5b:1d:17:16:7e:d2: 3f:7a:7d:47:5d:40:3c:84:95:82:9f:d9:68:ed:a3: 49:fb:5b:bd:bc:b4:f1:95:00:d3:56:bc:c3:ea:c3: a5:de:00:b4:68:bc:b2:e6:54:48:74:41:00:36:74: bd:26:ef:3a:8a:57:43:e2:54:c6:2a:37:cd:10:31: 09:b8:83:ae:b6:29:7f:5f:3a:bb:5d:c9:a3:02:48: 6d:d1:14:43:d2:36:b2:d2:3a:9b:03:e5:4c:28:77: 20:58:48:9d:c1:44:fb:92:6b:62:a8:ab:af:de:86: 6d:be:c1:25:16:74:f1:d6:24:30:82:a4:ce:fe:e6: 1d:7e:a0:66:6e:aa:cf:47:55:16:95:32:f7:7d:ab: c5:a9:80:08:6c:b8:76:3e:bb:4c:6d:a4:73:1d:13: 65:37:63:f9:ce:e1:62:6f:37:38:b4:98:f2:49:cf: bd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8E:12:68:E4:ED:D0:8E:DB:52:37:CA:B1:89:EC:97:87:A3:E6:32 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e35332e302f32342d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.53.0/24 Signature Algorithm: sha256WithRSAEncryption 59:e6:3f:e0:fe:1d:04:72:80:99:88:57:99:aa:28:1e:36:dd: b6:19:9b:7a:0a:d6:53:37:0e:63:5e:4c:d1:11:8c:5a:3f:0d: 3c:aa:92:04:f8:52:65:cd:22:73:c4:be:29:59:ea:b1:d8:63: cf:7e:fa:4d:46:ec:11:76:b1:9e:d1:ac:cd:fe:58:7a:37:f0: bb:aa:72:05:c8:4f:20:61:c3:e0:82:ff:5b:7f:21:f7:46:59: 31:e9:39:a7:4a:4c:66:e8:4d:36:a6:44:e4:7c:0d:65:e1:e5: 8e:10:96:8c:69:53:1b:48:f8:40:86:57:d4:d7:6a:c3:53:38: d5:0d:f1:4f:aa:4d:af:0e:35:b7:c4:d4:7f:98:ac:47:dc:24: ab:13:d5:1e:1e:e7:34:65:7b:49:cc:fa:b8:ac:83:3e:21:96: e0:ff:25:26:60:8e:d5:0c:53:e7:37:3f:4c:1e:50:57:39:65: 0a:4f:99:1b:ee:9a:34:f4:62:b3:a8:d0:93:57:e5:b0:be:87: d3:06:15:0c:67:b2:41:5e:b2:ec:e1:b4:ee:09:75:83:7a:b0: 78:e2:cb:e2:e1:8e:b7:ea:78:e1:89:59:76:d6:77:c1:b4:77: e7:2d:5c:d9:15:d3:4b:38:2c:33:27:71:f1:67:1e:81:b3:3f: bc:02:17:38 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUCRtm1tGcpPKQEgcFxE8V1fyNlHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDJaFw0yNjExMzAxNTUwMDJaMDMxMTAvBgNV BAMTKDc3OEUxMjY4RTRFREQwOEVEQjUyMzdDQUIxODlFQzk3ODdBM0U2MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNqrQuZWBnR0w4RMXenJ+ra4LA J454clOvzGDd3qlp5YnA0c/BbMnJD1wZ4U6yLvk9AC6+SJY3ZTAyxBZQ5ZZ09bOp wlUa0JSP3JkZI0e5giWppVsdFxZ+0j96fUddQDyElYKf2Wjto0n7W728tPGVANNW vMPqw6XeALRovLLmVEh0QQA2dL0m7zqKV0PiVMYqN80QMQm4g662KX9fOrtdyaMC SG3RFEPSNrLSOpsD5UwodyBYSJ3BRPuSa2Koq6/ehm2+wSUWdPHWJDCCpM7+5h1+ oGZuqs9HVRaVMvd9q8WpgAhsuHY+u0xtpHMdE2U3Y/nO4WJvNzi0mPJJz713AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUd44SaOTt0I7bUjfKsYnsl4ej5jIwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzOTM0MmUzMzMxMmUzNTMz MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIf NTANBgkqhkiG9w0BAQsFAAOCAQEAWeY/4P4dBHKAmYhXmaooHjbdthmbegrWUzcO Y15M0RGMWj8NPKqSBPhSZc0ic8S+KVnqsdhjz376TUbsEXaxntGszf5Yejfwu6py BchPIGHD4IL/W38h90ZZMek5p0pMZuhNNqZE5HwNZeHljhCWjGlTG0j4QIZX1Ndq w1M41Q3xT6pNrw41t8TUf5isR9wkqxPVHh7nNGV7Scz6uKyDPiGW4P8lJmCO1QxT 5zc/TB5QVzllCk+ZG+6aNPRis6jQk1flsL6H0wYVDGeyQV6y7OG07gl1g3qweOLL 4uGOt+p44YlZdtZ3wbR35y1c2RXTSzgsMydx8WcegbM/vAIXOA== -----END CERTIFICATE-----Generated at Fri Dec 5 13:08:15 2025 by rpki-client