This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e35352e302f32342d3234203d3e203437353833.roa File: 3139342e33312e35352e302f32342d3234203d3e203437353833.roa (raw, json) Hash identifier: Q1U+Bk8uA/BYj1egMXqclUrAbiXk42ISJo5eXoTCPsQ= Subject key identifier: 29:13:F5:07:76:7A:58:88:88:C7:30:16:C4:21:68:3F:ED:06:EB:8B Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 57439CEE240F68D8CA9B23126CED74908797707E Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e35352e302f32342d3234203d3e203437353833.roa Signing time: Mon 01 Dec 2025 15:50:10 +0000 ROA not before: Mon 01 Dec 2025 15:45:10 +0000 ROA not after: Mon 30 Nov 2026 15:50:10 +0000 asID: 47583 IP address blocks: 194.31.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:43:9c:ee:24:0f:68:d8:ca:9b:23:12:6c:ed:74:90:87:97:70:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:10 2025 GMT Not After : Nov 30 15:50:10 2026 GMT Subject: CN=2913F507767A588888C73016C421683FED06EB8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:98:c9:e0:56:b9:8a:bc:8b:f6:85:bf:23:d9: 7a:ec:9f:e7:da:a2:fd:6e:ff:df:41:f7:51:d1:b7: af:02:ae:f3:c9:c6:1a:fa:76:70:f6:73:63:08:17: 1b:e3:23:95:92:51:9e:07:c9:c7:f0:99:26:fd:1d: d3:74:ea:a6:31:3f:03:85:27:b7:69:19:b4:a5:51: 10:fd:f3:e9:17:cd:ec:a1:85:40:50:99:31:53:cf: 48:c1:05:8f:34:8d:26:cf:e5:29:ee:33:21:aa:f7: 4f:18:23:9a:52:bc:7f:fa:38:16:da:4e:af:56:a5: e0:ea:53:5a:9b:26:84:08:17:c8:7a:12:79:de:ef: ce:d0:f5:de:7e:8a:b5:0f:55:be:f4:65:a7:0f:53: 22:33:36:0a:da:58:7b:74:98:21:f4:a8:35:79:f9: a1:a2:f9:b0:f6:27:4c:dd:37:26:c0:59:73:58:05: 6b:e8:40:91:97:8d:7a:f7:c8:fd:08:15:9f:16:49: ae:6d:ff:72:c7:4d:53:bd:53:a6:6c:1d:63:df:8e: 48:c4:3a:c0:c1:26:51:6a:95:72:37:2a:45:96:d8: 86:f9:e0:33:de:ed:c3:05:78:80:25:69:57:81:dc: 1d:2f:70:5e:a7:0f:ff:2f:30:bd:a9:d7:04:dc:ad: cd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:13:F5:07:76:7A:58:88:88:C7:30:16:C4:21:68:3F:ED:06:EB:8B X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e35352e302f32342d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.55.0/24 Signature Algorithm: sha256WithRSAEncryption ae:92:0b:29:5f:5c:ee:60:ac:d3:ab:38:b3:3b:d1:8a:b4:95: 99:9f:24:5b:c5:bf:35:28:42:55:18:cf:f0:3d:b4:5d:3d:6b: 0a:ae:32:e4:d4:0f:d5:f7:a1:78:06:02:1a:d4:d2:ed:b6:3c: db:06:c7:86:ac:76:72:20:70:fa:de:2d:00:52:7a:13:eb:02: 19:89:b0:f4:63:23:22:96:3c:8a:17:11:28:a5:5b:1e:60:9e: 49:b9:b4:15:9a:f0:bc:68:9e:40:a5:22:80:be:79:be:0c:02: 79:17:01:27:85:4e:ce:b1:e8:1a:df:bc:61:e9:8d:d6:cc:04: 03:9b:ac:9f:de:5d:6b:bd:b3:92:af:87:31:7e:8c:55:20:8d: ec:65:41:7f:81:a8:02:9b:36:ba:20:aa:d5:2d:17:f3:41:73: 6e:23:b1:8a:e9:26:57:cb:d6:41:6c:7d:a2:4c:90:55:e0:3b: 7a:c7:0f:1c:e4:43:e1:e6:e5:e3:ff:03:d5:7a:84:91:6a:0d: 52:19:60:54:f4:57:e3:0d:6e:b8:dc:20:2d:2e:03:f6:82:4f: 30:9c:79:76:b4:78:56:c0:21:f8:fb:42:1b:c6:2c:e0:3b:5d: 7e:e3:d9:a4:13:1b:53:66:26:19:96:e6:8e:8c:75:6e:2c:9f: 8a:7c:2c:f8 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUV0Oc7iQPaNjKmyMSbO10kIeXcH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MTBaFw0yNjExMzAxNTUwMTBaMDMxMTAvBgNV BAMTKDI5MTNGNTA3NzY3QTU4ODg4OEM3MzAxNkM0MjE2ODNGRUQwNkVCOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcmMngVrmKvIv2hb8j2Xrsn+fa ov1u/99B91HRt68CrvPJxhr6dnD2c2MIFxvjI5WSUZ4HycfwmSb9HdN06qYxPwOF J7dpGbSlURD98+kXzeyhhUBQmTFTz0jBBY80jSbP5SnuMyGq908YI5pSvH/6OBba Tq9WpeDqU1qbJoQIF8h6Enne787Q9d5+irUPVb70ZacPUyIzNgraWHt0mCH0qDV5 +aGi+bD2J0zdNybAWXNYBWvoQJGXjXr3yP0IFZ8WSa5t/3LHTVO9U6ZsHWPfjkjE OsDBJlFqlXI3KkWW2Ib54DPe7cMFeIAlaVeB3B0vcF6nD/8vML2p1wTcrc2vAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUKRP1B3Z6WIiIxzAWxCFoP+0G64swHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzOTM0MmUzMzMxMmUzNTM1 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIf NzANBgkqhkiG9w0BAQsFAAOCAQEArpILKV9c7mCs06s4szvRirSVmZ8kW8W/NShC VRjP8D20XT1rCq4y5NQP1feheAYCGtTS7bY82wbHhqx2ciBw+t4tAFJ6E+sCGYmw 9GMjIpY8ihcRKKVbHmCeSbm0FZrwvGieQKUigL55vgwCeRcBJ4VOzrHoGt+8YemN 1swEA5usn95da72zkq+HMX6MVSCN7GVBf4GoAps2uiCq1S0X80FzbiOxiukmV8vW QWx9okyQVeA7escPHORD4ebl4/8D1XqEkWoNUhlgVPRX4w1uuNwgLS4D9oJPMJx5 drR4VsAh+PtCG8Ys4DtdfuPZpBMbU2YmGZbmjox1biyfinws+A== -----END CERTIFICATE-----Generated at Fri Dec 5 13:08:15 2025 by rpki-client