This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139352e36342e39392e302f32342d3234203d3e20313336373837.roa File: 3139352e36342e39392e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 5ykSUJ3jyHiHJRqYvi7kPf3VNgJlCCpBrluPDg2ggME= Subject key identifier: 66:D2:A5:69:46:AC:90:47:B2:D7:17:D2:0E:26:B9:3C:FD:B6:0B:25 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 78BEFCDDCF90CD4D739C1A01CF5422389BB061F3 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139352e36342e39392e302f32342d3234203d3e20313336373837.roa Signing time: Mon 01 Dec 2025 15:50:06 +0000 ROA not before: Mon 01 Dec 2025 15:45:06 +0000 ROA not after: Mon 30 Nov 2026 15:50:06 +0000 asID: 136787 IP address blocks: 195.64.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:be:fc:dd:cf:90:cd:4d:73:9c:1a:01:cf:54:22:38:9b:b0:61:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 1 15:45:06 2025 GMT Not After : Nov 30 15:50:06 2026 GMT Subject: CN=66D2A56946AC9047B2D717D20E26B93CFDB60B25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:18:59:9d:47:c3:d2:17:4c:10:aa:34:cb:6c: bf:5f:90:5c:bc:ab:f7:f5:a5:ac:ea:a3:d7:b5:e0: e7:c5:4a:16:65:69:1b:aa:59:59:b1:57:e8:9f:74: 08:9d:ce:a9:16:5d:aa:cb:7c:59:73:fa:29:43:90: 92:1a:79:b6:9a:57:a5:21:56:63:c3:fc:20:0e:9e: 5f:6b:64:a0:eb:a8:de:50:58:1d:cb:10:f5:48:ee: 3e:3f:2e:4c:c5:bf:48:ab:9c:5a:a0:27:2e:29:59: ca:48:33:49:f2:39:53:74:1e:9d:7f:ca:8e:d5:1b: 7c:0c:6e:af:dd:8d:78:e6:2f:92:e4:c5:ab:6c:db: f6:39:73:f2:a3:38:ff:3e:fa:57:e4:80:d5:ae:25: 90:bb:c4:57:bf:dd:eb:3b:a3:e1:5e:4b:9d:37:40: 47:7e:c4:d4:ed:92:38:52:68:d2:3b:f0:c6:d3:4d: ba:5a:c9:fd:45:04:a4:a2:14:e5:59:6e:b9:ce:d2: 4a:52:f3:81:aa:8e:4d:3e:b3:d6:9f:59:ed:8a:10: 13:83:22:4c:e2:2c:ee:8d:2a:10:e2:5d:b4:8e:0e: 9e:0b:87:e2:a3:fd:47:52:fa:a5:03:de:e6:aa:1e: dc:01:96:97:9b:43:16:9a:0d:e0:1c:04:ee:34:3b: 4a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D2:A5:69:46:AC:90:47:B2:D7:17:D2:0E:26:B9:3C:FD:B6:0B:25 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139352e36342e39392e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.64.99.0/24 Signature Algorithm: sha256WithRSAEncryption ae:98:b6:cf:44:b9:a8:79:41:93:e5:ae:a1:87:10:1b:75:1a: 5a:86:5a:86:4f:5e:a9:a6:7b:99:3f:34:e9:9f:7e:2a:64:b0: 7f:58:ee:d8:6e:34:60:30:53:64:d9:87:6e:7d:9c:3b:c1:8f: 64:d6:b4:37:b3:8e:67:35:12:6e:ff:15:57:62:b0:7e:5f:38: 3d:00:1a:2a:19:d8:66:9d:85:2d:36:c0:28:f3:8a:04:44:51: ea:bb:bd:c9:ac:dc:a5:61:ce:a1:51:f3:c6:f6:26:59:5a:9b: c6:9f:60:9f:74:8a:00:c6:f0:49:cf:c5:10:d6:0b:bf:3e:d5: a2:c2:28:b6:17:35:e6:e4:46:d2:6d:cc:57:c9:d4:d4:88:ba: eb:32:8e:d9:20:5b:63:44:8c:7c:ee:96:9e:a0:0d:0b:1c:c1: 69:91:11:5f:32:61:39:63:8f:a3:50:f1:37:ba:8e:77:fe:7b: 1e:72:47:6d:ad:74:88:a7:49:04:bf:7f:e6:0b:ad:f7:5f:d7: fe:8a:8e:be:10:c5:a4:00:1a:a3:d0:0d:5f:44:e7:7c:75:6e: d4:ea:0a:6d:27:a4:a0:3b:95:b8:59:cd:7b:e4:c7:a2:dd:a8: b3:cc:97:e5:9f:93:c2:1d:07:88:64:72:56:61:14:76:f5:d5: 03:02:c3:4e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUeL783c+QzU1znBoBz1QiOJuwYfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDExNTQ1MDZaFw0yNjExMzAxNTUwMDZaMDMxMTAvBgNV BAMTKDY2RDJBNTY5NDZBQzkwNDdCMkQ3MTdEMjBFMjZCOTNDRkRCNjBCMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxGFmdR8PSF0wQqjTLbL9fkFy8 q/f1pazqo9e14OfFShZlaRuqWVmxV+ifdAidzqkWXarLfFlz+ilDkJIaebaaV6Uh VmPD/CAOnl9rZKDrqN5QWB3LEPVI7j4/LkzFv0irnFqgJy4pWcpIM0nyOVN0Hp1/ yo7VG3wMbq/djXjmL5Lkxats2/Y5c/KjOP8++lfkgNWuJZC7xFe/3es7o+FeS503 QEd+xNTtkjhSaNI78MbTTbpayf1FBKSiFOVZbrnO0kpS84Gqjk0+s9afWe2KEBOD IkziLO6NKhDiXbSODp4Lh+Kj/UdS+qUD3uaqHtwBlpebQxaaDeAcBO40O0rFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUZtKlaUaskEey1xfSDia5PP22CyUwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzOTM1MmUzNjM0MmUzOTM5 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA w0BjMA0GCSqGSIb3DQEBCwUAA4IBAQCumLbPRLmoeUGT5a6hhxAbdRpahlqGT16p pnuZPzTpn34qZLB/WO7YbjRgMFNk2YdufZw7wY9k1rQ3s45nNRJu/xVXYrB+Xzg9 ABoqGdhmnYUtNsAo84oERFHqu73JrNylYc6hUfPG9iZZWpvGn2CfdIoAxvBJz8UQ 1gu/PtWiwii2FzXm5EbSbcxXydTUiLrrMo7ZIFtjRIx87paeoA0LHMFpkRFfMmE5 Y4+jUPE3uo53/nseckdtrXSIp0kEv3/mC633X9f+io6+EMWkABqj0A1fROd8dW7U 6gptJ6SgO5W4Wc175Mei3aizzJfln5PCHQeIZHJWYRR29dUDAsNO -----END CERTIFICATE-----Generated at Fri Dec 5 13:09:15 2025 by rpki-client