This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e3132322e302f32342d3234203d3e203632323430.roa File: 3139342e33352e3132322e302f32342d3234203d3e203632323430.roa (raw, json) Hash identifier: oGAomb3CxsnhZKfQyrYxEvOXT3EcjTouhRMHgJW9Mx0= Subject key identifier: 54:09:B4:65:F0:60:7C:9E:59:4A:BB:99:C1:6D:F2:68:5E:B3:22:F6 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 20316E9FD5B293ED51F0C545D299C46CAF82A7D8 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e3132322e302f32342d3234203d3e203632323430.roa Signing time: Fri 28 Nov 2025 11:49:16 +0000 ROA not before: Fri 28 Nov 2025 11:44:16 +0000 ROA not after: Fri 27 Nov 2026 11:49:16 +0000 asID: 62240 IP address blocks: 194.35.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:31:6e:9f:d5:b2:93:ed:51:f0:c5:45:d2:99:c4:6c:af:82:a7:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:16 2025 GMT Not After : Nov 27 11:49:16 2026 GMT Subject: CN=5409B465F0607C9E594ABB99C16DF2685EB322F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0f:b4:61:82:07:40:f9:a2:c5:a4:2b:08:48: 79:25:cd:5f:76:61:13:05:8f:19:2e:80:e4:02:a5: ce:fb:a3:84:56:ee:bb:f2:01:67:ce:c4:8c:36:95: 11:d3:cb:50:c0:54:35:47:fa:05:79:d0:a9:6a:c4: 49:3d:ed:12:48:79:53:7a:34:23:cf:77:92:91:55: 72:6a:e8:f1:84:2a:db:1e:8d:7d:aa:72:ad:de:67: 73:ec:3c:1f:9d:cd:cf:b4:9a:98:63:46:b7:01:f4: 66:27:e1:8c:6b:c0:c5:3f:58:09:d7:15:92:90:e4: d7:57:5b:63:43:95:af:e4:90:2e:89:88:90:23:37: bc:00:cf:04:25:69:88:96:7f:ee:69:66:a5:01:28: f7:f9:3f:76:94:7a:c5:29:14:41:9d:3e:5a:27:6b: 61:a8:d1:da:e8:bc:ff:e0:7e:2d:49:09:91:5e:81: 6e:1e:97:3d:12:03:86:b0:5a:06:83:50:46:42:a4: 9b:12:bf:db:9d:66:78:3f:09:27:d5:fa:d8:ce:e1: 89:1c:07:05:15:b9:ad:aa:66:bb:65:56:5a:2a:15: 6b:c8:17:1a:3b:7f:61:92:44:50:e3:8d:c7:3d:dd: 0d:7e:4e:c5:a2:c1:e2:45:35:bc:01:88:fa:b6:89: b7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:09:B4:65:F0:60:7C:9E:59:4A:BB:99:C1:6D:F2:68:5E:B3:22:F6 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e3132322e302f32342d3234203d3e203632323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.122.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:81:a8:5c:ca:f2:b6:33:1e:ed:21:a5:3b:db:7a:df:b6:be: 8f:19:ee:4a:3d:36:28:93:7d:15:e2:79:d4:e7:d0:94:d6:21: e7:41:17:60:ad:ac:96:1f:0b:b9:1d:d5:2b:64:fa:a7:42:f8: 73:65:d8:89:e4:c3:9e:66:21:86:9e:11:b7:ea:75:9b:be:3e: 9c:b6:d2:f3:9d:35:68:3b:67:d0:b2:e8:77:18:ce:91:65:14: 09:82:a9:65:f8:42:2e:15:d9:82:1c:15:d5:6b:1e:0f:2f:b2: 07:ae:ea:81:3b:f3:ab:98:56:0c:78:40:03:9a:ba:3c:57:a6: ef:97:80:c5:5f:88:04:17:e5:3e:d4:f6:c5:40:75:d2:24:cb: 1a:34:77:4b:02:e6:27:7c:2a:6b:48:88:57:b0:fa:10:ed:82: 6d:d7:96:b0:7c:aa:70:e1:6e:fd:fe:4e:b1:56:bd:fb:f0:91: f2:8d:f3:50:42:b4:e9:a6:72:45:1c:2d:49:52:f0:76:83:94: 67:07:27:98:9d:8f:8a:5b:da:79:15:42:66:c2:58:56:e1:ee: 0a:5d:bf:16:34:a3:88:df:a4:ab:11:19:cc:93:c7:94:c2:c7: ba:05:05:e1:20:45:eb:77:71:d7:aa:c4:12:86:9e:cf:0f:e6: 8b:e5:38:49 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUIDFun9Wyk+1R8MVF0pnEbK+Cp9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTZaFw0yNjExMjcxMTQ5MTZaMDMxMTAvBgNV BAMTKDU0MDlCNDY1RjA2MDdDOUU1OTRBQkI5OUMxNkRGMjY4NUVCMzIyRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGD7RhggdA+aLFpCsISHklzV92 YRMFjxkugOQCpc77o4RW7rvyAWfOxIw2lRHTy1DAVDVH+gV50KlqxEk97RJIeVN6 NCPPd5KRVXJq6PGEKtsejX2qcq3eZ3PsPB+dzc+0mphjRrcB9GYn4YxrwMU/WAnX FZKQ5NdXW2NDla/kkC6JiJAjN7wAzwQlaYiWf+5pZqUBKPf5P3aUesUpFEGdPlon a2Go0drovP/gfi1JCZFegW4elz0SA4awWgaDUEZCpJsSv9udZng/CSfV+tjO4Ykc BwUVua2qZrtlVloqFWvIFxo7f2GSRFDjjcc93Q1+TsWiweJFNbwBiPq2ibf/AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUVAm0ZfBgfJ5ZSruZwW3yaF6zIvYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMzMzUy ZTMxMzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzIzMjM0MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADCI3owDQYJKoZIhvcNAQELBQADggEBAHuBqFzK8rYzHu0hpTvbet+2vo8Z 7ko9NiiTfRXiedTn0JTWIedBF2CtrJYfC7kd1Stk+qdC+HNl2Inkw55mIYaeEbfq dZu+Ppy20vOdNWg7Z9Cy6HcYzpFlFAmCqWX4Qi4V2YIcFdVrHg8vsgeu6oE786uY Vgx4QAOaujxXpu+XgMVfiAQX5T7U9sVAddIkyxo0d0sC5id8KmtIiFew+hDtgm3X lrB8qnDhbv3+TrFWvfvwkfKN81BCtOmmckUcLUlS8HaDlGcHJ5idj4pb2nkVQmbC WFbh7gpdvxY0o4jfpKsRGcyTx5TCx7oFBeEgRet3cdeqxBKGns8P5ovlOEk= -----END CERTIFICATE-----Generated at Sat Dec 20 00:24:02 2025 by rpki-client