This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135352e302f32342d3234203d3e203631333137.roa File: 3139332e39332e3135352e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: RdGfaBpYCCfp81k6pKmFjT7ya4Kl3O1XqrztjszkC/I= Subject key identifier: B5:8C:39:28:36:51:72:5E:4A:07:0F:BA:06:16:BB:A8:59:79:67:0B Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Certificate serial: 3FDC32A861387D33ECF449D60768C940D55BCBD6 Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135352e302f32342d3234203d3e203631333137.roa Signing time: Sat 13 Sep 2025 18:55:07 +0000 ROA not before: Sat 13 Sep 2025 18:50:07 +0000 ROA not after: Sat 12 Sep 2026 18:55:07 +0000 asID: 61317 IP address blocks: 193.93.155.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 3f:dc:32:a8:61:38:7d:33:ec:f4:49:d6:07:68:c9:40:d5:5b:cb:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Validity Not Before: Sep 13 18:50:07 2025 GMT Not After : Sep 12 18:55:07 2026 GMT Subject: CN=B58C39283651725E4A070FBA0616BBA85979670B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:65:bb:94:53:7b:86:6c:81:43:dd:1f:70:0f: c7:c9:57:50:72:47:bf:7f:61:d1:f7:c7:cd:89:e6: e5:e1:4c:e5:d8:39:c3:75:23:2e:94:42:0b:74:e1: e6:f7:f3:09:22:c9:86:68:ea:6f:18:4a:25:98:c1: 80:c7:09:7a:93:79:1f:2e:3b:2f:14:4a:04:16:91: 46:63:28:a0:00:9f:f9:7c:30:55:63:47:04:15:23: d7:96:f1:ed:ad:24:d9:88:5e:6f:17:22:bf:66:1c: 33:72:f5:af:46:85:71:ac:7d:a3:1d:dd:71:ae:99: de:c9:07:14:a2:f2:6b:60:70:90:ab:7c:f9:1f:28: 45:b7:bf:62:3d:09:3a:97:60:79:3f:63:a8:72:39: 2e:b1:96:56:2a:b0:42:77:67:ba:6b:f1:ef:92:d5: de:2b:de:c4:21:70:7c:b6:53:a4:26:c8:18:72:0e: 3a:66:a9:d3:3f:af:f9:70:0c:59:b7:44:d4:60:cd: 46:b7:b7:f7:1e:ab:19:13:bc:85:c5:93:48:3e:2a: 27:ca:dc:0a:ae:f8:e8:25:d0:db:13:38:ca:79:07: 06:94:a1:cb:5c:4f:b7:c6:b7:c1:da:38:77:a7:94: ea:bf:31:55:d1:53:8d:c2:af:5c:b2:21:81:58:f1: 08:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8C:39:28:36:51:72:5E:4A:07:0F:BA:06:16:BB:A8:59:79:67:0B X509v3 Authority Key Identifier: keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135352e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.93.155.0/24 Signature Algorithm: sha256WithRSAEncryption d5:fc:48:5d:e3:6e:e9:1d:6c:7f:b3:11:2f:0f:d2:9e:1c:ed: de:8f:d4:26:df:bf:13:89:da:c9:93:3b:6f:c4:9a:44:ca:ef: e1:aa:b8:12:47:66:cb:05:fd:c9:90:21:3d:77:04:92:21:59: e7:ca:30:98:8c:d8:b2:92:ba:ed:54:b1:de:cc:65:ba:02:fa: 3a:e8:f5:05:4a:08:50:fc:48:76:4b:49:44:aa:d5:f2:9e:36: 5f:78:2a:1d:65:df:c3:24:36:b2:da:d3:05:dc:88:b1:b9:e1: ca:54:f5:9a:36:67:a9:db:a1:99:7f:be:b4:0d:06:8d:63:f1: c8:b5:fb:9a:f1:41:5f:89:b3:a6:6c:ef:eb:27:95:19:53:f6: 28:b6:95:7c:c5:85:02:4c:c7:08:93:f3:50:5a:d9:38:72:5c: af:af:a9:0d:d4:ec:45:8d:c4:1e:8b:16:86:9a:69:f3:cf:80: a7:07:66:82:2b:de:af:5e:15:fc:bd:0f:b4:d1:ce:30:a4:f3: f2:17:98:b9:ba:fb:4d:7b:35:88:38:8b:3f:53:bb:dd:f7:93: bf:06:5c:5e:3b:c7:86:34:84:37:19:06:3d:81:d0:1a:29:f4: e5:63:6b:d4:99:c2:45:6a:bc:e1:68:b6:81:6b:30:e1:43:b6: 8f:a1:fc:bb -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUP9wyqGE4fTPs9EnWB2jJQNVby9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx NjJlMWFhZDAeFw0yNTA5MTMxODUwMDdaFw0yNjA5MTIxODU1MDdaMDMxMTAvBgNV BAMTKEI1OEMzOTI4MzY1MTcyNUU0QTA3MEZCQTA2MTZCQkE4NTk3OTY3MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJZbuUU3uGbIFD3R9wD8fJV1By R79/YdH3x82J5uXhTOXYOcN1Iy6UQgt04eb38wkiyYZo6m8YSiWYwYDHCXqTeR8u Oy8USgQWkUZjKKAAn/l8MFVjRwQVI9eW8e2tJNmIXm8XIr9mHDNy9a9GhXGsfaMd 3XGumd7JBxSi8mtgcJCrfPkfKEW3v2I9CTqXYHk/Y6hyOS6xllYqsEJ3Z7pr8e+S 1d4r3sQhcHy2U6QmyBhyDjpmqdM/r/lwDFm3RNRgzUa3t/ceqxkTvIXFk0g+KifK 3Aqu+Ogl0NsTOMp5BwaUoctcT7fGt8HaOHenlOq/MVXRU43Cr1yyIYFY8QhFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUtYw5KDZRcl5KBw+6Bha7qFl5ZwswHwYDVR0j BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0 OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ dUdxMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQt M2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0OTEyLzAvMzEzOTMzMmUzOTMzMmUzMTM1 MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA wV2bMA0GCSqGSIb3DQEBCwUAA4IBAQDV/Ehd427pHWx/sxEvD9KeHO3ej9Qm378T idrJkztvxJpEyu/hqrgSR2bLBf3JkCE9dwSSIVnnyjCYjNiykrrtVLHezGW6Avo6 6PUFSghQ/Eh2S0lEqtXynjZfeCodZd/DJDay2tMF3IixueHKVPWaNmep26GZf760 DQaNY/HItfua8UFfibOmbO/rJ5UZU/YotpV8xYUCTMcIk/NQWtk4clyvr6kN1OxF jcQeixaGmmnzz4CnB2aCK96vXhX8vQ+00c4wpPPyF5i5uvtNezWIOIs/U7vd95O/ BlxeO8eGNIQ3GQY9gdAaKfTlY2vUmcJFarzhaLaBazDhQ7aPofy7 -----END CERTIFICATE-----Generated at Thu Dec 18 22:04:00 2025 by rpki-client