This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31392e302f32342d3332203d3e20313431393935.roa File: 3138352e3139332e31392e302f32342d3332203d3e20313431393935.roa (raw, json) Hash identifier: lVd/BX5EN6KEuL7QD7zhSGCygAMQYt+9URDnjctGwOU= Subject key identifier: AA:5F:1C:D6:5F:AE:85:30:EB:29:4D:6E:15:B3:99:C9:9C:FA:F4:78 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 22F05E45E6A1F4FBC9606BED79BCB5DFCC567156 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31392e302f32342d3332203d3e20313431393935.roa Signing time: Fri 21 Nov 2025 15:49:08 +0000 ROA not before: Fri 21 Nov 2025 15:44:08 +0000 ROA not after: Fri 20 Nov 2026 15:49:08 +0000 asID: 141995 IP address blocks: 185.193.19.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f0:5e:45:e6:a1:f4:fb:c9:60:6b:ed:79:bc:b5:df:cc:56:71:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:08 2025 GMT Not After : Nov 20 15:49:08 2026 GMT Subject: CN=AA5F1CD65FAE8530EB294D6E15B399C99CFAF478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7e:70:9e:0f:66:59:b8:d8:09:b5:b2:70:9a: dc:b7:9b:cb:33:41:f1:e3:24:ff:c5:36:b2:52:61: 84:f3:67:a3:83:16:11:6d:27:bc:23:ec:fa:ff:9e: 7a:46:8c:08:3f:a2:f7:fc:c0:8d:a7:7b:ce:8b:76: bc:48:cb:65:89:2b:81:7c:2e:1d:6d:32:4e:52:0d: 08:3a:73:a2:fc:e0:7b:a2:43:ab:71:89:a1:31:5d: f2:17:75:6d:bf:84:f6:bb:05:80:71:1c:04:96:86: 3b:9c:b0:68:13:b4:c6:54:ba:40:5c:67:30:49:9d: 81:da:29:33:ea:fc:72:a6:6a:d0:66:3d:ef:f3:6e: 14:ed:5d:d8:18:f5:08:f8:0f:07:47:e1:c9:cc:96: da:39:fe:28:e8:6d:aa:a7:98:9d:89:3d:ed:f3:bc: 0b:9b:95:47:62:53:ac:ca:9c:cf:6e:3d:b8:b6:4e: 55:dc:67:23:8f:37:a0:d4:3f:7f:a5:4a:c5:85:75: 2a:89:2f:f8:f2:99:43:39:36:48:87:92:f0:97:62: 18:fd:7f:1f:2b:fc:68:dc:79:03:31:30:0b:ef:f3: 87:88:04:71:24:e7:0a:a2:b1:03:b6:38:2c:5a:b7: 7b:ec:80:e5:7e:48:0d:42:fa:4a:62:62:52:0f:b7: 6f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5F:1C:D6:5F:AE:85:30:EB:29:4D:6E:15:B3:99:C9:9C:FA:F4:78 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31392e302f32342d3332203d3e20313431393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.193.19.0/24 Signature Algorithm: sha256WithRSAEncryption 42:76:1c:ee:55:c5:f9:f0:ef:e8:23:3a:45:1b:1f:2e:7c:fb: 57:66:52:e5:c9:a1:e7:14:53:4b:c0:00:1f:4b:90:0f:4b:22: 09:e4:12:11:fe:19:57:a9:82:63:9f:cf:9a:99:fd:77:33:ed: 5a:d4:cc:fc:92:f1:f2:3f:70:67:04:db:3c:c3:50:31:e3:d2: f9:86:5f:44:8f:43:47:61:22:f6:f7:cb:be:69:29:e8:51:4d: 6f:ba:3f:b2:4e:4f:c5:1b:3f:04:a4:5e:42:91:45:ec:2a:07: bd:da:a1:11:ad:50:9b:bf:db:5d:68:be:23:4c:76:c6:67:e1: 4f:58:50:01:c1:3e:4f:5a:0f:24:74:c1:3c:38:4e:2e:46:6d: ec:6e:3a:82:ad:10:23:46:06:a4:12:7a:5c:cc:79:2e:9f:44: e1:cc:69:99:13:d5:81:cf:a8:9f:50:6a:35:77:2a:46:6d:fe: c0:73:5b:f2:67:fb:9f:38:79:2e:9d:b8:6e:ad:0a:71:ce:48: d2:a8:8c:0c:4f:46:79:b2:c2:21:8f:60:9a:b1:d4:0f:44:4d: b6:76:a0:74:55:b9:10:88:23:ba:db:15:ba:26:47:9d:96:8d: a6:8c:76:40:73:81:41:ae:1c:c0:f0:7e:13:9c:4e:ae:68:a2: dd:c7:82:1a -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUIvBeReah9PvJYGvteby138xWcVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDhaFw0yNjExMjAxNTQ5MDhaMDMxMTAvBgNV BAMTKEFBNUYxQ0Q2NUZBRTg1MzBFQjI5NEQ2RTE1QjM5OUM5OUNGQUY0NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfnCeD2ZZuNgJtbJwmty3m8sz QfHjJP/FNrJSYYTzZ6ODFhFtJ7wj7Pr/nnpGjAg/ovf8wI2ne86LdrxIy2WJK4F8 Lh1tMk5SDQg6c6L84HuiQ6txiaExXfIXdW2/hPa7BYBxHASWhjucsGgTtMZUukBc ZzBJnYHaKTPq/HKmatBmPe/zbhTtXdgY9Qj4DwdH4cnMlto5/ijobaqnmJ2JPe3z vAublUdiU6zKnM9uPbi2TlXcZyOPN6DUP3+lSsWFdSqJL/jymUM5NkiHkvCXYhj9 fx8r/GjceQMxMAvv84eIBHEk5wqisQO2OCxat3vsgOV+SA1C+kpiYlIPt2+/AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUql8c1l+uhTDrKU1uFbOZyZz69HgwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzkz MzJlMzEzOTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzQzMTM5MzkzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALnBEzANBgkqhkiG9w0BAQsFAAOCAQEAQnYc7lXF+fDv6CM6RRsfLnz7 V2ZS5cmh5xRTS8AAH0uQD0siCeQSEf4ZV6mCY5/Pmpn9dzPtWtTM/JLx8j9wZwTb PMNQMePS+YZfRI9DR2Ei9vfLvmkp6FFNb7o/sk5PxRs/BKReQpFF7CoHvdqhEa1Q m7/bXWi+I0x2xmfhT1hQAcE+T1oPJHTBPDhOLkZt7G46gq0QI0YGpBJ6XMx5Lp9E 4cxpmRPVgc+on1BqNXcqRm3+wHNb8mf7nzh5Lp24bq0Kcc5I0qiMDE9GebLCIY9g mrHUD0RNtnagdFW5EIgjutsVuiZHnZaNpox2QHOBQa4cwPB+E5xOrmii3ceCGg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:33:11 2025 by rpki-client