This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e3131372e302f32342d3234203d3e20313431303339.roa File: 3139322e3134352e3131372e302f32342d3234203d3e20313431303339.roa (raw, json) Hash identifier: P+28qD7gcvnOlg1j9SKXbn8A2nTk6GHGjJz15urERbs= Subject key identifier: BC:45:C6:FA:92:8C:16:53:C3:9E:44:82:6C:D7:E2:89:32:94:3B:37 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 36D4E35F563EE351C8EC4D926D9D4C27AB1C3DAE Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e3131372e302f32342d3234203d3e20313431303339.roa Signing time: Fri 28 Nov 2025 11:49:29 +0000 ROA not before: Fri 28 Nov 2025 11:44:29 +0000 ROA not after: Fri 27 Nov 2026 11:49:29 +0000 asID: 141039 IP address blocks: 192.145.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d4:e3:5f:56:3e:e3:51:c8:ec:4d:92:6d:9d:4c:27:ab:1c:3d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:29 2025 GMT Not After : Nov 27 11:49:29 2026 GMT Subject: CN=BC45C6FA928C1653C39E44826CD7E28932943B37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6d:e6:01:c8:c1:b4:64:3e:ab:64:4c:c0:a3: 0f:69:37:1b:0a:14:6b:a4:23:d7:58:e8:0c:5f:a0: bd:c8:34:e1:07:63:b0:39:95:6f:47:e1:99:93:97: ec:31:25:7d:b9:4c:7c:41:25:7d:27:6c:0f:e2:c4: cd:69:25:d6:00:57:bd:30:30:e7:83:06:da:ab:14: 0e:ed:79:93:fe:7c:3d:b2:7e:52:d2:6f:36:0c:b7: db:3d:54:6a:e6:fe:93:43:a6:2a:63:92:03:70:c1: ce:e8:8b:45:6c:60:5d:42:5b:29:1d:ce:6c:35:09: 85:d7:9c:f8:ec:ed:84:33:71:fc:5b:6e:28:87:9b: 38:b3:0a:ab:10:0b:00:93:18:9e:c0:e2:1c:cc:21: 32:82:7b:04:54:0f:3f:37:22:f0:9e:77:4e:c5:0b: 4b:df:91:6f:3f:fe:1a:e3:33:16:d1:89:c9:b8:c7: fa:b6:4d:1d:6a:fd:51:e9:bd:1b:b0:17:31:6e:91: 20:d0:21:9b:20:6e:33:86:da:9d:9e:78:45:9b:22: 51:9f:16:9e:41:9a:1a:ef:19:cd:30:cd:e1:de:cb: 75:67:6c:29:81:fb:5b:3a:cf:63:c7:88:65:2a:af: 07:58:45:88:67:03:4a:b6:b8:fd:a7:08:a6:ef:34: 64:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:45:C6:FA:92:8C:16:53:C3:9E:44:82:6C:D7:E2:89:32:94:3B:37 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e3131372e302f32342d3234203d3e20313431303339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.145.117.0/24 Signature Algorithm: sha256WithRSAEncryption 75:9c:68:14:2e:25:3f:fd:f2:9c:04:17:cd:5d:1e:26:73:e5: fa:29:f0:65:0a:6d:4d:15:0e:fe:1b:df:31:b4:22:86:4a:65: 78:e0:94:b3:cf:82:24:f5:46:78:82:55:ed:ca:c8:cf:5d:0d: 6f:42:d7:e3:51:ee:52:1c:5a:f8:15:f7:9b:f7:42:25:98:01: 76:9e:59:55:e4:d9:8d:4e:1c:11:59:8a:f8:80:1c:af:3a:90: d8:92:6c:cb:b5:2c:88:f9:d9:58:82:a7:7b:87:53:68:99:db: 01:2e:c8:23:58:ad:fd:8a:5c:1c:61:79:c7:3f:44:86:6a:2a: ff:52:5a:fc:81:ff:4e:2e:82:66:a0:21:3e:24:b5:2e:8e:19: 1e:6e:49:86:67:d0:2e:5d:4a:b0:41:dc:28:d8:75:13:ab:79: 96:93:1e:68:02:2a:d1:c6:50:df:11:a9:c3:d3:69:ff:1c:1b: df:24:62:60:3a:63:e0:07:fe:a9:d9:76:e2:73:dd:ab:7d:e1: c0:bf:59:4d:ca:1f:4d:e2:49:9c:86:f0:08:6c:f0:7a:8a:2e: be:8f:92:58:7c:ea:c5:e2:15:eb:20:75:26:20:6d:b8:eb:8b: 18:d9:16:07:b2:03:96:fc:22:66:53:83:9e:ce:e6:79:dd:53: fb:a7:d3:62 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUNtTjX1Y+41HI7E2SbZ1MJ6scPa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjlaFw0yNjExMjcxMTQ5MjlaMDMxMTAvBgNV BAMTKEJDNDVDNkZBOTI4QzE2NTNDMzlFNDQ4MjZDRDdFMjg5MzI5NDNCMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXbeYByMG0ZD6rZEzAow9pNxsK FGukI9dY6AxfoL3INOEHY7A5lW9H4ZmTl+wxJX25THxBJX0nbA/ixM1pJdYAV70w MOeDBtqrFA7teZP+fD2yflLSbzYMt9s9VGrm/pNDpipjkgNwwc7oi0VsYF1CWykd zmw1CYXXnPjs7YQzcfxbbiiHmzizCqsQCwCTGJ7A4hzMITKCewRUDz83IvCed07F C0vfkW8//hrjMxbRicm4x/q2TR1q/VHpvRuwFzFukSDQIZsgbjOG2p2eeEWbIlGf Fp5BmhrvGc0wzeHey3VnbCmB+1s6z2PHiGUqrwdYRYhnA0q2uP2nCKbvNGSNAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUvEXG+pKMFlPDnkSCbNfiiTKUOzcwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzIyZTMxMzQz NTJlMzEzMTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzMzM5LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwJF1MA0GCSqGSIb3DQEBCwUAA4IBAQB1nGgULiU//fKcBBfNXR4m c+X6KfBlCm1NFQ7+G98xtCKGSmV44JSzz4Ik9UZ4glXtysjPXQ1vQtfjUe5SHFr4 Ffeb90IlmAF2nllV5NmNThwRWYr4gByvOpDYkmzLtSyI+dlYgqd7h1NomdsBLsgj WK39ilwcYXnHP0SGair/Ulr8gf9OLoJmoCE+JLUujhkebkmGZ9AuXUqwQdwo2HUT q3mWkx5oAirRxlDfEanD02n/HBvfJGJgOmPgB/6p2Xbic92rfeHAv1lNyh9N4kmc hvAIbPB6ii6+j5JYfOrF4hXrIHUmIG2464sY2RYHsgOW/CJmU4OezuZ53VP7p9Ni -----END CERTIFICATE-----Generated at Sat Dec 6 13:42:06 2025 by rpki-client