This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e3131382e302f32342d3234203d3e20313431303339.roa File: 3139322e3134352e3131382e302f32342d3234203d3e20313431303339.roa (raw, json) Hash identifier: rBqA7fomchZrEoTAkAcQlVtfJWKLh283oHpyyDFjHZI= Subject key identifier: BA:90:9D:5B:B2:FD:68:D4:36:37:24:9E:36:7D:4F:88:3E:FD:71:27 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4F5C09D6354FDBA8796EE44508D0F852FBC78087 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e3131382e302f32342d3234203d3e20313431303339.roa Signing time: Fri 28 Nov 2025 11:49:26 +0000 ROA not before: Fri 28 Nov 2025 11:44:26 +0000 ROA not after: Fri 27 Nov 2026 11:49:26 +0000 asID: 141039 IP address blocks: 192.145.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:5c:09:d6:35:4f:db:a8:79:6e:e4:45:08:d0:f8:52:fb:c7:80:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:26 2025 GMT Not After : Nov 27 11:49:26 2026 GMT Subject: CN=BA909D5BB2FD68D43637249E367D4F883EFD7127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7a:5e:c7:4b:d1:8b:5d:9a:9a:32:59:c9:35: 43:b5:d1:13:59:ff:e6:18:de:aa:0e:6f:b3:63:c7: a6:da:79:d7:9d:fb:92:6b:e8:e5:cf:28:6c:27:66: 78:7f:93:1c:58:0d:89:df:69:ad:79:17:62:e3:e8: e1:26:5a:b3:59:69:d4:15:c6:df:88:47:40:12:27: ec:b8:e9:d9:a6:53:b2:ec:7e:cf:69:cd:d8:c3:4a: f1:b1:1f:31:5d:b9:f0:32:ff:23:3b:1c:07:f7:7e: 6d:1d:6a:57:b6:c4:08:3b:b9:18:0a:25:7f:5d:77: 06:e3:61:db:9a:e9:31:d3:31:24:46:60:e3:62:ee: d4:0f:a2:26:02:85:50:fd:df:c2:4c:aa:84:49:91: f5:ef:e2:6a:b8:e2:af:09:7c:33:21:d6:95:da:d1: d5:81:1d:0b:db:ad:3c:86:43:70:67:15:2e:a0:ae: f3:b2:7e:70:76:9a:0b:43:dd:3f:25:69:0d:08:aa: f7:d7:b9:30:e1:01:5c:44:bc:ac:a6:c9:35:48:1b: a4:48:0e:38:79:1f:8f:f2:e8:bd:86:f1:97:dd:df: 23:2c:2b:f8:d1:3b:86:26:47:e5:b8:33:c3:fc:d2: b3:19:7d:2e:13:65:f9:29:9d:38:27:b2:17:1d:43: 43:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:90:9D:5B:B2:FD:68:D4:36:37:24:9E:36:7D:4F:88:3E:FD:71:27 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e3131382e302f32342d3234203d3e20313431303339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.145.118.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:6e:a7:6b:57:6a:6f:3a:fa:e5:60:29:b6:63:74:fb:8f:47: 9c:f6:b0:0b:40:dc:0a:90:fe:81:45:ac:fa:42:0a:1d:a3:c7: e3:93:11:f2:f9:fc:03:d6:8b:ca:ef:97:ba:8e:03:4c:7b:36: 5b:63:ea:3a:8f:87:ff:42:61:a0:89:b0:04:05:28:2d:35:7b: 80:0f:c4:82:b7:c0:02:28:2f:f0:05:b0:a9:bf:12:de:b0:e5: 8d:3f:be:b9:80:18:39:65:c6:38:ca:73:a3:30:9c:22:98:3b: b5:cc:15:b2:ff:a5:27:2b:41:14:91:80:bb:3f:62:c8:b6:4a: 6a:f8:43:e2:3d:55:44:ce:13:1b:f9:34:68:b9:ac:e0:e1:61: 1f:41:39:6e:84:6c:be:0d:5e:89:9e:01:ad:96:c5:68:46:2e: f5:bc:d7:d2:9e:c4:5c:54:da:a0:ca:ea:59:5f:44:9a:e5:83: ec:a1:e5:ee:d8:99:da:f4:45:05:f5:4c:d4:7b:9d:e9:b3:63: d9:01:79:18:a4:ee:49:7e:08:ba:f6:d9:78:15:16:9d:3d:0d: 38:d1:22:24:7f:78:78:d9:fc:dc:50:df:31:62:fc:f4:a8:53: d4:67:6f:b9:df:05:d1:06:2b:12:68:dc:a2:ad:f6:d6:b2:bc: 40:4c:d7:05 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUT1wJ1jVP26h5buRFCND4UvvHgIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjZaFw0yNjExMjcxMTQ5MjZaMDMxMTAvBgNV BAMTKEJBOTA5RDVCQjJGRDY4RDQzNjM3MjQ5RTM2N0Q0Rjg4M0VGRDcxMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuel7HS9GLXZqaMlnJNUO10RNZ /+YY3qoOb7Njx6baeded+5Jr6OXPKGwnZnh/kxxYDYnfaa15F2Lj6OEmWrNZadQV xt+IR0ASJ+y46dmmU7Lsfs9pzdjDSvGxHzFdufAy/yM7HAf3fm0dale2xAg7uRgK JX9ddwbjYdua6THTMSRGYONi7tQPoiYChVD938JMqoRJkfXv4mq44q8JfDMh1pXa 0dWBHQvbrTyGQ3BnFS6grvOyfnB2mgtD3T8laQ0IqvfXuTDhAVxEvKymyTVIG6RI Djh5H4/y6L2G8Zfd3yMsK/jRO4YmR+W4M8P80rMZfS4TZfkpnTgnshcdQ0MJAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUupCdW7L9aNQ2NySeNn1PiD79cScwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzIyZTMxMzQz NTJlMzEzMTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzMzM5LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwJF2MA0GCSqGSIb3DQEBCwUAA4IBAQCcbqdrV2pvOvrlYCm2Y3T7 j0ec9rALQNwKkP6BRaz6Qgodo8fjkxHy+fwD1ovK75e6jgNMezZbY+o6j4f/QmGg ibAEBSgtNXuAD8SCt8ACKC/wBbCpvxLesOWNP765gBg5ZcY4ynOjMJwimDu1zBWy /6UnK0EUkYC7P2LItkpq+EPiPVVEzhMb+TRouazg4WEfQTluhGy+DV6JngGtlsVo Ri71vNfSnsRcVNqgyupZX0Sa5YPsoeXu2Jna9EUF9UzUe53ps2PZAXkYpO5Jfgi6 9tl4FRadPQ040SIkf3h42fzcUN8xYvz0qFPUZ2+53wXRBisSaNyirfbWsrxATNcF -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:04 2025 by rpki-client