This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e3131392e302f32342d3234203d3e20313431303339.roa File: 3139322e3134352e3131392e302f32342d3234203d3e20313431303339.roa (raw, json) Hash identifier: vz/gV8RFNyB1wE2om1SKvMlInKjBgyM7g5nR3sybsIc= Subject key identifier: B5:46:F4:8E:AB:DA:4C:DE:B6:79:86:E5:65:C4:E0:FC:C1:7F:92:93 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 30D9EEED27852FB53D6450EC93D103042E47E7BF Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e3131392e302f32342d3234203d3e20313431303339.roa Signing time: Fri 28 Nov 2025 11:49:43 +0000 ROA not before: Fri 28 Nov 2025 11:44:43 +0000 ROA not after: Fri 27 Nov 2026 11:49:43 +0000 asID: 141039 IP address blocks: 192.145.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d9:ee:ed:27:85:2f:b5:3d:64:50:ec:93:d1:03:04:2e:47:e7:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:43 2025 GMT Not After : Nov 27 11:49:43 2026 GMT Subject: CN=B546F48EABDA4CDEB67986E565C4E0FCC17F9293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c7:65:a8:cd:18:f4:99:f2:71:78:72:5a:9c: 2a:e6:5d:01:33:af:5e:c2:6f:2e:2b:b0:6e:d3:38: 58:76:0f:56:51:df:00:2d:73:c9:f6:00:b5:40:8a: d2:d1:62:f1:86:ec:49:40:cc:8b:5b:88:3e:9c:96: 9f:e5:46:8d:f0:cb:37:93:6a:ef:25:30:a0:f3:e2: 34:be:ee:0a:bf:4e:31:a1:19:72:4d:90:f0:36:a3: be:40:ec:ed:cf:37:fb:23:99:06:5e:17:6e:d9:f8: c7:91:2f:5c:70:3c:22:f1:76:73:18:04:ba:d3:1a: 75:a2:14:76:41:2f:fc:3a:bf:ba:cb:24:4f:18:32: c0:81:9d:de:09:f9:2e:bc:9e:e2:ed:e6:e5:43:99: 0f:10:3e:22:a2:68:0a:9b:30:99:35:f3:70:4b:54: 3a:10:25:43:03:70:8c:2d:06:df:0b:33:ee:13:4d: 11:b7:c6:01:71:ee:8b:b2:7f:4c:a4:3e:9e:ca:fa: 1b:8b:16:33:c2:2e:07:1c:74:f6:77:48:8d:50:b3: cb:e4:b5:f1:7d:44:5f:14:c7:9a:08:7d:86:51:5e: e6:12:d7:a5:59:2e:11:6a:3c:6b:47:f2:0c:7a:a4: 5a:28:e2:fa:20:2b:a3:4d:97:2b:62:70:49:e7:9e: 4b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:46:F4:8E:AB:DA:4C:DE:B6:79:86:E5:65:C4:E0:FC:C1:7F:92:93 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e3131392e302f32342d3234203d3e20313431303339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.145.119.0/24 Signature Algorithm: sha256WithRSAEncryption 92:95:f1:6a:7b:5b:13:5c:a9:b6:3a:3e:33:b7:2b:4d:d9:46: 84:ef:53:81:73:a7:67:9c:1b:78:f1:84:1c:d5:63:9a:59:43: 56:62:df:3e:f2:3f:7e:5e:14:8d:b9:1f:6c:d6:6f:63:fa:74: 0f:6d:ca:bf:d4:e7:5c:5f:ad:03:0e:5f:18:c4:5a:12:48:ce: df:1b:06:7a:89:2f:a4:d2:dc:61:cb:e9:7b:13:ea:40:1f:15: 42:34:f7:03:63:6d:70:ca:84:84:d4:bb:78:90:7d:d6:79:cf: ea:27:3f:97:4e:61:33:eb:5f:5d:4c:68:be:bc:df:14:40:51: 90:c6:37:91:ff:ef:77:44:c6:e3:e8:6f:8c:0c:e0:f1:12:a5: 42:52:9f:70:5e:e3:ec:1f:e2:44:7a:db:63:3a:21:18:47:ae: fc:13:5b:c4:dc:11:9a:b8:cd:a2:7d:90:85:27:11:76:4b:12: 0f:df:23:3f:ac:87:7a:b5:3b:d9:eb:24:64:48:b2:c7:e8:3f: 8f:5b:44:47:05:32:66:48:41:76:87:ec:dd:bd:dc:09:0f:70: b9:e8:a0:f3:2c:0d:be:13:34:a2:28:95:76:91:90:af:5d:b0: 9b:94:15:b9:60:5f:2e:7b:66:62:a8:8e:99:86:9a:0d:8e:f9: d5:bb:33:79 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUMNnu7SeFL7U9ZFDsk9EDBC5H578wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDNaFw0yNjExMjcxMTQ5NDNaMDMxMTAvBgNV BAMTKEI1NDZGNDhFQUJEQTRDREVCNjc5ODZFNTY1QzRFMEZDQzE3RjkyOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCx2WozRj0mfJxeHJanCrmXQEz r17Cby4rsG7TOFh2D1ZR3wAtc8n2ALVAitLRYvGG7ElAzItbiD6clp/lRo3wyzeT au8lMKDz4jS+7gq/TjGhGXJNkPA2o75A7O3PN/sjmQZeF27Z+MeRL1xwPCLxdnMY BLrTGnWiFHZBL/w6v7rLJE8YMsCBnd4J+S68nuLt5uVDmQ8QPiKiaAqbMJk183BL VDoQJUMDcIwtBt8LM+4TTRG3xgFx7ouyf0ykPp7K+huLFjPCLgccdPZ3SI1Qs8vk tfF9RF8Ux5oIfYZRXuYS16VZLhFqPGtH8gx6pFoo4vogK6NNlyticEnnnksZAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUtUb0jqvaTN62eYblZcTg/MF/kpMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzIyZTMxMzQz NTJlMzEzMTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzMzM5LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwJF3MA0GCSqGSIb3DQEBCwUAA4IBAQCSlfFqe1sTXKm2Oj4ztytN 2UaE71OBc6dnnBt48YQc1WOaWUNWYt8+8j9+XhSNuR9s1m9j+nQPbcq/1OdcX60D Dl8YxFoSSM7fGwZ6iS+k0txhy+l7E+pAHxVCNPcDY21wyoSE1Lt4kH3Wec/qJz+X TmEz619dTGi+vN8UQFGQxjeR/+93RMbj6G+MDODxEqVCUp9wXuPsH+JEettjOiEY R678E1vE3BGauM2ifZCFJxF2SxIP3yM/rId6tTvZ6yRkSLLH6D+PW0RHBTJmSEF2 h+zdvdwJD3C56KDzLA2+EzSiKJV2kZCvXbCblBW5YF8ue2ZiqI6ZhpoNjvnVuzN5 -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:31 2025 by rpki-client