This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e33362e302f32342d3234203d3e20313336373837.roa File: 3139322e3134352e33362e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: NJmS4X+Gk4OBuLRs3gdAFQ9xU7fB0OiLjM856TU8Cn8= Subject key identifier: 4B:0C:37:29:B0:CB:8D:DD:E8:5D:7B:AB:89:68:D5:87:68:ED:2C:8A Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 217AB9D396DE2C2E2C1C1AB227FCA23880515CEF Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e33362e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:04 +0000 ROA not before: Fri 21 Nov 2025 15:44:04 +0000 ROA not after: Fri 20 Nov 2026 15:49:04 +0000 asID: 136787 IP address blocks: 192.145.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:7a:b9:d3:96:de:2c:2e:2c:1c:1a:b2:27:fc:a2:38:80:51:5c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:04 2025 GMT Not After : Nov 20 15:49:04 2026 GMT Subject: CN=4B0C3729B0CB8DDDE85D7BAB8968D58768ED2C8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6a:82:bc:b0:ac:d3:18:7b:6a:da:fb:0a:57: 6f:01:18:a2:66:00:b7:63:4b:1d:f8:44:41:a9:26: a8:a0:a1:74:e7:a6:74:57:cc:47:9c:3e:98:bf:90: fa:40:00:6e:ec:ac:05:3e:32:6a:12:08:e9:54:a2: c6:50:a6:cf:33:d9:a0:ef:1b:ae:b5:7a:0b:30:b9: c7:6c:76:de:59:9f:aa:7f:1c:26:c1:b6:42:be:25: 2f:1f:98:d7:90:39:83:22:c2:75:c8:7a:15:b6:e1: 2a:d7:28:93:44:01:86:d3:bf:54:a9:20:d4:40:de: 10:f7:02:4d:dd:d4:a4:81:29:c0:52:a5:56:f9:3a: 62:d5:34:9e:39:ec:24:af:a2:60:d2:52:25:fe:26: 4d:bf:32:11:7a:1f:e7:d4:db:4e:f2:3f:da:08:ba: 6f:2b:ca:eb:6b:8f:78:9d:b3:7c:ea:29:12:28:7a: 72:cb:37:8e:a1:4d:bd:e0:f8:b1:d8:e1:c7:be:e0: bc:0e:52:ea:5e:5f:b5:3e:31:01:25:89:61:26:da: 9c:14:d5:b1:56:15:7b:66:ae:df:56:50:3b:f4:b6: 87:9c:c7:7a:9f:23:8d:a4:40:0a:bf:29:8b:3e:8f: 5d:c0:42:db:a8:d4:3f:48:61:5a:b5:b1:6b:f7:55: a3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0C:37:29:B0:CB:8D:DD:E8:5D:7B:AB:89:68:D5:87:68:ED:2C:8A X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e33362e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.145.36.0/24 Signature Algorithm: sha256WithRSAEncryption ac:61:9d:9e:cf:6e:d1:22:d0:6d:83:94:11:b4:b5:8a:80:c4: de:ba:c2:f4:23:4a:56:92:e4:3f:e4:84:69:da:fd:27:d4:a3: 12:81:62:02:73:18:4d:f4:71:42:5e:93:b3:fa:cf:c4:95:1b: 8f:fc:6b:be:2c:dd:2f:ae:de:79:a7:9d:f3:cc:41:65:cd:16: 72:f9:ea:ef:1e:ed:5f:60:7d:86:07:c4:36:b4:e7:66:0c:1d: e5:17:ef:6b:28:67:96:fa:de:32:99:95:e3:b2:57:f2:17:4c: 38:bd:d5:bd:56:fd:91:61:12:21:c4:83:20:1e:6a:cb:0c:c0: 4f:bd:fe:8c:ee:ef:96:20:44:9f:39:83:a4:08:eb:07:7b:df: 56:f6:88:44:c5:7e:ec:48:e7:cb:6c:89:b8:9a:47:bb:86:9b: e5:5e:a2:59:cc:db:31:6f:6b:eb:37:46:d2:ae:3a:30:90:10: 35:b5:e4:a9:f0:5a:eb:a3:bf:3e:d6:ce:49:05:83:d2:b4:66: 70:58:78:5c:3b:76:81:7e:51:b5:dd:64:48:15:82:f5:dc:48: 85:e7:2b:4d:e0:ac:71:d1:d2:04:08:13:e9:95:f1:ca:de:ab: db:0e:b7:5f:29:22:8b:91:52:cb:f7:2c:97:66:e5:0a:38:73: b1:7c:d1:77 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUIXq505beLC4sHBqyJ/yiOIBRXO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDRaFw0yNjExMjAxNTQ5MDRaMDMxMTAvBgNV BAMTKDRCMEMzNzI5QjBDQjhERERFODVEN0JBQjg5NjhENTg3NjhFRDJDOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbaoK8sKzTGHtq2vsKV28BGKJm ALdjSx34REGpJqigoXTnpnRXzEecPpi/kPpAAG7srAU+MmoSCOlUosZQps8z2aDv G661egswucdsdt5Zn6p/HCbBtkK+JS8fmNeQOYMiwnXIehW24SrXKJNEAYbTv1Sp INRA3hD3Ak3d1KSBKcBSpVb5OmLVNJ457CSvomDSUiX+Jk2/MhF6H+fU207yP9oI um8ryutrj3ids3zqKRIoenLLN46hTb3g+LHY4ce+4LwOUupeX7U+MQEliWEm2pwU 1bFWFXtmrt9WUDv0toecx3qfI42kQAq/KYs+j13AQtuo1D9IYVq1sWv3VaPlAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUSww3KbDLjd3oXXuriWjVh2jtLIowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzIyZTMxMzQz NTJlMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMCRJDANBgkqhkiG9w0BAQsFAAOCAQEArGGdns9u0SLQbYOUEbS1ioDE 3rrC9CNKVpLkP+SEadr9J9SjEoFiAnMYTfRxQl6Ts/rPxJUbj/xrvizdL67eeaed 88xBZc0Wcvnq7x7tX2B9hgfENrTnZgwd5RfvayhnlvreMpmV47JX8hdMOL3VvVb9 kWESIcSDIB5qywzAT73+jO7vliBEnzmDpAjrB3vfVvaIRMV+7Ejny2yJuJpHu4ab 5V6iWczbMW9r6zdG0q46MJAQNbXkqfBa66O/PtbOSQWD0rRmcFh4XDt2gX5Rtd1k SBWC9dxIhecrTeCscdHSBAgT6ZXxyt6r2w63Xykii5FSy/csl2blCjhzsXzRdw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:15 2025 by rpki-client