This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e33382e302f32342d3234203d3e20313336373837.roa File: 3139322e3134352e33382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 60K6spa/ESNEvWbpGIjVRX1/k7QeU85r5t05BmYUC5s= Subject key identifier: 53:F5:91:BF:CE:86:CD:BC:C0:4C:FE:7A:0B:BF:EF:6E:25:50:73:9A Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 795E6CC97C5DDE7CCC86A225460319230DA449C3 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e33382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:08 +0000 ROA not before: Fri 21 Nov 2025 15:44:08 +0000 ROA not after: Fri 20 Nov 2026 15:49:08 +0000 asID: 136787 IP address blocks: 192.145.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:5e:6c:c9:7c:5d:de:7c:cc:86:a2:25:46:03:19:23:0d:a4:49:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:08 2025 GMT Not After : Nov 20 15:49:08 2026 GMT Subject: CN=53F591BFCE86CDBCC04CFE7A0BBFEF6E2550739A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9f:66:de:58:31:8f:53:90:f4:7f:cf:dc:6a: f5:5e:0e:61:e2:26:a8:dd:96:25:79:df:9b:77:f6: cc:8b:42:d7:4f:72:ca:e9:6a:0a:f7:ce:04:0d:49: 24:db:dc:ab:64:af:0b:58:7e:e0:18:f2:58:19:de: 40:f0:fb:c9:5b:24:d4:1a:68:ff:8a:9b:60:9f:25: 27:bc:dc:dd:3e:a4:95:34:91:bd:4a:9c:7f:ea:b2: 0d:f0:fb:b2:a3:43:d3:aa:2f:f6:4c:31:0f:e2:ac: 30:27:59:33:92:9e:95:20:41:59:8a:3f:82:75:9c: 2d:f0:7c:11:6c:bf:61:5c:cd:9a:69:54:39:1e:b1: 42:d1:42:68:53:ba:89:55:23:69:38:ae:06:d6:e9: 55:f1:ff:c1:9a:89:71:20:e3:db:2b:6a:a1:a6:02: 26:71:3d:b2:1a:b1:a9:e1:98:a4:a1:ba:47:0c:0c: bd:bc:7c:65:ae:72:c7:d4:6d:17:00:51:0f:b1:fb: 78:f5:5c:29:d5:a9:f8:92:d7:1a:be:df:8d:92:4c: 56:61:57:6f:ac:34:dd:dc:ba:64:ff:24:0c:8c:0e: 06:3a:36:80:f6:b1:e1:20:08:d2:8e:bf:13:90:7b: 50:d9:f6:3d:85:9b:1c:d3:b8:0b:bd:6b:29:0d:ed: fa:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F5:91:BF:CE:86:CD:BC:C0:4C:FE:7A:0B:BF:EF:6E:25:50:73:9A X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e33382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.145.38.0/24 Signature Algorithm: sha256WithRSAEncryption b2:74:a5:8c:ba:9c:08:83:93:cd:dc:07:c7:5a:40:ab:4e:99: 82:f7:9d:2d:6c:af:d3:7c:2e:6a:9b:5b:10:80:ee:82:cf:2a: 73:dc:06:a8:6c:cd:9d:da:fd:46:ee:67:db:ea:57:bd:73:29: 3d:89:0a:64:cc:22:99:2f:8f:f1:db:9b:9a:47:00:7c:b8:e0: f9:b4:5e:91:12:0e:e3:df:23:3c:97:8d:16:63:ae:50:32:f2: 26:3f:aa:d5:4b:65:7f:01:e9:1f:af:d9:bf:02:97:26:a5:6e: 7d:c4:dc:b2:25:81:0c:65:6f:71:97:4c:81:c9:74:a3:73:a6: 8f:d1:d7:db:7c:33:a6:e5:d6:08:49:39:7e:34:fe:48:46:b0: 73:82:f8:2b:42:86:f9:14:74:2c:77:ec:30:21:9d:b5:4f:41: 62:1b:34:07:17:2b:17:bb:21:78:44:b7:89:4c:86:cb:81:59: 98:0c:35:21:f8:7a:9a:43:ec:03:58:e6:b8:20:97:15:d0:aa: 92:33:08:59:91:fd:1a:c3:ce:39:c1:82:c4:61:b1:97:b3:15: 48:40:74:e3:d6:c6:7b:a7:2a:3d:a1:b5:0e:72:c3:a7:70:ee: c0:57:9e:af:3c:76:f2:8e:10:85:be:31:2d:51:36:ea:cb:71: 6e:01:74:20 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUeV5syXxd3nzMhqIlRgMZIw2kScMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDhaFw0yNjExMjAxNTQ5MDhaMDMxMTAvBgNV BAMTKDUzRjU5MUJGQ0U4NkNEQkNDMDRDRkU3QTBCQkZFRjZFMjU1MDczOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBn2beWDGPU5D0f8/cavVeDmHi JqjdliV535t39syLQtdPcsrpagr3zgQNSSTb3KtkrwtYfuAY8lgZ3kDw+8lbJNQa aP+Km2CfJSe83N0+pJU0kb1KnH/qsg3w+7KjQ9OqL/ZMMQ/irDAnWTOSnpUgQVmK P4J1nC3wfBFsv2FczZppVDkesULRQmhTuolVI2k4rgbW6VXx/8GaiXEg49sraqGm AiZxPbIasanhmKShukcMDL28fGWucsfUbRcAUQ+x+3j1XCnVqfiS1xq+342STFZh V2+sNN3cumT/JAyMDgY6NoD2seEgCNKOvxOQe1DZ9j2FmxzTuAu9aykN7fpvAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUU/WRv86GzbzATP56C7/vbiVQc5owHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzIyZTMxMzQz NTJlMzMzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMCRJjANBgkqhkiG9w0BAQsFAAOCAQEAsnSljLqcCIOTzdwHx1pAq06Z gvedLWyv03wuaptbEIDugs8qc9wGqGzNndr9Ru5n2+pXvXMpPYkKZMwimS+P8dub mkcAfLjg+bRekRIO498jPJeNFmOuUDLyJj+q1UtlfwHpH6/ZvwKXJqVufcTcsiWB DGVvcZdMgcl0o3Omj9HX23wzpuXWCEk5fjT+SEawc4L4K0KG+RR0LHfsMCGdtU9B Yhs0BxcrF7sheES3iUyGy4FZmAw1Ifh6mkPsA1jmuCCXFdCqkjMIWZH9GsPOOcGC xGGxl7MVSEB049bGe6cqPaG1DnLDp3DuwFeerzx28o4Qhb4xLVE26stxbgF0IA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:01:42 2025 by rpki-client