This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3136362e3234352e302f32342d3234203d3e20313331313939.roa File: 3139322e3136362e3234352e302f32342d3234203d3e20313331313939.roa (raw, json) Hash identifier: fJmaYOOU829D7gEJvOvjFgbSNWUtOgPhA1AuWv/FzXQ= Subject key identifier: 93:8D:FD:2B:B8:35:2B:82:16:C6:CD:6B:DC:F1:73:02:53:A1:FB:92 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 387FAE05159018039ABDE13C67F106D43B458E2E Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3136362e3234352e302f32342d3234203d3e20313331313939.roa Signing time: Fri 28 Nov 2025 11:49:33 +0000 ROA not before: Fri 28 Nov 2025 11:44:33 +0000 ROA not after: Fri 27 Nov 2026 11:49:33 +0000 asID: 131199 IP address blocks: 192.166.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:7f:ae:05:15:90:18:03:9a:bd:e1:3c:67:f1:06:d4:3b:45:8e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:33 2025 GMT Not After : Nov 27 11:49:33 2026 GMT Subject: CN=938DFD2BB8352B8216C6CD6BDCF1730253A1FB92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:59:f8:1d:c4:e7:bd:7b:30:1d:ac:c6:43:2c: fe:07:0c:79:79:f2:ea:94:bb:20:15:ea:93:ae:96: 51:2a:c6:fe:b2:b9:b9:19:57:42:9c:2e:37:f6:21: 34:08:02:a7:9b:bc:50:a6:d9:5b:f1:20:54:5a:36: 39:dc:22:0b:17:1e:b7:ad:16:0b:e0:e2:38:84:44: e0:38:50:f3:81:55:dd:06:1b:ac:63:70:35:93:7a: 2e:5b:6b:bb:84:10:27:00:a6:0f:b1:57:28:61:0b: b7:f9:4f:07:fe:cb:d0:39:94:0f:2f:70:49:5f:aa: bf:cb:0c:fa:61:87:bc:31:75:a5:78:67:87:93:77: 1a:40:72:63:76:c6:8a:8c:cf:2a:14:64:08:60:d2: cf:95:ae:bf:02:12:db:1b:c2:8d:9d:b7:d9:30:0c: 96:a1:89:0a:1e:1c:8b:71:4e:ed:18:fa:60:71:7d: 74:47:fb:6f:eb:a1:53:1b:14:d4:3c:85:0f:aa:d8: 16:b4:67:27:54:83:0b:ab:d5:38:59:48:34:47:5e: c8:3b:ae:c9:ba:5a:f6:55:03:16:b2:80:f1:06:aa: 3c:f3:a7:43:6b:99:c8:41:26:37:82:66:b9:ae:8f: 71:5f:04:fb:aa:4b:ed:6d:1c:af:b3:49:4b:79:16: cf:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8D:FD:2B:B8:35:2B:82:16:C6:CD:6B:DC:F1:73:02:53:A1:FB:92 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3136362e3234352e302f32342d3234203d3e20313331313939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.166.245.0/24 Signature Algorithm: sha256WithRSAEncryption e3:03:59:86:c6:fd:ec:1a:c3:95:83:01:b4:bf:dd:d8:5c:fc: bd:03:47:0d:bd:2a:17:de:1d:e9:3f:3e:f6:32:62:ce:26:d0: a8:0c:6f:31:5f:06:1e:0b:6e:1b:a2:3b:5f:e9:bf:a9:f3:68: 03:1d:29:40:3f:36:5f:fc:d2:f1:87:83:6d:f8:56:34:6c:08: 1d:53:cf:60:18:59:17:04:0f:e6:8d:2c:bb:2d:4a:37:b6:e5: fc:d0:a2:44:27:1e:fb:07:cf:4d:6d:d5:6a:8f:86:6e:e8:ff: 8c:fb:59:34:e6:32:49:5f:c7:d1:ca:e8:cd:64:ca:f1:02:a3: b5:e7:ea:ad:ce:6d:9d:cd:e6:4e:5a:8b:0e:08:04:da:0a:f9: fd:99:fb:a5:eb:7a:7a:85:0a:f2:0b:7a:3d:38:58:a7:14:a7: 15:1c:e6:0d:0c:6f:ce:53:c1:90:5f:cd:21:b1:7c:85:98:de: f7:ef:01:dc:75:c4:77:75:8a:3e:5c:e3:8c:b4:e1:8e:51:e2: 46:d2:c5:b2:78:4e:48:c5:96:c2:5d:ad:a5:2a:de:11:47:aa: 65:52:50:da:35:62:66:b5:9f:a5:05:2c:55:c6:e5:76:85:f8: bd:56:a2:19:5c:f9:80:35:f7:13:42:b4:5f:6f:b1:56:f3:82: 46:09:2a:81 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUOH+uBRWQGAOaveE8Z/EG1DtFji4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzNaFw0yNjExMjcxMTQ5MzNaMDMxMTAvBgNV BAMTKDkzOERGRDJCQjgzNTJCODIxNkM2Q0Q2QkRDRjE3MzAyNTNBMUZCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWfgdxOe9ezAdrMZDLP4HDHl5 8uqUuyAV6pOullEqxv6yubkZV0KcLjf2ITQIAqebvFCm2VvxIFRaNjncIgsXHret Fgvg4jiEROA4UPOBVd0GG6xjcDWTei5ba7uEECcApg+xVyhhC7f5Twf+y9A5lA8v cElfqr/LDPphh7wxdaV4Z4eTdxpAcmN2xoqMzyoUZAhg0s+Vrr8CEtsbwo2dt9kw DJahiQoeHItxTu0Y+mBxfXRH+2/roVMbFNQ8hQ+q2Ba0ZydUgwur1ThZSDRHXsg7 rsm6WvZVAxaygPEGqjzzp0NrmchBJjeCZrmuj3FfBPuqS+1tHK+zSUt5Fs/1AgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUk439K7g1K4IWxs1r3PFzAlOh+5IwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzIyZTMxMzYz NjJlMzIzNDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzMxMzEzOTM5LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwKb1MA0GCSqGSIb3DQEBCwUAA4IBAQDjA1mGxv3sGsOVgwG0v93Y XPy9A0cNvSoX3h3pPz72MmLOJtCoDG8xXwYeC24bojtf6b+p82gDHSlAPzZf/NLx h4Nt+FY0bAgdU89gGFkXBA/mjSy7LUo3tuX80KJEJx77B89NbdVqj4Zu6P+M+1k0 5jJJX8fRyujNZMrxAqO15+qtzm2dzeZOWosOCATaCvn9mful63p6hQryC3o9OFin FKcVHOYNDG/OU8GQX80hsXyFmN737wHcdcR3dYo+XOOMtOGOUeJG0sWyeE5IxZbC Xa2lKt4RR6plUlDaNWJmtZ+lBSxVxuV2hfi9VqIZXPmANfcTQrRfb7FW84JGCSqB -----END CERTIFICATE-----Generated at Sun Dec 7 06:33:59 2025 by rpki-client