This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134322e3230302e302f32342d3234203d3e20313336373837.roa File: 3139332e3134322e3230302e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: KbOCiEi+20Yl6xr1vdrD0OMGQ53Ri8wLPR2tnhPlU+A= Subject key identifier: 52:90:63:FC:0B:FC:39:E3:77:B0:A4:16:DB:97:36:28:8E:BF:5A:71 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0856F751F0A14C22C3FD3FD92C63ECBB2A8C91C7 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134322e3230302e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:22 +0000 ROA not before: Fri 28 Nov 2025 11:44:22 +0000 ROA not after: Fri 27 Nov 2026 11:49:22 +0000 asID: 136787 IP address blocks: 193.142.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:56:f7:51:f0:a1:4c:22:c3:fd:3f:d9:2c:63:ec:bb:2a:8c:91:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:22 2025 GMT Not After : Nov 27 11:49:22 2026 GMT Subject: CN=529063FC0BFC39E377B0A416DB9736288EBF5A71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:11:36:37:b3:5b:54:9d:4d:4f:bf:27:38:d1: 42:5e:b2:76:b6:75:e2:23:96:55:ea:6a:7f:11:d4: db:6c:49:ba:bd:16:e1:04:a3:9f:f9:6c:7d:c7:cb: dd:a0:bf:bf:b0:41:00:f7:33:fe:b8:4a:78:e2:26: 30:b5:57:c8:c1:09:dc:0f:e2:9b:73:00:29:ad:9d: 37:54:05:ad:42:ce:73:39:7b:c9:0e:0a:c5:9c:82: 78:20:bb:10:87:82:8b:f8:18:4b:df:ca:4d:6e:e0: 65:d5:ba:bf:12:7e:5e:eb:fc:d1:9b:70:0e:47:6f: b1:0d:8a:74:5e:e9:5b:74:e7:be:30:50:fc:73:43: 46:84:2b:96:3c:c5:39:72:9e:62:d8:0d:27:0d:48: 57:93:b7:0b:ab:f1:73:19:05:9c:e7:13:b7:9a:9e: 8f:6a:66:49:e5:8e:08:48:6a:1a:39:75:13:30:8d: 87:6d:6e:52:23:71:03:b7:76:b0:71:23:e7:e7:4e: 84:fd:3d:ef:89:f7:82:79:7a:c9:ff:f1:24:d4:35: e3:09:33:2c:57:02:f0:16:94:3d:77:5e:c6:52:86: 2b:f0:db:79:36:d2:0f:29:2f:88:da:c3:16:d3:ee: 9e:4c:19:4a:1a:6a:50:c8:c9:b0:c0:35:1e:77:2f: ee:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:90:63:FC:0B:FC:39:E3:77:B0:A4:16:DB:97:36:28:8E:BF:5A:71 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134322e3230302e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.142.200.0/24 Signature Algorithm: sha256WithRSAEncryption d8:f3:66:50:a0:21:69:2a:97:4f:8e:f3:8c:47:d1:14:95:7b: cb:24:dc:2d:62:4a:25:a2:1c:b2:89:ca:9c:e4:98:5a:64:b3: ea:36:6a:57:90:78:b4:bd:23:54:ec:89:d7:4e:8b:7e:75:93: a4:33:40:c8:bf:6e:d6:90:65:e0:25:75:16:3a:40:46:6b:9f: c6:49:bf:3f:f3:a5:2b:a4:d0:6f:95:20:61:a3:4e:9a:f9:02: d5:4a:1c:34:73:8b:96:9a:f9:87:78:c3:09:03:41:f2:1d:69: d1:67:d3:71:90:89:55:1e:3c:e4:08:07:a0:c9:a4:5c:3d:de: c8:a2:f9:0f:1a:c5:01:7c:a2:a1:93:23:1c:94:02:78:86:4f: ca:dd:ad:b4:48:7c:b0:27:ad:bc:f4:6f:ef:4b:74:1d:ff:21: a9:d3:85:20:06:ba:a4:b1:a1:94:67:38:cb:72:c6:64:b6:95: a9:19:41:95:74:69:5c:ff:5d:87:fc:ef:43:a0:7b:a3:07:48: 0e:b9:71:b2:dc:4e:1b:60:52:c3:26:9b:d1:ef:55:c1:43:06: 9c:5b:fc:f4:d1:b4:6f:72:f2:05:d3:e4:c6:a8:72:c9:fd:ba: 8b:54:d1:4a:9f:cc:bf:12:6b:88:0c:46:0d:0c:7b:c9:e9:52: 8a:75:06:17 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUCFb3UfChTCLD/T/ZLGPsuyqMkccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjJaFw0yNjExMjcxMTQ5MjJaMDMxMTAvBgNV BAMTKDUyOTA2M0ZDMEJGQzM5RTM3N0IwQTQxNkRCOTczNjI4OEVCRjVBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVETY3s1tUnU1Pvyc40UJesna2 deIjllXqan8R1NtsSbq9FuEEo5/5bH3Hy92gv7+wQQD3M/64SnjiJjC1V8jBCdwP 4ptzACmtnTdUBa1CznM5e8kOCsWcgngguxCHgov4GEvfyk1u4GXVur8Sfl7r/NGb cA5Hb7ENinRe6Vt0574wUPxzQ0aEK5Y8xTlynmLYDScNSFeTtwur8XMZBZznE7ea no9qZknljghIaho5dRMwjYdtblIjcQO3drBxI+fnToT9Pe+J94J5esn/8STUNeMJ MyxXAvAWlD13XsZShivw23k20g8pL4jawxbT7p5MGUoaalDIybDANR53L+7BAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUUpBj/Av8OeN3sKQW25c2KI6/WnEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzQz MjJlMzIzMDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwY7IMA0GCSqGSIb3DQEBCwUAA4IBAQDY82ZQoCFpKpdPjvOMR9EU lXvLJNwtYkolohyyicqc5JhaZLPqNmpXkHi0vSNU7InXTot+dZOkM0DIv27WkGXg JXUWOkBGa5/GSb8/86UrpNBvlSBho06a+QLVShw0c4uWmvmHeMMJA0HyHWnRZ9Nx kIlVHjzkCAegyaRcPd7IovkPGsUBfKKhkyMclAJ4hk/K3a20SHywJ6289G/vS3Qd /yGp04UgBrqksaGUZzjLcsZktpWpGUGVdGlc/12H/O9DoHujB0gOuXGy3E4bYFLD JpvR71XBQwacW/z00bRvcvIF0+TGqHLJ/bqLVNFKn8y/EmuIDEYNDHvJ6VKKdQYX -----END CERTIFICATE-----Generated at Sat Dec 6 21:43:22 2025 by rpki-client