This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134322e3230312e302f32342d3234203d3e20313336373837.roa File: 3139332e3134322e3230312e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: FNdhI9Vz9H7CXgUEIqNpqsx8GACNvZOdZj+9WGyDOh4= Subject key identifier: 8D:36:6D:21:83:37:0B:4B:96:61:88:53:13:8B:B8:56:9C:77:82:56 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4432248891D0BCE912F68EDD3B814E2F7B05BAF7 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134322e3230312e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:30 +0000 ROA not before: Fri 28 Nov 2025 11:44:30 +0000 ROA not after: Fri 27 Nov 2026 11:49:30 +0000 asID: 136787 IP address blocks: 193.142.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:32:24:88:91:d0:bc:e9:12:f6:8e:dd:3b:81:4e:2f:7b:05:ba:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:30 2025 GMT Not After : Nov 27 11:49:30 2026 GMT Subject: CN=8D366D2183370B4B96618853138BB8569C778256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:37:e3:e5:a3:b1:0b:c8:0d:e2:32:ac:67: 79:eb:79:9f:e9:c0:11:50:26:46:ab:23:3e:8e:93: 80:0f:fa:5d:f0:2f:87:54:be:12:b1:3f:0e:1c:f1: a2:a4:7a:6f:c1:13:5e:29:69:4e:55:b0:f0:89:05: 6c:9f:2c:fe:f5:10:d8:03:5a:6a:03:e5:bf:0e:5c: 8a:15:b0:04:07:a2:56:58:1a:99:00:c3:ac:5f:58: 93:06:5b:2f:8a:27:88:cf:c3:80:49:60:a7:c5:92: 60:ff:86:e4:9a:7d:45:39:70:34:03:6c:4f:b0:6d: 5d:4e:9b:4f:99:7d:1e:e8:59:49:ef:0d:35:5a:e5: dd:94:9b:40:79:c8:62:8c:f3:ce:e4:cd:ba:45:64: dc:f3:5a:08:b4:a8:d7:bd:64:4c:6c:38:c6:ba:10: 27:e8:f3:0f:55:3b:08:ab:1d:14:ee:b4:30:0b:49: 2f:78:60:b6:b3:34:7b:6b:9e:a4:a0:29:3e:c2:1e: 67:82:45:35:65:80:b8:22:62:46:87:79:a9:45:dc: 12:8a:b7:d1:f8:bb:9d:3d:61:d3:ac:10:14:e4:74: ea:d1:74:91:3c:54:20:a2:af:43:f3:09:61:2a:91: 74:11:29:f3:0f:66:6a:70:aa:30:39:56:ea:9b:87: 84:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:36:6D:21:83:37:0B:4B:96:61:88:53:13:8B:B8:56:9C:77:82:56 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134322e3230312e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.142.201.0/24 Signature Algorithm: sha256WithRSAEncryption d8:fa:a9:03:9d:08:95:57:7d:43:ac:16:72:f4:e7:a1:af:b4: 1c:c3:03:5e:8c:09:50:52:78:1b:bf:56:35:7c:ea:c2:60:e5: e6:07:4b:0d:f2:0d:5a:88:58:09:47:dc:79:7c:e9:7d:e1:2f: 7d:33:ed:1f:96:70:7c:0d:ed:b0:7c:e1:f9:c5:7a:6f:1b:f8: 8a:59:95:eb:77:b4:f6:67:3e:25:04:20:aa:dd:cc:47:c0:ba: 39:70:5b:dc:59:37:8c:ee:c8:13:ce:95:98:d7:86:f2:12:76: 2a:d9:5f:60:cf:42:3f:a5:62:50:12:a6:83:18:43:0e:45:e4: 20:07:2a:3c:fd:83:b3:1d:44:b0:af:58:7c:0c:b2:0e:6d:c0: 0d:ef:3c:ec:d5:33:82:b3:87:71:1c:fe:db:c4:31:30:06:71: ee:9c:40:bb:98:4c:3b:81:a1:76:31:4c:d6:91:0e:f9:e9:1b: 39:fa:02:53:19:84:3d:7e:f1:97:dd:dc:d8:21:ec:02:6b:46: c3:85:e1:62:13:2c:74:25:50:c2:c2:db:b0:6e:93:a7:49:d6: 0d:96:52:ea:bf:47:38:ba:a9:91:88:c7:99:04:69:ce:01:5a: 4f:8b:6c:36:0d:e3:05:be:e5:46:2f:2d:a2:ce:40:d3:b7:0b: be:4c:92:8c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIURDIkiJHQvOkS9o7dO4FOL3sFuvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzBaFw0yNjExMjcxMTQ5MzBaMDMxMTAvBgNV BAMTKDhEMzY2RDIxODMzNzBCNEI5NjYxODg1MzEzOEJCODU2OUM3NzgyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+szfj5aOxC8gN4jKsZ3nreZ/p wBFQJkarIz6Ok4AP+l3wL4dUvhKxPw4c8aKkem/BE14paU5VsPCJBWyfLP71ENgD WmoD5b8OXIoVsAQHolZYGpkAw6xfWJMGWy+KJ4jPw4BJYKfFkmD/huSafUU5cDQD bE+wbV1Om0+ZfR7oWUnvDTVa5d2Um0B5yGKM887kzbpFZNzzWgi0qNe9ZExsOMa6 ECfo8w9VOwirHRTutDALSS94YLazNHtrnqSgKT7CHmeCRTVlgLgiYkaHealF3BKK t9H4u509YdOsEBTkdOrRdJE8VCCir0PzCWEqkXQRKfMPZmpwqjA5Vuqbh4TbAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUjTZtIYM3C0uWYYhTE4u4Vpx3glYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzQz MjJlMzIzMDMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwY7JMA0GCSqGSIb3DQEBCwUAA4IBAQDY+qkDnQiVV31DrBZy9Oeh r7QcwwNejAlQUngbv1Y1fOrCYOXmB0sN8g1aiFgJR9x5fOl94S99M+0flnB8De2w fOH5xXpvG/iKWZXrd7T2Zz4lBCCq3cxHwLo5cFvcWTeM7sgTzpWY14byEnYq2V9g z0I/pWJQEqaDGEMOReQgByo8/YOzHUSwr1h8DLIObcAN7zzs1TOCs4dxHP7bxDEw BnHunEC7mEw7gaF2MUzWkQ756Rs5+gJTGYQ9fvGX3dzYIewCa0bDheFiEyx0JVDC wtuwbpOnSdYNllLqv0c4uqmRiMeZBGnOAVpPi2w2DeMFvuVGLy2izkDTtwu+TJKM -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:39 2025 by rpki-client