This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134322e3230322e302f32342d3332203d3e20313336373837.roa File: 3139332e3134322e3230322e302f32342d3332203d3e20313336373837.roa (raw, json) Hash identifier: EzcV/kKcpEpvxkdWTylguEDtcMi1/4q0tseH1cd1uNk= Subject key identifier: 3B:72:9B:EA:C0:33:FA:FA:9D:AE:C4:D4:7C:E1:2F:55:C0:32:C6:6A Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6B0D2A28672E0D1712280543EA3C3388FB388310 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134322e3230322e302f32342d3332203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:28 +0000 ROA not before: Fri 28 Nov 2025 11:44:28 +0000 ROA not after: Fri 27 Nov 2026 11:49:28 +0000 asID: 136787 IP address blocks: 193.142.202.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:0d:2a:28:67:2e:0d:17:12:28:05:43:ea:3c:33:88:fb:38:83:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:28 2025 GMT Not After : Nov 27 11:49:28 2026 GMT Subject: CN=3B729BEAC033FAFA9DAEC4D47CE12F55C032C66A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d6:1b:b1:b5:c8:94:96:06:7b:ec:f0:3e:f4: bb:b3:0d:65:14:5a:b6:59:c2:2b:64:5a:25:34:5a: 02:09:9a:73:91:e0:a3:8b:7c:78:fc:c2:19:d5:a9: fb:cf:1a:67:70:13:4c:92:c0:2b:22:a4:19:32:72: 79:a9:c6:ad:2d:30:e2:7c:b1:2d:14:e0:98:76:67: fc:6b:c8:7d:7a:7e:9f:e9:63:7d:39:b7:1d:12:37: 12:88:c8:c6:c3:7c:29:fa:e0:84:ed:0b:83:2a:54: e4:ee:0d:0b:99:d3:ef:6a:75:6e:e1:2c:b7:ae:a0: 5d:da:05:94:e9:fd:db:09:2a:9f:e3:6e:b0:27:55: ad:a3:4c:a4:f0:53:45:7a:92:36:a2:c3:eb:c9:32: a8:d4:29:62:57:8a:e3:3d:af:e5:64:71:f5:ae:cc: 7e:d1:ac:72:24:71:84:98:f8:1f:6e:28:ee:ad:cc: 81:6a:0a:58:14:de:c3:bc:2e:1f:33:f7:81:a7:85: 9c:31:6b:6c:ac:13:b7:6e:14:ac:7c:eb:ab:a1:db: 14:df:98:0d:a8:ce:06:8c:a9:98:82:3e:3d:ae:18: 88:3f:4a:a4:70:03:5a:8d:71:c1:e1:81:ac:e9:22: 95:7d:e4:d1:08:db:5d:3c:eb:d6:02:80:12:fe:d1: 68:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:72:9B:EA:C0:33:FA:FA:9D:AE:C4:D4:7C:E1:2F:55:C0:32:C6:6A X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134322e3230322e302f32342d3332203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.142.202.0/24 Signature Algorithm: sha256WithRSAEncryption 94:da:d3:a4:03:58:62:a4:3b:9b:3f:3a:de:ba:b8:72:3a:05: c0:7b:49:ae:b4:71:33:c4:6a:17:fd:b6:35:b2:f2:aa:73:d4: 86:a9:62:7a:5c:f4:22:35:2e:db:1d:0a:b6:c5:cf:0f:0c:fa: be:99:23:ac:5a:ec:9e:5e:e7:23:eb:fe:53:14:2f:f1:ae:fc: ab:ec:75:5f:be:6f:f1:17:f6:e7:73:24:c4:d1:ea:67:0c:cf: f6:fb:e8:a0:45:13:11:ba:b8:61:fd:62:14:4d:b7:5c:71:ba: e1:bb:a7:8c:d2:f1:fc:72:e7:19:1c:b5:be:64:ed:a8:c9:ba: d4:79:1e:56:f5:b7:de:e7:4a:b0:cb:73:5a:d4:d8:b2:08:44: 66:eb:22:22:89:d7:9c:be:aa:a0:20:ef:55:7c:c4:20:a1:bf: 8d:82:0a:0b:e2:17:ba:5e:9a:81:98:6d:39:65:88:61:b1:ea: 38:ed:76:36:f6:b9:cb:d1:5e:e4:d6:63:7f:4a:e3:7a:9d:b8: 8e:3f:52:84:75:f8:fc:35:df:d2:2d:28:4e:16:3a:9e:15:82: 69:0d:4a:79:e8:cd:54:96:ee:20:ce:64:a3:b9:8b:56:b6:8b: 7e:f5:e6:00:83:d0:04:37:62:ae:c3:2b:b4:4d:d5:6b:d3:d0: 06:db:29:7f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUaw0qKGcuDRcSKAVD6jwziPs4gxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjhaFw0yNjExMjcxMTQ5MjhaMDMxMTAvBgNV BAMTKDNCNzI5QkVBQzAzM0ZBRkE5REFFQzRENDdDRTEyRjU1QzAzMkM2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW1huxtciUlgZ77PA+9LuzDWUU WrZZwitkWiU0WgIJmnOR4KOLfHj8whnVqfvPGmdwE0ySwCsipBkycnmpxq0tMOJ8 sS0U4Jh2Z/xryH16fp/pY305tx0SNxKIyMbDfCn64ITtC4MqVOTuDQuZ0+9qdW7h LLeuoF3aBZTp/dsJKp/jbrAnVa2jTKTwU0V6kjaiw+vJMqjUKWJXiuM9r+VkcfWu zH7RrHIkcYSY+B9uKO6tzIFqClgU3sO8Lh8z94GnhZwxa2ysE7duFKx866uh2xTf mA2ozgaMqZiCPj2uGIg/SqRwA1qNccHhgazpIpV95NEI210869YCgBL+0WirAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUO3Kb6sAz+vqdrsTUfOEvVcAyxmowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzQz MjJlMzIzMDMyMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwY7KMA0GCSqGSIb3DQEBCwUAA4IBAQCU2tOkA1hipDubPzreurhy OgXAe0mutHEzxGoX/bY1svKqc9SGqWJ6XPQiNS7bHQq2xc8PDPq+mSOsWuyeXucj 6/5TFC/xrvyr7HVfvm/xF/bncyTE0epnDM/2++igRRMRurhh/WIUTbdccbrhu6eM 0vH8cucZHLW+ZO2oybrUeR5W9bfe50qwy3Na1NiyCERm6yIiidecvqqgIO9VfMQg ob+NggoL4he6XpqBmG05ZYhhseo47XY29rnL0V7k1mN/SuN6nbiOP1KEdfj8Nd/S LShOFjqeFYJpDUp56M1Ulu4gzmSjuYtWtot+9eYAg9AEN2Kuwyu0TdVr09AG2yl/ -----END CERTIFICATE-----Generated at Sat Dec 6 11:33:15 2025 by rpki-client