This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134322e3230332e302f32342d3234203d3e20313336373837.roa File: 3139332e3134322e3230332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 5UmkMgGPZQmOZXJEgUf5ed4bqQ1QFmpHHmuIRgSAOJc= Subject key identifier: 8A:F8:F5:3C:B9:26:4D:17:DB:F7:D9:AB:DC:5F:07:C4:A7:0F:7B:57 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4B9EE8904BEA514DE7A0DDC2029D22F96CC99249 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134322e3230332e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:52 +0000 ROA not before: Fri 28 Nov 2025 11:44:52 +0000 ROA not after: Fri 27 Nov 2026 11:49:52 +0000 asID: 136787 IP address blocks: 193.142.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:9e:e8:90:4b:ea:51:4d:e7:a0:dd:c2:02:9d:22:f9:6c:c9:92:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:52 2025 GMT Not After : Nov 27 11:49:52 2026 GMT Subject: CN=8AF8F53CB9264D17DBF7D9ABDC5F07C4A70F7B57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f3:86:80:62:61:a8:02:e1:c5:73:37:b7:07: 60:81:89:62:17:da:ef:d0:df:2c:f3:0b:b8:1f:f5: c3:c2:97:9d:a0:33:6f:6c:15:d3:6d:75:88:8b:d0: 2d:e9:41:16:db:2e:1a:16:7b:61:f7:50:20:ad:1c: 32:bd:bf:f9:55:eb:00:8f:2f:1d:66:52:99:70:e7: 15:b8:a2:b9:e5:62:49:ae:e5:09:f4:99:8a:6e:c6: e0:36:0c:ec:c8:f7:8f:f6:12:9d:ad:8e:60:3c:d4: bb:ec:c8:91:2d:d9:51:76:6a:9b:e5:66:e8:33:f6: 14:ea:7a:07:2d:85:75:69:25:cd:bc:1c:27:97:02: 01:1e:c4:37:c4:d7:d3:42:91:7b:34:f0:eb:1d:56: 60:53:f8:b3:df:fd:6a:aa:d2:4d:69:69:89:12:4a: fe:84:49:d9:07:d0:a3:4c:fd:0e:d2:fb:20:30:94: 2e:20:5f:34:70:02:f0:d7:97:d5:f3:2a:eb:b7:e5: 1f:df:f2:75:8a:72:db:f6:e7:62:68:72:21:04:3e: a8:d7:39:41:27:fc:7e:fa:b0:41:dc:c9:a3:55:44: 26:bb:bb:f5:81:6b:bc:8c:ef:22:45:b5:d5:a5:8d: 3e:13:b2:e0:71:44:87:99:5a:b9:c9:65:76:23:bf: 68:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F8:F5:3C:B9:26:4D:17:DB:F7:D9:AB:DC:5F:07:C4:A7:0F:7B:57 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134322e3230332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.142.203.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:fe:75:4c:89:66:06:7c:6b:0d:49:3e:82:6a:93:91:38:97: 2b:b8:67:79:d9:b7:1a:5b:2a:f8:24:99:94:2a:2e:50:4b:e5: 5a:5c:f0:28:7a:59:ef:4a:bf:ad:11:fa:9e:58:57:6b:5b:8e: 33:7e:ae:b5:65:65:20:bb:c3:af:f9:2d:57:98:df:bd:b6:7c: a7:43:3d:b4:a0:b2:e6:51:e9:c8:7b:e2:53:10:6a:67:5a:16: cd:d7:76:6b:cd:4c:0c:36:ef:08:00:37:44:6a:3d:84:50:7e: f7:e6:99:31:4e:cf:21:73:a7:74:4d:a2:22:9a:bb:9b:93:5e: 03:ca:e7:6c:78:b7:2d:3b:f1:27:5b:a0:05:80:a7:8b:94:0a: 1f:e0:cb:0e:42:18:de:05:ce:f9:4a:ff:c7:e2:0e:db:17:90: 41:68:87:33:36:06:9b:fe:bc:e8:96:de:91:e5:cf:7e:40:3a: 01:ba:46:60:07:c8:a4:94:22:f8:12:a4:fe:90:d6:fd:f4:f2: 18:19:52:f5:4b:3c:97:25:c8:b5:f1:ba:8d:56:b0:7b:bd:ae: 1b:b7:ad:a0:a9:81:84:a4:5f:21:a3:c8:7f:09:53:1d:49:10: 3d:fb:54:58:1c:9f:92:8f:04:6a:83:30:4c:d7:2d:95:2d:eb: 30:52:6c:34 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUS57okEvqUU3noN3CAp0i+WzJkkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTJaFw0yNjExMjcxMTQ5NTJaMDMxMTAvBgNV BAMTKDhBRjhGNTNDQjkyNjREMTdEQkY3RDlBQkRDNUYwN0M0QTcwRjdCNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb84aAYmGoAuHFcze3B2CBiWIX 2u/Q3yzzC7gf9cPCl52gM29sFdNtdYiL0C3pQRbbLhoWe2H3UCCtHDK9v/lV6wCP Lx1mUplw5xW4ornlYkmu5Qn0mYpuxuA2DOzI94/2Ep2tjmA81LvsyJEt2VF2apvl Zugz9hTqegcthXVpJc28HCeXAgEexDfE19NCkXs08OsdVmBT+LPf/Wqq0k1paYkS Sv6ESdkH0KNM/Q7S+yAwlC4gXzRwAvDXl9XzKuu35R/f8nWKctv252JociEEPqjX OUEn/H76sEHcyaNVRCa7u/WBa7yM7yJFtdWljT4TsuBxRIeZWrnJZXYjv2hHAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUivj1PLkmTRfb99mr3F8HxKcPe1cwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzQz MjJlMzIzMDMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwY7LMA0GCSqGSIb3DQEBCwUAA4IBAQA8/nVMiWYGfGsNST6CapOR OJcruGd52bcaWyr4JJmUKi5QS+VaXPAoelnvSr+tEfqeWFdrW44zfq61ZWUgu8Ov +S1XmN+9tnynQz20oLLmUenIe+JTEGpnWhbN13ZrzUwMNu8IADdEaj2EUH735pkx Ts8hc6d0TaIimrubk14DyudseLctO/EnW6AFgKeLlAof4MsOQhjeBc75Sv/H4g7b F5BBaIczNgab/rzolt6R5c9+QDoBukZgB8iklCL4EqT+kNb99PIYGVL1SzyXJci1 8bqNVrB7va4bt62gqYGEpF8ho8h/CVMdSRA9+1RYHJ+SjwRqgzBM1y2VLeswUmw0 -----END CERTIFICATE-----Generated at Sat Dec 6 11:35:59 2025 by rpki-client