This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37322e302f32342d3332203d3e20313336373837.roa File: 3139332e3134382e37322e302f32342d3332203d3e20313336373837.roa (raw, json) Hash identifier: rEYRX4D4yv/jal0cjpopX7OYvbdpPiwPEuEEeQs5we8= Subject key identifier: E2:A7:15:D5:81:03:AD:57:96:3C:5B:EC:1B:D4:07:5C:87:B2:16:5F Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 77F321E20CC2B8DA7F1A636332E2EB9204672C93 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37322e302f32342d3332203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:07 +0000 ROA not before: Fri 21 Nov 2025 15:44:07 +0000 ROA not after: Fri 20 Nov 2026 15:49:07 +0000 asID: 136787 IP address blocks: 193.148.72.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:f3:21:e2:0c:c2:b8:da:7f:1a:63:63:32:e2:eb:92:04:67:2c:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:07 2025 GMT Not After : Nov 20 15:49:07 2026 GMT Subject: CN=E2A715D58103AD57963C5BEC1BD4075C87B2165F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e2:f3:67:e8:89:e2:c1:ed:8e:87:37:98:43: e4:5c:9c:4b:cf:f2:23:87:c5:8d:a9:7a:af:03:48: ee:01:b5:3d:3b:67:e4:23:e8:3a:ee:b0:cf:e1:49: e9:51:02:e3:52:c4:af:69:54:99:b5:f0:53:88:39: a5:c2:94:f1:52:db:21:68:e8:2c:7b:9f:62:c0:8f: 46:af:96:d1:13:1d:48:ec:a3:43:8a:ec:f6:b8:a8: dd:83:ff:60:05:2e:47:41:21:81:d1:a3:7f:f6:bb: a9:09:ca:dc:46:9d:b7:bb:24:5f:dc:41:c7:79:3d: e7:fe:47:db:0e:b4:2a:26:1e:76:8b:7a:70:93:1d: be:b7:a8:da:d1:ae:b6:9f:60:33:9a:5b:fa:be:96: 72:68:0c:e3:0a:d6:82:4d:ca:b2:d0:05:0c:60:e0: 8f:cf:c0:df:1c:02:de:33:f5:d0:e8:a1:96:3d:3f: 9b:d9:7e:f8:81:c6:ce:4b:af:03:62:6c:92:24:a4: 8f:5f:6f:bd:b0:17:d1:d9:6f:11:7a:22:b9:ac:17: e7:0c:83:d5:e1:ee:9c:da:99:9d:ff:ae:e2:42:d0: c4:09:5f:ae:cf:0a:f3:e8:1b:7e:f0:aa:37:68:04: 1d:a3:36:14:12:d3:aa:69:51:4c:d9:fd:b7:0b:b5: 91:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A7:15:D5:81:03:AD:57:96:3C:5B:EC:1B:D4:07:5C:87:B2:16:5F X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37322e302f32342d3332203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.148.72.0/24 Signature Algorithm: sha256WithRSAEncryption b1:6d:2f:6c:8b:23:1c:1c:9b:31:b1:f5:9a:e2:bb:7d:c1:71: 9b:a7:01:35:32:21:c7:c9:ce:98:61:fd:c6:62:a0:ff:9e:b8: 61:15:a6:b1:bd:cc:7b:cb:eb:b5:50:49:de:84:3a:99:d7:fb: 9d:a0:54:86:61:e3:6c:50:0b:c2:c5:83:3e:4c:61:e1:57:dc: 63:2b:18:5b:61:b1:9d:f0:1b:4b:12:5a:18:21:bd:28:97:15: 31:ba:0d:af:1b:74:92:dc:57:9c:c4:33:24:e6:d2:1f:90:1f: 6d:10:0e:a8:f0:05:a2:87:19:51:ad:5a:a2:15:6e:40:d5:66: 8c:1a:c5:79:d4:88:b9:67:7f:64:75:26:3b:a8:5d:b7:ea:e3: f8:0e:49:7e:f2:90:0b:a2:71:f5:3d:6d:d3:b0:92:5e:1d:a9: 1c:d4:58:b7:1f:b1:fd:e0:44:47:a0:07:cf:e1:a6:33:18:ff: 28:3e:09:5a:02:90:bb:3a:4b:ae:4a:95:3f:91:f2:f2:49:23: d2:3c:14:22:89:d2:e7:04:d9:84:de:91:17:7f:e2:23:6e:93: e3:d4:63:b0:99:4a:3a:86:17:3b:db:c9:b4:2d:5f:c7:db:f2: 8b:ae:cf:ff:f4:47:90:ce:01:a8:c3:5d:81:b0:22:29:b6:0e: 5c:53:3a:5c -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUd/Mh4gzCuNp/GmNjMuLrkgRnLJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDdaFw0yNjExMjAxNTQ5MDdaMDMxMTAvBgNV BAMTKEUyQTcxNUQ1ODEwM0FENTc5NjNDNUJFQzFCRDQwNzVDODdCMjE2NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk4vNn6Iniwe2OhzeYQ+RcnEvP 8iOHxY2peq8DSO4BtT07Z+Qj6DrusM/hSelRAuNSxK9pVJm18FOIOaXClPFS2yFo 6Cx7n2LAj0avltETHUjso0OK7Pa4qN2D/2AFLkdBIYHRo3/2u6kJytxGnbe7JF/c Qcd5Pef+R9sOtComHnaLenCTHb63qNrRrrafYDOaW/q+lnJoDOMK1oJNyrLQBQxg 4I/PwN8cAt4z9dDooZY9P5vZfviBxs5LrwNibJIkpI9fb72wF9HZbxF6IrmsF+cM g9Xh7pzamZ3/ruJC0MQJX67PCvPoG37wqjdoBB2jNhQS06ppUUzZ/bcLtZEvAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU4qcV1YEDrVeWPFvsG9QHXIeyFl8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzQz ODJlMzczMjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMGUSDANBgkqhkiG9w0BAQsFAAOCAQEAsW0vbIsjHBybMbH1muK7fcFx m6cBNTIhx8nOmGH9xmKg/564YRWmsb3Me8vrtVBJ3oQ6mdf7naBUhmHjbFALwsWD Pkxh4VfcYysYW2GxnfAbSxJaGCG9KJcVMboNrxt0ktxXnMQzJObSH5AfbRAOqPAF oocZUa1aohVuQNVmjBrFedSIuWd/ZHUmO6hdt+rj+A5JfvKQC6Jx9T1t07CSXh2p HNRYtx+x/eBER6AHz+GmMxj/KD4JWgKQuzpLrkqVP5Hy8kkj0jwUIonS5wTZhN6R F3/iI26T49RjsJlKOoYXO9vJtC1fx9vyi67P//RHkM4BqMNdgbAiKbYOXFM6XA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:01:26 2025 by rpki-client