This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37332e302f32342d3234203d3e20313336373837.roa File: 3139332e3134382e37332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: B6498kczWVijnLLcKyO0y5huXdXm77fHKYx2Y1OYac4= Subject key identifier: BF:8E:A4:02:44:45:54:D9:A3:30:99:F4:65:EA:98:6A:C5:5F:09:66 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6D11CD366C2169D49C18B519E50DCD6BBA5B17C0 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37332e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:04 +0000 ROA not before: Fri 21 Nov 2025 15:44:04 +0000 ROA not after: Fri 20 Nov 2026 15:49:04 +0000 asID: 136787 IP address blocks: 193.148.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:11:cd:36:6c:21:69:d4:9c:18:b5:19:e5:0d:cd:6b:ba:5b:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:04 2025 GMT Not After : Nov 20 15:49:04 2026 GMT Subject: CN=BF8EA402444554D9A33099F465EA986AC55F0966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:73:c6:3d:25:f2:fe:78:e5:46:44:a9:31: 57:70:96:37:f5:d2:e5:1a:0d:e5:f9:bf:9b:a2:96: c0:18:70:9a:83:b8:1d:e9:d6:bf:57:af:bc:6d:2d: 5e:13:e3:0e:b4:97:27:d2:e7:35:80:e7:28:af:1f: d1:ec:5c:52:27:cc:46:0e:39:26:fd:9c:5f:96:e4: 05:85:29:86:ca:ff:98:98:91:25:03:7c:a0:c9:22: f2:6f:21:71:4e:08:0f:ac:a6:2c:0b:5b:0e:30:0c: cb:d8:6e:fd:17:ab:cb:0d:8b:2c:e0:77:05:ce:4b: 55:f9:f2:54:62:00:f6:01:cb:77:46:62:ec:e3:f2: 64:f6:2d:d0:db:e1:3a:ce:7f:6c:db:fc:77:f1:ce: ed:7d:0e:f8:12:ef:73:d4:6c:98:24:78:e7:ef:57: 9a:03:fb:3c:bf:d1:91:75:fa:56:0d:62:1c:25:57: 7e:9c:1e:94:f9:d0:fb:27:cf:0e:2f:b9:0f:86:dd: e8:27:36:bc:e1:3d:5b:f5:cd:3e:6d:9b:29:66:96: da:ae:54:bb:05:82:91:a2:cb:d5:4c:06:1c:e0:24: 95:bb:66:d6:76:b4:3b:02:dc:00:4e:27:95:1a:7b: 55:c2:ec:5e:00:63:09:02:9e:1b:fb:c8:68:0f:a5: dd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8E:A4:02:44:45:54:D9:A3:30:99:F4:65:EA:98:6A:C5:5F:09:66 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.148.73.0/24 Signature Algorithm: sha256WithRSAEncryption c0:54:c3:09:e7:7b:c8:14:43:8b:10:e1:ac:ff:af:93:5d:d7: 02:3d:72:24:32:44:12:fc:45:68:5b:45:98:a5:37:db:74:da: ae:ff:94:30:09:e8:32:ae:8e:a0:d0:0c:32:15:98:cc:78:e0: 09:f0:6f:e9:d2:c9:30:7f:ea:5f:81:c2:41:d4:7a:e3:c1:ca: ac:82:f0:30:97:15:30:7f:26:36:7d:fa:2c:f8:89:a2:52:0e: ac:0b:56:bb:85:2d:ab:26:07:e9:09:0f:f2:00:74:62:93:87: d1:09:70:42:3f:cf:ef:30:23:f3:e3:3e:fb:b9:83:81:6e:70: 67:4e:11:78:3c:98:42:32:60:e1:85:8a:3c:0b:27:bc:40:a0: ef:00:4c:18:25:07:22:b9:42:98:3a:26:cf:c4:ee:d1:b0:4d: e3:4e:42:32:ee:18:dc:34:0f:c9:9c:82:a7:bd:5f:0f:b7:ff: e3:73:c9:48:74:32:5b:54:50:a1:9e:3e:04:5c:52:98:8e:eb: 0b:b5:a1:41:7b:75:88:22:55:ff:06:65:3d:07:2f:69:71:3a: 05:e4:d8:c3:a8:d8:db:ab:41:42:46:be:7e:d3:b1:6d:05:fb: 22:ad:a3:69:14:26:d6:28:bd:eb:c8:e9:cf:62:3c:64:8c:50: 10:2e:81:d5 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUbRHNNmwhadScGLUZ5Q3Na7pbF8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDRaFw0yNjExMjAxNTQ5MDRaMDMxMTAvBgNV BAMTKEJGOEVBNDAyNDQ0NTU0RDlBMzMwOTlGNDY1RUE5ODZBQzU1RjA5NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3WXPGPSXy/njlRkSpMVdwljf1 0uUaDeX5v5uilsAYcJqDuB3p1r9Xr7xtLV4T4w60lyfS5zWA5yivH9HsXFInzEYO OSb9nF+W5AWFKYbK/5iYkSUDfKDJIvJvIXFOCA+spiwLWw4wDMvYbv0Xq8sNiyzg dwXOS1X58lRiAPYBy3dGYuzj8mT2LdDb4TrOf2zb/Hfxzu19DvgS73PUbJgkeOfv V5oD+zy/0ZF1+lYNYhwlV36cHpT50Psnzw4vuQ+G3egnNrzhPVv1zT5tmylmltqu VLsFgpGiy9VMBhzgJJW7ZtZ2tDsC3ABOJ5Uae1XC7F4AYwkCnhv7yGgPpd0vAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUv46kAkRFVNmjMJn0ZeqYasVfCWYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzQz ODJlMzczMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMGUSTANBgkqhkiG9w0BAQsFAAOCAQEAwFTDCed7yBRDixDhrP+vk13X Aj1yJDJEEvxFaFtFmKU323Tarv+UMAnoMq6OoNAMMhWYzHjgCfBv6dLJMH/qX4HC QdR648HKrILwMJcVMH8mNn36LPiJolIOrAtWu4UtqyYH6QkP8gB0YpOH0QlwQj/P 7zAj8+M++7mDgW5wZ04ReDyYQjJg4YWKPAsnvECg7wBMGCUHIrlCmDomz8Tu0bBN 405CMu4Y3DQPyZyCp71fD7f/43PJSHQyW1RQoZ4+BFxSmI7rC7WhQXt1iCJV/wZl PQcvaXE6BeTYw6jY26tBQka+ftOxbQX7Iq2jaRQm1ii968jpz2I8ZIxQEC6B1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:44 2025 by rpki-client