This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37342e302f32342d3234203d3e20313336373837.roa File: 3139332e3134382e37342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: vT5qFVeB5E18yT7XtJJ5KQBU4kUnaXUq7cZuzxbOEEU= Subject key identifier: BC:E1:9C:2A:ED:ED:A3:2A:8F:EF:90:A3:BA:3D:AB:FA:57:5F:22:B0 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1D895FCADB08E42AD425EAF0BAD1C921BDC9D893 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37342e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:04 +0000 ROA not before: Fri 21 Nov 2025 15:44:04 +0000 ROA not after: Fri 20 Nov 2026 15:49:04 +0000 asID: 136787 IP address blocks: 193.148.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:89:5f:ca:db:08:e4:2a:d4:25:ea:f0:ba:d1:c9:21:bd:c9:d8:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:04 2025 GMT Not After : Nov 20 15:49:04 2026 GMT Subject: CN=BCE19C2AEDEDA32A8FEF90A3BA3DABFA575F22B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f6:9b:1d:f7:83:4b:85:e3:9c:3d:ca:88:e1: 46:f4:fd:17:43:93:ba:30:5b:4e:bc:37:2e:74:72: 72:02:3a:0e:01:4a:c6:a3:57:b9:0f:c7:8b:b9:e9: 46:e7:0c:24:82:88:97:4c:45:bb:44:68:ff:77:7f: d8:c9:f9:43:f4:4b:2f:d8:a2:1d:cd:d0:fa:bc:8b: 20:b1:b3:df:6a:5b:ed:5f:da:cb:1c:3a:7d:5b:a0: 2c:5c:35:43:88:41:89:9f:d6:af:47:22:0b:f9:98: 89:8e:a8:a9:aa:6f:6f:cb:ee:78:f7:cf:66:1c:03: 40:40:fa:ae:cf:9c:ce:83:03:16:49:fe:08:ae:10: 2b:08:45:da:f5:79:e7:b3:47:73:87:44:c4:f2:74: c4:97:bf:1b:25:9f:0b:6a:ce:d1:52:ce:15:17:e1: 07:d8:0c:f3:d0:ec:93:dd:19:2e:3c:3d:c8:0e:df: a7:3b:d8:b4:71:fc:f4:0d:64:d1:83:78:b1:e0:2a: e8:06:55:21:5d:4e:9a:09:2c:5e:6a:b7:c6:d0:5a: 10:36:e5:c4:91:5c:8c:25:9d:f8:f9:44:01:21:7b: 74:92:e6:5b:6a:87:ef:e3:38:e5:cd:fd:5f:07:1b: a8:91:08:bb:4a:2e:3d:a8:03:61:43:95:ff:99:00: c6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E1:9C:2A:ED:ED:A3:2A:8F:EF:90:A3:BA:3D:AB:FA:57:5F:22:B0 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.148.74.0/24 Signature Algorithm: sha256WithRSAEncryption 48:94:a8:82:1d:aa:35:2d:fd:62:5b:5c:85:c1:ea:66:39:a4: 95:27:a5:17:55:ed:4c:32:4b:0b:90:1b:04:11:43:dc:28:24: 9f:b2:70:b1:db:0c:7d:1b:64:19:05:87:35:14:c8:da:6b:ad: 01:5d:61:2e:a8:92:15:8d:cd:38:09:e6:b8:2e:ab:a3:73:79: ed:ef:12:80:6a:10:0a:a7:93:f8:69:dc:5d:0c:63:10:11:a6: 4f:53:41:d9:cf:11:0a:03:56:9b:da:57:fd:c2:d9:6a:46:82: 34:40:89:be:a8:3d:63:a1:96:4c:5c:d8:b0:19:8a:4c:70:d6: 67:19:8d:5c:e0:05:c1:4c:e9:49:0f:09:c0:e8:1e:cb:1f:a7: 7e:d6:6d:2b:ac:39:96:6d:fc:15:ad:8c:0b:94:1d:8c:2d:5e: 0d:10:2a:ac:21:4d:81:c9:dd:7e:d7:f6:6a:0c:51:56:ab:6c: e1:ad:ef:0e:39:3f:44:95:f7:b8:40:a9:1a:c0:f9:29:fa:03: 01:a1:65:1c:2b:27:41:b0:22:7d:b8:d8:30:38:b9:b6:36:7b: ce:19:64:98:ac:8a:75:8d:64:74:4b:15:50:63:8f:d5:74:30: 7d:d6:ef:81:ab:17:cd:07:ea:4f:6b:dd:b0:ed:b4:67:2d:7b: 6e:21:e7:0b -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUHYlfytsI5CrUJerwutHJIb3J2JMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDRaFw0yNjExMjAxNTQ5MDRaMDMxMTAvBgNV BAMTKEJDRTE5QzJBRURFREEzMkE4RkVGOTBBM0JBM0RBQkZBNTc1RjIyQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv9psd94NLheOcPcqI4Ub0/RdD k7owW068Ny50cnICOg4BSsajV7kPx4u56UbnDCSCiJdMRbtEaP93f9jJ+UP0Sy/Y oh3N0Pq8iyCxs99qW+1f2sscOn1boCxcNUOIQYmf1q9HIgv5mImOqKmqb2/L7nj3 z2YcA0BA+q7PnM6DAxZJ/giuECsIRdr1eeezR3OHRMTydMSXvxslnwtqztFSzhUX 4QfYDPPQ7JPdGS48PcgO36c72LRx/PQNZNGDeLHgKugGVSFdTpoJLF5qt8bQWhA2 5cSRXIwlnfj5RAEhe3SS5ltqh+/jOOXN/V8HG6iRCLtKLj2oA2FDlf+ZAMaRAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUvOGcKu3toyqP75Cjuj2r+ldfIrAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzQz ODJlMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMGUSjANBgkqhkiG9w0BAQsFAAOCAQEASJSogh2qNS39YltchcHqZjmk lSelF1XtTDJLC5AbBBFD3Cgkn7JwsdsMfRtkGQWHNRTI2mutAV1hLqiSFY3NOAnm uC6ro3N57e8SgGoQCqeT+GncXQxjEBGmT1NB2c8RCgNWm9pX/cLZakaCNECJvqg9 Y6GWTFzYsBmKTHDWZxmNXOAFwUzpSQ8JwOgeyx+nftZtK6w5lm38Fa2MC5QdjC1e DRAqrCFNgcndftf2agxRVqts4a3vDjk/RJX3uECpGsD5KfoDAaFlHCsnQbAifbjY MDi5tjZ7zhlkmKyKdY1kdEsVUGOP1XQwfdbvgasXzQfqT2vdsO20Zy17biHnCw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:07 2025 by rpki-client