This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37352e302f32342d3234203d3e20313336373837.roa File: 3139332e3134382e37352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: XkYzlm+M8Yv5RrZD0BS/KSockpeUWR/0pcUgyeAzMXc= Subject key identifier: A6:04:82:2A:FB:DF:58:46:3B:05:14:B5:C3:A1:A4:62:FE:5A:1A:28 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6DE355358DB545F5507AAD5C72D8AAA8C1BDBB97 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:48:57 +0000 ROA not before: Fri 21 Nov 2025 15:43:57 +0000 ROA not after: Fri 20 Nov 2026 15:48:57 +0000 asID: 136787 IP address blocks: 193.148.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e3:55:35:8d:b5:45:f5:50:7a:ad:5c:72:d8:aa:a8:c1:bd:bb:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:43:57 2025 GMT Not After : Nov 20 15:48:57 2026 GMT Subject: CN=A604822AFBDF58463B0514B5C3A1A462FE5A1A28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:40:23:d2:ea:c4:d3:0e:91:05:7a:77:d9: 2a:d9:9c:fa:f3:5d:5b:50:f3:f4:9e:07:5c:a9:4a: 96:30:31:0d:55:6f:b0:09:89:f2:c4:ac:57:f7:9c: 4b:14:94:e4:ac:ac:2a:a7:13:e6:d3:a5:29:6c:ab: ef:d7:89:80:53:7f:2f:b1:d5:ec:ec:91:2c:dd:b9: 27:7f:46:89:18:ae:f4:63:24:d6:fd:be:5b:a7:e5: a9:63:11:d1:fe:4d:5c:e1:4e:27:20:9a:7f:41:ad: 8a:a6:ac:11:95:94:ae:15:e8:7e:7e:98:10:07:1d: 40:3a:67:b4:dd:ac:1f:42:4d:bd:c4:73:c9:6b:49: c9:83:78:69:b3:30:bc:ad:39:c0:5c:17:9e:26:4c: f3:76:da:57:c3:83:e6:cb:a6:b7:5f:36:87:52:bf: 18:3a:e8:d6:72:4f:53:3c:3b:77:7d:da:7a:60:10: 7d:58:c8:96:c5:e6:20:7e:35:64:37:d2:20:a7:35: 24:e8:d1:36:6a:8e:3c:2e:d4:65:24:79:c4:45:72: 63:27:50:65:ce:06:1b:64:c3:48:5e:b4:73:e3:7e: c8:d5:0e:a8:23:2a:50:8e:2b:01:07:fb:ff:9c:33: 66:68:29:30:00:c7:c7:e1:5c:27:d5:38:a2:51:bb: 32:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:04:82:2A:FB:DF:58:46:3B:05:14:B5:C3:A1:A4:62:FE:5A:1A:28 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.148.75.0/24 Signature Algorithm: sha256WithRSAEncryption a2:8f:1c:f2:0a:6c:5d:9e:09:b5:d0:3f:26:b5:89:3b:95:25: 33:10:cb:e3:75:e5:bd:2a:53:83:0a:00:15:0c:f0:eb:52:d2: 51:74:e3:bc:1a:61:75:f5:21:99:af:83:de:16:84:9c:d4:55: 6e:bc:ad:0f:bd:b9:73:bd:3e:3a:48:2d:e7:af:fd:c3:fc:7a: 2e:9d:b7:54:68:4c:9b:ea:2c:ca:1e:3d:8a:b4:39:80:d4:ce: b1:7c:d0:a7:d3:50:2e:bf:f8:13:17:f0:d8:0c:d4:32:7b:3f: 1b:8b:5d:76:aa:f9:5b:90:c3:43:f7:5a:13:3f:87:f9:d9:8c: 2e:c8:f2:65:88:b7:d0:0d:24:47:5d:a2:2b:7b:ff:9b:f8:3b: 43:16:b9:39:13:09:18:fe:2e:33:ed:4d:5d:76:cb:c8:5b:e7: b6:81:ee:9a:3f:49:9e:e3:ae:55:4d:1c:22:68:59:38:be:df: 64:c0:36:27:1e:e8:19:86:9d:c9:d1:f7:f1:66:6a:73:2b:14: 47:73:7f:0e:34:20:55:87:fd:fc:0e:1c:4c:60:cd:dd:98:cc: 22:e2:bd:7e:d5:9a:35:31:ad:65:c3:4a:6f:09:df:90:2a:fe: 67:9f:d5:dd:fc:88:35:14:1b:4b:71:70:1a:70:6a:e4:4b:59: aa:60:57:f3 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUbeNVNY21RfVQeq1cctiqqMG9u5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQzNTdaFw0yNjExMjAxNTQ4NTdaMDMxMTAvBgNV BAMTKEE2MDQ4MjJBRkJERjU4NDYzQjA1MTRCNUMzQTFBNDYyRkU1QTFBMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5TUAj0urE0w6RBXp32SrZnPrz XVtQ8/SeB1ypSpYwMQ1Vb7AJifLErFf3nEsUlOSsrCqnE+bTpSlsq+/XiYBTfy+x 1ezskSzduSd/RokYrvRjJNb9vlun5aljEdH+TVzhTicgmn9BrYqmrBGVlK4V6H5+ mBAHHUA6Z7TdrB9CTb3Ec8lrScmDeGmzMLytOcBcF54mTPN22lfDg+bLprdfNodS vxg66NZyT1M8O3d92npgEH1YyJbF5iB+NWQ30iCnNSTo0TZqjjwu1GUkecRFcmMn UGXOBhtkw0hetHPjfsjVDqgjKlCOKwEH+/+cM2ZoKTAAx8fhXCfVOKJRuzIvAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUpgSCKvvfWEY7BRS1w6GkYv5aGigwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzQz ODJlMzczNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMGUSzANBgkqhkiG9w0BAQsFAAOCAQEAoo8c8gpsXZ4JtdA/JrWJO5Ul MxDL43XlvSpTgwoAFQzw61LSUXTjvBphdfUhma+D3haEnNRVbrytD725c70+Okgt 56/9w/x6Lp23VGhMm+osyh49irQ5gNTOsXzQp9NQLr/4Exfw2AzUMns/G4tddqr5 W5DDQ/daEz+H+dmMLsjyZYi30A0kR12iK3v/m/g7Qxa5ORMJGP4uM+1NXXbLyFvn toHumj9JnuOuVU0cImhZOL7fZMA2Jx7oGYadydH38WZqcysUR3N/DjQgVYf9/A4c TGDN3ZjMIuK9ftWaNTGtZcNKbwnfkCr+Z5/V3fyINRQbS3FwGnBq5EtZqmBX8w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:52:21 2025 by rpki-client