This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32352e302f32342d3234203d3e20313336373837.roa File: 3139332e3134392e32352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: GA0RfQ2IvqGjpHGiPHuW2bxA9AMBp5pbnJAyn+jpiRg= Subject key identifier: DC:E7:7D:F2:7F:5A:B1:E1:3A:0B:92:67:19:FD:78:2B:C8:69:D2:AF Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 61C6EC2A293E3DA9FA0A0851CC9ED486A83D26CF Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:02 +0000 ROA not before: Fri 21 Nov 2025 15:44:02 +0000 ROA not after: Fri 20 Nov 2026 15:49:02 +0000 asID: 136787 IP address blocks: 193.149.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c6:ec:2a:29:3e:3d:a9:fa:0a:08:51:cc:9e:d4:86:a8:3d:26:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:02 2025 GMT Not After : Nov 20 15:49:02 2026 GMT Subject: CN=DCE77DF27F5AB1E13A0B926719FD782BC869D2AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a4:2f:61:66:d8:72:1b:ea:a5:b0:85:2f:31: 5e:0f:24:26:4d:00:0d:51:17:d7:5a:4b:44:a7:3d: fa:49:4a:e7:92:31:99:ba:a7:cf:c7:d5:95:fc:6a: 2e:5f:4a:17:2b:91:99:67:e3:10:00:23:34:31:8d: 49:38:bd:24:17:5c:a0:7e:90:40:48:f9:43:57:fc: 20:cf:6c:99:04:95:40:51:06:ad:4a:f8:31:35:c4: 05:2d:19:c9:86:7f:04:63:bd:e0:59:06:41:40:f7: 26:73:0f:83:cf:9a:bc:98:93:b9:26:03:a3:40:e6: c5:8e:46:5d:e4:2f:59:a2:03:49:33:1c:ad:32:1e: 81:57:dc:d3:9b:8d:16:34:51:d0:ad:9a:3a:7d:df: ff:49:6c:b7:5a:b9:ae:34:bf:18:ac:91:43:d1:82: 4b:d4:64:a4:84:fa:2d:43:5f:21:c6:92:ef:35:37: 67:61:11:b7:e5:6f:b3:97:47:11:03:a8:fe:4d:ad: 84:a0:f0:09:43:f6:32:88:84:a4:82:32:1e:89:fc: 41:74:32:3c:0a:ef:0f:cf:6c:97:64:82:e1:2c:cd: d6:ff:39:63:4b:57:ee:fd:ea:79:cc:74:09:1c:70: 35:88:e9:39:8e:87:b6:b0:d9:3f:eb:ee:69:3f:c5: 9c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E7:7D:F2:7F:5A:B1:E1:3A:0B:92:67:19:FD:78:2B:C8:69:D2:AF X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.149.25.0/24 Signature Algorithm: sha256WithRSAEncryption 45:21:b4:13:75:bc:fc:f2:5b:fa:63:ee:3d:6c:b1:5f:6c:3a: 73:e5:17:8c:ab:be:25:ca:63:d4:fa:d4:c6:f4:26:45:9d:52: e7:8b:8b:a1:66:e6:f3:5a:73:cd:a7:85:f8:d8:51:01:ba:44: e4:2d:a1:0b:e2:11:71:f3:04:14:06:e3:49:4f:d4:6e:df:de: c8:b4:d5:d5:9f:41:c8:8d:4a:d1:3d:92:e1:5f:95:77:c2:c6: 12:e8:01:13:f2:8b:80:f9:59:a8:db:f0:9e:72:11:da:46:d7: b9:60:62:1f:c8:3f:bd:2c:10:a2:7f:ef:d7:fb:9b:c8:e1:3f: 36:79:c3:c2:4f:6b:83:73:e3:40:79:9c:81:a5:c9:3f:ab:1f: a8:d6:14:17:0c:8c:4c:f8:ef:55:54:f2:43:67:71:aa:6b:de: e9:11:79:01:6b:c6:12:a5:09:d2:0b:30:e1:d7:ad:f0:99:44: 88:6b:fe:d2:7c:1d:e8:f8:16:6a:d4:d3:ff:6d:12:c0:1e:a5: 3d:c9:0a:d6:54:6d:34:2c:22:fc:c6:a0:47:ad:b5:a8:cc:01: bb:66:8b:49:a6:91:63:e3:06:0a:e6:3b:40:06:b0:67:d3:b2: 5a:05:7b:08:c6:da:01:fd:b4:51:0d:19:3e:62:c5:d0:dc:2d: ad:5f:03:bf -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUYcbsKik+Pan6CghRzJ7Uhqg9Js8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDJaFw0yNjExMjAxNTQ5MDJaMDMxMTAvBgNV BAMTKERDRTc3REYyN0Y1QUIxRTEzQTBCOTI2NzE5RkQ3ODJCQzg2OUQyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0pC9hZthyG+qlsIUvMV4PJCZN AA1RF9daS0SnPfpJSueSMZm6p8/H1ZX8ai5fShcrkZln4xAAIzQxjUk4vSQXXKB+ kEBI+UNX/CDPbJkElUBRBq1K+DE1xAUtGcmGfwRjveBZBkFA9yZzD4PPmryYk7km A6NA5sWORl3kL1miA0kzHK0yHoFX3NObjRY0UdCtmjp93/9JbLdaua40vxiskUPR gkvUZKSE+i1DXyHGku81N2dhEbflb7OXRxEDqP5NrYSg8AlD9jKIhKSCMh6J/EF0 MjwK7w/PbJdkguEszdb/OWNLV+796nnMdAkccDWI6TmOh7aw2T/r7mk/xZx9AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU3Od98n9aseE6C5JnGf14K8hp0q8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzQz OTJlMzIzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMGVGTANBgkqhkiG9w0BAQsFAAOCAQEARSG0E3W8/PJb+mPuPWyxX2w6 c+UXjKu+Jcpj1PrUxvQmRZ1S54uLoWbm81pzzaeF+NhRAbpE5C2hC+IRcfMEFAbj SU/Ubt/eyLTV1Z9ByI1K0T2S4V+Vd8LGEugBE/KLgPlZqNvwnnIR2kbXuWBiH8g/ vSwQon/v1/ubyOE/NnnDwk9rg3PjQHmcgaXJP6sfqNYUFwyMTPjvVVTyQ2dxqmve 6RF5AWvGEqUJ0gsw4det8JlEiGv+0nwd6PgWatTT/20SwB6lPckK1lRtNCwi/Mag R621qMwBu2aLSaaRY+MGCuY7QAawZ9OyWgV7CMbaAf20UQ0ZPmLF0NwtrV8Dvw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:18 2025 by rpki-client