This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32362e302f32342d3234203d3e20313336373837.roa File: 3139332e3134392e32362e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: gPHuVq985U5UtjdFGoS5G+8yp/1m3S1ZB2Q6jMVIAag= Subject key identifier: 11:73:05:78:2B:A7:09:20:D5:B3:C9:46:17:CE:52:9E:1E:20:2D:6A Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 5598F427F0A99F7844A2145F000C8638549C287E Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32362e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:04 +0000 ROA not before: Fri 21 Nov 2025 15:44:04 +0000 ROA not after: Fri 20 Nov 2026 15:49:04 +0000 asID: 136787 IP address blocks: 193.149.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:98:f4:27:f0:a9:9f:78:44:a2:14:5f:00:0c:86:38:54:9c:28:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:04 2025 GMT Not After : Nov 20 15:49:04 2026 GMT Subject: CN=117305782BA70920D5B3C94617CE529E1E202D6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d1:cd:07:0e:0f:7e:c6:64:2d:80:ff:75:6d: 0d:ad:a4:54:da:78:4c:3e:f1:fb:43:c7:e3:42:b0: 72:ca:93:80:30:78:a0:10:f1:c2:b3:0d:82:4f:32: ec:38:3a:eb:30:4f:42:15:d2:a8:ca:85:62:97:44: 57:e8:66:b9:ee:77:44:8c:d7:84:d7:c8:86:25:4a: 07:96:bf:30:4f:ac:24:7d:55:c7:cd:39:ee:f8:5f: 97:83:5d:bc:5d:d8:5c:63:d5:fd:cd:2f:ad:66:cc: d8:50:ac:94:a4:71:55:91:c8:ba:cf:9c:c4:57:ce: b2:a5:d5:4d:f3:a9:5c:05:cc:df:ee:c2:2b:37:70: 36:ba:41:31:e6:77:b6:04:6e:ed:01:e8:2c:14:42: cb:61:81:b7:74:bc:1c:f8:fc:bd:1f:f8:3f:94:cf: 77:56:f7:f6:f0:4b:99:30:a1:5a:b3:88:1f:d5:a8: 66:79:a6:ee:cf:25:3f:41:53:74:34:7d:e8:4a:5b: 2e:2c:50:79:42:94:c6:70:c2:61:70:61:e7:bc:5c: ce:37:7c:1d:ab:54:d6:9f:d5:76:51:0b:3f:01:2f: 4c:f7:4b:a0:8b:ba:24:3a:92:91:9d:16:16:c5:02: f8:70:0e:73:5c:64:ad:45:20:d4:4f:f0:bc:89:b6: 35:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:73:05:78:2B:A7:09:20:D5:B3:C9:46:17:CE:52:9E:1E:20:2D:6A X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32362e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.149.26.0/24 Signature Algorithm: sha256WithRSAEncryption 60:06:6d:2f:4d:a7:14:5b:42:03:cb:a9:4c:09:dc:3b:27:4d: a8:47:21:7c:10:e4:5f:6a:d1:95:b1:e1:35:8d:7e:18:74:21: b7:e9:bb:d4:1f:3f:ae:a7:46:9b:f4:e1:07:93:96:4d:4f:9c: 0d:5b:c1:e7:8f:e9:06:23:b7:eb:e4:7e:e8:55:80:4c:99:f2: 16:bb:0f:2d:41:e4:a7:8f:67:7c:0b:e5:03:e1:50:19:a1:39: e4:5f:03:1e:e5:37:05:62:77:1e:6f:84:0d:c5:9e:6f:e3:6c: 86:ca:61:97:d2:75:7b:7d:fc:ac:3c:53:34:f3:4b:08:68:63: 16:fe:a0:a1:cb:4a:24:05:ad:ce:9b:96:b5:72:aa:54:f6:e2: 6a:a4:0d:e6:96:2a:b6:4e:6e:49:35:b4:3e:e3:ec:eb:b9:c5: 4a:16:72:7a:b6:5d:c4:0a:4f:44:68:66:6e:5f:15:48:61:a4: 56:31:1a:6f:6f:c8:15:70:c4:36:75:ea:3f:bd:b5:a4:97:95: 22:1c:b1:03:b1:98:d7:0d:5b:fe:af:37:2f:f7:48:eb:aa:09: 2f:d6:ff:53:34:cf:18:ee:a1:d8:5b:fd:d3:79:1e:4b:e6:82: a4:85:b6:8d:10:fb:72:e0:d2:0f:60:fc:c4:5c:cc:22:38:de: b8:08:e6:bc -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUVZj0J/Cpn3hEohRfAAyGOFScKH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDRaFw0yNjExMjAxNTQ5MDRaMDMxMTAvBgNV BAMTKDExNzMwNTc4MkJBNzA5MjBENUIzQzk0NjE3Q0U1MjlFMUUyMDJENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD0c0HDg9+xmQtgP91bQ2tpFTa eEw+8ftDx+NCsHLKk4AweKAQ8cKzDYJPMuw4OuswT0IV0qjKhWKXRFfoZrnud0SM 14TXyIYlSgeWvzBPrCR9VcfNOe74X5eDXbxd2Fxj1f3NL61mzNhQrJSkcVWRyLrP nMRXzrKl1U3zqVwFzN/uwis3cDa6QTHmd7YEbu0B6CwUQsthgbd0vBz4/L0f+D+U z3dW9/bwS5kwoVqziB/VqGZ5pu7PJT9BU3Q0fehKWy4sUHlClMZwwmFwYee8XM43 fB2rVNaf1XZRCz8BL0z3S6CLuiQ6kpGdFhbFAvhwDnNcZK1FINRP8LyJtjUbAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUEXMFeCunCSDVs8lGF85Snh4gLWowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzQz OTJlMzIzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMGVGjANBgkqhkiG9w0BAQsFAAOCAQEAYAZtL02nFFtCA8upTAncOydN qEchfBDkX2rRlbHhNY1+GHQht+m71B8/rqdGm/ThB5OWTU+cDVvB54/pBiO36+R+ 6FWATJnyFrsPLUHkp49nfAvlA+FQGaE55F8DHuU3BWJ3Hm+EDcWeb+Nshsphl9J1 e338rDxTNPNLCGhjFv6goctKJAWtzpuWtXKqVPbiaqQN5pYqtk5uSTW0PuPs67nF ShZyerZdxApPRGhmbl8VSGGkVjEab2/IFXDENnXqP721pJeVIhyxA7GY1w1b/q83 L/dI66oJL9b/UzTPGO6h2Fv903keS+aCpIW2jRD7cuDSD2D8xFzMIjjeuAjmvA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:34 2025 by rpki-client