This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32372e302f32342d3234203d3e20313336373837.roa File: 3139332e3134392e32372e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: m60ccWjhWuk/2E0veFEZzbgF0uBIhzzo3JIjHu5Cp7M= Subject key identifier: 8A:20:47:55:23:70:70:CC:84:10:8F:C6:65:31:D0:21:D7:54:C9:DD Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 613CD56FF997E62AEEEE70F0E22E34700CE555BC Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32372e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:05 +0000 ROA not before: Fri 21 Nov 2025 15:44:05 +0000 ROA not after: Fri 20 Nov 2026 15:49:05 +0000 asID: 136787 IP address blocks: 193.149.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:3c:d5:6f:f9:97:e6:2a:ee:ee:70:f0:e2:2e:34:70:0c:e5:55:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:05 2025 GMT Not After : Nov 20 15:49:05 2026 GMT Subject: CN=8A204755237070CC84108FC66531D021D754C9DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:01:b6:0e:03:32:ca:40:18:7a:22:e3:9c: 7b:15:65:49:6c:db:4b:26:dd:51:a5:bc:88:b9:5b: 6b:c5:fb:95:8e:ba:72:db:32:68:ee:ef:15:34:da: 6e:a5:d2:f0:cb:ce:78:c6:64:30:21:56:3e:23:2a: cc:d0:f0:c5:74:10:db:04:6f:d3:fa:ef:6c:3d:e6: 47:63:75:3b:b1:0f:bb:ea:ad:24:9e:09:f1:1c:7f: 07:1c:70:3d:12:06:52:aa:53:89:c6:d0:a7:dd:30: ae:18:05:08:9c:60:73:fe:26:96:31:79:9d:17:3f: 1d:32:62:88:3f:3c:37:13:d7:f7:96:e0:52:e2:ee: d4:58:88:dc:f4:df:66:29:03:7f:8b:d3:e7:5f:e8: 12:32:81:4e:de:42:f1:88:2b:0f:60:48:0e:4d:a2: 5b:e3:95:52:f2:f3:a5:9c:f7:7e:e8:36:4b:4d:25: bd:f3:a8:ea:ba:2f:33:7a:75:5f:d7:59:56:f0:41: 2e:b9:df:66:c9:d9:86:c2:d4:d7:f5:ac:77:e3:22: 6e:f0:db:24:45:84:8b:d7:1c:05:ba:70:4c:01:84: f9:b1:51:02:06:08:0a:14:fa:c5:8a:f5:18:02:6b: 41:92:2e:d6:87:d1:f1:74:4b:00:9b:b0:f8:c4:85: 33:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:20:47:55:23:70:70:CC:84:10:8F:C6:65:31:D0:21:D7:54:C9:DD X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32372e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.149.27.0/24 Signature Algorithm: sha256WithRSAEncryption c8:15:ad:ee:2b:4a:e6:f5:92:e5:9e:fd:07:d8:c2:ae:c9:5d: e1:3c:fa:0d:dc:cc:ea:ea:2c:9d:05:83:ff:85:43:f4:69:64: 72:8c:cd:a6:17:e0:75:91:0c:40:48:be:57:59:c6:95:26:46: f1:48:74:aa:e5:c1:2e:8a:1e:4f:42:ce:92:e2:4c:28:7d:5e: 4a:cf:57:f8:fd:d7:4b:28:0f:7e:41:ec:dd:80:f1:af:9c:7a: ff:70:21:2c:d5:25:23:f2:3f:d4:30:02:b8:d4:69:7e:1f:fe: 10:40:91:47:d7:e9:00:ef:c0:e3:26:2d:a0:08:2d:df:fa:c3: b1:f2:76:8c:40:58:c0:82:51:0b:10:ca:81:27:65:d2:bb:e8: 62:a8:4d:5c:2a:b6:cb:77:4e:28:97:89:42:03:bb:61:fe:93: 5e:c0:43:6d:9b:6d:36:eb:f5:e1:1d:c0:62:88:bd:64:19:98: 26:67:24:cc:79:88:a7:e0:fa:95:7f:ae:e7:02:30:09:45:03: 7f:ed:70:f1:35:54:ee:8d:0b:8b:9b:22:e3:ed:67:32:88:bf: 3a:ae:6d:42:fa:9e:62:cc:28:76:31:0d:cf:dd:47:07:3a:02: 29:b1:71:e5:04:49:e9:c6:48:82:17:a1:d2:1e:36:56:46:93: be:6d:26:a2 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUYTzVb/mX5iru7nDw4i40cAzlVbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDVaFw0yNjExMjAxNTQ5MDVaMDMxMTAvBgNV BAMTKDhBMjA0NzU1MjM3MDcwQ0M4NDEwOEZDNjY1MzFEMDIxRDc1NEM5REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1cgG2DgMyykAYeiLjnHsVZUls 20sm3VGlvIi5W2vF+5WOunLbMmju7xU02m6l0vDLznjGZDAhVj4jKszQ8MV0ENsE b9P672w95kdjdTuxD7vqrSSeCfEcfwcccD0SBlKqU4nG0KfdMK4YBQicYHP+JpYx eZ0XPx0yYog/PDcT1/eW4FLi7tRYiNz032YpA3+L0+df6BIygU7eQvGIKw9gSA5N olvjlVLy86Wc937oNktNJb3zqOq6LzN6dV/XWVbwQS6532bJ2YbC1Nf1rHfjIm7w 2yRFhIvXHAW6cEwBhPmxUQIGCAoU+sWK9RgCa0GSLtaH0fF0SwCbsPjEhTNfAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUiiBHVSNwcMyEEI/GZTHQIddUyd0wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzQz OTJlMzIzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMGVGzANBgkqhkiG9w0BAQsFAAOCAQEAyBWt7itK5vWS5Z79B9jCrsld 4Tz6DdzM6uosnQWD/4VD9GlkcozNphfgdZEMQEi+V1nGlSZG8Uh0quXBLooeT0LO kuJMKH1eSs9X+P3XSygPfkHs3YDxr5x6/3AhLNUlI/I/1DACuNRpfh/+EECRR9fp AO/A4yYtoAgt3/rDsfJ2jEBYwIJRCxDKgSdl0rvoYqhNXCq2y3dOKJeJQgO7Yf6T XsBDbZttNuv14R3AYoi9ZBmYJmckzHmIp+D6lX+u5wIwCUUDf+1w8TVU7o0Li5si 4+1nMoi/Oq5tQvqeYswodjENz91HBzoCKbFx5QRJ6cZIgheh0h42VkaTvm0mog== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:45 2025 by rpki-client