This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3136302e3234342e302f32342d3234203d3e20313336373837.roa File: 3139332e3136302e3234342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: esiXLjtBDIdvpwC+SRvsahLt5AKWN32L4rpHlvjD5mI= Subject key identifier: 7C:C8:54:53:12:F4:6E:D4:7C:48:F6:0A:DD:2F:A5:30:C0:1F:E1:64 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 09EE726A2A4CC78843AB8AA4E5A5F95516914E42 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3136302e3234342e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:39 +0000 ROA not before: Fri 28 Nov 2025 11:44:39 +0000 ROA not after: Fri 27 Nov 2026 11:49:39 +0000 asID: 136787 IP address blocks: 193.160.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ee:72:6a:2a:4c:c7:88:43:ab:8a:a4:e5:a5:f9:55:16:91:4e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:39 2025 GMT Not After : Nov 27 11:49:39 2026 GMT Subject: CN=7CC8545312F46ED47C48F60ADD2FA530C01FE164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:14:4e:b6:55:b5:03:70:98:63:83:1b:88:af: d4:0e:fb:44:8c:91:1b:74:25:6a:6d:db:62:01:3d: 0d:19:f1:89:d9:fb:01:76:e6:91:4f:b7:2d:6d:e4: 41:78:28:5f:01:df:70:03:ad:78:a8:e6:67:4c:24: 5e:2a:9f:d5:4e:d8:99:f3:af:d1:85:07:9c:b8:d3: c7:2a:35:ce:59:80:bf:a6:74:25:45:86:25:73:d4: 95:50:e2:15:20:de:3f:c8:a4:65:1d:1c:3e:cb:77: eb:e1:5b:eb:53:95:aa:c7:31:f9:c0:26:2a:2b:48: 4f:8e:6f:62:f0:da:c7:69:b8:6c:e2:3a:e8:cc:eb: 45:a6:07:7a:36:01:37:ef:18:8b:aa:fc:b5:3d:15: 49:e4:05:62:f3:5b:02:32:31:7e:75:b8:61:20:b9: 16:82:b5:fa:fb:4c:7c:12:8d:46:5a:48:27:7e:93: 84:c7:cc:45:42:26:fe:df:30:c8:7f:70:85:66:c4: 19:c9:73:17:d9:72:8f:b4:2d:84:76:29:58:d0:97: 34:da:e6:7e:e8:39:7b:13:2f:ae:19:22:4a:fe:8a: 3e:52:bf:0a:f8:f6:3b:92:8c:ed:34:25:e5:8c:84: 6d:a1:45:07:b5:72:db:c9:83:8b:d8:ea:dd:ad:ec: 28:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C8:54:53:12:F4:6E:D4:7C:48:F6:0A:DD:2F:A5:30:C0:1F:E1:64 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3136302e3234342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.160.244.0/24 Signature Algorithm: sha256WithRSAEncryption 19:fd:0c:40:9a:4f:8e:70:f1:ca:a3:bd:af:70:88:60:c3:52: a7:ab:19:02:3d:d8:d5:34:3e:ac:a1:fe:82:23:a4:89:78:77: b4:5b:c0:9f:ed:29:d0:06:84:75:16:86:cb:46:72:38:9c:b6: 82:6e:45:ad:f3:5b:4e:dc:40:0d:33:e8:cf:a2:de:94:c5:a3: ab:7c:6e:7e:a7:be:f1:f9:86:a1:55:3f:76:15:8f:85:99:f5: 9a:d2:9c:8a:89:83:34:cc:6b:d3:36:68:e5:c9:88:42:16:b3: 45:2b:45:25:ff:db:89:a2:c9:a5:fd:12:db:e0:11:3b:e1:30: 85:9c:d1:29:f8:c7:54:9f:a9:17:a3:d3:0e:96:ac:dd:b9:ac: 87:ce:3a:7c:1f:b9:73:b3:05:76:82:89:57:32:e4:49:de:f4: 61:2c:98:03:21:07:c8:2c:5e:f1:b2:c3:e0:17:44:95:ce:f8: fa:f0:18:82:aa:25:39:12:f9:5f:08:be:56:33:78:d2:b4:98: 49:71:c0:7c:7f:2b:94:3c:4f:e8:a2:8e:7c:5f:bf:03:09:30: df:13:f7:20:07:54:86:3f:2e:39:67:6d:dc:de:ff:35:d8:ca: 06:43:da:93:05:64:a6:e5:21:1d:cf:f9:48:5c:11:5a:67:c8: ac:05:75:6a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUCe5yaipMx4hDq4qk5aX5VRaRTkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzlaFw0yNjExMjcxMTQ5MzlaMDMxMTAvBgNV BAMTKDdDQzg1NDUzMTJGNDZFRDQ3QzQ4RjYwQUREMkZBNTMwQzAxRkUxNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FE62VbUDcJhjgxuIr9QO+0SM kRt0JWpt22IBPQ0Z8YnZ+wF25pFPty1t5EF4KF8B33ADrXio5mdMJF4qn9VO2Jnz r9GFB5y408cqNc5ZgL+mdCVFhiVz1JVQ4hUg3j/IpGUdHD7Ld+vhW+tTlarHMfnA JiorSE+Ob2Lw2sdpuGziOujM60WmB3o2ATfvGIuq/LU9FUnkBWLzWwIyMX51uGEg uRaCtfr7THwSjUZaSCd+k4THzEVCJv7fMMh/cIVmxBnJcxfZco+0LYR2KVjQlzTa 5n7oOXsTL64ZIkr+ij5Svwr49juSjO00JeWMhG2hRQe1ctvJg4vY6t2t7CgrAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUfMhUUxL0btR8SPYK3S+lMMAf4WQwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzYz MDJlMzIzNDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwaD0MA0GCSqGSIb3DQEBCwUAA4IBAQAZ/QxAmk+OcPHKo72vcIhg w1KnqxkCPdjVND6sof6CI6SJeHe0W8Cf7SnQBoR1FobLRnI4nLaCbkWt81tO3EAN M+jPot6UxaOrfG5+p77x+YahVT92FY+FmfWa0pyKiYM0zGvTNmjlyYhCFrNFK0Ul /9uJosml/RLb4BE74TCFnNEp+MdUn6kXo9MOlqzduayHzjp8H7lzswV2golXMuRJ 3vRhLJgDIQfILF7xssPgF0SVzvj68BiCqiU5EvlfCL5WM3jStJhJccB8fyuUPE/o oo58X78DCTDfE/cgB1SGPy45Z23c3v812MoGQ9qTBWSm5SEdz/lIXBFaZ8isBXVq -----END CERTIFICATE-----Generated at Sat Dec 6 23:38:24 2025 by rpki-client