This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3136302e3234352e302f32342d3234203d3e20313336373837.roa File: 3139332e3136302e3234352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: imh0u7+RBuS/dtOEmcPGjqZg+hmt3ygX5gL+4TKvJEg= Subject key identifier: 94:C7:21:1C:E1:16:20:0D:61:F8:FC:C1:C0:44:2F:09:37:D8:DA:68 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 41A93FD80C982CF8F4653F19A558F1A667F20BEA Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3136302e3234352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:16 +0000 ROA not before: Fri 28 Nov 2025 11:44:16 +0000 ROA not after: Fri 27 Nov 2026 11:49:16 +0000 asID: 136787 IP address blocks: 193.160.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a9:3f:d8:0c:98:2c:f8:f4:65:3f:19:a5:58:f1:a6:67:f2:0b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:16 2025 GMT Not After : Nov 27 11:49:16 2026 GMT Subject: CN=94C7211CE116200D61F8FCC1C0442F0937D8DA68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:99:c3:a7:e1:07:e7:41:ff:5e:61:07:52:b3: 7e:9b:8c:29:74:b4:0d:97:4b:19:da:cc:b8:33:4e: e3:b1:89:e2:58:41:4c:05:f6:5a:9d:0d:58:4b:a6: 8e:6b:e7:e2:15:23:21:42:22:0e:b3:d6:e7:18:6d: 31:cf:38:7d:5c:e5:db:a0:3d:f9:16:72:04:e2:a1: fd:22:19:66:5a:c1:c2:b5:b3:ad:12:1c:4e:77:8e: 76:06:85:96:de:5e:39:7a:54:e1:ac:60:1d:4e:50: e7:a5:49:9f:e7:61:36:5f:41:24:33:f2:46:2c:dc: c6:10:93:5a:8c:a8:d0:aa:02:47:eb:a8:fa:fc:bc: d7:86:24:17:83:1c:72:23:32:18:a2:f8:5c:3f:88: e7:ff:7d:2a:a3:08:85:47:cb:ff:f1:8d:f3:e0:95: ea:d5:d9:8e:32:18:91:be:2a:1a:86:ab:39:c2:d4: b6:a1:be:ce:d1:3a:07:0a:2b:d5:10:86:76:7b:92: db:19:2e:76:a5:03:3d:24:80:b0:d4:65:09:73:fe: f6:3a:92:4d:14:63:42:ee:a9:5f:86:4a:7e:73:c9: 16:de:a6:65:95:ce:c6:7f:65:a1:20:19:14:fd:81: 5c:55:aa:94:be:cb:d0:41:51:86:d4:d7:b7:53:dc: c2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C7:21:1C:E1:16:20:0D:61:F8:FC:C1:C0:44:2F:09:37:D8:DA:68 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3136302e3234352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.160.245.0/24 Signature Algorithm: sha256WithRSAEncryption 27:21:33:49:e3:37:6c:50:f8:9b:cb:e7:15:71:a0:b7:8a:0b: dc:d5:f1:da:04:f9:09:2e:e9:04:90:8d:d4:1f:82:e0:14:ed: c2:18:2d:8c:4f:23:0e:ba:33:dc:e7:0c:ff:a0:3f:ba:83:cb: 76:a8:e6:08:c2:35:b4:7c:98:1a:bf:a0:fa:4d:3f:84:a7:cf: c0:90:da:6f:7f:42:b2:7d:06:e0:39:c7:04:9e:db:c5:2e:6f: a2:54:07:29:03:a8:c5:e1:50:a8:b5:b7:34:d7:5b:90:55:26: 39:6f:5e:9d:f3:89:18:c7:ca:2a:52:d4:d4:45:7e:04:32:7b: b5:29:e1:ca:bd:f1:5f:5d:27:44:e7:9c:78:04:71:17:e5:2c: e2:d8:69:ad:b2:b2:77:04:29:59:42:62:e8:e0:a4:75:f2:39: e8:a0:16:82:82:e7:4a:86:30:cf:3f:d0:2a:a5:89:7f:81:e7: 2c:4a:05:61:36:7f:39:23:cd:02:3d:11:cf:9e:ee:81:90:9f: 64:19:89:10:dd:ab:8b:85:03:4f:5d:1c:27:7b:f8:61:e3:f6: 7b:d7:7f:92:d6:ba:36:c5:4a:4b:07:ac:50:1a:4c:44:20:69: b3:0f:2c:e4:a9:d4:3d:97:9e:2c:e1:81:5b:7c:f4:c5:29:ca: be:ec:b9:7a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUQak/2AyYLPj0ZT8ZpVjxpmfyC+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTZaFw0yNjExMjcxMTQ5MTZaMDMxMTAvBgNV BAMTKDk0QzcyMTFDRTExNjIwMEQ2MUY4RkNDMUMwNDQyRjA5MzdEOERBNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZmcOn4QfnQf9eYQdSs36bjCl0 tA2XSxnazLgzTuOxieJYQUwF9lqdDVhLpo5r5+IVIyFCIg6z1ucYbTHPOH1c5dug PfkWcgTiof0iGWZawcK1s60SHE53jnYGhZbeXjl6VOGsYB1OUOelSZ/nYTZfQSQz 8kYs3MYQk1qMqNCqAkfrqPr8vNeGJBeDHHIjMhii+Fw/iOf/fSqjCIVHy//xjfPg lerV2Y4yGJG+KhqGqznC1Lahvs7ROgcKK9UQhnZ7ktsZLnalAz0kgLDUZQlz/vY6 kk0UY0LuqV+GSn5zyRbepmWVzsZ/ZaEgGRT9gVxVqpS+y9BBUYbU17dT3MKzAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUlMchHOEWIA1h+PzBwEQvCTfY2mgwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzYz MDJlMzIzNDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwaD1MA0GCSqGSIb3DQEBCwUAA4IBAQAnITNJ4zdsUPiby+cVcaC3 igvc1fHaBPkJLukEkI3UH4LgFO3CGC2MTyMOujPc5wz/oD+6g8t2qOYIwjW0fJga v6D6TT+Ep8/AkNpvf0KyfQbgOccEntvFLm+iVAcpA6jF4VCotbc011uQVSY5b16d 84kYx8oqUtTURX4EMnu1KeHKvfFfXSdE55x4BHEX5Szi2GmtsrJ3BClZQmLo4KR1 8jnooBaCgudKhjDPP9AqpYl/gecsSgVhNn85I80CPRHPnu6BkJ9kGYkQ3auLhQNP XRwne/hh4/Z713+S1ro2xUpLB6xQGkxEIGmzDyzkqdQ9l54s4YFbfPTFKcq+7Ll6 -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:55 2025 by rpki-client