This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3136302e3234362e302f32342d3234203d3e20313336373837.roa File: 3139332e3136302e3234362e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: T04ElyjiFv17CqZxUhdqbJYqUKA1siB9CbZeVPX4Iuo= Subject key identifier: 48:83:D0:78:C7:33:84:BA:B7:32:AD:C6:04:5A:44:1B:FB:10:2F:52 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 23CB8917F5B8662CEDD910AEAAF1A89E381C1C70 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3136302e3234362e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:18 +0000 ROA not before: Fri 28 Nov 2025 11:44:18 +0000 ROA not after: Fri 27 Nov 2026 11:49:18 +0000 asID: 136787 IP address blocks: 193.160.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:cb:89:17:f5:b8:66:2c:ed:d9:10:ae:aa:f1:a8:9e:38:1c:1c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:18 2025 GMT Not After : Nov 27 11:49:18 2026 GMT Subject: CN=4883D078C73384BAB732ADC6045A441BFB102F52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7e:4d:b6:f9:ff:98:5a:e4:b7:aa:cf:e3:67: cb:30:14:8b:43:a4:a5:8b:b3:40:df:d7:3f:f1:b8: 06:a4:33:7c:50:8c:fc:a2:7c:fe:3e:9f:1a:e2:20: 31:84:e3:ca:77:af:e4:9a:3d:41:f3:a4:0e:36:fb: 42:d4:ec:f0:e2:4a:5c:60:d2:a8:e3:ea:4e:19:a7: 17:d3:26:9f:eb:e3:e6:a4:e5:11:29:08:69:75:cb: 6c:25:3a:88:09:13:3a:8f:ad:0a:fd:10:10:c6:4f: 0f:fb:26:ce:74:8e:49:fa:a7:a0:a1:c3:4f:7e:6d: 48:75:17:61:53:42:f2:7c:34:0c:ab:73:60:39:2c: c3:99:d5:5d:8f:6e:f9:99:be:eb:f6:8b:12:52:05: 91:02:d6:8a:a4:e5:83:6e:3c:7b:83:7f:b9:31:b7: 3c:7c:53:5d:44:6c:db:e6:d7:68:a0:dc:47:9a:4f: 5b:a5:7f:18:db:38:20:6b:83:ad:74:31:df:b0:28: ab:27:74:4f:88:33:40:48:2c:51:02:6a:f8:63:80: 42:7b:a9:dd:68:ec:1c:43:ef:e9:67:43:1c:93:e1: da:09:42:6d:26:f3:df:af:a9:4c:30:27:66:6a:46: e3:5d:bc:fa:1a:96:08:ce:a7:f6:b6:41:88:95:da: 6a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:83:D0:78:C7:33:84:BA:B7:32:AD:C6:04:5A:44:1B:FB:10:2F:52 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3136302e3234362e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.160.246.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:04:6b:88:9b:ba:06:5d:4a:b1:82:cb:6a:ed:a7:f9:21:a7: 2f:cb:67:8c:58:6c:e9:23:f1:d0:4d:34:82:f3:2f:a6:f9:ba: a0:a4:a9:3f:d1:fd:f8:7c:eb:7d:ab:67:ca:6e:b9:39:50:62: aa:66:2d:68:fc:bc:a7:c6:55:cb:dd:41:72:be:0b:82:07:d2: 14:c6:6b:99:a6:d7:e9:fe:86:e0:7d:fa:f8:5e:75:52:ae:bd: 73:05:ed:62:29:74:ce:dd:f9:dd:28:01:1d:f2:0d:3b:b3:77: 8c:06:b4:3d:8a:ed:95:63:e2:a1:00:7f:7d:9c:34:5d:25:69: c9:6b:b0:cd:57:00:a0:91:b7:e7:0e:35:29:d3:86:65:28:53: d0:85:c1:75:5f:bc:eb:b7:39:85:73:eb:ea:04:5b:4b:3a:ca: a5:b3:96:ee:8d:65:1d:c2:90:d0:7d:46:18:82:c5:09:0c:d6: e6:95:80:f6:a5:c4:4b:2f:51:fb:19:e8:92:ae:c7:4a:11:35: 19:9a:e4:0f:74:fb:40:de:f9:34:22:bb:20:ec:7d:dc:4c:2a: 64:e5:1e:5f:ef:da:d0:c4:ce:57:28:88:97:dd:af:9c:f4:81: a0:d2:76:0a:bf:f2:f8:37:11:c0:5e:6f:8d:69:32:ec:82:a5: 1b:41:c2:6f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUI8uJF/W4Zizt2RCuqvGonjgcHHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MThaFw0yNjExMjcxMTQ5MThaMDMxMTAvBgNV BAMTKDQ4ODNEMDc4QzczMzg0QkFCNzMyQURDNjA0NUE0NDFCRkIxMDJGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVfk22+f+YWuS3qs/jZ8swFItD pKWLs0Df1z/xuAakM3xQjPyifP4+nxriIDGE48p3r+SaPUHzpA42+0LU7PDiSlxg 0qjj6k4ZpxfTJp/r4+ak5REpCGl1y2wlOogJEzqPrQr9EBDGTw/7Js50jkn6p6Ch w09+bUh1F2FTQvJ8NAyrc2A5LMOZ1V2PbvmZvuv2ixJSBZEC1oqk5YNuPHuDf7kx tzx8U11EbNvm12ig3EeaT1ulfxjbOCBrg610Md+wKKsndE+IM0BILFECavhjgEJ7 qd1o7BxD7+lnQxyT4doJQm0m89+vqUwwJ2ZqRuNdvPoalgjOp/a2QYiV2mq1AgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUSIPQeMczhLq3Mq3GBFpEG/sQL1IwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzYz MDJlMzIzNDM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwaD2MA0GCSqGSIb3DQEBCwUAA4IBAQBbBGuIm7oGXUqxgstq7af5 Iacvy2eMWGzpI/HQTTSC8y+m+bqgpKk/0f34fOt9q2fKbrk5UGKqZi1o/LynxlXL 3UFyvguCB9IUxmuZptfp/obgffr4XnVSrr1zBe1iKXTO3fndKAEd8g07s3eMBrQ9 iu2VY+KhAH99nDRdJWnJa7DNVwCgkbfnDjUp04ZlKFPQhcF1X7zrtzmFc+vqBFtL Osqls5bujWUdwpDQfUYYgsUJDNbmlYD2pcRLL1H7GeiSrsdKETUZmuQPdPtA3vk0 Irsg7H3cTCpk5R5f79rQxM5XKIiX3a+c9IGg0nYKv/L4NxHAXm+NaTLsgqUbQcJv -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:22 2025 by rpki-client