This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3136302e3234372e302f32342d3234203d3e20313336373837.roa File: 3139332e3136302e3234372e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 7GtWYZlZDOEp2Ebb5UA4tWLtRA1IanL7/0nAU1jqWyE= Subject key identifier: 83:69:B8:CF:54:86:8C:D5:CF:CF:70:5A:2B:0C:A9:42:72:36:48:BF Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 08F99D1DA5E616DD8EE9B54591FF68D521226FA0 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3136302e3234372e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:22 +0000 ROA not before: Fri 28 Nov 2025 11:44:22 +0000 ROA not after: Fri 27 Nov 2026 11:49:22 +0000 asID: 136787 IP address blocks: 193.160.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f9:9d:1d:a5:e6:16:dd:8e:e9:b5:45:91:ff:68:d5:21:22:6f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:22 2025 GMT Not After : Nov 27 11:49:22 2026 GMT Subject: CN=8369B8CF54868CD5CFCF705A2B0CA942723648BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:08:05:6e:d7:2e:8a:c8:4a:ef:e5:76:51:5f: 9a:b7:5a:a6:87:19:02:e2:9a:de:b5:33:89:f8:a0: 4f:d0:34:47:ba:ce:5f:dd:d4:03:a9:00:19:42:75: 2f:c2:30:15:11:df:12:56:85:f0:90:5b:11:ad:e3: ad:d8:cc:89:1e:ac:4f:a8:e8:e7:dc:1d:dc:e0:6f: cf:ef:d2:ef:7c:90:2d:c0:2e:05:3b:f4:f1:22:4f: 1b:14:c2:8d:df:49:04:ca:e2:55:ed:a0:52:9a:18: 6d:14:13:b0:03:32:46:68:f8:cb:92:97:e4:3f:c8: 3a:8b:eb:a3:dc:80:71:0f:2f:45:8b:f2:28:b6:f7: 07:9f:71:7c:a3:75:b7:31:f3:65:47:62:cc:ad:be: 03:40:78:98:5d:8d:e6:40:5c:d4:94:0a:87:ad:bc: b9:c1:5d:f2:44:b7:2a:f0:a8:37:4b:84:d6:1e:8f: 3f:9d:33:d9:c3:35:ae:36:ca:0c:63:60:1b:43:d3: 2c:67:a8:0e:79:68:68:16:59:5c:7f:9f:56:37:3c: 48:32:74:d9:49:75:11:b7:88:25:b2:7a:40:1f:dc: 14:09:d7:8e:f2:05:cb:4c:96:25:44:14:51:64:5c: 1a:18:82:53:8f:92:1f:ef:95:48:3e:67:d3:6c:af: 03:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:69:B8:CF:54:86:8C:D5:CF:CF:70:5A:2B:0C:A9:42:72:36:48:BF X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3136302e3234372e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.160.247.0/24 Signature Algorithm: sha256WithRSAEncryption 24:0b:dc:3b:7d:1f:01:38:a2:63:bc:a7:a0:30:af:a3:bf:73: 84:22:f8:34:a9:04:9a:2e:fe:d5:53:61:7e:cb:53:ad:6f:17: a5:53:61:7f:8c:84:09:a6:ef:91:b9:98:14:82:3d:63:f5:f9: 7c:37:03:f1:85:a3:93:ca:fc:b6:ac:ec:ae:00:ca:bb:9d:10: 53:da:01:38:8a:90:ae:aa:87:3c:5b:ad:9e:2e:fc:43:e4:0a: ad:9f:12:ec:dc:01:30:65:8e:90:fc:e7:92:e6:39:71:1e:bd: df:03:20:2f:16:4f:8c:5b:10:3a:42:e3:3a:d6:e6:37:e5:0d: aa:e6:6a:b2:ff:ee:f6:5f:f4:d4:ae:72:71:7b:4b:cb:f2:9f: dd:f2:2a:c2:60:0d:41:04:14:88:62:98:f8:dc:e1:fa:65:24: 54:bb:08:0b:f8:07:6c:5f:77:ef:4d:56:af:15:08:90:13:ca: 01:eb:81:0b:20:89:47:36:ba:72:24:e7:af:52:6f:18:73:c9: 08:76:3b:af:0b:92:ce:cf:71:00:f9:08:ac:97:70:15:52:09: 18:ea:4f:ea:7b:3c:44:51:41:f0:36:aa:5f:dc:25:05:d9:c9: bd:68:6f:05:e9:4e:fb:f5:e8:dd:1b:33:ff:07:20:a3:15:e8: 98:6e:aa:65 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUCPmdHaXmFt2O6bVFkf9o1SEib6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjJaFw0yNjExMjcxMTQ5MjJaMDMxMTAvBgNV BAMTKDgzNjlCOENGNTQ4NjhDRDVDRkNGNzA1QTJCMENBOTQyNzIzNjQ4QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfCAVu1y6KyErv5XZRX5q3WqaH GQLimt61M4n4oE/QNEe6zl/d1AOpABlCdS/CMBUR3xJWhfCQWxGt463YzIkerE+o 6OfcHdzgb8/v0u98kC3ALgU79PEiTxsUwo3fSQTK4lXtoFKaGG0UE7ADMkZo+MuS l+Q/yDqL66PcgHEPL0WL8ii29wefcXyjdbcx82VHYsytvgNAeJhdjeZAXNSUCoet vLnBXfJEtyrwqDdLhNYejz+dM9nDNa42ygxjYBtD0yxnqA55aGgWWVx/n1Y3PEgy dNlJdRG3iCWyekAf3BQJ147yBctMliVEFFFkXBoYglOPkh/vlUg+Z9NsrwN5AgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUg2m4z1SGjNXPz3BaKwypQnI2SL8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzYz MDJlMzIzNDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwaD3MA0GCSqGSIb3DQEBCwUAA4IBAQAkC9w7fR8BOKJjvKegMK+j v3OEIvg0qQSaLv7VU2F+y1OtbxelU2F/jIQJpu+RuZgUgj1j9fl8NwPxhaOTyvy2 rOyuAMq7nRBT2gE4ipCuqoc8W62eLvxD5AqtnxLs3AEwZY6Q/OeS5jlxHr3fAyAv Fk+MWxA6QuM61uY35Q2q5mqy/+72X/TUrnJxe0vL8p/d8irCYA1BBBSIYpj43OH6 ZSRUuwgL+AdsX3fvTVavFQiQE8oB64ELIIlHNrpyJOevUm8Yc8kIdjuvC5LOz3EA +Qisl3AVUgkY6k/qezxEUUHwNqpf3CUF2cm9aG8F6U779ejdGzP/ByCjFeiYbqpl -----END CERTIFICATE-----Generated at Sat Dec 6 15:48:30 2025 by rpki-client