This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3132382e302f32342d3234203d3e20313336373837.roa File: 3139332e3138372e3132382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: WCfgAVYzjSbJsmHp9+AvcYGZbLEmL10yreQ7dLUw/U4= Subject key identifier: 42:93:55:9C:D1:7D:D0:1F:3C:64:CB:C8:AC:41:1D:DA:5E:C9:B7:09 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4DD922173B0E511B7B9A7DC9C9C7DA9EAF73D4DB Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3132382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:35 +0000 ROA not before: Fri 28 Nov 2025 11:44:35 +0000 ROA not after: Fri 27 Nov 2026 11:49:35 +0000 asID: 136787 IP address blocks: 193.187.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:d9:22:17:3b:0e:51:1b:7b:9a:7d:c9:c9:c7:da:9e:af:73:d4:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:35 2025 GMT Not After : Nov 27 11:49:35 2026 GMT Subject: CN=4293559CD17DD01F3C64CBC8AC411DDA5EC9B709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:20:dd:c5:5d:61:39:df:30:64:ae:6e:87:2b: 91:94:2c:b7:92:c1:a1:39:46:4e:fd:a4:6b:d6:78: 35:b3:61:74:a5:3e:b8:8b:76:02:3f:ac:27:16:0b: b2:b1:ac:ca:54:a7:30:7f:ca:18:2a:c2:28:c7:64: 5c:7f:b1:a7:e5:11:ae:89:9f:69:e8:ce:c0:27:a6: fe:76:d3:9e:d4:ad:71:6f:e6:74:0d:10:27:63:32: b1:35:aa:84:a2:8f:af:c2:14:ef:e3:39:44:fb:97: c4:e3:bc:c0:71:7b:f4:97:86:4b:8a:e4:2f:c7:ab: 3d:2b:01:83:4a:de:9f:35:b2:28:e2:5c:8e:f7:32: 3f:fe:9d:6c:51:1f:bd:16:fc:b6:ca:51:06:33:f7: 81:ee:94:67:7a:fb:fe:db:19:39:3b:21:69:84:9b: e5:90:29:ae:ab:02:75:ea:ef:9e:78:46:47:49:d3: 09:22:64:e5:76:e5:d8:46:60:ac:7e:53:68:da:9f: 5c:29:6d:ba:48:e8:9c:16:43:cf:d8:4e:ac:3a:45: 1f:45:6c:01:50:60:88:b6:83:9d:8a:2f:68:f9:56: 3e:1d:f2:10:66:9e:04:1a:48:b3:1d:b4:65:33:38: 30:c6:51:f2:59:36:c3:56:d3:93:63:d8:5a:89:ea: 22:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:93:55:9C:D1:7D:D0:1F:3C:64:CB:C8:AC:41:1D:DA:5E:C9:B7:09 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3132382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.187.128.0/24 Signature Algorithm: sha256WithRSAEncryption 52:2f:08:4b:65:e8:cd:f4:b9:02:d2:20:ff:a5:c7:13:5f:0d: 00:0b:3d:f7:44:ec:1d:0e:55:55:25:85:af:45:19:40:3f:56: b9:6b:b4:f1:76:f2:fb:35:83:c4:da:c3:ef:3d:ed:5e:e8:74: 5c:05:96:37:ad:0b:fc:c0:e8:79:01:af:8a:0a:16:97:4a:65: a2:4b:a6:cb:f3:f1:0a:b6:6a:5d:40:45:04:94:7a:f0:87:1f: da:5d:67:0b:18:c8:27:dd:39:34:3d:ed:1d:33:ae:a1:9e:e9: e8:7b:9e:c5:8d:03:e9:b6:86:12:1b:39:da:d5:fb:ff:7a:60: 71:49:28:82:1f:6b:8a:df:53:a8:5b:c7:6f:35:d4:26:33:65: 9c:4f:94:3a:55:8a:6d:63:9e:ba:5e:9d:7c:a1:a7:c0:1a:dd: 44:6a:63:d8:65:0d:7f:7d:3f:2e:7d:61:f2:52:2b:cc:a7:43: 5c:65:c5:ad:d0:6f:99:63:3a:54:b2:eb:bc:68:9e:ab:50:67: 71:e1:28:21:48:44:fe:a6:ed:3d:bd:db:a8:07:db:ba:df:7a: d1:f9:25:d2:73:5d:05:b0:2f:7a:7c:64:47:2c:a8:64:ce:49: 0d:86:fe:85:1c:ba:cb:0f:e2:af:57:53:8c:7d:af:17:45:39: 40:30:a3:74 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUTdkiFzsOURt7mn3Jycfanq9z1NswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzVaFw0yNjExMjcxMTQ5MzVaMDMxMTAvBgNV BAMTKDQyOTM1NTlDRDE3REQwMUYzQzY0Q0JDOEFDNDExRERBNUVDOUI3MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfIN3FXWE53zBkrm6HK5GULLeS waE5Rk79pGvWeDWzYXSlPriLdgI/rCcWC7KxrMpUpzB/yhgqwijHZFx/saflEa6J n2nozsAnpv52057UrXFv5nQNECdjMrE1qoSij6/CFO/jOUT7l8TjvMBxe/SXhkuK 5C/Hqz0rAYNK3p81sijiXI73Mj/+nWxRH70W/LbKUQYz94HulGd6+/7bGTk7IWmE m+WQKa6rAnXq7554RkdJ0wkiZOV25dhGYKx+U2jan1wpbbpI6JwWQ8/YTqw6RR9F bAFQYIi2g52KL2j5Vj4d8hBmngQaSLMdtGUzODDGUfJZNsNW05Nj2FqJ6iIzAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUQpNVnNF90B88ZMvIrEEd2l7JtwkwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzgz NzJlMzEzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwbuAMA0GCSqGSIb3DQEBCwUAA4IBAQBSLwhLZejN9LkC0iD/pccT Xw0ACz33ROwdDlVVJYWvRRlAP1a5a7TxdvL7NYPE2sPvPe1e6HRcBZY3rQv8wOh5 Aa+KChaXSmWiS6bL8/EKtmpdQEUElHrwhx/aXWcLGMgn3Tk0Pe0dM66hnunoe57F jQPptoYSGzna1fv/emBxSSiCH2uK31OoW8dvNdQmM2WcT5Q6VYptY566Xp18oafA Gt1EamPYZQ1/fT8ufWHyUivMp0NcZcWt0G+ZYzpUsuu8aJ6rUGdx4SghSET+pu09 vduoB9u633rR+SXSc10FsC96fGRHLKhkzkkNhv6FHLrLD+KvV1OMfa8XRTlAMKN0 -----END CERTIFICATE-----Generated at Sat Dec 6 21:40:14 2025 by rpki-client