This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3132392e302f32342d3332203d3e203531313637.roa File: 3139332e3138372e3132392e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: GmqCa4l0ffchXtqSO8juIEKCFWZSA/Hz9IXReiRw4W8= Subject key identifier: 3A:CE:14:74:93:11:12:E1:AC:31:FB:D3:A4:09:F3:35:AB:1E:DB:10 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 262319CDD6D27BBFFAE5D98D8E4653453ED7397E Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3132392e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:50 +0000 ROA not before: Fri 28 Nov 2025 11:44:50 +0000 ROA not after: Fri 27 Nov 2026 11:49:50 +0000 asID: 51167 IP address blocks: 193.187.129.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:23:19:cd:d6:d2:7b:bf:fa:e5:d9:8d:8e:46:53:45:3e:d7:39:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:50 2025 GMT Not After : Nov 27 11:49:50 2026 GMT Subject: CN=3ACE1474931112E1AC31FBD3A409F335AB1EDB10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ae:2c:61:1d:04:f5:96:a3:a9:2b:0b:be:1a: 54:9d:c0:4c:67:8c:ff:9d:4f:61:ac:61:55:d2:84: 63:94:e9:4f:7f:81:91:d2:02:78:ee:b0:2d:2c:50: 56:ff:1c:8b:f1:02:8f:6a:41:3b:a8:31:e2:64:39: 9c:eb:07:eb:56:9c:4a:49:a6:04:cc:f0:79:55:2d: 32:93:a8:ea:85:58:64:6f:6e:36:50:3b:fc:54:c7: 32:f1:48:a7:43:e6:ab:e7:51:1b:78:e9:d4:54:73: 47:36:0f:bc:10:48:d6:c5:f3:4a:d0:15:20:ca:bd: 6b:90:13:a8:01:2b:74:b7:ca:84:bd:72:47:8b:ec: 9c:0c:bd:cb:a3:76:33:f2:c1:67:7f:d7:cc:e0:b6: fb:c0:14:4a:d8:dc:11:b7:43:0d:71:3e:6b:aa:04: 30:04:9a:b6:3a:10:d7:41:74:25:81:0e:79:1f:20: 6f:c9:78:aa:52:e7:37:36:2a:c4:23:e8:3d:36:59: 95:c5:1d:88:73:0b:61:f4:c9:a7:34:65:c4:68:3e: 31:9b:db:4f:c4:e0:1e:17:aa:39:0d:b6:a7:6d:63: ba:13:2d:83:19:fd:fe:5a:e4:05:d9:ba:47:45:4a: 06:8a:5f:88:c1:5e:fe:d7:9a:2d:f8:d0:0f:5d:f9: b0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CE:14:74:93:11:12:E1:AC:31:FB:D3:A4:09:F3:35:AB:1E:DB:10 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3132392e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.187.129.0/24 Signature Algorithm: sha256WithRSAEncryption d4:f9:e3:90:bd:0c:19:f9:dd:2b:4f:92:30:64:c5:7a:4a:97: cf:67:ff:b9:e3:00:3f:6c:46:7e:68:a6:51:9b:59:da:a9:c2: 52:48:eb:90:7f:c5:92:79:f0:5f:d6:4d:88:6b:c7:78:00:1b: 27:5e:99:e1:61:94:a3:be:51:2e:69:70:e1:0c:ec:43:e1:5f: f7:41:64:6e:7e:25:92:f2:e8:9d:88:33:0c:4a:cb:9d:9e:ba: 42:4b:44:aa:4d:58:39:0d:ed:f7:2d:41:b5:c3:13:8c:9b:9d: 6e:82:fc:cc:91:b2:28:28:f4:06:84:f1:12:18:c2:ed:b2:a7: 9c:2b:4a:17:7d:4a:19:88:03:f0:72:81:01:88:1d:d7:0a:7b: b0:c4:c5:78:32:60:14:ef:6b:58:18:ff:5f:fc:83:3e:f3:f6: 84:ff:b9:41:95:25:5b:43:e8:75:bf:9c:2d:d1:c3:f4:2d:35: 62:46:96:39:17:d3:d7:2c:3e:5f:a6:ea:b5:15:51:c9:4e:04: b1:5c:7e:93:58:4c:82:9f:88:be:e0:84:7b:df:4e:d8:1d:47: 7b:6e:b4:eb:e6:25:7a:aa:8a:c6:79:79:d4:60:4d:0d:e1:4f: e4:4b:8a:81:e5:20:f8:6b:43:55:a6:c5:d6:53:9c:68:31:68: 25:53:33:81 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUJiMZzdbSe7/65dmNjkZTRT7XOX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTBaFw0yNjExMjcxMTQ5NTBaMDMxMTAvBgNV BAMTKDNBQ0UxNDc0OTMxMTEyRTFBQzMxRkJEM0E0MDlGMzM1QUIxRURCMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDerixhHQT1lqOpKwu+GlSdwExn jP+dT2GsYVXShGOU6U9/gZHSAnjusC0sUFb/HIvxAo9qQTuoMeJkOZzrB+tWnEpJ pgTM8HlVLTKTqOqFWGRvbjZQO/xUxzLxSKdD5qvnURt46dRUc0c2D7wQSNbF80rQ FSDKvWuQE6gBK3S3yoS9ckeL7JwMvcujdjPywWd/18zgtvvAFErY3BG3Qw1xPmuq BDAEmrY6ENdBdCWBDnkfIG/JeKpS5zc2KsQj6D02WZXFHYhzC2H0yac0ZcRoPjGb 20/E4B4XqjkNtqdtY7oTLYMZ/f5a5AXZukdFSgaKX4jBXv7Xmi340A9d+bCfAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUOs4UdJMREuGsMfvTpAnzNase2xAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzgz NzJlMzEzMjM5MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMG7gTANBgkqhkiG9w0BAQsFAAOCAQEA1PnjkL0MGfndK0+SMGTFekqX z2f/ueMAP2xGfmimUZtZ2qnCUkjrkH/FknnwX9ZNiGvHeAAbJ16Z4WGUo75RLmlw 4QzsQ+Ff90Fkbn4lkvLonYgzDErLnZ66QktEqk1YOQ3t9y1BtcMTjJudboL8zJGy KCj0BoTxEhjC7bKnnCtKF31KGYgD8HKBAYgd1wp7sMTFeDJgFO9rWBj/X/yDPvP2 hP+5QZUlW0Podb+cLdHD9C01YkaWORfT1yw+X6bqtRVRyU4EsVx+k1hMgp+IvuCE e99O2B1He2606+YleqqKxnl51GBNDeFP5EuKgeUg+GtDVabF1lOcaDFoJVMzgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:50:51 2025 by rpki-client