This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3133302e302f32342d3234203d3e20313336373837.roa File: 3139332e3138372e3133302e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: cOm3IakIWPJBV4Crxau7Uk41XHlyyJUI7guunQ863gI= Subject key identifier: 84:A9:A4:0A:EA:A4:AA:C5:F5:5E:3B:3F:94:07:6C:D8:5D:8C:B9:17 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 08BD7D2E86D7C546298933063C51EF563E884391 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3133302e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:48 +0000 ROA not before: Fri 28 Nov 2025 11:44:48 +0000 ROA not after: Fri 27 Nov 2026 11:49:48 +0000 asID: 136787 IP address blocks: 193.187.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:bd:7d:2e:86:d7:c5:46:29:89:33:06:3c:51:ef:56:3e:88:43:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:48 2025 GMT Not After : Nov 27 11:49:48 2026 GMT Subject: CN=84A9A40AEAA4AAC5F55E3B3F94076CD85D8CB917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:49:61:3e:12:b1:d9:e3:f9:3f:17:98:a9:4c: 97:ad:93:fc:47:23:ea:0f:8d:eb:e8:1b:b4:92:be: c2:10:83:1a:71:57:b9:27:e0:c0:7b:a5:08:95:96: 4a:9a:a9:dd:7f:90:b5:db:3b:e9:10:ed:33:d1:85: ea:74:1b:c8:6f:28:28:6e:b0:72:87:47:af:14:c6: 60:55:7d:9a:8d:58:2e:c6:51:af:76:f0:93:49:d7: 2b:4c:be:b4:16:e6:62:68:37:46:13:60:a5:12:dc: 98:75:35:2a:91:85:d5:a4:ea:44:cd:17:e7:50:d6: e4:4e:c0:bb:ac:c6:84:77:5c:66:1a:ad:9a:02:c6: 76:a1:12:6a:63:fd:2f:0f:a1:ec:95:ac:b7:0b:dd: 9e:a1:cc:ec:7c:13:b4:f7:9a:48:82:50:8e:7c:33: ce:50:3d:6a:b2:cb:cd:f2:a4:f9:10:18:cc:69:34: ac:f9:3a:59:13:fb:07:2b:8f:f5:36:33:7a:d2:2f: ed:c9:d1:b2:f8:4e:05:da:e8:80:f0:a1:03:56:e6: 69:d5:93:20:92:74:19:48:c0:2f:05:8b:bb:7c:8b: ac:4a:3d:f9:ba:21:88:70:c5:cc:24:2c:3c:b9:18: 4d:78:8f:e3:e5:72:1c:41:12:9e:31:88:5b:c8:dc: 4a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A9:A4:0A:EA:A4:AA:C5:F5:5E:3B:3F:94:07:6C:D8:5D:8C:B9:17 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3133302e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.187.130.0/24 Signature Algorithm: sha256WithRSAEncryption ca:aa:35:f8:86:04:5b:ab:93:0d:00:ef:93:a6:f0:48:2f:17: d6:cd:b4:fc:b2:f8:af:57:46:5b:3d:5a:bc:84:ad:08:8f:d8: fb:7e:2d:0f:8e:26:63:0e:5f:36:37:57:30:1e:82:75:b8:16: 71:44:e6:97:e6:13:96:96:76:ec:af:8a:3a:f8:c1:35:f6:13: d1:cd:db:a0:ad:17:ab:30:14:04:0b:b9:d2:65:e5:07:cd:bd: 14:a5:7a:4d:23:fa:f9:c7:36:b7:e1:85:54:75:27:8b:f5:6e: 5b:a9:0e:fc:a2:71:0f:3f:39:63:0b:f4:96:c1:78:d0:c8:1c: b8:54:c3:23:ab:15:ae:27:5e:c7:6f:7f:d1:e5:ca:bf:7b:0e: 23:0b:ad:0e:c7:b6:77:e9:c5:7e:a6:3f:81:a0:ec:a0:75:68: 99:c8:32:b7:7b:d3:a5:12:55:fe:12:fb:d1:94:f0:b2:7d:ef: a9:9f:07:5e:f2:f5:9e:8f:b7:c6:3a:51:2c:c3:b7:00:25:bb: cb:cf:40:cd:45:88:59:30:4d:76:81:84:25:ec:72:4d:fc:c1: a3:91:12:19:6d:1b:6f:f1:cf:0d:39:24:7f:87:e3:ca:83:f2: 90:1e:cb:2b:7a:55:8b:e9:51:7a:90:c1:d7:6d:47:a0:9c:19: fb:25:35:c8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUCL19LobXxUYpiTMGPFHvVj6IQ5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDhaFw0yNjExMjcxMTQ5NDhaMDMxMTAvBgNV BAMTKDg0QTlBNDBBRUFBNEFBQzVGNTVFM0IzRjk0MDc2Q0Q4NUQ4Q0I5MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeSWE+ErHZ4/k/F5ipTJetk/xH I+oPjevoG7SSvsIQgxpxV7kn4MB7pQiVlkqaqd1/kLXbO+kQ7TPRhep0G8hvKChu sHKHR68UxmBVfZqNWC7GUa928JNJ1ytMvrQW5mJoN0YTYKUS3Jh1NSqRhdWk6kTN F+dQ1uROwLusxoR3XGYarZoCxnahEmpj/S8PoeyVrLcL3Z6hzOx8E7T3mkiCUI58 M85QPWqyy83ypPkQGMxpNKz5OlkT+wcrj/U2M3rSL+3J0bL4TgXa6IDwoQNW5mnV kyCSdBlIwC8Fi7t8i6xKPfm6IYhwxcwkLDy5GE14j+PlchxBEp4xiFvI3EpNAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUhKmkCuqkqsX1Xjs/lAds2F2MuRcwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzgz NzJlMzEzMzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwbuCMA0GCSqGSIb3DQEBCwUAA4IBAQDKqjX4hgRbq5MNAO+TpvBI LxfWzbT8svivV0ZbPVq8hK0Ij9j7fi0PjiZjDl82N1cwHoJ1uBZxROaX5hOWlnbs r4o6+ME19hPRzdugrRerMBQEC7nSZeUHzb0UpXpNI/r5xza34YVUdSeL9W5bqQ78 onEPPzljC/SWwXjQyBy4VMMjqxWuJ17Hb3/R5cq/ew4jC60Ox7Z36cV+pj+BoOyg dWiZyDK3e9OlElX+EvvRlPCyfe+pnwde8vWej7fGOlEsw7cAJbvLz0DNRYhZME12 gYQl7HJN/MGjkRIZbRtv8c8NOSR/h+PKg/KQHssrelWL6VF6kMHXbUegnBn7JTXI -----END CERTIFICATE-----Generated at Sat Dec 6 17:01:50 2025 by rpki-client