This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3133312e302f32342d3332203d3e20313336373837.roa File: 3139332e3138372e3133312e302f32342d3332203d3e20313336373837.roa (raw, json) Hash identifier: l8KNKNz5dvLv6y2EjK+uNfj031jZtifulwYc07CyCRE= Subject key identifier: 99:C4:E0:14:E0:3E:3B:A7:70:C1:DA:94:6A:21:41:83:C8:BC:78:EA Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7287F4B69D3BC50A7CC6F69DEB3149DD51267838 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3133312e302f32342d3332203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:18 +0000 ROA not before: Fri 28 Nov 2025 11:44:18 +0000 ROA not after: Fri 27 Nov 2026 11:49:18 +0000 asID: 136787 IP address blocks: 193.187.131.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:87:f4:b6:9d:3b:c5:0a:7c:c6:f6:9d:eb:31:49:dd:51:26:78:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:18 2025 GMT Not After : Nov 27 11:49:18 2026 GMT Subject: CN=99C4E014E03E3BA770C1DA946A214183C8BC78EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0b:47:49:14:9b:da:ca:b5:fe:bf:cc:26:d4: 9c:35:f8:72:4c:08:95:f6:80:1b:81:08:09:91:ea: 16:a6:63:f6:bb:af:5f:71:a4:91:e1:15:e7:11:f5: fa:64:94:b2:7b:f5:ab:67:e2:b8:7c:7a:bf:6b:8e: 22:96:3a:17:3c:92:93:9c:04:13:0f:c6:2f:05:c7: d8:8c:d7:ec:09:93:ab:79:72:98:b2:d6:e1:51:4c: f6:55:61:7f:0d:cf:28:1b:9a:38:6c:0a:b1:99:2a: 15:fb:15:72:a6:ba:cc:59:10:21:aa:8e:ef:8e:1a: bc:0d:80:68:95:f2:cf:50:50:ed:82:7d:c9:ff:af: b1:83:98:eb:1d:c1:c6:22:17:70:af:9f:ee:70:50: 1e:69:7b:5c:86:b4:6f:9d:af:0e:82:2a:4e:fe:a3: e7:86:56:45:3e:37:bb:49:10:bc:ae:1c:f4:f6:6c: 79:70:b9:28:e4:06:3c:96:03:a2:38:55:24:f4:ae: 2f:63:68:21:d5:a0:b9:8a:82:46:47:29:6d:9b:68: ee:6b:95:97:a9:be:b2:07:ed:27:40:59:81:8f:b3: 19:5e:67:80:96:bf:59:bf:fb:9b:ea:b5:8b:c8:94: d5:53:cd:71:bc:e5:fc:58:3f:1e:d3:8e:ed:23:2f: 52:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C4:E0:14:E0:3E:3B:A7:70:C1:DA:94:6A:21:41:83:C8:BC:78:EA X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3133312e302f32342d3332203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.187.131.0/24 Signature Algorithm: sha256WithRSAEncryption 12:fe:82:0b:9c:f2:75:2b:bb:6b:b9:81:46:08:f7:9b:ac:a0: 32:aa:da:e5:cb:b7:94:a7:42:4d:72:db:5e:0a:10:44:53:3a: c9:03:6f:1d:10:c9:fd:99:06:bb:aa:1e:32:74:af:71:13:f5: 1f:cb:6e:cc:39:e3:fe:cf:f1:24:74:7d:ad:69:8b:28:3e:95: 7e:b4:83:c0:d1:c3:58:1f:bf:9a:d6:78:b4:01:50:8b:67:fa: 74:d4:9f:5c:8c:d2:a1:0e:cb:6b:b5:04:c0:22:5b:bf:21:6b: 52:7d:55:c7:fe:7e:d7:67:87:b5:54:bc:db:e5:d2:ab:d7:0b: b6:5f:1b:54:b4:2f:c7:00:e5:d0:10:ed:fd:94:0c:eb:af:bf: a4:13:d2:64:4e:db:68:e9:19:57:dd:f6:67:36:db:d2:2f:02: 24:ac:4a:48:7a:6e:d1:aa:b4:2e:50:95:b6:79:c8:f6:71:8c: 7b:69:ac:27:51:8a:21:f6:e3:33:55:fa:5b:89:a7:ea:1c:dd: 97:a4:84:c5:9d:0e:a9:81:7c:9c:87:3a:8d:88:72:7f:dd:74: 3c:f7:b4:c2:a0:b3:b5:92:1e:ee:68:4c:86:40:f7:f8:27:3c: 63:87:a5:c4:54:0b:0c:db:76:5f:6f:cd:73:3b:09:8a:1a:86: 99:6e:7f:f3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUcof0tp07xQp8xvad6zFJ3VEmeDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MThaFw0yNjExMjcxMTQ5MThaMDMxMTAvBgNV BAMTKDk5QzRFMDE0RTAzRTNCQTc3MEMxREE5NDZBMjE0MTgzQzhCQzc4RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxC0dJFJvayrX+v8wm1Jw1+HJM CJX2gBuBCAmR6hamY/a7r19xpJHhFecR9fpklLJ79atn4rh8er9rjiKWOhc8kpOc BBMPxi8Fx9iM1+wJk6t5cpiy1uFRTPZVYX8NzygbmjhsCrGZKhX7FXKmusxZECGq ju+OGrwNgGiV8s9QUO2Cfcn/r7GDmOsdwcYiF3Cvn+5wUB5pe1yGtG+drw6CKk7+ o+eGVkU+N7tJELyuHPT2bHlwuSjkBjyWA6I4VST0ri9jaCHVoLmKgkZHKW2baO5r lZepvrIH7SdAWYGPsxleZ4CWv1m/+5vqtYvIlNVTzXG85fxYPx7Tju0jL1LLAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUmcTgFOA+O6dwwdqUaiFBg8i8eOowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzgz NzJlMzEzMzMxMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzMzM2MzczODM3LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwbuDMA0GCSqGSIb3DQEBCwUAA4IBAQAS/oILnPJ1K7truYFGCPeb rKAyqtrly7eUp0JNctteChBEUzrJA28dEMn9mQa7qh4ydK9xE/Ufy27MOeP+z/Ek dH2taYsoPpV+tIPA0cNYH7+a1ni0AVCLZ/p01J9cjNKhDstrtQTAIlu/IWtSfVXH /n7XZ4e1VLzb5dKr1wu2XxtUtC/HAOXQEO39lAzrr7+kE9JkTtto6RlX3fZnNtvS LwIkrEpIem7RqrQuUJW2ecj2cYx7aawnUYoh9uMzVfpbiafqHN2XpITFnQ6pgXyc hzqNiHJ/3XQ897TCoLO1kh7uaEyGQPf4Jzxjh6XEVAsM23Zfb81zOwmKGoaZbn/z -----END CERTIFICATE-----Generated at Sat Dec 6 19:48:45 2025 by rpki-client