This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31322e302f32342d3234203d3e20313336373837.roa File: 3139332e3230332e31322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: ZG6KVHdrMaDE2Z6rYQMA6jQrxRKteWV3lfJyME4i/5E= Subject key identifier: FB:4A:7F:FF:7E:D0:31:87:6B:F3:FE:00:51:B6:1C:9A:34:FA:F1:E0 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2967BD1A8DE69C8398D06C3CC18DD4C382374D44 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31322e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:17 +0000 ROA not before: Fri 28 Nov 2025 11:44:17 +0000 ROA not after: Fri 27 Nov 2026 11:49:17 +0000 asID: 136787 IP address blocks: 193.203.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:67:bd:1a:8d:e6:9c:83:98:d0:6c:3c:c1:8d:d4:c3:82:37:4d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:17 2025 GMT Not After : Nov 27 11:49:17 2026 GMT Subject: CN=FB4A7FFF7ED031876BF3FE0051B61C9A34FAF1E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b5:96:45:87:b1:1f:e1:1d:11:60:67:8c:ae: e5:c4:2f:1f:15:3b:47:b6:87:76:c0:57:9c:f1:33: f1:d0:9e:d2:81:29:f0:0e:e5:ce:f5:5c:4d:13:03: 48:24:64:d6:7a:d1:82:04:0d:60:03:3c:63:70:af: 15:cb:71:6f:bf:48:6f:0f:db:0f:15:c1:ce:89:a3: 27:a8:93:23:a2:f3:78:88:8b:6e:c9:00:02:84:ca: 3c:88:22:da:7b:5f:d6:bf:a9:65:bb:6c:e6:f7:58: 7d:ea:7a:ed:b9:b6:13:99:21:06:59:3e:e2:a0:60: e3:26:29:1d:98:20:12:03:9f:19:69:a6:49:3e:61: 12:ff:ef:18:b2:57:39:4c:57:9b:a9:31:92:1b:4e: 78:14:d9:a2:4d:fa:ef:7e:9e:72:0b:5d:aa:dd:9e: 3c:44:3f:c5:8e:ff:2f:f5:aa:ec:c5:92:2f:c9:7b: 6b:9c:41:06:6d:c8:3c:92:eb:aa:57:9d:b9:53:ab: 1c:7a:70:b9:f2:ce:6c:21:14:94:a6:f4:50:3e:b5: 9b:cb:6c:a6:7e:67:fe:72:09:7e:1f:57:9f:44:07: b1:26:7e:94:e7:c1:59:cd:27:62:de:44:68:d6:33: 6c:df:c3:52:a7:be:28:9f:1f:d2:e9:d7:2f:bb:c7: 89:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4A:7F:FF:7E:D0:31:87:6B:F3:FE:00:51:B6:1C:9A:34:FA:F1:E0 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.12.0/24 Signature Algorithm: sha256WithRSAEncryption 91:a7:2c:6d:d6:69:34:7b:c8:59:4d:31:13:b8:83:5f:e2:28: fb:bb:d4:19:9d:b0:e8:91:15:5a:21:83:02:e9:92:2e:62:2c: 9e:ef:e5:32:e0:c9:03:70:bc:60:47:8a:f2:b0:42:e4:a9:8d: 00:da:7d:e9:fc:8c:84:55:94:ed:22:03:75:87:9e:12:49:f6: 0f:a1:64:4e:48:01:2b:14:39:a0:a2:4c:59:76:ad:ab:20:fc: e4:5a:d1:1c:21:79:ea:d4:cf:8d:cb:f2:3a:14:0a:d7:9f:2a: 25:0a:be:76:06:37:42:f8:33:a3:6c:ef:ec:f1:e8:ca:be:db: b3:ee:20:a8:b9:02:de:91:b3:95:9a:2d:13:29:4b:12:10:eb: ed:03:90:3b:bc:00:11:59:11:ee:28:63:a4:d9:4c:a2:4c:b9: bd:67:c9:46:15:71:5e:40:74:92:c8:e1:04:77:ca:51:18:7a: 29:86:d0:bc:70:be:5b:d5:42:a3:aa:bf:7c:41:23:bf:f9:1b: 16:1e:e1:4a:e1:f0:4f:24:5c:64:4d:93:34:ee:c8:bf:80:fc: d4:48:72:74:81:b9:cd:ee:83:f7:6c:87:08:be:52:5b:25:8e: 7f:19:0d:51:0c:dd:bd:67:ef:f3:e4:dc:7d:2e:b1:f3:af:af: 2b:3a:7a:fd -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUKWe9Go3mnIOY0Gw8wY3Uw4I3TUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTdaFw0yNjExMjcxMTQ5MTdaMDMxMTAvBgNV BAMTKEZCNEE3RkZGN0VEMDMxODc2QkYzRkUwMDUxQjYxQzlBMzRGQUYxRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMtZZFh7Ef4R0RYGeMruXELx8V O0e2h3bAV5zxM/HQntKBKfAO5c71XE0TA0gkZNZ60YIEDWADPGNwrxXLcW+/SG8P 2w8Vwc6JoyeokyOi83iIi27JAAKEyjyIItp7X9a/qWW7bOb3WH3qeu25thOZIQZZ PuKgYOMmKR2YIBIDnxlppkk+YRL/7xiyVzlMV5upMZIbTngU2aJN+u9+nnILXard njxEP8WO/y/1quzFki/Je2ucQQZtyDyS66pXnblTqxx6cLnyzmwhFJSm9FA+tZvL bKZ+Z/5yCX4fV59EB7EmfpTnwVnNJ2LeRGjWM2zfw1KnviifH9Lp1y+7x4lVAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU+0p//37QMYdr8/4AUbYcmjT68eAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMyMzAz MzJlMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMHLDDANBgkqhkiG9w0BAQsFAAOCAQEAkacsbdZpNHvIWU0xE7iDX+Io +7vUGZ2w6JEVWiGDAumSLmIsnu/lMuDJA3C8YEeK8rBC5KmNANp96fyMhFWU7SID dYeeEkn2D6FkTkgBKxQ5oKJMWXatqyD85FrRHCF56tTPjcvyOhQK158qJQq+dgY3 Qvgzo2zv7PHoyr7bs+4gqLkC3pGzlZotEylLEhDr7QOQO7wAEVkR7ihjpNlMoky5 vWfJRhVxXkB0ksjhBHfKURh6KYbQvHC+W9VCo6q/fEEjv/kbFh7hSuHwTyRcZE2T NO7Iv4D81EhydIG5ze6D92yHCL5SWyWOfxkNUQzdvWfv8+TcfS6x86+vKzp6/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:09 2025 by rpki-client