This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31342e302f32342d3234203d3e20313336373837.roa File: 3139332e3230332e31342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: eOGIqKu+GfuEFTbQ3/Y+cGvAx+QUjo9BgWM/lUmnkyU= Subject key identifier: BF:99:B5:FC:3C:BF:2D:90:B6:24:64:CC:AB:E1:94:A1:69:F0:1D:BD Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 790A8B6819A8BE1EBABB91F69A99DE375BFF32EE Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31342e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:50 +0000 ROA not before: Fri 28 Nov 2025 11:44:50 +0000 ROA not after: Fri 27 Nov 2026 11:49:50 +0000 asID: 136787 IP address blocks: 193.203.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0a:8b:68:19:a8:be:1e:ba:bb:91:f6:9a:99:de:37:5b:ff:32:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:50 2025 GMT Not After : Nov 27 11:49:50 2026 GMT Subject: CN=BF99B5FC3CBF2D90B62464CCABE194A169F01DBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c0:f4:82:cc:34:42:c9:db:44:99:36:94:57: 98:0b:f2:d1:a3:b4:32:08:8f:6c:b3:30:8b:bd:f2: 0f:dc:71:bb:df:c5:d8:61:9a:d3:7f:25:e7:b7:4f: 68:c1:21:b8:de:36:b5:3f:df:ee:19:f9:f5:3a:d5: 66:43:97:cb:74:97:e4:3e:a6:af:83:15:1b:59:5b: 84:8d:3c:21:5d:81:70:ef:0b:e4:c0:d5:a9:d4:db: f8:cb:eb:f3:f1:75:e8:6f:24:ed:f1:c1:0d:0a:a0: a7:a3:3d:69:89:1d:a6:35:62:46:f7:09:97:f4:be: 58:3f:48:36:9f:f8:2e:54:0c:c1:27:b1:78:ee:ea: 20:d4:13:2f:fe:69:14:8b:c5:46:f2:74:58:00:72: f7:57:87:c4:59:86:a3:2d:e2:cf:7f:49:46:eb:02: 61:b0:a4:5d:8e:f9:76:8a:7d:45:87:0b:bd:71:a4: 9c:0b:65:93:b5:e8:5a:30:5b:f0:a2:f7:16:03:11: 34:8b:6f:87:a5:a1:0d:68:e1:3d:4f:4b:54:7e:27: 62:e3:76:07:bb:5f:21:52:06:ca:94:b9:c8:d3:21: 56:86:12:76:99:a6:6f:48:ff:d0:02:d0:46:3b:50: 81:44:af:91:16:ec:fd:4e:79:16:be:35:a2:34:da: 7e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:99:B5:FC:3C:BF:2D:90:B6:24:64:CC:AB:E1:94:A1:69:F0:1D:BD X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.14.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:2e:32:aa:0e:e6:ea:3e:a0:03:bc:9a:14:df:df:c8:9d:2b: 53:e2:41:11:38:dd:61:36:f1:a6:b8:98:02:1f:03:b9:62:05: f9:90:83:6f:b6:27:a4:5c:4e:c4:af:43:7d:b9:97:86:33:cc: 24:7e:a4:aa:22:8e:53:2a:bf:55:be:2e:3b:f1:23:96:76:98: d0:5e:c0:47:ce:04:f7:5c:f9:44:5f:a6:89:a9:13:0f:c5:07: d4:17:78:e4:ba:fb:ff:16:de:ac:47:01:20:ef:68:4d:82:08: 8a:36:b5:d7:36:1e:98:ab:2b:08:62:2c:21:2b:b9:a6:d5:8c: 92:c2:3c:55:0b:9d:0d:35:da:78:ee:a7:35:54:81:2d:97:8c: 5d:20:0d:ae:0f:3b:70:ce:3c:19:0d:fd:e3:fa:60:ef:df:1c: 16:61:93:d5:e3:59:c0:b3:11:85:f3:3d:88:ac:39:4e:12:16: d0:3a:11:fe:da:7f:fc:09:c0:b0:ea:5c:77:ed:fe:dc:aa:09: 83:fc:46:ba:cc:8a:b0:9b:e7:af:e6:8a:d5:87:b6:fb:cc:4e: 87:67:51:bf:20:43:cb:e8:db:87:4a:40:c6:07:fa:18:4e:af: d7:80:93:60:e5:44:d7:85:24:6a:ff:35:94:02:f1:78:97:b5: f6:58:12:66 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUeQqLaBmovh66u5H2mpneN1v/Mu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTBaFw0yNjExMjcxMTQ5NTBaMDMxMTAvBgNV BAMTKEJGOTlCNUZDM0NCRjJEOTBCNjI0NjRDQ0FCRTE5NEExNjlGMDFEQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRwPSCzDRCydtEmTaUV5gL8tGj tDIIj2yzMIu98g/ccbvfxdhhmtN/Jee3T2jBIbjeNrU/3+4Z+fU61WZDl8t0l+Q+ pq+DFRtZW4SNPCFdgXDvC+TA1anU2/jL6/PxdehvJO3xwQ0KoKejPWmJHaY1Ykb3 CZf0vlg/SDaf+C5UDMEnsXju6iDUEy/+aRSLxUbydFgAcvdXh8RZhqMt4s9/SUbr AmGwpF2O+XaKfUWHC71xpJwLZZO16FowW/Ci9xYDETSLb4eloQ1o4T1PS1R+J2Lj dge7XyFSBsqUucjTIVaGEnaZpm9I/9AC0EY7UIFEr5EW7P1OeRa+NaI02n4jAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUv5m1/Dy/LZC2JGTMq+GUoWnwHb0wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMyMzAz MzJlMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMHLDjANBgkqhkiG9w0BAQsFAAOCAQEAnC4yqg7m6j6gA7yaFN/fyJ0r U+JBETjdYTbxpriYAh8DuWIF+ZCDb7YnpFxOxK9DfbmXhjPMJH6kqiKOUyq/Vb4u O/EjlnaY0F7AR84E91z5RF+miakTD8UH1Bd45Lr7/xberEcBIO9oTYIIija11zYe mKsrCGIsISu5ptWMksI8VQudDTXaeO6nNVSBLZeMXSANrg87cM48GQ394/pg798c FmGT1eNZwLMRhfM9iKw5ThIW0DoR/tp//AnAsOpcd+3+3KoJg/xGusyKsJvnr+aK 1Ye2+8xOh2dRvyBDy+jbh0pAxgf6GE6v14CTYOVE14Ukav81lALxeJe19lgSZg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:22 2025 by rpki-client