This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31352e302f32342d3332203d3e203531313637.roa
File: 3139332e3230332e31352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: ysDtoshcoAuXz3rsZ9wvEbCWVmu59NiZuO3Npu+egWg=
Subject key identifier: F7:3C:4D:31:92:07:0A:5C:98:27:37:B2:9F:0E:23:DF:D6:DE:54:8E
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 361EE0E379C270FAD1310844FB71A3CFE66BBF47
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31352e302f32342d3332203d3e203531313637.roa
Signing time: Fri 28 Nov 2025 11:49:50 +0000
ROA not before: Fri 28 Nov 2025 11:44:50 +0000
ROA not after: Fri 27 Nov 2026 11:49:50 +0000
asID: 51167
IP address blocks: 193.203.15.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 14:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:1e:e0:e3:79:c2:70:fa:d1:31:08:44:fb:71:a3:cf:e6:6b:bf:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 28 11:44:50 2025 GMT
Not After : Nov 27 11:49:50 2026 GMT
Subject: CN=F73C4D3192070A5C982737B29F0E23DFD6DE548E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8f:b2:7f:a0:d8:76:23:3f:5b:65:32:92:d0:
8a:47:b4:3a:dc:b3:32:40:bd:2d:df:99:d5:15:52:
1a:dd:2d:50:3d:93:41:c2:41:c1:ee:db:c2:dc:c6:
5f:a8:e5:b5:e7:9f:84:c4:8c:77:3a:7c:3b:13:10:
93:bc:bb:56:df:ff:8a:c2:6a:aa:c9:56:eb:d5:74:
ac:16:41:5e:94:78:df:ad:aa:01:1d:45:c3:bb:19:
58:81:b8:db:bf:14:e9:22:a9:02:8d:e0:a9:2e:eb:
2a:e4:0b:d1:77:84:4f:77:f5:ba:c9:9d:ff:cf:23:
b8:ce:41:21:d2:91:89:26:10:1d:da:14:b2:6d:98:
c1:94:fd:be:e6:28:af:38:4b:43:74:84:3d:02:90:
ef:e2:af:56:f1:ec:f2:b4:c3:94:a5:d2:13:88:b8:
e7:94:94:1e:df:1e:96:e2:39:18:24:86:75:a4:6d:
d0:9c:06:0f:d9:bd:45:ff:d0:26:5e:c6:42:38:2c:
6c:07:1d:c5:e9:a6:73:8e:14:f9:45:bc:ec:dc:54:
a9:62:2b:b4:fe:06:2a:fb:99:2c:48:f2:28:fb:94:
60:b7:16:12:9a:68:7c:12:29:d6:95:39:7b:bf:e1:
b7:ca:ef:7b:de:91:82:0c:ae:c1:0d:8d:e2:44:52:
ec:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3C:4D:31:92:07:0A:5C:98:27:37:B2:9F:0E:23:DF:D6:DE:54:8E
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31352e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.15.0/24
Signature Algorithm: sha256WithRSAEncryption
39:41:6c:2c:73:65:1c:13:af:0c:82:57:07:68:30:56:f9:c1:
5e:a9:bd:a2:6e:a4:fd:ab:92:a6:f5:44:05:e1:ad:72:90:15:
2c:89:df:6a:6e:8c:95:8a:17:50:2a:c9:9c:e1:36:fe:4f:c0:
06:2c:63:bb:e7:5a:78:7f:bd:19:27:78:de:5f:a6:df:a1:fa:
f0:64:f9:8e:50:73:8f:99:a1:ee:ce:72:ea:9f:76:1a:b0:0d:
be:4a:d9:a4:73:1d:cf:23:38:e2:5a:6a:92:36:52:2d:17:ba:
46:72:a9:53:2f:a8:0e:32:0a:50:80:46:d9:0c:13:a4:c0:5b:
df:94:5d:4b:79:6b:d7:4b:a6:5e:86:f0:6c:81:3a:a7:25:2a:
3f:0d:01:a8:43:58:24:d6:ca:4d:ab:ef:11:aa:7c:a1:ea:25:
ed:01:91:ae:09:3a:3d:97:13:c6:f0:9b:4e:5d:6a:6b:c7:68:
18:cf:26:ef:13:28:25:2f:cd:91:d3:53:68:c5:ec:4d:3b:28:
fa:d7:36:e9:3e:d5:bb:e8:5c:3f:e4:03:e6:1e:d5:49:01:59:
51:3f:e7:17:f4:f8:71:76:f1:55:99:90:8b:5b:1b:d1:9d:89:
d1:df:e2:80:25:30:1b:78:4f:09:b9:0a:2a:73:1e:86:4f:e6:
17:a0:94:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 15:47:50 2025 by rpki-client