This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e3135342e302f32332d3332203d3e203536383736.roa File: 3139332e32322e3135342e302f32332d3332203d3e203536383736.roa (raw, json) Hash identifier: ofTWbkp08A0HcJo8wvOUhQZ+z+1qb1vg3jfyeZ9Id00= Subject key identifier: 43:E7:04:25:20:1C:33:B3:61:8F:7D:33:B8:E9:12:9A:FC:32:47:87 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 052549BF4FA9BB44B4EF2C55F2305A1A23273CB0 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e3135342e302f32332d3332203d3e203536383736.roa Signing time: Fri 28 Nov 2025 11:49:35 +0000 ROA not before: Fri 28 Nov 2025 11:44:35 +0000 ROA not after: Fri 27 Nov 2026 11:49:35 +0000 asID: 56876 IP address blocks: 193.22.154.0/23 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:25:49:bf:4f:a9:bb:44:b4:ef:2c:55:f2:30:5a:1a:23:27:3c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:35 2025 GMT Not After : Nov 27 11:49:35 2026 GMT Subject: CN=43E70425201C33B3618F7D33B8E9129AFC324787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:eb:fe:bd:4d:ad:aa:a7:48:f3:6e:0e:76: c3:52:3d:b8:f2:4a:06:f7:91:85:67:9e:95:a9:8c: 5a:7e:2e:b3:90:13:5c:de:04:1d:98:4b:6c:fd:9a: 21:26:1f:dc:89:d2:d5:d9:9b:47:9d:a9:f7:45:a3: 2f:03:34:3f:44:40:49:a2:da:71:02:be:2c:04:c4: 2e:6b:60:73:d1:f0:60:dc:9c:e1:3a:8f:3e:a8:54: 40:eb:05:76:79:96:98:52:60:2a:3b:df:90:4d:e6: 64:7d:39:ad:cb:71:b0:98:14:28:5b:01:4f:b7:00: c9:1e:6f:83:f3:21:29:dd:93:bb:eb:f4:72:b6:30: d5:64:8f:85:a3:91:9e:61:a1:3d:52:31:25:03:e5: 0f:50:f5:d4:2f:2e:7c:9d:4a:a2:fd:e3:e1:bc:f6: 6d:a1:32:43:31:2a:4f:31:da:4a:f0:21:c6:03:0d: 31:8e:19:f9:18:32:67:3f:04:1b:b5:85:3d:60:a8: 6e:3d:13:29:82:f8:70:ec:d1:9a:6f:95:3e:c4:a7: 27:41:04:90:e0:0c:d3:09:ef:51:45:52:5a:d3:f2: 04:53:77:c1:ea:48:a5:a1:00:6a:b3:85:21:74:c1: aa:84:2d:89:fb:a4:4f:0d:74:40:a9:55:bd:32:6b: 30:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E7:04:25:20:1C:33:B3:61:8F:7D:33:B8:E9:12:9A:FC:32:47:87 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e3135342e302f32332d3332203d3e203536383736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.154.0/23 Signature Algorithm: sha256WithRSAEncryption 40:7c:83:5c:46:25:f8:31:17:1c:04:75:65:70:97:05:f6:f0: de:0d:e7:74:65:dd:4b:6f:b0:ce:5c:fa:4b:a0:a2:bd:5c:2d: 29:76:f8:77:d4:b9:00:e1:77:f2:ae:a2:50:e6:c9:bb:89:8d: 06:a8:70:66:34:37:71:ad:51:8a:bd:2a:16:60:ab:8c:67:c3: 68:78:15:b1:05:90:f4:8d:75:a9:f8:c2:ed:0b:57:72:e9:18: 98:84:84:89:9d:0b:27:5e:49:1a:a9:dd:4a:61:72:d5:04:58: 34:8f:78:1a:84:d2:cf:35:ab:3f:a2:1a:77:35:7e:1a:e9:c9: 60:df:68:b7:f1:e5:ed:12:6a:a0:bc:be:04:d5:13:7a:09:f4: b5:55:3c:c5:27:96:7b:49:82:71:8a:48:22:1f:fd:7c:e9:7c: 6e:1d:b5:a1:2f:e0:06:91:a0:07:a2:df:f4:32:db:a2:c6:de: d1:fa:56:20:59:41:b0:a9:c8:e6:c2:99:a8:9a:7d:c4:56:38: 2d:51:ff:9c:3d:9f:56:cf:c1:fd:13:65:37:d2:e2:25:93:d9: 94:f9:ce:9a:7e:3b:62:ad:5d:ac:df:8c:ea:ec:3b:95:fe:3e: a9:fc:0b:fe:96:f7:48:04:37:bc:54:f5:aa:a4:8f:9f:5a:fc: b0:36:c9:6c -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUBSVJv0+pu0S07yxV8jBaGiMnPLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzVaFw0yNjExMjcxMTQ5MzVaMDMxMTAvBgNV BAMTKDQzRTcwNDI1MjAxQzMzQjM2MThGN0QzM0I4RTkxMjlBRkMzMjQ3ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk2uv+vU2tqqdI824OdsNSPbjy Sgb3kYVnnpWpjFp+LrOQE1zeBB2YS2z9miEmH9yJ0tXZm0edqfdFoy8DND9EQEmi 2nECviwExC5rYHPR8GDcnOE6jz6oVEDrBXZ5lphSYCo735BN5mR9Oa3LcbCYFChb AU+3AMkeb4PzISndk7vr9HK2MNVkj4WjkZ5hoT1SMSUD5Q9Q9dQvLnydSqL94+G8 9m2hMkMxKk8x2krwIcYDDTGOGfkYMmc/BBu1hT1gqG49EymC+HDs0ZpvlT7EpydB BJDgDNMJ71FFUlrT8gRTd8HqSKWhAGqzhSF0waqELYn7pE8NdECpVb0yazCxAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUQ+cEJSAcM7Nhj30zuOkSmvwyR4cwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMyMzIy ZTMxMzUzNDJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDM1MzYzODM3MzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHBFpowDQYJKoZIhvcNAQELBQADggEBAEB8g1xGJfgxFxwEdWVwlwX28N4N 53Rl3UtvsM5c+kugor1cLSl2+HfUuQDhd/KuolDmybuJjQaocGY0N3GtUYq9KhZg q4xnw2h4FbEFkPSNdan4wu0LV3LpGJiEhImdCydeSRqp3UphctUEWDSPeBqE0s81 qz+iGnc1fhrpyWDfaLfx5e0SaqC8vgTVE3oJ9LVVPMUnlntJgnGKSCIf/XzpfG4d taEv4AaRoAei3/Qy26LG3tH6ViBZQbCpyObCmaiafcRWOC1R/5w9n1bPwf0TZTfS 4iWT2ZT5zpp+O2KtXazfjOrsO5X+Pqn8C/6W90gEN7xU9aqkj59a/LA2yWw= -----END CERTIFICATE-----Generated at Sun Dec 7 00:31:32 2025 by rpki-client