This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e32342e302f32342d3234203d3e20313336373837.roa File: 3139332e32322e32342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: CeL4B7Buo8mP84Q6Hv/IjC3tlaXR9KdFtXVLRtCbs9s= Subject key identifier: C9:61:C3:F0:9D:89:B2:0E:7F:6E:EA:C6:DA:C0:BF:F6:1D:25:6F:87 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2F6CC92212C1F658791364D438E266A7F0A46680 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e32342e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:26 +0000 ROA not before: Fri 28 Nov 2025 11:44:26 +0000 ROA not after: Fri 27 Nov 2026 11:49:26 +0000 asID: 136787 IP address blocks: 193.22.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:6c:c9:22:12:c1:f6:58:79:13:64:d4:38:e2:66:a7:f0:a4:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:26 2025 GMT Not After : Nov 27 11:49:26 2026 GMT Subject: CN=C961C3F09D89B20E7F6EEAC6DAC0BFF61D256F87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3c:a9:1b:46:ca:dc:59:0f:7b:4a:3b:3c:9f: f1:a4:9a:56:47:fc:80:38:11:05:42:82:5d:3a:75: 01:a5:67:83:6b:c8:5a:b5:80:e4:2e:6b:22:78:75: 08:7d:02:35:32:44:10:c2:61:40:47:11:dd:9c:24: 6e:1f:77:7b:cf:86:5b:28:f2:e0:df:ef:ee:39:73: 08:05:48:ca:3c:74:d2:cb:fa:a9:0a:0a:9e:71:d4: 2b:de:35:bd:e4:c5:40:ae:a5:22:24:3f:91:30:70: 19:29:0f:95:90:d0:e7:30:83:04:83:e7:04:6f:92: 29:a6:b1:cc:f3:a8:3b:7f:1a:0e:58:94:f9:a4:d8: 67:38:b9:aa:c1:ec:d2:35:01:aa:5e:4e:35:4f:c2: a3:11:9a:30:41:d9:aa:37:ea:f1:6f:3a:26:e3:04: 5c:e0:a6:8c:a7:e2:d7:ba:95:31:55:fd:23:e6:41: 1e:d5:c4:86:37:04:79:c7:eb:f8:a7:e4:6f:54:38: ca:13:1c:f5:db:19:d9:24:71:f6:0f:35:39:41:07: 0d:19:78:04:24:ef:60:e2:ec:3f:09:00:d4:1b:7c: c4:df:0e:80:d3:6d:97:a2:22:de:09:f1:4e:63:59: 16:d1:15:e4:ae:7a:df:92:9c:8b:41:0e:76:af:b9: a7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:61:C3:F0:9D:89:B2:0E:7F:6E:EA:C6:DA:C0:BF:F6:1D:25:6F:87 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e32342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.24.0/24 Signature Algorithm: sha256WithRSAEncryption 92:29:c7:10:d9:e8:96:03:5d:32:77:52:c7:79:14:bc:62:73: 78:c4:56:4a:ed:63:42:e3:17:01:77:c8:3d:70:0a:91:dc:ef: e2:6b:7b:0c:c2:5c:16:56:5a:f6:48:3d:c1:c5:12:00:53:05: af:7c:b4:84:06:fa:dd:86:7a:e1:ad:8c:e0:50:17:26:32:86: db:93:93:9c:d7:dc:9e:0f:d3:70:7b:39:af:6a:c4:95:6c:35: ff:45:78:4a:c3:d6:2d:a2:ad:e9:f5:86:1d:5e:e6:33:2d:4d: c9:b1:7f:e4:89:f6:20:bf:7e:bd:24:c8:c5:c0:ba:b7:bc:b3: b9:72:41:2a:05:03:c0:f5:5c:e4:f6:73:e1:0a:df:b2:67:d7: 8a:b2:01:ab:05:56:3a:72:19:55:ea:cc:45:6d:8e:78:40:a6: be:fb:51:09:e1:37:5b:bc:de:ed:44:d6:04:4b:e5:53:8e:75: 64:3a:ef:ca:8f:72:59:62:11:a9:ee:18:c8:49:b2:f1:41:bb: 58:f7:53:f5:92:96:a8:8c:00:f5:70:f5:f4:01:a2:b1:4e:fd: fa:1c:0b:e8:a8:ac:c9:98:5f:df:f8:5e:2d:83:c1:2b:33:6d: 42:f8:c3:8c:89:0d:02:37:61:61:e7:ab:07:40:f7:ad:2c:fd: b8:b7:4c:c6 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUL2zJIhLB9lh5E2TUOOJmp/CkZoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjZaFw0yNjExMjcxMTQ5MjZaMDMxMTAvBgNV BAMTKEM5NjFDM0YwOUQ4OUIyMEU3RjZFRUFDNkRBQzBCRkY2MUQyNTZGODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZPKkbRsrcWQ97Sjs8n/GkmlZH /IA4EQVCgl06dQGlZ4NryFq1gOQuayJ4dQh9AjUyRBDCYUBHEd2cJG4fd3vPhlso 8uDf7+45cwgFSMo8dNLL+qkKCp5x1CveNb3kxUCupSIkP5EwcBkpD5WQ0OcwgwSD 5wRvkimmsczzqDt/Gg5YlPmk2Gc4uarB7NI1AapeTjVPwqMRmjBB2ao36vFvOibj BFzgpoyn4te6lTFV/SPmQR7VxIY3BHnH6/in5G9UOMoTHPXbGdkkcfYPNTlBBw0Z eAQk72Di7D8JANQbfMTfDoDTbZeiIt4J8U5jWRbRFeSuet+SnItBDnavuac7AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUyWHD8J2Jsg5/burG2sC/9h0lb4cwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMyMzIy ZTMyMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADBFhgwDQYJKoZIhvcNAQELBQADggEBAJIpxxDZ6JYDXTJ3Usd5FLxic3jE VkrtY0LjFwF3yD1wCpHc7+JrewzCXBZWWvZIPcHFEgBTBa98tIQG+t2GeuGtjOBQ FyYyhtuTk5zX3J4P03B7Oa9qxJVsNf9FeErD1i2iren1hh1e5jMtTcmxf+SJ9iC/ fr0kyMXAure8s7lyQSoFA8D1XOT2c+EK37Jn14qyAasFVjpyGVXqzEVtjnhApr77 UQnhN1u83u1E1gRL5VOOdWQ678qPclliEanuGMhJsvFBu1j3U/WSlqiMAPVw9fQB orFO/focC+iorMmYX9/4Xi2DwSszbUL4w4yJDQI3YWHnqwdA960s/bi3TMY= -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:53 2025 by rpki-client