This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e32352e302f32342d3234203d3e20313336373837.roa File: 3139332e32322e32352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: RQiovrXSybA+PyX7bVHuyo7kScj4uHdWuaiFe31uV8g= Subject key identifier: B1:A8:83:91:4D:EE:91:E4:1F:27:98:BB:F5:3B:39:35:0A:A0:70:AE Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 80E1D25F2AD3F2C5A5DD8E996A4CB487000E8E Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e32352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:21 +0000 ROA not before: Fri 28 Nov 2025 11:44:21 +0000 ROA not after: Fri 27 Nov 2026 11:49:21 +0000 asID: 136787 IP address blocks: 193.22.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80:e1:d2:5f:2a:d3:f2:c5:a5:dd:8e:99:6a:4c:b4:87:00:0e:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:21 2025 GMT Not After : Nov 27 11:49:21 2026 GMT Subject: CN=B1A883914DEE91E41F2798BBF53B39350AA070AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ed:62:53:06:ce:82:02:b7:37:db:c2:26:6b: 4f:b6:76:7b:96:35:51:bc:1f:f0:96:f8:43:57:7a: b4:f8:9d:25:76:fb:02:c1:e2:da:2e:09:f9:0e:34: 94:df:79:05:d0:3f:b1:ed:9c:ac:70:3a:98:14:a4: 0b:06:f0:7f:45:e2:a1:78:11:e4:91:60:03:57:c2: 45:00:d6:1e:f4:92:48:ee:1e:a4:e5:bb:f3:6c:9e: cc:2d:ca:41:8b:74:b1:e7:1f:08:37:1b:15:65:91: 2f:6b:aa:dd:a2:88:ef:50:c8:19:72:b9:d1:01:6d: f7:70:1c:73:ce:c1:20:11:c4:04:fe:7f:62:6e:02: 11:9f:2a:9b:83:af:f2:72:16:1c:69:ea:28:c4:cd: a3:48:c9:19:6d:a5:c7:57:85:3d:b0:d7:70:e9:94: 89:9f:fd:69:99:89:c2:14:96:0a:5f:3f:17:18:54: 81:77:27:41:40:24:6e:fe:83:d2:cb:d5:0c:41:b9: d1:41:c7:63:bb:51:e9:14:04:0f:a3:bb:b8:2f:af: e0:dd:96:61:6c:66:45:f0:4d:1e:4b:13:b1:cb:bc: 59:59:fc:d6:2a:1f:3c:82:10:55:3c:8c:6c:c3:01: ee:a5:c0:27:96:80:70:4d:cc:2c:d6:ef:a6:2f:cb: f7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A8:83:91:4D:EE:91:E4:1F:27:98:BB:F5:3B:39:35:0A:A0:70:AE X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e32352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.25.0/24 Signature Algorithm: sha256WithRSAEncryption 75:25:91:27:b3:70:7a:9f:95:db:b2:74:d6:8a:25:c2:ef:2a: b9:9e:d1:b9:f6:4b:ba:70:a6:21:5e:8f:92:55:c4:90:0f:ec: 05:b0:8c:9b:9b:7f:26:d3:df:77:38:58:37:a5:5d:a9:c4:2c: d2:3e:51:fe:88:af:d8:27:11:76:a8:44:1d:12:29:fa:0f:08: 87:67:d1:dc:15:31:eb:ac:5a:e7:be:b3:30:62:93:d0:ec:b7: e5:93:4c:2f:0e:60:2f:40:24:42:0c:00:b5:6a:4e:9e:f5:7e: 3e:fe:ff:85:0a:7e:0a:27:60:90:50:37:89:e0:5b:df:66:81: c3:0f:71:d5:8a:fd:7f:d2:1d:fa:87:7f:e3:d5:42:f4:d0:74: 08:f9:95:ee:36:b6:bf:27:04:14:01:eb:77:63:b4:35:5a:75: 9a:53:08:f8:19:a1:7d:bc:15:94:de:cb:e5:f6:ca:0c:cf:25: 86:d3:40:34:28:34:8a:3a:62:be:ee:13:5c:0b:34:ac:81:e7: 09:eb:1c:49:45:df:36:20:97:bf:ba:62:5f:81:0e:2a:d6:0e: 70:73:3e:89:30:1b:51:6e:39:3b:9d:10:5a:03:ad:c0:e9:3b: 63:e8:c9:e9:b5:3e:4f:3d:4e:c8:46:2e:d7:39:a1:a1:7d:c7: 7f:1f:b7:33 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUAIDh0l8q0/LFpd2OmWpMtIcADo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjFaFw0yNjExMjcxMTQ5MjFaMDMxMTAvBgNV BAMTKEIxQTg4MzkxNERFRTkxRTQxRjI3OThCQkY1M0IzOTM1MEFBMDcwQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO7WJTBs6CArc328Ima0+2dnuW NVG8H/CW+ENXerT4nSV2+wLB4touCfkONJTfeQXQP7HtnKxwOpgUpAsG8H9F4qF4 EeSRYANXwkUA1h70kkjuHqTlu/NsnswtykGLdLHnHwg3GxVlkS9rqt2iiO9QyBly udEBbfdwHHPOwSARxAT+f2JuAhGfKpuDr/JyFhxp6ijEzaNIyRltpcdXhT2w13Dp lImf/WmZicIUlgpfPxcYVIF3J0FAJG7+g9LL1QxBudFBx2O7UekUBA+ju7gvr+Dd lmFsZkXwTR5LE7HLvFlZ/NYqHzyCEFU8jGzDAe6lwCeWgHBNzCzW76Yvy/fVAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUsaiDkU3ukeQfJ5i79Ts5NQqgcK4wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMyMzIy ZTMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADBFhkwDQYJKoZIhvcNAQELBQADggEBAHUlkSezcHqflduydNaKJcLvKrme 0bn2S7pwpiFej5JVxJAP7AWwjJubfybT33c4WDelXanELNI+Uf6Ir9gnEXaoRB0S KfoPCIdn0dwVMeusWue+szBik9Dst+WTTC8OYC9AJEIMALVqTp71fj7+/4UKfgon YJBQN4ngW99mgcMPcdWK/X/SHfqHf+PVQvTQdAj5le42tr8nBBQB63djtDVadZpT CPgZoX28FZTey+X2ygzPJYbTQDQoNIo6Yr7uE1wLNKyB5wnrHElF3zYgl7+6Yl+B DirWDnBzPokwG1FuOTudEFoDrcDpO2Poyem1Pk89TshGLtc5oaF9x38ftzM= -----END CERTIFICATE-----Generated at Sat Dec 6 17:01:34 2025 by rpki-client