This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e32362e302f32342d3234203d3e20313336373837.roa File: 3139332e32322e32362e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: Y2ODOpwJSAQxR5Ys1I+C3Zkds09SyE2sHMqBSJtDspw= Subject key identifier: D7:E2:FD:66:16:65:DA:2A:36:FE:CE:FC:41:66:CD:C8:DB:09:03:CD Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3A52B09C3A34871D23DB9CB50907AD96B65629CA Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e32362e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:36 +0000 ROA not before: Fri 28 Nov 2025 11:44:36 +0000 ROA not after: Fri 27 Nov 2026 11:49:36 +0000 asID: 136787 IP address blocks: 193.22.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:52:b0:9c:3a:34:87:1d:23:db:9c:b5:09:07:ad:96:b6:56:29:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:36 2025 GMT Not After : Nov 27 11:49:36 2026 GMT Subject: CN=D7E2FD661665DA2A36FECEFC4166CDC8DB0903CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:49:17:ed:a0:db:15:d6:48:e9:3f:a7:00:a5: 6b:ee:8f:71:7a:61:d8:ae:64:ec:2e:61:79:ef:5d: 6a:e0:84:8e:86:67:40:4a:af:cc:20:7c:e2:86:1f: 88:1a:6e:aa:86:ff:76:9d:29:76:91:33:87:03:be: 93:cb:0a:bf:a2:0a:b6:62:0d:1e:1a:52:12:f6:32: bb:b7:96:da:c8:66:18:1a:3d:c2:f8:c5:7c:ea:d1: e7:77:4c:27:00:47:4f:d7:3a:c1:a1:fe:ea:b6:74: 94:d1:c0:34:cd:d1:fc:16:5d:20:9e:d3:47:7d:b7: 7b:ec:cb:19:2c:2d:f0:ea:33:d2:ac:14:ce:31:b8: c3:a8:e7:0b:a5:ec:1b:53:08:fe:0a:32:32:ad:27: 22:d2:7e:95:85:af:d8:94:c4:50:de:7c:f0:93:7c: 98:50:8b:2f:27:82:4e:5d:4a:d6:0d:0f:5a:a7:ed: db:75:c0:3b:a1:61:80:f8:39:14:5f:08:0b:c8:f6: e1:bc:2f:6e:2c:8b:21:b9:3b:0e:56:07:58:6f:cc: ad:32:0e:d0:31:70:29:44:e4:17:e4:57:1a:3d:ac: 13:9a:50:fe:8f:f0:a7:04:47:8a:0b:32:71:d3:8b: 0c:1e:37:ee:81:25:10:91:16:aa:22:c6:51:5f:2f: e0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E2:FD:66:16:65:DA:2A:36:FE:CE:FC:41:66:CD:C8:DB:09:03:CD X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e32362e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.26.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:ff:1f:9d:db:69:e9:e8:04:3a:77:9c:24:a2:b7:ac:64:10: c0:b9:cf:35:2e:c0:bf:88:b7:aa:56:22:c8:e4:ad:f6:5e:86: d8:56:3b:8e:e9:c3:5b:66:a0:81:fc:f5:f0:86:d1:b7:9e:81: 36:3e:b8:2e:2e:c1:09:40:68:03:80:a9:e1:38:13:af:b1:ef: e6:35:1b:1b:a2:3f:65:24:d3:f3:a7:50:1a:ce:0e:d3:a0:24: 26:11:a5:59:6e:41:fd:1c:37:6e:77:0f:98:61:23:c8:26:6b: 33:b7:3b:70:d1:f3:e3:59:29:81:29:54:4d:b8:d0:cc:81:65: 98:dc:a1:41:67:c4:27:b4:36:dd:39:5a:31:16:9a:f4:15:ea: f2:4d:8a:59:e3:f9:9e:d5:b3:cc:05:11:9a:66:15:a7:43:4a: 1e:6e:df:f1:97:10:bf:67:8d:42:36:97:10:cf:b2:f6:93:00: 3d:76:44:2e:f0:a0:67:3b:a2:cc:13:99:f9:e8:b0:96:e6:1b: c2:be:d7:60:28:22:8a:a6:6d:c8:74:fe:14:0e:24:b7:77:23: 4b:99:3c:91:88:c2:6c:10:b5:b8:ac:9e:97:58:d2:4b:99:f0: b6:3f:d2:c2:fd:2e:d6:bb:1c:ca:db:39:fd:0e:f7:c6:71:9b: 9d:d0:fd:b0 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUOlKwnDo0hx0j25y1CQetlrZWKcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzZaFw0yNjExMjcxMTQ5MzZaMDMxMTAvBgNV BAMTKEQ3RTJGRDY2MTY2NURBMkEzNkZFQ0VGQzQxNjZDREM4REIwOTAzQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWSRftoNsV1kjpP6cApWvuj3F6 YdiuZOwuYXnvXWrghI6GZ0BKr8wgfOKGH4gabqqG/3adKXaRM4cDvpPLCr+iCrZi DR4aUhL2Mru3ltrIZhgaPcL4xXzq0ed3TCcAR0/XOsGh/uq2dJTRwDTN0fwWXSCe 00d9t3vsyxksLfDqM9KsFM4xuMOo5wul7BtTCP4KMjKtJyLSfpWFr9iUxFDefPCT fJhQiy8ngk5dStYND1qn7dt1wDuhYYD4ORRfCAvI9uG8L24siyG5Ow5WB1hvzK0y DtAxcClE5BfkVxo9rBOaUP6P8KcER4oLMnHTiwweN+6BJRCRFqoixlFfL+ALAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU1+L9ZhZl2io2/s78QWbNyNsJA80wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMyMzIy ZTMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADBFhowDQYJKoZIhvcNAQELBQADggEBAGr/H53baenoBDp3nCSit6xkEMC5 zzUuwL+It6pWIsjkrfZehthWO47pw1tmoIH89fCG0beegTY+uC4uwQlAaAOAqeE4 E6+x7+Y1GxuiP2Uk0/OnUBrODtOgJCYRpVluQf0cN253D5hhI8gmazO3O3DR8+NZ KYEpVE240MyBZZjcoUFnxCe0Nt05WjEWmvQV6vJNilnj+Z7Vs8wFEZpmFadDSh5u 3/GXEL9njUI2lxDPsvaTAD12RC7woGc7oswTmfnosJbmG8K+12AoIoqmbch0/hQO JLd3I0uZPJGIwmwQtbisnpdY0kuZ8LY/0sL9Lta7HMrbOf0O98Zxm53Q/bA= -----END CERTIFICATE-----Generated at Sat Dec 6 15:52:17 2025 by rpki-client