This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e32372e302f32342d3234203d3e20313336373837.roa File: 3139332e32322e32372e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: z40Vp0Du6UqIQtppuA3aCBIkHMefXjsVk04LjNfBBC8= Subject key identifier: 54:0C:DF:2D:F4:8F:88:09:B3:82:F5:4F:4F:44:C0:CE:24:F2:46:4B Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3751DA3CB0D7135682413EF7E1E45A1EA95A6413 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e32372e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:36 +0000 ROA not before: Fri 28 Nov 2025 11:44:36 +0000 ROA not after: Fri 27 Nov 2026 11:49:36 +0000 asID: 136787 IP address blocks: 193.22.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:51:da:3c:b0:d7:13:56:82:41:3e:f7:e1:e4:5a:1e:a9:5a:64:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:36 2025 GMT Not After : Nov 27 11:49:36 2026 GMT Subject: CN=540CDF2DF48F8809B382F54F4F44C0CE24F2464B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6d:cd:07:dc:62:b9:b4:ce:8c:67:d7:8d:6d: 28:d8:84:d6:55:80:6e:3d:a6:7f:be:4a:52:69:b6: f1:c4:ff:0f:94:94:55:68:00:08:52:10:ff:f8:c5: ac:a9:86:58:05:00:fc:d1:65:e3:2d:c1:3c:9f:95: a1:55:06:3f:bf:ed:7b:d1:25:30:1e:56:32:e1:b6: 63:f4:39:0b:95:74:47:34:5e:3f:ba:dc:e7:7f:d2: be:93:8c:ff:22:f9:ae:5d:c9:72:6e:e4:bf:88:62: 4e:83:89:1a:df:8f:12:b4:29:2b:63:3d:52:07:72: 52:75:e0:9f:02:05:f2:3e:90:19:61:2e:e0:40:72: 9a:2d:50:dd:0e:97:f5:af:36:69:19:b7:5c:04:0a: 96:a1:17:6f:66:bc:33:eb:e5:e0:aa:9f:01:10:b9: 8f:fc:72:2e:11:83:bd:bf:6a:79:d8:18:4d:2d:ef: 04:24:a1:87:f9:4e:e3:c0:f0:ce:65:26:45:12:8e: 22:fb:e9:67:27:dd:51:43:10:1d:23:30:7c:ee:be: 3d:97:f9:12:33:92:ce:ea:ed:e3:b0:ce:b3:c6:69: e8:06:9d:55:ec:c3:9c:9d:05:b7:13:ef:f2:9d:b6: 1b:76:e9:77:70:92:73:10:15:27:d8:fc:1b:e8:10: be:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0C:DF:2D:F4:8F:88:09:B3:82:F5:4F:4F:44:C0:CE:24:F2:46:4B X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e32372e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.27.0/24 Signature Algorithm: sha256WithRSAEncryption d3:34:b5:02:43:01:3c:07:e6:90:49:48:f7:75:8f:d2:a7:7b: 5c:e5:8e:72:2d:e4:dd:79:81:dc:15:91:5d:2a:df:13:31:22: d2:2c:96:ef:03:ab:40:c1:c3:b6:5b:e2:be:8e:99:b3:36:a9: 23:8f:43:42:c9:37:5e:8f:f9:d4:86:be:38:04:86:9b:1d:be: 1d:55:e1:5d:71:04:eb:58:13:e5:35:b8:17:cd:4d:cd:47:a2: 33:03:38:80:1d:78:1b:b5:38:c6:73:1d:83:85:39:cc:a7:d0: dc:27:2d:c8:97:0a:3e:fb:f9:2d:90:94:89:b6:ce:a6:58:cd: 3a:61:44:1b:78:7c:83:bb:c0:0c:08:f9:b1:55:30:41:fb:fe: cc:58:38:49:5a:0b:3c:47:df:16:3e:be:df:d9:c9:36:40:64: d0:0d:c0:05:80:a2:12:4b:a2:f6:2b:f5:01:df:10:5c:91:b1: 7c:cc:c4:6d:13:6d:db:54:84:56:42:78:0f:e5:db:75:fb:c1: 60:63:ce:8c:4a:a6:c5:32:66:22:e8:74:14:75:02:f2:a7:64: d2:44:51:b2:c0:6b:73:82:0c:47:66:7e:a0:a6:9e:d7:15:13: 5b:00:44:c8:ff:72:ac:0d:9f:86:13:aa:53:5d:c5:74:5d:ab: 2d:41:92:16 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUN1HaPLDXE1aCQT734eRaHqlaZBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzZaFw0yNjExMjcxMTQ5MzZaMDMxMTAvBgNV BAMTKDU0MENERjJERjQ4Rjg4MDlCMzgyRjU0RjRGNDRDMENFMjRGMjQ2NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQbc0H3GK5tM6MZ9eNbSjYhNZV gG49pn++SlJptvHE/w+UlFVoAAhSEP/4xayphlgFAPzRZeMtwTyflaFVBj+/7XvR JTAeVjLhtmP0OQuVdEc0Xj+63Od/0r6TjP8i+a5dyXJu5L+IYk6DiRrfjxK0KStj PVIHclJ14J8CBfI+kBlhLuBAcpotUN0Ol/WvNmkZt1wECpahF29mvDPr5eCqnwEQ uY/8ci4Rg72/annYGE0t7wQkoYf5TuPA8M5lJkUSjiL76Wcn3VFDEB0jMHzuvj2X +RIzks7q7eOwzrPGaegGnVXsw5ydBbcT7/Kdtht26XdwknMQFSfY/BvoEL5PAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUVAzfLfSPiAmzgvVPT0TAziTyRkswHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMyMzIy ZTMyMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADBFhswDQYJKoZIhvcNAQELBQADggEBANM0tQJDATwH5pBJSPd1j9Kne1zl jnIt5N15gdwVkV0q3xMxItIslu8Dq0DBw7Zb4r6OmbM2qSOPQ0LJN16P+dSGvjgE hpsdvh1V4V1xBOtYE+U1uBfNTc1HojMDOIAdeBu1OMZzHYOFOcyn0NwnLciXCj77 +S2QlIm2zqZYzTphRBt4fIO7wAwI+bFVMEH7/sxYOElaCzxH3xY+vt/ZyTZAZNAN wAWAohJLovYr9QHfEFyRsXzMxG0TbdtUhFZCeA/l23X7wWBjzoxKpsUyZiLodBR1 AvKnZNJEUbLAa3OCDEdmfqCmntcVE1sARMj/cqwNn4YTqlNdxXRdqy1BkhY= -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:29 2025 by rpki-client