This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33322e3137322e302f32342d3234203d3e20323031333431.roa File: 3139332e33322e3137322e302f32342d3234203d3e20323031333431.roa (raw, json) Hash identifier: NA8H+GDPRxXPBRWvz11CbeLcHjt7wtaHksop1Lu2nHA= Subject key identifier: BD:30:82:B1:98:88:1B:98:66:C2:DE:CB:F2:B9:72:4E:8E:6E:5E:93 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1892A946F4BE8E07607CD79AD6A3B0A016D66875 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33322e3137322e302f32342d3234203d3e20323031333431.roa Signing time: Fri 28 Nov 2025 11:49:33 +0000 ROA not before: Fri 28 Nov 2025 11:44:33 +0000 ROA not after: Fri 27 Nov 2026 11:49:33 +0000 asID: 201341 IP address blocks: 193.32.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:92:a9:46:f4:be:8e:07:60:7c:d7:9a:d6:a3:b0:a0:16:d6:68:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:33 2025 GMT Not After : Nov 27 11:49:33 2026 GMT Subject: CN=BD3082B198881B9866C2DECBF2B9724E8E6E5E93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7e:bd:b0:d4:45:6d:b9:47:11:7d:05:1f:11: 4c:49:64:a8:ae:be:ec:0f:39:2a:c6:7b:e4:e8:83: 76:d2:7c:fe:41:d6:67:e2:df:ff:de:14:12:37:1b: 4a:9a:e4:af:63:e1:de:43:7b:0e:d8:d6:e9:83:9d: be:2e:5b:08:26:52:7b:55:d8:c3:8c:30:1a:d9:c2: 82:99:29:f9:b2:4d:a3:c6:0e:10:d7:9b:10:79:66: cf:e6:db:e5:3f:80:4b:e9:19:0c:2a:8d:1b:88:60: f5:ca:21:16:b1:d8:32:b2:37:dc:c9:60:59:12:b3: 2f:ec:eb:36:96:db:ea:5e:8f:61:45:f1:94:de:b9: e7:fe:d2:90:7c:11:36:00:6c:32:f8:de:01:31:78: b0:28:21:12:b2:b9:15:b2:08:44:41:0d:59:61:55: 1f:0b:21:32:92:e4:64:a5:36:bb:88:14:30:f3:5c: 4b:fa:de:65:ff:06:ea:8e:19:c7:00:0b:a7:70:b1: c1:8e:86:d5:4b:f4:12:74:8e:d2:f5:48:86:6a:34: 80:2c:fc:48:02:64:43:62:72:7b:09:a3:a7:ce:3a: d5:7b:84:5d:9b:b4:e7:60:1c:88:02:cd:03:a5:0c: b6:3d:fa:2e:0d:1d:a0:87:f4:22:85:67:d7:ef:46: ba:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:30:82:B1:98:88:1B:98:66:C2:DE:CB:F2:B9:72:4E:8E:6E:5E:93 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33322e3137322e302f32342d3234203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.172.0/24 Signature Algorithm: sha256WithRSAEncryption c5:a1:f3:da:92:b1:af:f2:67:55:a7:65:52:91:90:c0:2c:e5: 7f:32:7e:cd:d1:71:16:a0:6f:22:f7:fe:c1:0b:24:34:1d:13: 81:0a:71:16:48:0c:01:bc:5b:f6:2f:88:4e:85:75:cd:93:2a: 25:e3:ac:bb:c8:d3:d6:1a:d9:af:cf:38:11:24:53:a8:7d:c6: f8:61:3e:bc:f3:4b:78:97:1f:06:e5:cd:af:bf:64:2c:af:6d: ca:cf:2c:6e:cb:fa:3b:81:6e:14:f5:08:e4:9d:3e:18:4d:7d: 3e:36:67:95:be:bc:7a:d2:78:13:37:24:da:96:53:bd:44:e5: fb:4f:9f:cd:15:69:4a:ed:18:dd:93:bb:a0:f5:93:0d:4e:3c: d5:8b:16:70:c0:66:d7:b4:86:96:56:dc:1d:09:57:a3:6e:8d: d5:1a:15:a6:e9:1f:a2:9f:8c:af:bb:7d:7f:51:bb:0f:a7:71: 24:15:bd:ad:8a:09:73:a9:9b:f3:e7:6c:c7:8b:18:9d:22:2e: b3:25:a1:33:56:48:2d:5b:6c:de:d4:d2:5c:95:dd:dc:aa:ec: 61:b8:bb:7b:53:e4:4d:9f:21:d8:9a:91:7f:0c:f8:15:f3:57: 57:29:89:32:e3:22:aa:73:11:71:6b:79:b8:06:ca:77:38:4a: 5e:f9:47:e9 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUGJKpRvS+jgdgfNea1qOwoBbWaHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzNaFw0yNjExMjcxMTQ5MzNaMDMxMTAvBgNV BAMTKEJEMzA4MkIxOTg4ODFCOTg2NkMyREVDQkYyQjk3MjRFOEU2RTVFOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5fr2w1EVtuUcRfQUfEUxJZKiu vuwPOSrGe+Tog3bSfP5B1mfi3//eFBI3G0qa5K9j4d5Dew7Y1umDnb4uWwgmUntV 2MOMMBrZwoKZKfmyTaPGDhDXmxB5Zs/m2+U/gEvpGQwqjRuIYPXKIRax2DKyN9zJ YFkSsy/s6zaW2+pej2FF8ZTeuef+0pB8ETYAbDL43gExeLAoIRKyuRWyCERBDVlh VR8LITKS5GSlNruIFDDzXEv63mX/BuqOGccAC6dwscGOhtVL9BJ0jtL1SIZqNIAs /EgCZENicnsJo6fOOtV7hF2btOdgHIgCzQOlDLY9+i4NHaCH9CKFZ9fvRrqXAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUvTCCsZiIG5hmwt7L8rlyTo5uXpMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMzMzIy ZTMxMzczMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMEgrDANBgkqhkiG9w0BAQsFAAOCAQEAxaHz2pKxr/JnVadlUpGQwCzl fzJ+zdFxFqBvIvf+wQskNB0TgQpxFkgMAbxb9i+IToV1zZMqJeOsu8jT1hrZr884 ESRTqH3G+GE+vPNLeJcfBuXNr79kLK9tys8sbsv6O4FuFPUI5J0+GE19PjZnlb68 etJ4Ezck2pZTvUTl+0+fzRVpSu0Y3ZO7oPWTDU481YsWcMBm17SGllbcHQlXo26N 1RoVpukfop+Mr7t9f1G7D6dxJBW9rYoJc6mb8+dsx4sYnSIusyWhM1ZILVts3tTS XJXd3KrsYbi7e1PkTZ8h2JqRfwz4FfNXVymJMuMiqnMRcWt5uAbKdzhKXvlH6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:01:13 2025 by rpki-client